yourstate.us
12 CFR 1240.161

§ 1240.161 Qualification requirements for incorporation of operational risk mitigants.

United States · 12 CFR — Banks and Banking · Status: effective

Get this as JSONEmbed this
Cite this
Citation
12 CFR 1240.161, § 1240.161 Qualification requirements for incorporation of operational risk mitigants, United States, version 1 as recorded 2026-07-09, yourstate.us, https://yourstate.us/provision/50601
Permanent ID
ys:prov:50601@1
SHA-256
bfc8c3214849c2100d1d99eb37af2ff54b97f5e962f752e6c1406d44b09f2bea

The hash is SHA-256 of this version's text, with every run of whitespace collapsed to a single space and the ends trimmed. The ID always leads back here, and checking it says whether the text you cited is still the current version.

Full text

(a) Qualification to use operational risk mitigants. An Enterprise may adjust its estimate of operational risk exposure to reflect qualifying operational risk mitigants if: (1) The Enterprise's operational risk quantification system is able to generate an estimate of the Enterprise's operational risk exposure (which does not incorporate qualifying operational risk mitigants) and an estimate of the Enterprise's operational risk exposure adjusted to incorporate qualifying operational risk mitigants; and (2) The Enterprise's methodology for incorporating the effects of insurance, if the Enterprise uses insurance as an operational risk mitigant, captures through appropriate discounts to the amount of risk mitigation: (i) The residual term of the policy, where less than one year; (ii) The cancelation terms of the policy, where less than one year; (iii) The policy's timeliness of payment; (iv) The uncertainty of payment by the provider of the policy; and (v) Mismatches in coverage between the policy and the hedged operational loss event. (b) Qualifying operational risk mitigants. Qualifying operational risk mitigants are: (1) Insurance that: (i) Is provided by an unaffiliated company that the Enterprise deems to have strong capacity to meet its claims payment obligations and the Enterprise assigns the company a probability of default equal to or less than 10 basis points; (ii) Has an initial term of at least one year and a residual term of more than 90 days; (iii) Has a minimum notice period for cancellation by the provider of 90 days; (iv) Has no exclusions or limitations based upon regulatory action or for the receiver or liquidator of a failed depository institution; and (v) Is explicitly mapped to a potential operational loss event; (2) In evaluating an operational risk mitigant other than insurance, FHFA will consider whether the operational risk mitigant covers potential operational losses in a manner equivalent to holding total capital.

Legislative history

This is a federal regulation, adopted through agency rulemaking under the Administrative Procedure Act — not enacted by a recorded vote of Congress.