Principle 13: Remedial actions and supervisory measures - Supervisors should have and use the appropriate tools and resources to require effective and timely remedial action by a bank to address deficiencies in its risk data aggregation capabilities and risk reporting practices. Supervisors should have the ability to use a range

Principle 11: Risk management reports should be distributed to the relevant parties while ensuring confidentiality is maintained. Early in 2013, the Basel Committee on Banking Supervision (BCBS) issued guidelines for banks regarding risk data aggregation and reporting. Known collectively as BCBC 239, these principles were designed to ensure that banks

Principle 9: Risk management reports should communicate information in a clear and concise manner. Reports should be easy to understand yet comprehensive enough to facilitate informed decision-making. Reports should include meaningful information tailored to the needs of the recipients. While the data management and data aggregation principles have been heavily

Principle 7: Accuracy - Risk management reports should accurately and precisely convey aggregated risk data and reflect risk in an exact manner. Reports should be reconciled and validated. Successful demonstration of Principle 7 requires senior management to rely upon the information presented in risk reporting. Since forward-looking strategic decisions are

Principle 4: Completeness – A bank should be able to capture and aggregate all material risk data across the banking group. Data should be available by business line, legal entity, asset type, industry, region and other groupings, as relevant for the risk in question, that permit identifying and reporting risk

Principle 3: Accuracy and Integrity – A bank should be able to generate accurate and reliable risk data to meet normal and stress/crisis reporting accuracy requirements. Data should be aggregated on a largely automated basis so as to minimize the probability of errors. It seems logical that banks would want

Principle 2: Data architecture and IT infrastructure – A bank should design, build and maintain data architecture and IT infrastructure which fully supports its risk data aggregation capabilities and risk reporting practices not only in normal times but also during times of stress or crisis, while still meeting the other

Principle 1: Governance – A bank’s risk data aggregation capabilities and risk reporting practices should be subject to strong governance arrangements consistent with other principles and guidance established by the Basel Committee. My colleagues and I have written a series of posts on the principles of BCBS 239. In this

Interestingly, the Basel Committee’s Principles for Effective Risk Data Aggregation and Risk Reporting (otherwise known as BCBS 239) begins with a quote from T.S. Elliot’s The Rock: Where is the wisdom we have lost in knowledge? Where is the knowledge we have lost in information? In this age of big