Federal Register of Legislation - Australian Government

Primary content

Determinations/Financial (Other) as made
This instrument revokes the Financial Sector (Collection of Data) (reporting standard) determination No. 10 of 2008, including Reporting Standard ARS 115.0 Advanced Measurement Approaches (AMA) to Operational Risk and determines the Reporting Standard ARS 115.0 Advanced Measurement Approaches (AMA) to Operational Risk.
Administered by: Treasury
Registered 23 Mar 2018
Tabling HistoryDate
Tabled HR26-Mar-2018
Tabled Senate27-Mar-2018

Financial Sector (Collection of Data) (reporting standard) determination No. 7 of 2018

Reporting Standard ARS 115.0 Advanced Measurement Approaches (AMA) to Operational Risk

Financial Sector (Collection of Data) Act 2001

 

I, Alison Bliss, delegate of APRA, under paragraph 13(1)(a) of the Financial Sector (Collection of Data) Act 2001 (the Act) and subsection 33(3) of the Acts Interpretation Act 1901:

 

(a)           REVOKE Financial Sector (Collection of Data) (reporting standard) determination No. 10 of 2008, including Reporting Standard ARS 115.0 Advanced Measurement Approaches (AMA) to Operational Risk made under that Determination; and

 

(b)          DETERMINE Reporting Standard ARS 115.0 Advanced Measurement Approaches (AMA) to Operational Risk, in the form set out in the Schedule, which applies to the financial sector entities to the extent provided in paragraph 3 of the reporting standard.

 

Under section 15 of the Act, I DECLARE that the reporting standard shall begin to apply to those financial sector entities, and the revoked reporting standard shall cease to apply, on 1 April 2018.

 

This instrument commences on 1 April 2018.

 

Dated: 21 March 2018

 

[Signed]

 

 

Alison Bliss

General Manager

Data Analytics Division

 

Interpretation

In this Determination:

APRA means the Australian Prudential Regulation Authority.

financial sector entity has the meaning given by section 5 of the Act.

 

 

Schedule

 

Reporting Standard ARS 115.0 Advanced Measurement Approaches (AMA) to Operational Risk comprises the document commencing on the following page.


Reporting Standard ARS 115.0

Advanced Measurement Approaches (AMA) to Operational Risk

Objective of this Reporting Standard

This Reporting Standard is made under section 13 of the Financial Sector (Collection of Data) Act 2001.

This Reporting Standard outlines the overall requirements for the provision of information to APRA in relation to an authorised deposit-taking institution’s operational risk regulatory capital under the advanced measurement approaches to operational risk defined in Prudential Standard APS 115 Capital Adequacy:  Advanced Measurement Approaches to Operational Risk. It should be read in conjunction with:

·                the versions of Reporting Form ARF 115.0A AMA – Regulatory Capital, Reporting Form ARF 115.0B AMA – Operational Risk Losses – Current Six Months and Reporting Form ARF 115.0C AMA – Operational Risk Losses – Previous Six Months designated for an authorised deposit-taking institution reporting at Level 1 and Level 2, and the associated instructions (all of which are attached and form part of this Reporting Standard); and

·                Prudential Standard APS 115 Capital Adequacy: Advanced Measurement Approaches to Operational Risk.

 

Authority

1.             This Reporting Standard is made under section 13 of the Financial Sector (Collection of Data) Act 2001.

Purpose

2.             Data collected in Reporting Form ARF 115.0A AMA – Regulatory Capital (ARF 115.0A), Reporting Form ARF 115.0B AMA – Operational Risk Losses – Current Six Months (ARF 115.0B) and Reporting Form ARF 115.0C – AMA – Operational Risk Losses – Previous Six Months (ARF 115.0C) is used by APRA for the purpose of prudential supervision, including assessing compliance with Prudential Standard APS 115 Capital Adequacy: Advanced Measurement Approaches to Operational Risk (APS 115).  It may also be used by the Reserve Bank of Australia (RBA) and the Australian Bureau of Statistics (ABS).

Application and commencement

3.             This Reporting Standard applies to an authorised deposit-taking institution (ADI) that has APRA’s approval or is seeking APRA’s approval to use an advanced measurement approach to operational risk for capital adequacy purposes.

This Reporting Standard may also apply to the non-operating holding company (NOHC) of an ADI (refer to paragraph 6).

4.             This Reporting Standard commences on 1 April 2018.

Information required

5.             An ADI to which this Reporting Standard applies must provide APRA with the information required by the versions of ARF 115.0A, ARF 115.0B and ARF 115.0C designated for an ADI at Level 1 for each reporting period.

