1. Home/
  2. Services/
  3. Regulatory Compliance Management/
  4. Crr Crd/
  5. Crd Risk Management En

Subscribe to Newsletter

Stay up to date with the latest trends and developments

By subscribing, you agree to our privacy policy.

A
ADVISORI FTC GmbH

Transformation. Innovation. Security.

Office Address

Kaiserstraße 44

60329 Frankfurt am Main

Germany

View on map

Contact

info@advisori.de+49 69 913 113-01

Mon-Fri: 9:00 AM - 6:00 PM

Company

Services

Social Media

Follow us and stay up to date.

  • /
  • /

© 2024 ADVISORI FTC GmbH. Alle Rechte vorbehalten.

Your browser does not support the video tag.
Intelligent CRD Risk Management for excellent risk governance

CRD Risk Management

The CRD Directive establishes comprehensive risk management requirements for financial institutions that go well beyond traditional risk control. As a leading consulting firm, we develop tailored RegTech solutions for intelligent risk orchestration, automated ICAAP processes and predictive stress testing frameworks with full IP protection and strategic risk excellence.

  • ✓Optimized ICAAP processes with automated capital planning
  • ✓Intelligent stress testing frameworks for predictive risk analysis
  • ✓Risk governance and appetite management based on machine learning
  • ✓Automated SREP preparation with technology-supported documentation

Your strategic success starts here

Our clients trust our expertise in digital transformation, compliance, and risk management

30 Minutes • Non-binding • Immediately available

For optimal preparation of your strategy session:

  • Your strategic goals and objectives
  • Desired business outcomes and ROI
  • Steps already taken

Or contact us directly:

info@advisori.de+49 69 913 113-01

Certifications, Partners and more...

ISO 9001 CertifiedISO 27001 CertifiedISO 14001 CertifiedBeyondTrust PartnerBVMW Bundesverband MitgliedMitigant PartnerGoogle PartnerTop 100 InnovatorMicrosoft AzureAmazon Web Services

CRD Risk Management: Governance Framework, Capital Adequacy and Integrated Bank Steering

Why ADVISORI for CRD Risk Management

  • Over 50 completed projects in integrated bank management and supervisory risk management since 2010
  • Experience with BaFin, Bundesbank and ECB examinations — proven governance evidence and SREP documentation
  • Interdisciplinary team of risk managers, regulatory specialists and process consultants
  • End-to-end support from gap analysis through implementation to supervisory sign-off
⚠

CRD VI & MaRisk 2026: New Requirements

The CRD VI transposition (BRUBEG) and the planned MaRisk revision 2026 raise governance standards for risk management — particularly in ESG risk integration, institution classification and transition planning. Early gap analysis secures compliance.

ADVISORI in Numbers

11+

Years of Experience

120+

Employees

520+

Projects

We follow a structured approach that links regulatory requirements (CRD, MaRisk, EBA guidelines) with the individual risk profile and business strategy of your institution. Every engagement begins with a gap analysis and culminates in an actionable implementation roadmap.

Our Approach:

Gap analysis: benchmarking your existing risk management framework against CRD Art. 74–96, MaRisk AT 4.1 and relevant EBA guidelines

Risk inventory and materiality assessment of all risk types as the foundation for risk strategy and ICAAP

Design and documentation of the risk bearing capacity concept (normative and economic perspective)

Implementation of the three lines of defence model with clear role assignments (CRO, risk controlling, internal audit)

Support during supervisory examinations and SREP preparation with focus on governance evidence

"The intelligent implementation of CRD Risk Management requirements is the key to supervisory excellence and strategic risk superiority in EU banking. Our solutions enable institutions not only to achieve regulatory compliance, but also to develop operational excellence in risk control and capital optimization. By combining deep risk management expertise with advanced technologies, we create lasting competitive advantages while protecting sensitive risk data."
Melanie Düring

Melanie Düring

Head of Risk Management

Our Services

We offer you tailored solutions for your digital transformation

Risk Management Governance under CRD and MaRisk

Establishing and enhancing the risk management organisation under CRD Art. 74–76 and MaRisk AT 4.1 — from board responsibility through the CRO function to the risk controlling unit.

