A credit institution recently changed the scope of the gross losses for operational risk reported in COREP. The credit institution explained that they do not automatically report some types of incidents in the ‘gross losses’ for operational risk in COREP (C17.01a) when the amount is recovered after 5 days. We refer here to transfer of cash involving e.g. a human input error whereby a cash amount is transferred for a far greater size than intended, at the wrong price, or with any number of other input errors, or to the wrong counterparty.
The credit institution explained that gross losses for operational risk should be reported in COREP only if there is a P&L movement in the financial statements. Therefore, if the credit institution considers that there is a high probability to recover the amount linked to the operational risk event, even if they recover the money after more than 5 days, they will not increment any amount in the financial statements, they do not consider it as loss, and therefore they will not report the amount in the COREP ‘gross losses’ for operational risk.
According to us, the competent authorities, this interpretation seems to be incorrect. Our interpretation is that the gross losses for operational risk in COREP should not be dependent on the decision of the credit institution to book losses in its financial statements for this operational risk event. Therefore, if there is an operational risk event, the amount should be reported in COREP in the ‘gross losses’ for operational risk. The only exception is if the losses are recovered within 5 days, in which case it is considered as a “rapidly recovered loss events” and can be deducted from the reported gross losses in COREp (C17.01a)
Could you please clarify which interpretation is correct?
- Legal act: Regulation (EU) No 575/2013 (CRR)
- COM Delegated or Implementing Acts/RTS/ITS/GLs: Regulation (EU) 2021/451 – ITS on supervisory reporting of institutions
