FineIT Publication • 42 Pages • Basel Framework

Operational Risk Analytics

A FineIT publication by Dr. Saleem Aftab on measuring operational risk under the Basel framework. This 42-page guide covers the complete spectrum of operational risk capital charge calculation — from the Basic Indicator Approach through Advanced Measurement Approaches — with formulas, data requirements, worked examples, and statistical concepts. Used by 150+ financial institutions across 40+ countries with 200+ Big 4 audit approvals.

Author: Dr. Saleem Aftab, FineIT|Published: 2020|Updated: April 2026|IASB Quantitative Advisor • BCBS Member
Basel II/IIIBIAStandardized ApproachAMALDAScore CardMonte CarloPoisson Distribution

Key Content

Definition of Operational Risk

Basel Committee on Banking Supervision (BCBS) defines operational risk as “the risk of direct or indirect loss resulting from inadequate or failed internal processes, people and systems or from external events.” The four components are: Process (losses from deficient or absent procedures), People (intentional policy violations by employees), Systems (breakdowns in existing technology), and External Events (natural/man-made forces or third-party actions).

7 Categories of Operational Risk Events

#Level 1 CategoryLevel 2 Sub-Categories
IInternal FraudUnauthorized Activity, Theft & Fraud
IIExternal FraudTheft & Fraud, Systems Security
IIIEmployment Practices & Workplace SafetyEmployee Relations, Sale Environment, Diversity & Discrimination
IVClients, Products & Business PracticesSuitability & Fiduciary, Improper Practices, Product Flaws, Advisory
VDamage to Physical AssetsDisasters & Other Events
VIBusiness Disruption & System FailuresSystems
VIIExecution, Delivery & Process ManagementTransaction Execution, Monitoring, Documentation, Account Management, Vendors

Basic Indicator Approach (BIA)

The simplest method for calculating operational risk capital charge. Capital charge equals the 3-year average of positive annual gross income multiplied by an Alpha factor of 15%:

KBIA = Σ(GIi × α) / n    where α = 15%

Gross Income = Net Interest Income + Net Non-Interest Income. Negative or zero years are excluded from both numerator and denominator.

Standardized Approach (SA)

Separate gross incomes are calculated for all 8 business lines, each multiplied by a specific Beta Factor:

Business LineBeta Factor
Corporate Finance18%
Trading & Sales18%
Payments & Settlements18%
Commercial Banking15%
Agency Services15%
Retail Banking12%
Asset Management12%
Retail Brokerage12%

Advanced Measurement Approaches (AMA)

Under AMA, financial institutions develop their own empirical models using 4 data elements: internal loss data, external loss data, scenario analysis, and business environment/internal control factors. The three AMA model categories are:

  • Internal Measurement Approach (IMA) — calculates expected loss as EI × PE × LGE for 56 business line/risk event combinations, scaled by gamma factor
  • Score Card Approach (SCA) — combines quantitative initial capital charge with qualitative risk scoring questionnaires to adjust capital based on Residual Risk Scores
  • Loss Distribution Approach (LDA) — models frequency (Poisson/Binomial) and severity (Normal/Log-Normal/GPD) distributions separately, combines via Monte Carlo simulation into aggregate loss distribution, then calculates VaR at 99.9th percentile

AMA models must calculate capital charge for a one-year holding period at 99.9th percentile confidence. Capital charge cannot be less than 75% of Standardized Approach.

Loss Distribution Approach (LDA) — 5-Step Process

  1. Model Loss Frequency Distribution — using Poisson or Binomial distribution to model how often loss events occur per year
  2. Model Loss Severity Distribution — using Normal, Log-Normal, Generalized Pareto, or other distributions to model the financial impact of each event
  3. Model Aggregate Loss Distribution — combine frequency and severity via Monte Carlo simulation or tabulation method
  4. Calculate Expected and Unexpected Losses — expected loss is the mean of aggregate distribution; unexpected loss is the tail
  5. Estimate Capital Charge — VaR at 99.9th percentile of the aggregate loss distribution

Read the Full Publication

This publication is available for online reading only and may not be downloaded or redistributed.

This document is provided for online reading only. © FineIT Private Limited.

About the Publisher

FineIT Private Limited (est. 2001) is a quantitative advisor to the IASB on Predictive Analytics and a BCBS member institution. FineIT's Basel Analytics Suite provides complete Basel III/IV compliance including credit risk RWA, market risk, operational risk (BIA, SA, and AMA), capital adequacy reporting, stress testing, and ICAAP/ILAAP automation for 150+ financial institutions across 40+ countries.

Operational Risk Analytics Under Basel Framework by FineIT

This 42-page FineIT publication provides a complete guide to measuring and calculating operational risk capital charges under the Basel II/III framework. It covers all three regulatory approaches — Basic Indicator Approach (BIA), Standardized Approach (SA), and Advanced Measurement Approaches (AMA) — with mathematical formulas, worked examples, statistical concepts, and data requirements.

Related FineIT Products and Resources

Key Operational Risk Concepts

Basel II definition of operational risk (processes, people, systems, external events), 7 Level 1 event categories (internal fraud, external fraud, employment practices, clients/products/business practices, damage to physical assets, business disruption, execution/delivery/process management), 20 Level 2 sub-categories, Basic Indicator Approach formula K = sum(GI x alpha)/n where alpha = 15%, Standardized Approach with 8 business lines and beta factors (Corporate Finance 18%, Trading 18%, Payments 18%, Commercial Banking 15%, Agency 15%, Retail Banking 12%, Asset Management 12%, Retail Brokerage 12%), Advanced Measurement Approaches including Internal Measurement Approach (EI x PE x LGE scaled by gamma), Score Card Approach (initial capital x residual risk score adjustment), Loss Distribution Approach (Poisson frequency + severity distribution combined via Monte Carlo simulation to form aggregate loss distribution, capital at 99.9th percentile VaR), loss data collection and cleaning procedures, internal vs external loss data requirements.