Any internal risk-measurement model used for the purposes of this Chapter shall be conceptually sound, shall be calculated and implemented with integrity, and shall comply with all the following qualitative requirements:
any internal risk-measurement model used to calculate capital requirements for market risk shall be closely integrated into the daily risk management process of the institution and shall serve as the basis for reporting risk exposures to senior management;
an institution shall have a risk control unit that is independent from business trading units and that reports directly to senior management; that unit shall be responsible for designing and implementing any internal risk-measurement model; that unit shall conduct the initial and on-going validation of any internal model used for the purposes of this Chapter and shall be responsible for the overall risk management system; that unit shall produce and analyse daily reports on the output of any internal model used to calculate capital requirements for market risk, as well as reports on the appropriateness of measures to be taken in terms of trading limits;
the management body and senior management shall be actively involved in the risk-control process, and the daily reports produced by the risk control unit shall be reviewed at a level of management with sufficient authority to require the reduction of positions taken by individual traders and to require the reduction of the institution's overall risk exposure;
the institution shall have a sufficient number of staff with a level of skills that is appropriate to the sophistication of the internal risk-measurement models, and a sufficient number of staff with skills in the trading, risk control, audit and back-office areas;
the institution shall have in place a documented set of internal policies, procedures and controls for monitoring and ensuring compliance with the overall operation of its internal risk-measurement models;
any internal risk-measurement model, including any pricing model, shall have a proven track record of being reasonably accurate in measuring risks, and shall not differ significantly from the models that the institution uses for its internal risk management;
the institution shall frequently conduct rigorous programmes of stress testing, including reverse stress tests, which shall encompass any internal risk-measurement model; the results of those stress tests shall be reviewed by senior management at least on a monthly basis and shall comply with the policies and limits approved by the management body; the institution shall take appropriate actions where the results of those stress tests show excessive losses arising from the trading's business of the institution under certain circumstances;
the institution shall conduct an independent review of its internal risk-measurement models, either as part of its regular internal auditing process, or by mandating a third-party undertaking to conduct that review, which shall be conducted to the satisfaction of the competent authorities.
For the purposes of point (h) of the first subparagraph, a third-party undertaking means an undertaking that provides auditing or consulting services to institutions and that has staff who have sufficient skills in the area of market risk in trading activities.
The review referred to in point (h) of paragraph 1 shall include both the activities of the business trading units and the independent risk control unit. The institution shall conduct a review of its overall risk management process at least once a year. That review shall assess the following:
the adequacy of the documentation of the risk management system and process and the organisation of the risk control unit;
the integration of risk measures into daily risk management and the integrity of the management information system;
the processes the institution employs for approving the risk-pricing models and valuation systems that are used by front and back-office personnel;
the scope of risks captured by the model, the accuracy and appropriateness of the risk-measurement system, and the validation of any significant changes to the internal risk-measurement model;
the accuracy and completeness of position data, the accuracy and appropriateness of volatility and correlation assumptions, the accuracy of valuation and risk sensitivity calculations, and the accuracy and appropriateness for generating data proxies where the available data are insufficient to meet the requirement set out in this Chapter;
the verification process that the institution employs to evaluate the consistency, timeliness and reliability of the data sources used to run any of its internal risk-measurement models, including the independence of those data sources;
the verification process that the institution employs to evaluate back-testing requirements and P&L attribution requirements that are conducted in order to assess the accuracy of its internal risk-measurement models;
where the review is performed by a third-party undertaking in accordance with point (h) of paragraph 1 of this Article, the verification that the internal validation process set out in Article 325bj fulfils its objectives.
( 1 ) Directive 2014/59/EU of the European Parliament and of the Council of 15 May 2014 establishing a framework for the recovery and resolution of credit institutions and investment firms and amending Council Directive 82/891/EEC, and Directives 2001/24/EC, 2002/47/EC, 2004/25/EC, 2005/56/EC, 2007/36/EC, 2011/35/EU, 2012/30/EU and 2013/36/EU, and Regulations (EU) No 1093/2010 and (EU) No 648/2012, of the European Parliament and of the Council (OJ L 173, 12.6.2014, p. 190).
( 2 ) Regulation (EU) No 806/2014 of the European Parliament and of the Council of 15 July 2014 establishing uniform rules and a uniform procedure for the resolution of credit institutions and certain investment firms in the framework of a Single Resolution Mechanism and a Single Resolution Fund and amending Regulation (EU) No 1093/2010 (OJ L 225, 30.7.2014, p. 1).
( 3 ) Council Regulation (EU) No 1024/2013 of 15 October 2013 conferring specific tasks on the European Central Bank concerning policies relating to the prudential supervision of credit institutions (OJ L 287, 29.10.2013, p. 63).
( 4 ) Regulation (EU) 2019/2033 of the European Parliament and of the Council of 27 November 2019 on the prudential requirements of investment firms and amending Regulations (EU) No 1093/2010, (EU) No 575/2013, (EU) No 600/2014 and (EU) No 806/2014 (OJ L 314, 5.12.2019, p. 1).
( 5 ) Directive (EU) 2019/2034 of the European Parliament and of the Council of 27 November 2019 on the prudential supervision of investment firms and amending Directives 2002/87/EC, 2009/65/EC, 2011/61/EU, 2013/36/EU, 2014/59/EU and 2014/65/EU (OJ L 314, 5.12.2019, p. 64).
