Skip to main content
Version status: In force | Document consolidation status: Updated to reflect all known changes
Version date: 29 December 2020 - onwards
Version 2 of 2

Regulation 73 Operational risk

(1) Institutions shall implement policies and processes to - 

(a) evaluate and manage the exposures to operational risk, including model risk and risks resulting from outsourcing, and

(b) cover low-frequency high-severity events.

(2) Institutions shall articulate what constitutes operational risk for the purposes of the policies and procedures referred to in paragraph (1).

(3) Institutions shall put in place contingency and business continuity plans to ensure the institution's ability to operate on an ongoing basis and limit losses in the event of severe business disruption.

(4) In this Regulation, "model risk" means the potential loss an institution may incur, as a consequence of decisions that could be principally based on the output of internal models, due to errors in the development, implementation or use of such models.