6.             If an ADI to which this Reporting Standard applies is part of a Level 2 group, the ADI must also provide APRA with the information required by the versions of ARF 115.0A, ARF 115.0B and ARF 115.0C designated for an ADI at Level 2 for each reporting period, unless the ADI is a subsidiary of an authorised NOHC.  If the ADI is a subsidiary of an authorised NOHC, the ADI’s immediate parent NOHC must provide APRA with the information required by that form for each reporting period.  In doing so, the immediate parent NOHC must comply with this Reporting Standard (other than paragraphs 5 and 12) as if it were the relevant ADI.

Forms and method of submission

7.             The information required by this Reporting Standard must be given to APRA in electronic format, using the ‘Direct to APRA’ application or by a method notified by APRA, in writing, prior to submission.

Note: the Direct to APRA application software (also known as D2A) may be obtained from APRA.

Reporting periods and due dates

8.             Subject to paragraph 9, an ADI to which this Reporting Standard applies must provide the information required by this Reporting Standard for each quarter based on the financial year (within the meaning of the Corporations Act 2001) of the ADI.

9.             APRA may, by notice in writing, change the reporting periods, or specified reporting periods, for a particular ADI, to require it to provide the information required by this Reporting Standard more frequently, or less frequently, having regard to:

(a)           the particular circumstances of the ADI;

(b)          the extent to which the information is required for the purposes of the prudential supervision of the ADI; and

(c)           the requirements of the Reserve Bank of Australia or the Australian Bureau of Statistics.

10.         The information required by this Reporting Standard must be provided to APRA within 30 business days after the end of the reporting period to which the information relates.

11.         APRA may grant an ADI an extension of a due date in writing, in which case the new due date for the provision of the information will be the date on the notice of extension.

Quality control

12.         All information provided by an ADI under this Reporting Standard (except for the information required under paragraph 6) must be the product of systems, processes and controls that have been reviewed and tested by the external auditor of the ADI as set out in Prudential Standards APS 310 Audit and Related Matters. Relevant standards and guidance statements issued by the Auditing and Assurance Standards Board provide information on the scope and nature of the review and testing required from external auditors. This review and testing must be done on an annual basis or more frequently if necessary to enable the external auditor to form an opinion on the accuracy and reliability of the information provided by an ADI under this Reporting Standard.

13.         All information provided by an ADI under this Reporting Standard must be subject to processes and controls developed by the ADI for the internal review and authorisation of that information. These systems, processes and controls are to assure the completeness and reliability of the information provided.

Authorisation

14.         When an officer of an ADI submits information under this Reporting Standard using the D2A application, or other method notified by APRA, it will be necessary for the officer to digitally sign the relevant information using a digital certificate acceptable to APRA.

Minor alterations to forms and instructions

15.         APRA may make minor variations to:

(a)           a form that is part of this Reporting Standard, and the instructions to such a form, to correct technical, programming or logical errors, inconsistencies or anomalies; or

(b)          the instructions to a form, to clarify their application to the form

without changing any substantive requirement in the form or instructions.

16.         If APRA makes such a variation it must notify in writing each ADI that is required to report under this Reporting Standard.

Interpretation

17.         In this Reporting Standard:

AASB has the meaning in section 9 of the Corporations Act 2001.

ADI means an authorised deposit-taking institution within the meaning of the Banking Act 1959.

APRA means the Australian Prudential Regulation Authority established under the Australian Prudential Regulation Authority Act 1998.

authorised NOHC has the meaning given in the Banking Act 1959.

business days means ordinary business days, exclusive of Saturdays, Sundays and public holidays.

immediate parent NOHC means an authorised NOHC, or a subsidiary of an authorised NOHC, that is an immediate parent NOHC within the meaning of paragraph 21(b) of Prudential Standard APS 110 Capital Adequacy (APS 110).

Level 1 has the meaning in APS 001.

Level 2 has the meaning in APS 001.

reporting period means a period mentioned in paragraph 8 or, if applicable, paragraph 9.

subsidiary has the meaning in section 9 of the Corporations Act 2001.

18.         Unless the contrary intention appears, a reference to an Act, Prudential Standard, Reporting Standard, Australian Accounting or Auditing Standard is a reference to the instrument as in force from time to time.

