290. Competent authorities should conduct an assessment of the reputational risk to which the institution is exposed, leveraging their understanding of the institution's governance, its business model, its products and the environment in which it operates.
291. By nature, reputational risk is more relevant for large institutions, in particular those with listed equities or debts or those that operate in interbank markets. Accordingly, when assessing reputational risk, competent authorities should pay more attention to institutions that present those characteristics.
292. Competent authorities should consider both internal and external factors or events that might give rise to reputational concerns in respect of the institution. Competent authorities should consider the following qualitative indicators in their assessment of the institution's exposure to reputational risk:
a. the number of sanctions from official bodies during the year (not only those from competent authorities, but als
…