CAN YOU AGGREGATE RISK EXPOSURES QUICKLY AND ACCURATELY ACROSS THE ENTIRE ENTERPRISE?

Time is running out for certain global systemically important banks (G-SIBs) to comply with BCBS 239, the Basel Committee on Banking Supervision (BCBS) Principles for Effective Risk Data Aggregation and Risk Reporting.

The idea behind the 14 principles is simple — for banks to quickly identify their exposures and prevent them from escalating. Compliance with the principles, however, is much more complex. As of January 2015, nearly half of G-SIBs didn’t expect to meet the 2016 deadline. And they’re not the only banks that need to be concerned: BCBS strongly advises adoption by domestic SIBs as well.

Risk Data Aggregation and Risk Reporting from CSC brings SIBs into compliance with BCBS principles by improving data accuracy, timeliness, completeness and adaptability through aggregation, for better data management and more efficient reporting.

CSC’S RISK DATA AGGREGATION AND RISK REPORTING Together with world-class alliance partners such as AxiomSL and MetricStream, CSC takes an enterprise-wide, full life-cycle approach to Risk Data Aggregation and Risk Reporting, to provide the following:

14-Principle Risk Assessment Informed decisions on regulatory responses are only possible if your

risk strategy is complete and compliant. CSC’s risk assessment covers business models, control frameworks, data, IT and key risk indicators (KRIs) to provide comprehensive and up-to-date information for your strategy. We assess or validate your existing governance frameworks, taking into account the 14 BCBS principles as well as corporate risk appetite and risk culture. Our assessment report includes commentary on status and risks, and recommendations on change priorities.

Governance Framework and Reporting Design CSC helps banks demonstrate a strong governance framework and sound IT infrastructure in support of risk management. We scope and design compliant governance frameworks with outcomes, policies, reports and data sets. We define and quantify key gaps, and determine your options and capabilities. Deliverables include a defined or enhanced framework, confirmed priority reports and defined reports.

BCBS 239 PILLARS AND PRINCIPLES

Overarching Governance and Infrastructure

1. Governance

2. Data Architecture and IT

Infrastructure

Risk Data Aggregation Capabilities3. Accuracy and Integrity

4. Completeness

5. Timeliness

6. Adaptability

Risk Reporting Practices 7. Accuracy

8. Comprehensiveness

9. Clarity and Usefulness

10. Frequency

11. Distribution

Supervisory Review, Tools and Cooperation 12. Review

13. Remedial Actions and

Supervisory Measures

14. Home/Host Cooperation

RISK DATA AGGREGATION

A Governance, Risk and Compliance Solution for Banking and Capital Markets

© 2015 Computer Sciences Corporation. All rights reserved. Creative Services MD_8027a-16 05/2015

Reporting System — Build, Consolidate and TestBCBS advises banks to design, build and maintain data architecture and IT infrastructure to fully support their risk data aggregation capabilities and risk reporting practices. Working together with AxiomSL and MetricStream, CSC creates or enhances your IT framework of risk and finance systems to:

• Comply with BCBS principles

• Structure a delivery portfolio

• Improve efficiency

• Lower your cost of compliance

Determining any risk-change synergies and implementing governance, risk and compliance (GRC) capabilities, we deliver integrated, aggregated and tested risk management capabilities for transparent and flexible risk assurance.

Risk and Finance Data Aggregation Strong risk data aggregation capabilities are critical to ensuring the accuracy, completeness and timeliness of a bank’s risk management reports. We source, extract, structure and validate your data to satisfy BCBS principles. We deliver a data dictionary and inventory, data governance and standards, and a data lake model. Additionally, if data repository outsourcing is an option for your organization, we can identify BPO components to enable transition to pooled services and provide economies of scale through Risk Data Management as a Service.

Reporting and Attestations Timely and appropriate risk management reports must be pulled from integrated data taxonomies and architectures across the banking group, including legal entities, counter-parties, customers and accounts. We enable banks with a single, scalable data source that is configurable to quickly generate scheduled and ad hoc reports for business needs and regulatory requirements. And if outsourcing is an option, we can identify BPO components and help you transition to pooled reporting through Risk Data Reporting as a Service.

GRC ALLIANCE PARTNERS AxiomSLAxiomSL provides regulatory reporting and risk management solutions to the financial services industry. The company empowers financial institutions to meet regulatory reporting and risk requirements across multiple regulators and jurisdictions. axiomsl.com

MetricStreamMetricStream provides enterprise-wide GRC and quality management solu-tions for global corporations in diverse industries, contributing to the alliance an expertise in enterprise risk, risk data aggregation and regulatory response. metricstream.com

Regional CSC Headquarters

The Americas +1.703.876.1000 (United States)

Asia, Middle East, Africa +65.6809.9000 (Republic of Singapore)

Australia +61(2)9034.3000 (Australia)

Central and Eastern Europe +49.611.1420 (Germany)

Nordic and Baltic Region +45.36.14.4000 (Denmark)

South and West Europe +33.1.55.707070 (France)

UK, Ireland and Netherlands +44.020.3696.3000 (United Kingdom)

RISK DATA AGGREGATION

WHY CSC? THE RIGHT MIX TO MAXIMIZE BUSINESS VALUE

GRC Expertise across consulting, technology, business processes and agile methodologies

Next-Gen Technology Consulting leveraging data analytics, mobility, cybersecurity, cloud and application modernization

International Banking Experience with local specialization for banking clients in 69 countries

Faster Time to Value from prebuilt, tested reference architectures, reusable artifacts, templates and methodologies

Partner Ecosystem of right-fit capabilities from a network of market-leading specialist and niche partners

Technology Independence to deliver best-of-breed solutions, from open source to global partners

Comprehensive Data Life-Cycle Management for everything from legacy data warehouses to ad-vanced visualization

Purpose-Fit Industrialized Solutions based on deep banking and business- process experience

Full Life-Cycle Approach using our shape-transform-manage modules to deliver business outcomes faster