( 6 ) Directive 2014/65/EU of the European Parliament and of the Council of 15 May 2014 on markets in financial instruments and amending Directive 2002/92/EC and Directive 2011/61/EU (OJ L 173, 12.6.2014, p. 349).
( 7 ) OJ L 335, 17.12.2009, p. 1.
( 8 ) Directive 2009/65/EC of the European Parliament and of the Council of 13 July 2009 on the coordination of laws, regulations and administrative provisions relating to undertakings for collective investment in transferable securities (UCITS) (OJ L 302, 17.11.2009, p. 32).
( 9 ) Directive 2011/61/EU of the European Parliament and of the Council of 8 June 2011 on Alternative Investment Fund Managers and amending Directives 2003/41/EC and 2009/65/EC and Regulations (EC) No 1060/2009 and (EU) No 1095/2010 (OJ L 174, 1.7.2011, p. 1).
( 10 ) Regulation (EU) 2017/2402 of the European Parliament and of the Council of 12 December 2017 laying down a general framework for securitisation and creating a specific framework for simple, transparent and standardised securitisation, and amending Directives 2009/65/EC, 2009/138/EC, 2011/61/EU and Regulations (EC) No 1060/2009 and (EU) No 648/2012 (OJ L 347, 28.12.2017, p. 35).
( 11 ) Directive (EU) 2015/2366 of the European Parliament and of the Council of 25 November 2015 on payment services in the internal market, amending Directives 2002/65/EC, 2009/110/EC and 2013/36/EU and Regulation (EU) No 1093/2010, and repealing Directive 2007/64/EC (OJ L 337, 23.12.2015, p. 35).
( 12 ) OJ L 222, 14.8.1978, p. 11.
( 13 ) OJ L 302, 17.11.2009, p. 1.
( 14 ) Directive 2013/34/EU of the European Parliament and of the Council of 26 June 2013 on the annual financial statements, consolidated financial statements and related reports of certain types of undertakings, amending Directive 2006/43/EC of the European Parliament and of the Council and repealing Council Directives 78/660/EEC and 83/349/EEC (OJ L 182, 29.6.2013, p. 19).
( 15 ) Directive 2004/109/EC of the European Parliament and of the Council of 15 December 2004 on the harmonisation of transparency requirements in relation to information about issuers whose securities are admitted to trading on a regulated market and amending Directive 2001/34/EC (OJ L 390, 31.12.2004, p. 38).
( 16 ) Regulation (EU) No 909/2014 of the European Parliament and of the Council of 23 July 2014 on improving securities settlement in the European Union and on central securities depositories and amending Directives 98/26/EC and 2014/65/EU and Regulation (EU) No 236/2012 (OJ L 257, 28.8.2014, p. 1).
( 17 ) OJ L 331, 15.12.2010, p. 48.
( 18 ) OJ L 331, 15.12.2010, p. 84.
( 19 ) Directive 2014/49/EU of the European Parliament and of the Council of 16 April 2014 on deposit guarantee schemes (OJ L 173, 12.6.2014, p. 149).
( 20 ) Directive 98/26/EC of the European Parliament and of the Council of 19 May 1998 on settlement finality in payment and securities settlement systems (OJ L 166, 11.6.1998, p. 45).
( 21 ) OJ L 250, 2.10.2003, p. 10.
►M10 ( 22 ) Directive (EU) 2019/2162 of the European Parliament and of the Council of 27 November 2019 on the issue of covered bonds and covered bond public supervision and amending Directives 2009/65/EC and 2014/59/EU (OJ L 328, 18.12.2019, p. 29). ◄
( 23 ) OJ L 135, 31.5.1994, p. 5.
( 24 ) Directive 2008/48/EC of the European Parliament and of the Council of 23 April 2008 on credit agreements for consumers and repealing Council Directive 87/102/EEC (OJ L 133, 22.5.2008, p. 66).
( 25 ) Commission Implementing Regulation (EU) No 680/2014 of 16 April 2014 laying down implementing technical standards with regard to supervisory reporting of institutions according to Regulation (EU) No 575/2013 of the European Parliament and of the Council (OJ L 191, 28.6.2014, p. 1).
( 26 ) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, p. 1).
( 27 ) OJ L 3, 7.1.2004, p. 36.
( 28 ) Commission Regulation (EC) No 1126/2008 of 3 November 2008 adopting certain international accounting standards in accordance with Regulation (EC) No 1606/2002 of the European Parliament and of the Council (OJ L 320, 29.11.2008, p. 1).
( 29 ) Commission Regulation (EU) No 1205/2011 of 22 November 2011 amending Regulation (EC) No 1126/2008 adopting certain international accounting standards in accordance with Regulation (EC) No 1606/2002 of the European Parliament and of the Council as regards International Financial Reporting Standard (IFRS) 7 (OJ L 305, 23.11.2011, p. 16).
( 30 ) Directive 2004/39/EC of the European Parliament and of the Council of 21 April 2004 on markets in financial instruments amending Council Directives 85/611/EEC and 93/6/EEC and Directive 2000/12/EC of the European Parliament and of the Council and repealing Council Directive 93/22/EEC (OJ L 145, 30.4.2004, p. 1).
( 31 ) Commission Recommendation 2003/361/EC of 6 May 2003 concerning the definition of micro, small and medium-sized enterprises (OJ L 124, 20.5.2003, p. 36).
( *1 ) OJ L 176, 27.6.2013, p. 1.’;