 

 













Reporting Forms ARF 115.0A, ARF 115.0B and ARF 115.0C

Advanced Measurement Approaches (AMA) to Operational Risk

Instruction Guide

This instruction guide is designed to assist in the completion of the Advanced Measurement Approaches (AMA) to Operational Risk suite of forms. This suite of forms consists of the following:

(a)           Reporting Form ARF 115.0A AMA – Regulatory Capital (ARF 115.0A);

(b)          Reporting Form ARF 115.0B AMA – Operational Risk Losses – Current Six Months (ARF 115.0B); and

(c)           Reporting Form ARF 115.0C AMA – Operational Risk Losses – Previous Six Months (ARF 115.0C).

These forms capture details of the regulatory capital required to be held by authorised deposit-taking institutions (ADIs) using the advanced measurement approaches (AMA) to operational risk. In addition, they collect information in relation to losses attributable to business lines and event types. In completing these forms, ADIs should refer to Prudential Standard APS 115 Capital Adequacy: Advanced Measurement Approaches to Operational Risk (APS 115).

General directions and notes

Reporting entity

These forms are to be completed at both Level 1 and Level 2[1] by each ADI that has APRA’s approval or is seeking APRA’s approval to use an AMA to operational risk for capital adequacy purposes, in accordance with APS 115.

If an ADI is a subsidiary of an authorised non-operating holding company (NOHC), the report at Level 2 is to be provided by the ADI’s immediate parent NOHC.[2]

Securitisation deconsolidation principle

Except as otherwise specified in these instructions, the following applies:

 

1.             Where an ADI (or a member of its Level 2 consolidated group) participates in a securitisation that meets APRA’s operational requirements for regulatory capital relief under Prudential Standard APS 120 Securitisation (APS 120):

(a)           special purpose vehicles (SPVs) holding securitised assets may be treated as non-consolidated independent third parties for regulatory reporting purposes, irrespective of whether the SPVs (or their assets) are consolidated for accounting purposes;

(b)          the assets, liabilities, revenues and expenses of the relevant SPVs may be excluded from the ADI’s reported amounts in APRA’s regulatory reporting returns; and

(c)           the underlying exposures (i.e. the pool) under such a securitisation may be excluded from the calculation of the regulatory capital (refer to APS 120). However, the ADI must still hold regulatory capital for the securitisation exposures[3] that it retains or acquires and such exposures are to be reported in Reporting Form ARF 120.1 Securitisation – Regulatory Capital. The risk-weighted assets (RWA) relating to such securitisation exposures must also be reported in Reporting Form ARF 110.0.1 Capital Adequacy (Level 1) and Reporting Form ARF 110.0.2 Capital Adequacy (Level 2).

2.             Where an ADI (or a member of its Level 2 consolidated group) participates in a securitisation that does not meet APRA’s operational requirements for regulatory capital relief under APS 120, or the ADI undertakes a funding-only securitisation or synthetic securitisation,, such exposures are to be reported as on-balance sheet assets in APRA’s regulatory reporting returns. In addition, these exposures must also be reported as a part of the ADI’s total securitised assets within Reporting Form ARF 120.2 Securitisation – Supplementary Items.

Reporting period and timeframe for lodgement

These forms are to be completed as at the last day of the stated reporting period (the relevant quarter) and submitted to APRA within 30 business days after the end of the relevant reporting period.

Requirements applying to certain ADIs reporting under the forms

The following particular requirements apply to certain ADIs:


 

Description of ADI

Reporting requirement

Timeframe for lodgement

 

ADI is operating under Prudential Standard APS 114 Capital Adequacy: Standardised Approach to Operational Risk (APS 114) standardised approach, but has applied to adopt (or APRA has indicated that it proposes to approve it for) the AMA for most or all of its operations

 

 

Report under ARF 115.0A, ARF 115.0B and ARF 115.0C (the forms) in respect of operations to be covered by the AMA (for purposes of assessing prospective operational risk component of regulatory capital calculation after AMA approval (i.e. “parallel run” of data))

 

 

Within 30 business days of end of reporting period.

 

ADI has AMA approval, but some operations remain under the standardised approach set out in APS 114

 

 

Report under the forms in respect of operations that are under the AMA  (for purposes of calculating operational risk component of regulatory capital)

 

 

Within 30 business days of end of reporting period.

 

 

These ADIs will also have certain reporting obligations under Reporting Form ARF 114.0 Standardised – Operational Risk.

Unit of measurement

These forms are to be completed in millions of Australian dollars (AUD) rounded to one decimal place, unless otherwise specified in this instruction guide.

Amounts denominated in foreign currency are to be converted to AUD in accordance with AASB 121 The Effects of Changes in Foreign Exchange Rates.

 

ARF 115.0A AMA – Regulatory capital

Specific instructions

The following instructions are applicable at Level 1 and (where relevant) Level 2.

