Standards
BCBS 195 / PSMOR (révisé 2021)BCBS

Principles for the Sound Management of Operational Risk

The twelve principles underpinning banking operational risk management worldwide. They structure the three lines of defence, the identification and assessment toolkit (RCSA, loss data collection, key risk indicators, scenario analysis), and the governance around them.

Official text

Who it applies to

  • Operational risk functions
  • Permanent control and compliance
  • Banking internal audit

Structuring points

  • Principle 10 explicitly addresses business continuity and resilience
  • Three lines of defence are three roles, not three hierarchical levels
  • Loss data collection without root cause analysis produces nothing
  • Operational risk appetite must be expressed in usable terms, not adjectives

Internationally active banks, but widely adopted outside banking.

Requirements 4