What are the standards for collecting internal operational loss data?

Question

AcadiFi · Accepted Answer

Internal Loss Data (ILD) collection is the foundational element of operational risk management. Basel and national regulators specify minimum standards while banks add enhancements based on risk appetite.

Regulatory minimums: collect at least five years of historical loss data (ten years preferred for AMA banks), capture events above a defined de minimis threshold ($10,000 is common, though some firms use $5,000), classify by the seven Basel event types and by business line using the eight standard business lines (Corporate Finance, Trading & Sales, Retail Banking, etc.), capture gross loss amount before recoveries and separately track recoveries from insurance, tax, and legal.

Data fields per event: unique event ID, discovery date, occurrence date(s) start and end, reporting date, event description, event type and sub-type, business line, gross loss amount, recovery type and amount, net loss, root cause category, controls that failed, remediation actions, and responsible owner. Near-misses and boundary events (losses at the credit-risk or market-risk boundary) require separate flags.

Governance requirements: independent validation of loss amounts (not reliant solely on self-reporting), quarterly reconciliation to general ledger loss provisions, review by operational risk committee for events exceeding materiality thresholds (e.g., $500,000), and annual audit of the loss data framework.

Common pitfalls: under-reporting in business units where incentive compensation is affected by loss booking, inconsistent classification across units, failure to capture timing-delayed losses (legal settlements years after incidents), and double-counting when one event crosses multiple business lines.

Usage: ILD feeds the body of the severity distribution in LDA models, while scenarios and external data inform the tail. A bank like Harborline Federal with rich ILD coverage can challenge conservative scenario assumptions with empirical evidence, sometimes reducing regulatory capital. Good ILD governance directly translates to lower operational capital charges and better risk identification — making it one of the highest-return investments in a bank's risk infrastructure.

What are the standards for collecting internal operational loss data?

Master Part II with our FRM Course

Related Questions

Practice Questions