The ECB guide on the internal capital adequacy assessment process (ICAAP) aims to enhance the resilience of credit institutions by improving their capital assessment processes. It emphasizes the importance of sound governance and accurate risk identification to ensure capital adequacy. The guide also establishes that the ICAAP should be integrated into the overall management framework and include regular stress…
This document is the "ECB Guide on the Internal Capital Adequacy Assessment Process (ICAAP)", published in November 2018 by the European Central Bank - Banking Supervision (Single Supervisory Mechanism, SSM). It is a 45-page guide (of which about 36 are provided here) intended for significant credit institutions supervised by the ECB in the European Union. The guide covers regulatory requirements and best practices related to the ICAAP, in accordance with Article 73 of the CRD IV Directive (Directive 2013/36/EU). It addresses fundamental principles, governance, risk quantification methodologies, risk management, economic and normative perspectives, as well as the integration of the ICAAP into the overall management framework of institutions. The scope concerns significant institutions in the European banking sector, focusing on the period contemporary to 2018 and ongoing regulatory developments.
The ECB guide on the ICAAP aims to strengthen the resilience of significant credit institutions by improving their internal processes for assessing capital adequacy. This topic is crucial because the financial crisis showed that inadequate capital and poor risk identification can amplify financial shocks (p. 3). The guide clarifies the ECB’s expectations regarding the ICAAP, set out in seven fundamental principles that structure supervision and dialogue with institutions.
The main findings are that the ICAAP must be a solid, prudent and conservative internal process, integrating two complementary perspectives: a normative perspective, which projects the institution’s capacity to meet regulatory requirements and external constraints over at least three years, and an economic perspective, which assesses the coverage of economic risks by internal capital based on an economic value approach (p. 13-23). These two perspectives must inform each other and be integrated into the institution’s strategy, risk management and decision-making (p. 21-22).
The guide emphasizes the board of directors’ responsibility in ICAAP governance, notably the approval of key elements, regular internal review and the production of a capital adequacy statement (CAS) (p. 6-8). The ICAAP must be integrated into the overall management framework, closely linked to the risk appetite framework (RAF) and recovery plans (p. 8-12).
Risk quantification must be comprehensive, appropriate, conservative and independently validated, taking into account all material risk categories, including those difficult to quantify (p. 32-36). Internal capital must be clearly defined, high quality and consistent with the economic perspective (p. 29-31).
Key recommendations are that institutions implement an ICAAP proportionate to their size and complexity, ensure robust governance, integrate the ICAAP into strategic and operational management, apply rigorous and conservative methodologies for risk quantification, and maintain transparent documentation and reporting. The guide also highlights the need for regular internal review and independent validation of methodologies used. These measures aim to ensure institutions continuously hold sufficient capital to cover their risks and ensure their continuity even under stress.
The guide was developed in response to weaknesses observed during the financial crisis, where inadequate capital and poor risk identification aggravated shocks (p. 3). The objective is to improve the resilience of significant banks by strengthening their ICAAPs, notably through better governance, comprehensive risk identification, robust quantification methodologies, and forward-looking capital planning.
The guide aims to clarify the ECB’s expectations arising from Article 73 CRD IV, promote good practices and harmonize supervision within the SSM (p. 3-5). It is addressed to significant institutions, considering the principle of proportionality, and does not replace applicable regulation but complements its application (p. 4-5).
The guide adopts a principles-based approach, focused on essential aspects from a supervisory perspective, without claiming to cover exhaustively all ICAAP aspects. It is intended to evolve with practices and regulatory developments. Institutions remain responsible for implementation adapted to their situation (p. 4-5).
Governance and management role: The board of directors is responsible for ICAAP governance, must approve key elements (governance framework, methodologies, risk scope, etc.) and produce an annual capital adequacy statement (CAS) (p. 6-8). A regular internal review, including independent validation, must cover qualitative and quantitative aspects, with monitoring of developments and prompt reaction to identified weaknesses (p. 7-8).
