Principles for Effective Data Aggregation and Risk Reporting: formula sheet

Key formulas

Purpose of BCBS 239

Strengthen risk data aggregation and risk reporting to improve decision making

No numeric formula. Know the aim, and that it is about data quality and governance, not capital.

Structure of the 14 principles

1-2 Governance and infrastructure | 3-6 Aggregation capabilities | 7-11 Reporting practices | 12-14 Supervisory review

Principles 1 and 2 are the overarching group tested on this topic.

Principle 1 (Governance)

Board and senior management own the framework; independent validation; group-wide fit

Bank is aware of data limits; outsourcing does not remove responsibility.

Principle 2 (Data architecture and IT)

Integrated data taxonomies and architecture across the group, working in normal and stress times

Includes clear data ownership and classification.

Scope

G-SIBs first (by January 2016); D-SIBs encouraged, typically within 3 years of designation

Applies at group level and across material entities.

Principle 3: Accuracy and integrity

Right: automated aggregation + reconciliation + accounting-level controls

Manual workarounds, unreconciled data and weak controls point here. Approximations must be reliable and documented.

Principle 4: Completeness

All material risks, across entities, business lines, asset types, industries and regions

Missing exposures, unmapped entities or excluded portfolios point here. Gaps must be identified and explained.

Principle 5: Timeliness

Fast aggregation, especially in stress or crisis

Delays in producing group-wide exposure point here. Required speed depends on the risk and the report.

Principle 6: Adaptability

On demand, ad hoc, flexible, new risks and stress scenarios

Inability to respond to new requests or change the cut of data points here.

Memory cue

Right, All, Fast, Flexible = Principles 3, 4, 5, 6

Use it to map scenario to principle in seconds.

Principle 7: Accuracy

Accurate and precise, reconciled and validated, with errors escalated

Approximations are allowed if users know their reliability and the bank has documented standards.

Principle 8: Comprehensiveness

All material risk areas covered, proportionate to size and complexity

Includes exposures, limits, capital, liquidity, stress tests, forward-looking and emerging risks.

Principle 9: Clarity and usefulness

Easy to understand, concise yet complete, supports decisions

Summaries and ad hoc requests are part of the principle.

Principle 10: Frequency

Set by recipient needs, risk nature and speed of change; higher in stress

Banks must be able to deliver reports in stress or crisis too.

Principle 11: Distribution

Timely delivery to relevant parties with confidentiality preserved

Speed and security both matter.

Principle 12: Review and evaluation

Supervisors periodically review and evaluate bank compliance with Principles 1-11

Tools include on-site and off-site review, discussion with management and independent external reviews. Includes testing ability to aggregate data in stress and after business changes.

Principle 13: Remedial actions and supervisory measures

Supervisors have and use tools and resources to require effective and timely remedial action

Examples: independent review, restrictions on growth or new business, Pillar 2 capital add-ons where appropriate.

Principle 14: Home/host cooperation

Supervisors cooperate with relevant supervisors in other jurisdictions on review and implementation

Aim: share information and coordinate so cross-border banks are reviewed consistently without gaps or duplication.

Grouping of the 14 principles

1-2 governance and infrastructure | 3-6 data aggregation | 7-11 risk reporting | 12-14 supervisory review, tools and cooperation

Use this map to place any scenario quickly.

Implementation timeline

Published January 2013 | G-SIBs: from January 2016 | D-SIBs: within three years of designation

Know the sequence. Progress reports since then have found incomplete compliance.

Quick revision

• BCBS 239 is the Basel Committee's set of principles for risk data aggregation and risk reporting.
• It was a response to weaknesses in bank data and reporting revealed by the 2007-09 crisis.
• There are 14 principles in four groups: governance and infrastructure, aggregation, reporting, supervisory review.
• The board and senior management are responsible for data governance and for the bank's risk data capability.
• Aggregation principles: accuracy and integrity, completeness, timeliness, adaptability.
• Reporting principles: accuracy, comprehensiveness, clarity and usefulness, frequency, distribution.
• Aggregation should work in stress and crisis conditions, not only in normal times.
• Heavy reliance on manual processes is a weakness because it raises error risk and slows reporting.
• Supervisors review and test compliance, and can require remedial action.
• Home and host supervisors are expected to cooperate on the principles.
• The principles apply directly to global systemically important banks, with wider application encouraged.

Common mistakes

• Treating BCBS 239 as a capital requirement. Fix: Remember it is about data and reporting quality. It sets no capital ratio.
• Saying it applies only to G-SIBs. Fix: State that G-SIBs were the initial target and supervisors are encouraged to apply it to D-SIBs.
• Confusing accuracy (Principle 3) with completeness (Principle 4). Fix: Accuracy asks whether the data that exists is correct. Completeness asks whether all material risk data exists. Wrong value means 3. Missing exposure means 4.
• Thinking approximations are never allowed under accuracy. Fix: Reliable approximations are acceptable if documented and controlled, and they should not hurt decision-making.
• Saying reports must always be exact with no approximations. Fix: Principle 7 allows approximations if users understand reliability and standards are documented.
• Setting one fixed reporting frequency for all risks. Fix: Principle 10 leaves frequency to management and the board, based on need and speed of change, and requires faster reporting in stress.
• Assigning Principles 12-14 to banks Fix: Link 1-11 to banks and 12-14 to supervisors. Check the actor in every question.
• Confusing Principle 12 review with Principle 13 remediation Fix: Review and evaluate means 12. Require action or apply measures means 13. Finding the gap is 12, fixing it is 13.

Exam tips

• Know the four groups of principles and which numbers belong to each.
• Expect scenario questions that ask you to match a weakness to Principle 1 or 2.
• Watch for options that call BCBS 239 a capital rule or limit it to normal market conditions; these are usually wrong.
• Remember the crisis link: the cause was poor risk data aggregation, not a lack of data entirely.
• Keep G-SIB (required first) and D-SIB (encouraged) straight.
• Memorise the order: 3 accuracy and integrity, 4 completeness, 5 timeliness, 6 adaptability. Many questions simply give the number.
• Underline the failure word in the stem and map it before reading the options.
• Be wary of absolute wording such as 'must be perfect' or 'only automated'. The principles allow documented approximations and judgement.