C. Internal Capital Adequacy Assessment Process (ICAAP)
3. A Bank is required to carry out an ICAAP as detailed in Chapter 11 of the BBR and in this section. This process enables such a Bank to determine and maintain an adequate amount and quality of capital, relative to its risk profile. More information and guidance on the establishment of an ICAAP and the manner of carrying out an ICAAP assessment is elaborated in this section.
Purpose and process of the ICAAP
4. The ICAAP is an internal process of a Bank which enables it to determine and maintain the amount and quality of capital that is adequate in relation to the Bank’s risk profile as assessed by conducting a comprehensive internal risk assessment process. Banks are encouraged to maintain capital over and above the regulatory minimum capital. The ICAAP, which should be based on an internal risk assessment process, should be embedded in the Bank’s business and organisational processes.
5. When assessing its capital needs, a Bank should take into account the impact of economic cycles, and sensitivity to other external risks and factors. For larger or more complex institutions, this may mean developing an appropriate stress testing and scenario testing framework. The AFSA does not prescribe any specific approach for the ICAAP and, consequently, a Bank can choose to implement an ICAAP which is proportionate to the nature, size and complexity of the business activities. In completing an ICAAP, a Bank should:
(a) estimate the amount of capital required to absorb potential losses, if any, for the significant risks identified through an internal risk assessment process;
(b) perform reasonable and proportionate sensitivity tests to analyse the impact of variation in the risk parameters of significant risks identified in the internal risk assessment process on the profitability and the capital position of the Bank;
(c) estimate, using the range and distribution of possible losses estimated from historical data, the level of capital required reasonably to cover likely losses;
(d) estimate the capital required to address potential increase in the Bank’s capital requirement to support planned growth in business levels or any significant deviation in growth from plans; and
(e) document the ranges of capital required for each of the factors identified above and enable the Governing Body and the senior management to form an overall view on the amount and quality of capital which that Bank should hold.
6. The AFSA does not require a Bank to implement ICAAP through sophisticated models and the AFSA has no prescribed approach for developing an internal capital model for the Bank’s ICAAP assessment. However, a Bank should be able to demonstrate:
(a) the confidence levels set and whether these are linked to its corporate strategy;
(b) the time horizons set for the different types of business that it undertakes;
(c) the extent of historic data used and back-testing carried out;
(d) that it has in place a process to verify the correctness of the model's outputs; and
(e) that it has the skills and resources to operate, maintain and develop the model.
7. If a Bank's internal model makes explicit or implicit assumptions in relation to correlations within or between risk types, or in relation to diversification benefits between business lines, the Bank should be able to explain to the AFSA, with the support of empirical evidence, the basis of those assumptions. A Bank's model should also reflect the past experience of both the Bank and the sectors in which it operates.
8. The assumptions required to aggregate risks that are modelled and the confidence levels adopted should be considered by the Bank's senior management. A Bank should also consider whether any relevant risks, including systems and control risks, are not captured by the model.
9. A Bank using an internal capital model should validate the assumptions of the model through a comprehensive stress testing programme. In particular this validation should:
(a) test correlation assumptions (where risks are aggregated in this way) using combined stresses and scenario analyses;
(b) use stress tests to identify the extent to which the Bank's risk models omit non-linear effects, for instance the behaviour of derivatives in Market Risk models; and
(c) consider not just the effect of parallel shifts in interest rate curves, but also the effect of the curves becoming steeper or flatter.
10. Any internal assessment of capital adequacy should address diversification benefits and transferability of Capital Resources between members of the Financial Group. It should also describe the distribution of the capital required by the Financial Group across all entities, including the Bank.