Integration into the overall management framework: The ICAAP must be integrated into strategy, risk management, decision-making, and consistent with the risk appetite framework (RAF) and recovery plans. It must support strategic and operational capital planning, with regular reporting (at least quarterly) to management (p. 8-12). Consistency between ICAAP and recovery plans is essential to avoid double counting and ensure continuity (p. 11-12).
Normative and economic perspectives: The ICAAP combines a normative perspective, projecting over at least three years the capacity to meet regulatory requirements (Pillar 1, Pillar 2, buffers, P2G) under baseline and adverse scenarios, and an economic perspective, assessing the coverage of economic risks by internal capital based on an economic value approach (p. 13-23). These perspectives inform each other, notably to translate economic risks into regulatory impacts and vice versa (p. 21-22).
Risk identification and management: The institution must identify annually all material risks, including those from non-financial subsidiaries and outsourced activities, using a gross approach (without mitigation) then assess the effectiveness of risk reduction measures (p. 26-30). The risk taxonomy must be internal and adapted, covering credit, market, IRRBB, operational, and other specific risks (p. 27).
Definition and quality of internal capital: Internal capital must be clearly defined, consistent with the economic perspective, reflecting the capacity to absorb losses in ongoing activity. It must be prudent, conservative, and transparent, with possible reconciliation between internal capital and regulatory own funds (p. 29-31).
Risk quantification methodologies: Methods must be appropriate to the institution, conservative, robust, stable, and independently validated. Difficult-to-quantify risks must be estimated prudently. Data quality is crucial (p. 32-36). Risk diversification must be treated prudently, especially inter-risk, which is not considered by supervisors in the SREP (p. 34-35).
Findings:
- The ICAAP is a key process to ensure the continuity of institutions by guaranteeing capital adequacy against all material risks (p. 3, 13).
- It must integrate two complementary perspectives: normative (regulatory projection over 3 years) and economic (risk coverage according to economic value) (p. 13-23).
- Strong governance, with board involvement, is essential (p. 6-8).
- All material risks must be identified annually and taken into account in the ICAAP (p. 26-30).
- Quantification methodologies must be appropriate, conservative and independently validated (p. 32-36).
Assumptions:
- The definition of internal capital may vary by institution but must remain prudent and consistent with the economic perspective (p. 29-31).
- Normative scenarios must include current regulatory requirements and anticipate developments (p. 15-18).
Interpretations:
- Integrating the two perspectives allows more comprehensive and proactive risk and capital management (p. 21-22).
- Consistency between ICAAP, RAF and recovery plans is essential for effective capital and crisis management (p. 11-12).
Uncertainties:
- The diversity of methodologies and internal definitions leaves discretion to institutions, subject to justification and validation (p. 29, 81).
- Considering difficult-to-quantify risks relies on prudent judgments, which may introduce uncertainties (p. 74).
The guide concludes that to ensure continuity and resilience of institutions, the ICAAP must be a solid, prudent, conservative and proportionate internal process relative to the institution’s size and complexity (p. 3-5, 13).
Institutions must:
- Ensure robust governance with active board involvement, notably through approval of key elements and annual production of a capital adequacy statement (CAS) (p. 6-8).
- Integrate the ICAAP into the overall management framework, closely linked to the risk appetite framework (RAF) and recovery plans, for coherent and effective capital management (p. 8-12).
- Implement two complementary perspectives, normative and economic, which inform each other and cover all material risks (p. 13-23).
- Identify annually all material risks, including those related to holdings, non-financial subsidiaries and outsourcing, and integrate them into an adapted internal taxonomy (p. 26-30).
- Clearly define high-quality, prudent internal capital consistent with the economic perspective, with transparency on differences with regulatory own funds (p. 29-31).
- Use adapted, conservative, robust, consistent and independently validated risk quantification methodologies, ensuring data quality (p. 32-36).
The guide also recommends regular and proactive internal review of the ICAAP, with monitoring of developments and rapid adjustments in case of detected weaknesses (p. 7-8). These measures should enable institutions to maintain capital adequacy at all times, including under stress, and meet supervisors’ expectations within the SREP framework.
Synthesis note written from the full document by DataSAI Academy. This note comes from the scientific library of the DataSAI Academy, open to all.