Banking Q1 - 2023
PRA Priorities letter from January 2023PRA priorities for 2023 sets out priorities for branches and subsidiaries that operate in the UK. These priorities include risk management and governance; operational risk and resilience; and data management. Risk management and governance: The PRA is asking firms to tighten up their 2nd line frameworks with a clear focus on counterparty due diligence, pricing, and stress testing. The latter has emerged to be a key theme across several PRA’s messages in Q1 meaning that it is highly likely that this area will be scrutinised with increased rigour. Firms must therefore ensure that they increase their focus stress testing and ensure that their ICAAPs and ILAAPs include a robust account of the same. Operational risk and resilience: The PRA has indicated that they will focus on identifying and mapping their Important Business Services (IBS), setting and monitoring of impact tolerances, and scenario testing programmes. The PRA will also scrutinise the alignment of firms’ outsourced functions in line with SS 2/21 on third-party risk management. Firms should review and remediate any shortcomings across these areas. Data management: Firms must invest in their data management capabilities. The PRA has been vociferous about firms’ weaknesses in data management since their Dear CEO letter in 2021, and according to the PRA these weaknesses continue to exist. Firms must establish clear data lineage and ensure that there is a functional controls framework to preserve data integrity. A more in-depth article can be found on our regulatory insights page linked below. |
What management should consider Firms should ensure that their senior management team is able to talk about enhancement to risk management and governance, operational resilience and data management at their upcoming meetings with the PRA. As a priority, firms must ensure that their data – especially those that contribute to regulatory reporting – are being managed in line with regulatory expectations. This entails a clear view of data lineage, comfort over source data, and accuracy of data processing (both regulatory as well as computational). A number of firms have fallen victim of weak data governance standards, and such issues are widespread and recurring. As such, this is an area that we expect the PRA to focus on more than others. |
CP4/23 – The Strong and Simple Framework: Liquidity and Disclosure RequirementsCP4/23 on The Strong and Simple Framework sets out a number of simplified liquidity, disclosure and reporting measures (previously discussed in DP 1/21) that’ll apply to simpler regime firms. In summary, the PRA is proposing that:
|
What management should consider Firms will need to compute a new ‘Retail Deposit Ratio’ (RDR), which (retail funding expressed as a proportion of total funding); mould their current ILAAP document to a new template – which requires greater focus on stress testing, and articulation of how firms identify, measure, manage and monitor 12 granular liquidity risks (where they apply). For a more in-depth explanation, you can access the Strong and simple framework here. |
CP5/23 – Renumeration: Enhancing Proportionality for Small FirmsRunning in parallel to the implementation of the Strong and Simple regime are the PRA’s proposed changes to Renumeration for smaller firms. The definition of ‘small firms for remunerations’ will change to align closer with the definition of simpler-regime firms, such that by virtue of being a simpler-regime firm, firms will automatically be considered small for remunerations purposes. While the proposed definition of ‘small firms for remunerations’ aligns with the Strong and Simple framework, the PRA considered three of the simpler-regime criteria immaterial for remunerations purposes; specifically, domestic activity, IRB approvals, and location of parent company. These criteria are necessary in the Simpler regime, to prevent internationally active banks from departing from the Basel standards. However, for the purposes of remunerations, they are not suitable. This means more firms will be considered a “small firm for remuneration” rather than those that fall within the scope of a “simpler regime” firm. For example:
Small firms for remuneration will no longer be required to apply malus, clawback, and buyout rules; all other parts of the Remunerations part of the PRA Rulebook will continue to apply to small firms, as usual. They will be required to inform the PRA of any major changes in their remunerations structure. |
What management should consider
An assessment on the impact of the reduced rules on the firm’s risk management and risk profile would be beneficial for discussions with the board and with regulators. |
FCA’s observations on the implementation of IFPRAs part of this publication the FCA have outlined their initial observations on how firms have conducted their implementation of IFPR. The main feedback is as follows: Group ICARAs did not always consider firm-specific risks for firms which were part of that investment group. Firms fell short of independently assessing the risks, harms and financial resource requirements of individual firms in the group, as required by MIFIDPRU. There was an absence of unified and integrated assessments. The FCA notes that assessments made as part of the ICARA process should be cohesive and also fully integrated with the firm’s approach to managing financial resources. This is not always done. For example, firms are not integrating wind-down planning into their assessment of own funds, other firms do not use reverse stress testing to help inform their wind-down plan even when it is highly relevant. Firms where there had been a significant reduction in own funds required compared to the previous regimes had not adequately explained the reasons for this reduction. The FCA also identified a lack of comprehensive framework for own funds and liquid asset triggers and limits. Firms’ risk appetite levels had weak links with idiosyncratic understanding of the risks that they were exposed to. Some firms were not clear on whether their interventions points would lead to discussions, trigger specific actions, or immediately set in motion tougher measures such as invoking the wind-down plan. Wind-down planning assessments remain weak in terms of scope and quantification. For example, many firms have conducted their wind down planning based on estimates that do not have an underlying stress event which is when most wind-down events take place. This means that is likely firms are underestimating wind-down costs. The FCA noted inconsistent and inaccurate data submitted in regulatory reports. This is not a new concern for the FCA, they previously communicated via two ‘Dear CEO’ letters in February 2018 and February 2021. |
What should management consider IFPR firms should perform a gap analysis against all the major findings outlined in this review. This should be a priority as the FCA, through disclosing these findings, are also essentially flagging the prudential elements of the ICARA process which will be subject to most regulatory scrutiny in any reviews they conduct in the short to medium term |
Get in touchIf you require support or would like to know more, please get in touch via the button below. |