Section A: Summary of AMA regulatory capital

1.1   AMA regulatory capital 

Report the amount of AMA regulatory capital net of any insurance offsets, diversification benefits and expected loss offset amounts, in accordance with APS 115.

1.2   AMA regulatory capital before insurance offsets

An ADI may recognise the risk-mitigating effect of insurance in determining its AMA regulatory capital (refer to paragraphs 45-49 of Attachment B to APS 115).

Report the amount of AMA regulatory capital, as specified in item 1.1, after taking into account any diversification benefits and expected loss offset amounts but prior to the recognition of the insurance offset amount.

1.3   Insurance offset amount

Derived field that subtracts item 1.1 AMA regulatory capital from item 1.2 AMA regulatory capital before insurance offsets.

1.4   Insurance offsets as a percentage of AMA regulatory capital before insurance offsets

Derived field that calculates item 1.3 Insurance offset amount as a percentage of item 1.2 AMA regulatory capital before insurance offsets.

1.5   AMA regulatory capital before expected loss offsets

An ADI may recognise expected loss offsets in determining the amount of AMA regulatory capital (refer to paragraph 28 of APS 115).

Report the amount of AMA regulatory capital, as specified in item 1.1, after taking into account any insurance offset and diversification benefits but prior to the recognition of any expected loss offsets.

1.6   Expected loss offset amount

Derived field that subtracts item 1.1 AMA regulatory capital from item 1.5 AMA regulatory capital before expected loss offsets.

1.7   AMA risk-weighted asset equivalent amount

Derived field that multiplies item 1.1 AMA regulatory capital by 12.5.

Section B: AMA regulatory capital mapped to business line

An ADI is required to map its AMA regulatory capital (as specified in section A: item 1.1) to the following business lines:

(a)           2.1 Corporate finance;

(b)          2.2 Trading and sales;

(c)           2.3 Retail banking;

(d)          2.4 Commercial banking;

(e)           2.5 Payment and settlement;

(f)           2.6 Agency services;

(g)          2.7 Asset management; 

(h)          2.8 Retail brokerage; and

(i)            2.9 Not otherwise allocated.

Refer to Attachment D of APS 115 for further details on mapping of the AMA regulatory capital to these business lines.

Report these items net of insurance and expected loss offsets and diversification benefits, as permitted under APS 115.

The not otherwise allocated category is only to be used for those losses that are not able to be mapped to the business lines detailed in Attachment D to APS 115. In accordance with paragraph 25 of Attachment B to APS 115, the ADI must develop specific criteria for allocating any such losses.

Section C: AMA regulatory capital mapped to event type

An ADI is required to map its AMA regulatory capital (as specified in section A: item 1.1) to the following loss event types:

(a)           3.1 Internal fraud;

(b)          3.2 External fraud;

(c)           3.3 Employment practices and workplace safety;

(d)          3.4 Clients, products and business practices;

(e)           3.5 Damage to physical assets;

(f)           3.6 Business disruption; and

(g)          3.7 Execution, delivery and process management.

Refer to Attachment E of APS 115 for further details on mapping of the AMA regulatory capital to these loss event types.

Where an ADI is unable to complete this section based on its operational risk measurement system, regulatory capital should be allocated proportionally based on the total net loss amounts by event type over the last 12 months.

ARF 115.0B AMA – Operational risk losses - Current six months and ARF 115.0C AMA – Operational risk losses – Previous six months

General guidance

The following instructions are applicable at Level 1 and (where relevant) Level 2.

ADIs are asked to complete the operational risk loss amounts in ARF 115.0B and ARF 115.0C in thousands of Australian dollars rounded to one decimal place.

Global reporting threshold

Unless otherwise stated in this instruction guide, the data to be reported in these forms are to be based on only those loss events which exceed an ADI’s global reporting threshold. For an ADI with foreign operations, only loss events exceeding the equivalent of the global reporting threshold after currency conversion are to be reported.

Open and closed loss events

For reporting purposes, the date of the loss event is the date that the loss was discovered (discovery date). Both open and closed loss events are to be reported in the forms. Open events are those loss events that have been identified but may not yet have been finalised. For open loss events, the amount to be reported is the best estimate of the loss, as at the time of reporting.

Net loss amount

Net loss amount represents the gross loss amount after subtracting any non-insurance recoveries or expected recoveries. Recoveries associated with insurance should not be subtracted from the gross loss amount.

Business lines and event types

Refer to Attachments D and E to APS 115 for guidance on the business lines and event types, respectively, to which an ADI is required to map its internal loss data.