  • Organisational structure: responsibilities, reporting lines and escalation paths in risk management
  • CRO function: requirements for independence, qualifications and access to the management body
  • Risk controlling function: set-up, staffing and MaRisk-compliant functional separation
  • Risk committee: establishment, composition and reporting obligations under KWG § 25d

ICAAP and Risk Bearing Capacity

Designing and enhancing the Internal Capital Adequacy Assessment Process — normative and economic perspective per BaFin/Bundesbank guidance and EBA SREP guidelines.

  • Normative perspective: capital planning over the planning horizon with regulatory ratios
  • Economic perspective: risk coverage potential, risk measurement and internal capital allocation
  • Risk inventory: identification, assessment and documentation of all material risk types
  • Capital planning process: linking business strategy, risk strategy and capital requirements

Risk Appetite Framework and Risk Strategy

Developing and operationalising a risk appetite framework (RAF) as the link between business strategy and operational risk management — including limit systems and escalation mechanisms.

  • Risk appetite statement: qualitative and quantitative definition of risk tolerance at institution level
  • Limit system: deriving risk limits per risk type and business line from the risk appetite
  • Monitoring and escalation: early warning indicators, thresholds and defined escalation paths
  • Risk strategy: alignment with business strategy and annual review process

Three Lines of Defence and Internal Control

Implementing the three lines of defence model as the governance foundation — with clear delineation between operational risk management, independent oversight and internal audit.

  • First line of defence: risk ownership in business lines and operational controls
  • Second line of defence: independent risk controlling and compliance function
  • Third line of defence: internal audit with risk-based audit plan
  • Documentation: functional separations, reporting lines and evidence for supervisory examinations

Integrated Bank Management and Risk Integration

Connecting individual risk management processes into an integrated bank management framework — from risk inventory through capital allocation to risk-based performance management.

  • Risk aggregation: consolidating all risk types considering correlations and diversification effects
  • Capital allocation: risk-adjusted distribution of economic capital across business lines
  • Risk-based steering: RORAC/RAROC metrics for strategic decision-making
  • Risk reporting: building MaRisk-compliant risk reporting to management body and supervisory board

CRD VI / MaRisk 2026: Regulatory Adjustments

Supporting the implementation of current regulatory changes — CRD VI transposition (BRUBEG), MaRisk revision 2026, ESG risk integration and new institution classification.

  • CRD VI gap analysis: identifying action items from BRUBEG and new KWG requirements
  • ESG risk integration: embedding climate and sustainability risks in the risk inventory and ICAAP
  • Transition planning: preparing the supervisory transition plan per CRD VI / EBA guidelines
  • Proportionality assessment: evaluating requirements under new institution classification (MaRisk revision)

Our Competencies in CRR/CRD - Capital Requirements Regulation & Directive

Choose the area that fits your requirements

CRD Advanced Approach

The Advanced IRB Approach (A-IRB) allows institutions to estimate all risk parameters internally — probability of default (PD), loss given default (LGD), exposure at default (EAD) and credit conversion factors (CCF) — using proprietary models. ADVISORI guides you from model development through supervisory approval to ongoing validation — for risk-sensitive capital management under CRR III.

CRD Buffer Requirements

The CRD combined buffer requirement defines how capital conservation buffer, countercyclical buffer, systemic risk buffer and G-SII/O-SII buffers interact under a single framework. ADVISORI advises financial institutions on buffer stacking rules, capital distribution restrictions, MDA calculation and capital conservation planning — ensuring full compliance with the CRD buffer framework.

CRD Capital Adequacy

Capital adequacy requirements under the CRD comprise the overall capital requirement from Pillar 1 minimum, SREP capital add-on (P2R), combined buffer requirement, and Pillar 2 Guidance (P2G). We support banks in supervisory capital quantification, preparation for CRD VI changes, and integration of ESG risks into the capital adequacy assessment.

CRD Compliance

The Capital Requirements Directive (CRD VI) introduces stricter requirements for governance, fit-and-proper assessments, and ESG risk management. CRD compliance requires end-to-end processes from suitability assessments through internal control systems to ongoing supervisory reporting. ADVISORI supports credit institutions with comprehensive CRD compliance: gap analysis, governance framework design, and regulatory documentation.

