Article 41
General
1. In order to assess compliance of an institution with the requirements on quantification of risk parameters, for the purposes of Article 144(1)(a) of Regulation (EU) No 575/2013, competent authorities shall verify the institution’s:
(a) |
compliance with the overall requirements for estimation laid down in Article 179 of Regulation (EU) No 575/2013, in accordance with Articles 42, 43 and 44; |
(b) |
compliance with the requirements specific to PD estimation laid down in Article 180 of Regulation (EU) No 575/2013, in accordance with Articles 45 and 46; |
(c) |
compliance with the requirements specific to own-LGD estimates laid down in Article 181 of Regulation (EU) No 575/2013, in accordance with Articles 47 to 52; |
(d) |
compliance with the requirements specific to own-conversion factor estimates laid down in Article 182 of Regulation (EU) No 575/2013, in accordance with Articles 53 to 56; |
(e) |
compliance with the requirements for assessing the effect of guarantees and credit derivatives laid down in Article 183 of Regulation (EU) No 575/2013, in accordance with Article 57; |
(f) |
compliance with the requirements for purchased receivables laid down in Article 184 of Regulation (EU) No 575/2013, in accordance with Article 58. |
2. For the purposes of the verification under paragraph 1, competent authorities shall apply all of the following methods:
(a) |
review the institution’s relevant internal policies; |
(b) |
review the institution's technical documentation of relevant estimation methodology and process; |
(c) |
review and challenge the relevant estimation of risk parameter manuals, methodologies and processes; |
(d) |
review the relevant minutes of the institution’s internal bodies, including the management body, model committee, or other committees; |
(e) |
review the reports on the performance of risk parameters and the recommendations made by the credit risk control unit, the validation function, the internal audit function or any other control function of the institution; |
(f) |
assess progress reports on the efforts made by the institution to correct shortcomings and mitigate risks detected during relevant audits, validations and monitoring; |
(g) |
obtain written statements from or interview the relevant staff and the senior management of the institution. |
3. For the purposes of the verification under paragraph 1, competent authorities may also apply any of the following additional methods:
(a) |
request the provision of additional documentation or analysis substantiating the institution’s methodological choices and the results obtained; |
(b) |
conduct their own estimations of risk parameters or replicate those of the institution, using the relevant data supplied by the institution; |
(c) |
request and analyse the data used in the process of estimation; |
(d) |
review the functional documentation of the IT systems which are relevant to the scope of the assessment; |
(e) |
perform their own tests on the data of the institution or request the institution to perform tests proposed by the competent authorities; |
(f) |
review other relevant documents of the institution. |