The not otherwise allocated category is only to be used for those losses that are not able to be mapped to the business lines detailed in Attachment D to APS 115. In accordance with paragraph 25 of Attachment B to APS 115, the ADI must develop specific criteria for allocating any such losses.

Operational risk-related credit losses

Refer to paragraphs 27-28 of Attachment B to APS 115 for guidance on operational risk-related credit losses and clarification of the treatment for capital purposes of operational risk losses related to market risk and operational risk-related credit losses.

Absence of losses

Where there has not been a loss corresponding to a specific event type within the applicable business lines, enter zero.

Specific instructions

ARF 115.0B AMA – Operational risk losses – Current six months

The current six month loss events to be reported in this form are those which have discovery dates during the current reporting quarter and the quarter prior to the current quarter.

For column 1 of sections A to F of ARF 115.0B, an ADI is required to select the applicable business lines based on its loss experience, from the dropdown lists in each section.

Section A: Number of loss events by business line and event type

Report the number of loss events according to the relevant business line and event type. Include in this section only those operational risk losses that are treated as operational risk for the purpose of calculating an ADI’s regulatory capital.

Section B: Maximum single net loss amount by business line and event type

Report the largest single net loss amount for each business line and event type by dollar value. Include in this section only those operational risk losses that are treated as operational risk for the purpose of calculating an ADI’s regulatory capital.

Section C: Total net loss amounts by business line and event type

Report the total net loss amount by business line and event type. Include in this section only those operational risk losses that are treated as operational risk for the purpose of calculating an ADI’s regulatory capital.

Section D: Total gross loss amounts by business line and event type

Report the total gross loss amount by business line and event type prior to any recoveries. Include in this section only those operational risk losses that are treated as operational risk for the purpose of calculating an ADI’s regulatory capital.

Section E: Number of operational risk-related credit loss events by business line and event type

Report the number of operational risk-related credit loss events by business line and event type. Include only those losses which exceed the threshold that the ADI has established for operational risk-related credit losses (refer to item 7 Memorandum item: Loss thresholds below) and that are treated as credit risk for the purpose of calculating an ADI’s regulatory capital (refer to paragraph 28 of Attachment B to APS 115).

Section F: Total net operational risk-related credit loss amounts by business line and event type

Report the total net loss amount for operational risk-related credit losses by business line and event type. Include only those losses which exceed the threshold that the ADI has established for operational risk-related credit losses (refer to item 7 Memorandum item:  Loss thresholds below) and that are treated as credit risk for the purpose of calculating an ADI’s regulatory capital (refer to paragraph 28 of Attachment B to APS 115).

7. Memorandum items: Loss thresholds

7.1 Threshold for collection of internal loss data

Report the global threshold for collection of data on internal operational risk loss events (including operational risk losses related to market risk) and the currency in which it is denominated. To report the currency, use the relevant three-letter alphabetic International Organization for Standardization (ISO) code[4] (e.g. AUD, New Zealand dollar (NZD) and United States dollar (USD)).

7.2 Threshold for collection of operational risk-related credit loss data

Report the threshold for collection of data on operational risk-related credit losses and the currency in which it is denominated. To report the currency, use the relevant three-letter alphabetic ISO code.

In the event that there are multiple regional thresholds, the ADI is to report the threshold applied at the head office level of the ADI.

ARF 115.0C AMA – Operational risk losses - Previous six months

The loss events to be reported in this form are those which have discovery dates in the six months prior to those events captured in ARF 115.0B.

For column 1 of sections A to F of ARF 115.0C, an ADI is required to select the applicable business lines based on its loss experience, from the dropdown lists in each section.

For the following sections of this form, refer to the instructions for ARF 115.0B included in this instruction guide:

(a)           Section A: Number of loss events by business line and event type;

(b)          Section B: Maximum single net loss amount by business line and event type;

(c)           Section C: Total net loss amounts by business line and event type;

(d)          Section D: Total gross loss amounts by business line and event type;

(e)           Section E: Number of operational risk-related credit loss events by business line and event type;

(f)           Section F: Total net operational risk-related credit loss amounts by business line and event type; and

(g)          7. Memorandum items: Loss thresholds.



[1]           Level 1 and Level 2 are defined in accordance with Prudential Standard APS 001 Definitions.

[2]           Refer to paragraph 6 of Reporting Standard ARS 115.0 Advanced Measurement Approaches (AMA) to Operational Risk.

[3]           Securitisation exposures are defined in accordance with APS 120.

[4]           Refer to ISO 4217:2015 Currency names and code elements.