CRD Conservation Buffer

The CRD Capital Conservation Buffer under Art. 129 CRD V/VI requires EU credit institutions to hold 2.5% Common Equity Tier 1 (CET1) capital above minimum requirements. When breached, the MDA (Maximum Distributable Amount) calculation triggers automatic distribution restrictions on dividends, bonuses, and AT1 coupons. ADVISORI advises on strategic buffer management, CRD VI implementation, and regulatory capital planning across the EU framework.

CRD Corporate Governance

The Capital Requirements Directive (CRD) defines comprehensive governance requirements for credit institutions across the EU — from fit-and-proper assessments to management body composition and remuneration policies. CRD VI adds ESG governance obligations and enhanced supervisory board duties. ADVISORI supports you in fully implementing all CRD governance requirements, preparing for suitability assessments, and establishing robust internal governance structures aligned with EBA guidelines.

CRD Countercyclical Buffer

The countercyclical capital buffer under Art. 130 CRD (Directive 2013/36/EU) requires credit institutions to maintain an institution-specific buffer as the weighted average of applicable national CCyB rates. The calculation under Art. 140 CRD considers the geographic distribution of credit risk exposures. ADVISORI supports you with CRD-compliant buffer calculation, ESRB reciprocity requirements and implementation of CRD VI changes effective January 2026.

CRD Credit Institution

The Capital Requirements Directive (CRD VI) imposes comprehensive requirements on credit institutions regarding governance, authorisation, and supervision. We support banks in the strategic implementation of all CRD requirements - from fit & proper assessments and internal governance structures to supervisory interaction. Our RegTech solutions make your CRD compliance efficient and sustainable.

CRD Credit Risk

End-to-end consulting for implementing the CRD credit risk framework: from the reformed Standardised Approach (SA-CR) and Output Floor calculations to ECAI due diligence requirements. We support your institution in the compliant implementation of CRR III capital requirements and the strategic optimisation of your risk weighting.

CRD Directive

The Capital Requirements Directive (CRD) is the core EU directive governing banking supervision, governance, and authorization of credit institutions. From CRD IV through CRD V to the current CRD VI, it defines the supervisory framework that each EU member state must transpose into national law. ADVISORI has been supporting banks and financial institutions with CRD implementation for over 14 years.

CRD Disclosure Report

The CRD requires credit institutions to maintain a transparent disclosure process with clear governance. We support banks in establishing three-line quality assurance, drafting the disclosure policy and preparing for the Pillar 3 Data Hub — so your disclosure report withstands supervisory scrutiny.

CRD EBA

The European Banking Authority (EBA) operationalises the CRD through binding guidelines on internal governance, remuneration policy, fit-and-proper assessments and ESG risk management. With CRD VI transposition due by January 2026 and the governance guidelines revision (EBA/CP/2025/20), banks face comprehensive adjustments. ADVISORI supports the structured implementation of all EBA requirements — from gap analysis and MaRisk compatibility review to supervisory dialogue.

CRD Fit and Proper

Fit and Proper ensures that members of the management body, supervisory board and key function holders meet regulatory requirements for knowledge, experience, integrity and time commitment. With CRD VI expanding the scope to key function holders and the revised EBA/ESMA joint guidelines introducing AML/CFT competence requirements, banks face growing complexity in their suitability assessment processes. ADVISORI supports you with systematic implementation of all Fit and Proper requirements across the EU framework.

CRD Governance

The CRD defines binding requirements for the internal governance of credit institutions – from the three lines of defence model through internal control systems to the independent compliance function. With the new EBA guidelines (EBA/CP/2025/20) and CRD VI, requirements for risk management governance, control functions, and organizational structures are tightening significantly. ADVISORI supports you with gap analysis, implementation, and ongoing monitoring of your internal governance framework aligned with EBA standards.

CRD IV

Directive 2013/36/EU (CRD IV) together with the CRR forms the regulatory foundation of EU banking supervision under Basel III. We support financial institutions in the full implementation of governance, SREP and Pillar 2 requirements — from gap analysis to supervisory-compliant implementation.

CRD IV Germany

The German implementation of the Capital Requirements Directive IV places specific demands on governance, risk management and BaFin interaction through the KWG and MaRisk framework. We guide banks through full CRD IV compliance in Germany — from gap analysis and SREP preparation to the implementation of compliant remuneration and governance structures.

