The ECB guide on the internal capital adequacy assessment process (ICAAP) aims to enhance the resilience of credit institutions by improving their capital assessment processes. It emphasizes the importance of sound governance, adequate risk identification, and validated risk quantification methodologies. The ICAAP is also a key element in the Supervisory Review and Evaluation Process (SREP), contributing to…
The document is the "ECB Guide to the internal capital adequacy assessment process (ICAAP) - 2026 revision", published in July 2026 by the European Central Bank (ECB) - Banking Supervision (SSM). It is a 43-page guide (only the first 35 pages are provided) intended for significant credit institutions supervised under the Single Supervisory Mechanism (SSM). The guide covers requirements and best practices related to the internal capital adequacy assessment process (ICAAP) according to Article 73 of the CRD IV Directive, covering risk management, governance, risk quantification, economic and normative perspectives, capital planning, stress testing, and consistency with other arrangements such as recovery plans. The scope covers material risks, internal capital quality, quantification methodologies, independent validation, and prudent supervision, over a prospective period of at least three years.
The guide addresses the internal capital adequacy assessment process (ICAAP) of significant credit institutions under ECB supervision, in compliance with Article 73 CRD IV. This process is crucial to ensure banks' resilience to financial shocks by guaranteeing sufficient and quality capitalization to cover all identified material risks. The guide establishes seven fundamental principles: governance responsibility by the management body, integration of ICAAP into the overall management framework, contribution to the institution's continuity via normative and economic perspectives, comprehensive risk identification, prudent definition of internal capital, quality and validation of risk quantification methodologies, and regular execution of appropriate stress tests. The guide emphasizes a proportionate approach according to each institution's size, complexity, and risk profile, and the necessity of coherent interaction between the economic perspective (assessment of economic risks and internal capital) and the normative perspective (compliance with regulatory requirements and multi-year planning). It also highlights the importance of strong governance, rigorous internal review, clear documentation, active capital management, and consistency with recovery plans. The recommendations aim to enhance ICAAP's quality, transparency, and effectiveness, thus facilitating more homogeneous supervision and better anticipation of institutions' vulnerabilities.
The guide was developed to address weaknesses identified during the financial crisis, where insufficient and poor-quality capital amplified shocks. The objective is to improve banks' resilience by strengthening their internal capital adequacy assessment processes (ICAAP), notably through better identification, quantification, and risk management, as well as prudent capital planning and comprehensive stress testing. The guide aims to clarify ECB expectations regarding ICAAP, promote convergence of practices within the SSM, and support supervision within the SREP process and Pillar 2 capital determination. It targets significant institutions, considering the diversity of national practices and emphasizing proportionate application to each institution's profile. The guide is an evolving tool, based on a principles-based approach, complementing applicable regulation without replacing it.
- Governance and responsibility (Principle 1): The management body is responsible for strong ICAAP governance, must approve its key elements (governance framework, documentation, scope, methodologies, stress tests), and produce an annual clear capital adequacy statement (CAS). ICAAP must undergo regular qualitative and quantitative internal review, involving the three lines of defense, with prompt follow-up on identified weaknesses (p. 5-8).
- Integration into the overall management framework (Principle 2): ICAAP must be fully integrated into strategic, decision-making, and risk management processes, consistent with corporate strategy and the risk appetite framework (RAF). It must support operational and strategic capital management, with regular reporting (at least quarterly) to management. Consistency with recovery plans and group management is essential (p. 8-12).
- Contribution to continuity via normative and economic perspectives (Principle 3): ICAAP combines a normative perspective (multi-year assessment of the ability to meet regulatory requirements and financial constraints) and an economic perspective (quantification of economic risks and necessary internal capital). These two perspectives inform each other for prudent and conservative capital management, including defining internal management buffers and considering economic impacts not visible in the normative perspective (p. 12-22).
- Comprehensive risk identification (Principle 4): The institution must implement a regular (at least annual) process to identify all material risks, according to an internal materiality definition, including risks from financial and non-financial holdings, subsidiaries, and outsourcing-related risks. The inventory must be complete, updated, and follow a gross approach before mitigation measures (p. 22-26).
- Definition and quality of internal capital (Principle 5): Internal capital must be clearly defined, consistent with the economic perspective, reflecting the capacity to absorb losses in ongoing operations. It must be of high quality, prudent, and conservative, with transparency allowing reconciliation with regulatory own funds. Adjustments for hidden losses, non-continuously available elements, and other specifics must be integrated (p. 26-29).
- Risk quantification methodologies (Principle 6): Methods must be adapted to size, complexity, and risk profile, robust, consistent, conservative, and independently validated. Difficult-to-quantify risks must be prudently estimated. Key assumptions (confidence levels, correlations) must be consistent and documented. Data quality must be ensured. Diversification effects must be treated prudently, with transparency on gross and net figures (p. 29-33).
- Regular stress testing (Principle 7): The institution must perform annual, or more frequent if necessary, stress tests adapted to its profile, covering normative and economic perspectives, with severe but plausible scenarios, including reverse stress tests. These scenarios must be updated at least quarterly and adapted to contextual developments (p. 33-35).
- Findings: ICAAP is a key process to ensure banks' resilience, integrating a dual perspective (normative and economic) for a comprehensive assessment of necessary capital. Strong governance, regular internal review, clear documentation, and independent validation are indispensable. Comprehensive risk consideration, including related entities and outsourcing, is required. Methodologies must be appropriate, conservative, and validated. Stress tests are essential to anticipate impacts under adverse conditions.
- Assumptions: The guide assumes institutions will apply a proportionate approach according to their profile. It assumes institutions can define and quantify their economic and normative risks and integrate these assessments into their strategic management.
- Interpretations: The complementarity of normative and economic perspectives is central to prudent capital management. Active management of internal buffers is necessary to meet market expectations and avoid increased funding costs. Integrating ICAAP into the overall management framework promotes better risk anticipation and informed decision-making.
- Uncertainties: The guide does not prescribe specific methodologies, leaving room for interpretation on approaches to adopt. Data quality and the ability to quantify certain difficult risks remain challenges. Regulatory evolution and supervisory practices may modify future expectations.
The guide recommends significant credit institutions implement a solid, prudent, and proportionate ICAAP, integrating the seven detailed principles. It stresses the need for clear governance with active involvement of the management body, full integration of ICAAP into the overall management framework, and a dual economic and normative perspective to ensure continuity and adequate capitalization. Institutions must ensure comprehensive risk identification, define high-quality internal capital, apply robust and validated methodologies, and conduct regular stress tests adapted to their profile. Consistency between ICAAP, recovery plans, and other arrangements must be ensured. The guide calls for clear documentation, regular reporting, and rigorous internal review. Finally, it reminds that ICAAP is an evolving process, to be adjusted according to regulatory developments, supervisory practices, and changes in the institutions' environment.
Synthesis note written from the full document by DataSAI Academy. This note comes from the scientific library of the DataSAI Academy, open to all.