309. Following the above assessment, competent authorities should form a view on the institution's operational risk. This view should be reflected in a summary of findings, accompanied by a risk score based on the considerations specified in Table 6. If, based on the materiality of certain risk sub-categories, the competent authority decides to assess and score them individually, the guidance provided in this table should be applied, as far as possible, by analogy.
Table 6. Supervisory considerations for assigning an operational risk score
|
Risk score |
Supervisory view |
Considerations in relation to inherent risk |
Considerations in relation to adequate management and controls |
|---|---|---|---|
|
1 |
There is a low risk of significant prudential impact on the institution considering the level of inherent risk and the management and controls. |
• The institution’s operational risk exposures are limited to a few high-frequency/low-severity impact categories. • The significance of the instit |