CRD Internal Models

The use of internal models to calculate risk-weighted assets requires supervisory approval from the ECB and national authorities. We guide your institution through the entire IRB approval process — from model development and validation per the revised ECB guide 2025 to successful regulatory approval. With our expertise, you navigate the tightened CRD VI requirements, the output floor and internal model restrictions with confidence.

CRD Liquidity

The CRD establishes binding liquidity requirements for EU banks — from the Liquidity Coverage Ratio (LCR) and Net Stable Funding Ratio (NSFR) to internal liquidity risk management. ADVISORI supports financial institutions with regulatory implementation, liquidity governance and building robust stress testing frameworks.

CRD Liquidity Coverage Ratio

The Liquidity Coverage Ratio (LCR) requires credit institutions to hold sufficient high-quality liquid assets (HQLA) to cover net cash outflows over a 30-day stress scenario. The minimum ratio is 100%. Under the EU implementation of Basel III through CRR/CRD, Delegated Regulation 2015/61 governs HQLA categories, inflow/outflow rates, and reporting requirements. ADVISORI supports banks with compliant LCR calculation, HQLA optimization, and supervisory reporting.

CRD Market Discipline

CRD Market Discipline creates transparency and trust between financial institutions and stakeholders through Pillar 3 disclosure requirements. As a leading consulting firm, we develop tailored RegTech solutions for automated disclosure processes, intelligent risk communication and strategic transparency optimisation with full IP protection.

Frequently Asked Questions about CRD Risk Management

What does the risk management framework under CRD Art. 74–96 encompass?

Articles 74–96 of the Capital Requirements Directive (CRD) require credit institutions to maintain a comprehensive risk management framework. The core components are:

• Governance structure: The management body bears overall responsibility for risk management and must establish an independent risk controlling function (Art.

76 CRD). Large institutions also need a risk committee.

• Risk strategy: Institutions must maintain a documented risk strategy covering all material risk types, aligned with the business strategy.
• ICAAP: The Internal Capital Adequacy Assessment Process ensures the institution holds sufficient capital to cover all material risks at all times.
• Risk appetite framework: Quantitative and qualitative determination of risk tolerance at institution level.
• Three lines of defence: Clear separation between operational risk management, independent oversight and internal audit.In Germany, MaRisk (AT 4.1) specifies these requirements and adds obligations around risk inventory, risk bearing capacity and risk reporting.

How do the normative and economic perspectives of risk bearing capacity differ?

Since the Bundesbank/BaFin guidance of 2018, all German credit institutions must assess their risk bearing capacity from two perspectives:

• Normative perspective: Ensuring all regulatory capital requirements (CET1, Tier 1, total capital, capital buffers) are met over a multi-year planning horizon — including under adverse scenarios. The basis is CRR own funds requirements and Pillar

2 add-ons.

• Economic perspective: Assessing whether internal risk coverage potential is sufficient to cover all material risks. Internal risk measurement methods may go beyond the regulatory standard approaches.Both perspectives are brought together in the ICAAP and must be consistent with the risk strategy and capital planning process. BaFin reviews risk bearing capacity regularly as part of the SREP.

What role does the CRO play in the risk management framework?

The Chief Risk Officer (CRO) plays a key role in supervisory risk management. CRD and MaRisk set the following requirements:

• Independence: The CRO must operate independently from revenue-generating business lines and must not simultaneously be responsible for risk-generating activities.
• Access to management: Direct reporting line to the management body and, where applicable, to the risk committee of the supervisory board.
• Qualifications: Sufficient expertise in risk management and banking supervisory law.
• Scope of responsibility: Oversight of the risk controlling function, risk inventory, risk bearing capacity calculation and risk reporting.
• Removal protection: The CRO can only be removed with consent of the supervisory body.Under MaRisk (AT 4.4.1), in significant institutions the risk controlling function must be led by a member of the management board who is not simultaneously responsible for market or trading areas.

How does the three lines of defence model work in banking practice?

The three lines of defence model is the central governance concept for risk management in credit institutions. It structures responsibilities across three levels:

• 1st line of defence — Business lines: Front-office units bear direct responsibility for identifying and managing operational risks. They implement controls and adhere to risk limits.
• 2nd line of defence — Risk controlling and compliance: Independent oversight functions that develop risk methodologies, calculate risk bearing capacity, monitor limit adherence and ensure regulatory compliance.
• 3rd line of defence — Internal audit: Process-independent review of the entire risk management system based on a risk-oriented audit plan.The functional and organisational separation of the three lines is critical. MaRisk (AT 4.4) requires that risk controlling and compliance functions are set up independently from market areas up to the management board level.

