Skip to content

FRM Part I · FRM Exam Part I

Principles for Effective Data Aggregation and Risk Reporting

This chapter covers the Basel Committee's BCBS 239 principles, which set how banks should govern, aggregate and report risk data. There are 14 principles in four groups: governance and infrastructure, aggregation, reporting, and supervisory review. Solve questions by identifying which group a scenario falls in, then matching it to the principle's wording.

What this chapter covers

This chapter is about BCBS 239, the Basel Committee's principles for effective risk data aggregation and risk reporting. The principles were written after the 2007-09 financial crisis showed that many banks could not quickly and accurately pull together their exposures across business lines and legal entities. The aim is that a bank's board and senior management get reliable risk information, in good time, including under stress.

The 14 principles fall into four groups. Overarching governance and infrastructure covers board responsibility, data architecture and IT. Risk data aggregation capabilities covers accuracy and integrity, completeness, timeliness and adaptability. Risk reporting practices covers accuracy, comprehensiveness, clarity, frequency and distribution. Supervisory review, tools and cooperation covers the role of supervisors. The principles apply directly to global systemically important banks, and supervisors are encouraged to apply them more widely.

This chapter sits in the Foundations of Risk Management part of the paper. It links to risk governance, enterprise risk management, and the lessons of past failures. It is mostly qualitative, so there are no formulas. Questions test whether you know the principles, their groupings and their intent, and can apply them to a short scenario.

The chapter has no calculations, so it is a good place to collect marks with focused memorisation and careful reading. All 100 questions carry equal weight, and a qualitative question costs far less time than a multi-step quantitative one, which leaves more of the four hours for harder items. The same ideas on governance, data quality and reporting also support answers elsewhere in Foundations of Risk Management, so the effort pays back beyond this chapter.

Principles for Effective Data Aggregation and Risk Reporting: topics in the order to study them

  1. 1BCBS 239 Overview and GovernanceStart here to learn the purpose, scope and the four groups of principles, plus board and senior management responsibility, which frames everything after it.
  2. 2Risk Data Aggregation CapabilitiesNext, because reporting depends on the data underneath it; learn accuracy, completeness, timeliness and adaptability as a set.
  3. 3Risk Reporting PracticesLearn this once aggregation is clear, since the reporting principles build on the quality of the aggregated data.
  4. 4Supervisory Review, Tools and CooperationFinish with the supervisor's role, which is short and easiest to remember once you know what banks are expected to do.

How to prepare Principles for Effective Data Aggregation and Risk Reporting

This is a recall-and-apply chapter. Your goal is to know each principle by its key idea and spot it in a scenario.

  1. Read the chapter once for the story: why the crisis exposed weak data, and what the principles try to fix.
  2. Write the 14 principles on one page, grouped under their four headings, with a three-to-five word key idea for each.
  3. For the aggregation and reporting groups, build a short list of the qualities (accuracy, completeness, timeliness, adaptability, clarity, frequency) and say in your own words what failure of each looks like.
  4. Learn who is responsible for what: the board and senior management for governance and resourcing, the bank for implementation, supervisors for review and cooperation.
  5. Practise scenario questions: read the case, name the principle it breaches, then eliminate options that sound plausible but address a different principle.
  6. Revise by recalling the one-page map from memory, then check it. Repeat across several short sessions, which suits phone study.

Common mistakes in Principles for Effective Data Aggregation and Risk Reporting

  • Mixing up aggregation principles with reporting principles

    Fix: Ask whether the scenario is about gathering and processing data or about delivering information to decision makers, then match the group first.

  • Treating the chapter as IT only

    Fix: Remember the board and senior management own governance, resourcing and accountability, and that IT is one enabler.

  • Assuming the principles only matter in normal conditions

    Fix: Recall that capabilities must hold up under stress, and that adaptability and timeliness support ad hoc requests.

  • Memorising principle numbers instead of ideas

    Fix: Questions describe situations rather than quote numbers. Learn each principle's meaning and a failure example.

  • Choosing an answer that sounds good but fits a different principle

    Fix: Find the exact weakness in the stem, name the principle it breaches, and pick the option that fixes that specific problem.

Last-day revision: Principles for Effective Data Aggregation and Risk Reporting

  • BCBS 239 is the Basel Committee's set of principles for risk data aggregation and risk reporting.
  • It was a response to weaknesses in bank data and reporting revealed by the 2007-09 crisis.
  • There are 14 principles in four groups: governance and infrastructure, aggregation, reporting, supervisory review.
  • The board and senior management are responsible for data governance and for the bank's risk data capability.
  • Aggregation principles: accuracy and integrity, completeness, timeliness, adaptability.
  • Reporting principles: accuracy, comprehensiveness, clarity and usefulness, frequency, distribution.
  • Aggregation should work in stress and crisis conditions, not only in normal times.
  • Heavy reliance on manual processes is a weakness because it raises error risk and slows reporting.
  • Supervisors review and test compliance, and can require remedial action.
  • Home and host supervisors are expected to cooperate on the principles.
  • The principles apply directly to global systemically important banks, with wider application encouraged.

Principles for Effective Data Aggregation and Risk Reporting practice questions

Principles for Effective Data Aggregation and Risk Reporting in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Principles for Effective Data Aggregation and Risk Reporting: frequently asked questions

Is BCBS 239 calculation-based?

No. It is a qualitative chapter with no formulas. Questions test your knowledge of the principles and your ability to apply them to short scenarios.

How many principles are in BCBS 239?

There are 14, arranged in four groups: overarching governance and infrastructure, risk data aggregation capabilities, risk reporting practices, and supervisory review, tools and cooperation.

How long should I spend on this chapter?

Less than on heavy quantitative chapters, because it is mostly recall. A few short, repeated sessions on the principle map and scenario practice usually work better than one long read.

Does BCBS 239 apply only to large banks?

It applies directly to global systemically important banks. Supervisors are encouraged to apply the principles to other banks as well, in a way that suits their size and complexity.