1.   When assessing whether the internal risk-measurement model is calculated and implemented with integrity as required by Article 325bi(1) of Regulation (EU) No 575/2013, competent authorities shall verify whether the institution’s IT systems related to market risk management and the IT systems supporting the internal model are robust enough to cope with execution errors. In particular, competent authorities shall:

(a)	assess the robustness of the IT systems during the last 250 business days;

(b)	verify whether: (i) appropriate remediation capabilities are in place in case of system breakdown; (ii) the institution is able to re-calculate any affected risk metrics; (iii) back-testing overshootings produced by technical problems are exceptional.

2.   Competent authorities shall verify whether an institution examines all internal model positions and instruments in the internal risk-measurement model and reconciles those positions and instruments with the end-of-day value systems by confirming, at least on a weekly basis, that the positions and instruments in one system correspond to those in the other systems. Competent authorities shall verify that the institution fully documents and monitors any positions and instruments not fully reconciled.