1The fund management company, SICAV and asset manager of collective investment schemes shall set down appropriate risk management and risk control principles as well as the organisation of risk management and risk control in internal guidelines.
2They shall include the risks that:
- a.
- they are or could be exposed to as a result of the entirety of their business activities;
- b.
- the collective investment schemes managed by them as well as other assets managed by them under the terms of mandates are or could be exposed to.
3The internal guidelines shall set out:
- a.
- the organisation of risk management and risk control, including the responsibilities within the licensee;
- b.
- the types of risk at the level of the activities of the licensee, the collective investment schemes managed, and the assets managed under the terms of mandates;
- c.
- the processes and systems for assessing and managing all material risks of the licensee and the collective investment schemes, and in particular their market, liquidity and counterparty risk;
- d.
- the tasks, responsibilities and the frequency of reporting to the board of directors and executive board.
4When drafting the internal guidelines and structuring the organisation of risk management, account must be taken of the nature, scope and complexity of the transactions carried out, the collective investment schemes managed, and the assets managed under the terms of mandates.
5The use of investment techniques and derivatives must be governed by internal guidelines and reviewed periodically. With respect to the use of derivatives, the internal guidelines shall also govern the following areas, in accordance with the structure and risks of the licensee:
- a.
- Risk policy:
- 1.
- Permitted derivatives,
- 2.
- Requirements to be met by counterparties,
- 3.
- Market liquidity requirements,
- 4.
- In relation to the use of index products: requirements in terms of representativeness and correlation;
- b.
- Risk control:
- 1.
- Identification, assessment and monitoring (controlling) of risks,
- 2.
- Authorities and limits,
- 3.
- Risk assessment procedures,
- 4.
- Escalation procedures in the event of limit overruns,
- 5.
- Additionally, for the model approach:
- –
- Method of verifying the risk assessment models, in particular VaR
- –
- Escalation procedures and measures in the event of unsatisfactory results of verification tests
- –
- Composition of the benchmark portfolios and changes to them, monitoring of the process used to determine the benchmark portfolio
- –
- Stress tests;
- c.
- Processing and valuation:
- 1.
- Documentation of transactions,
- 2.
- Valuation models to be used,
- 3.
- Data and data suppliers to be used.