What changes with CRD VI and the MaRisk revision 2026 for risk management?

The CRD VI transposition through BRUBEG and the planned MaRisk revision

2026 bring significant changes:

• ESG risk integration: Institutions must systematically integrate climate and sustainability risks into the risk inventory and ICAAP. The materiality threshold is set at 5% of economic risk coverage potential.
• Institution classification: The MaRisk revision introduces three size categories — very small institutions (up to EUR 1bn balance sheet), small institutions/SNCIs (up to EUR 5bn) and other LSIs — with graduated requirements.
• Transition planning: Preparation of a supervisory transition plan as a risk management instrument per CRD VI and EBA guidelines.
• Governance tightening: Extended requirements for key function holders under KWG §§ 25c, 25d.
• Proportionality relief: Simplified stress tests and extended validation cycles for small institutions.ADVISORI supports institutions with gap analysis, action planning and implementation of these new requirements.

How is integrated bank management linked to risk management?

Integrated bank management connects risk management with profit-oriented bank steering into one coherent management approach:

• Risk aggregation: All material risk types are consolidated into an overall risk profile, considering correlations and diversification effects.
• Capital allocation: Economic capital is distributed across business lines on a risk-adjusted basis — the foundation for risk-adjusted performance measurement (RORAC/RAROC).
• Strategic steering: Risk strategy and business strategy are aligned consistently and reviewed annually.
• Limit system: Institution-level limits are cascaded into individual limits per risk type and business line.
• Risk reporting: The risk reporting system keeps management body and supervisory board regularly informed about risk profile, risk bearing capacity and limit utilisation (MaRisk BT 3).MaRisk requires these processes to be documented in an integrated bank management concept with the risk bearing capacity process as the central element.

What requirements does MaRisk set for the risk inventory?

The risk inventory is the starting point of the entire risk management process and is governed by MaRisk AT 2.2:

• Scope: All risks of the institution must be identified and assessed for materiality at least annually — and on an ad-hoc basis when triggered by events.
• Risk types: Credit risk, market risk, liquidity risk, operational risk, interest rate risk in the banking book and further institution-specific risks.
• Assessment criteria: Materiality is judged using quantitative (e.g. share of total risk) and qualitative criteria.
• ESG risks: From 2026, climate and sustainability risks must be explicitly included in the risk inventory.
• Documentation: Risk inventory results must be documented transparently and presented to the management body.
• Strategy linkage: The risk strategy and ICAAP parameterisation are derived from the risk inventory.The risk inventory forms the basis for the ICAAP, risk appetite framework and the entire limit system.

Success Stories

Discover how we support companies in their digital transformation

Digitalization in Steel Trading

Klöckner & Co

Digital Transformation in Steel Trading

Case Study
Digitalisierung im Stahlhandel - Klöckner & Co

Results

Over 2 billion euros in annual revenue through digital channels
Goal to achieve 60% of revenue online by 2022
Improved customer satisfaction through automated processes

AI-Powered Manufacturing Optimization

Siemens

Smart Manufacturing Solutions for Maximum Value Creation

Case Study
Case study image for AI-Powered Manufacturing Optimization

Results

Significant increase in production performance
Reduction of downtime and production costs
Improved sustainability through more efficient resource utilization

AI Automation in Production

Festo

Intelligent Networking for Future-Proof Production Systems

Case Study
FESTO AI Case Study

Results

Improved production speed and flexibility
Reduced manufacturing costs through more efficient resource utilization
Increased customer satisfaction through personalized products

Generative AI in Manufacturing

Bosch

AI Process Optimization for Improved Production Efficiency

Case Study
BOSCH KI-Prozessoptimierung für bessere Produktionseffizienz

Results

Reduction of AI application implementation time to just a few weeks
Improvement in product quality through early defect detection
Increased manufacturing efficiency through reduced downtime

Let's

Work Together!

Is your organization ready for the next step into the digital future? Contact us for a personal consultation.

Your strategic success starts here

Our clients trust our expertise in digital transformation, compliance, and risk management

Ready for the next step?

Schedule a strategic consultation with our experts now

30 Minutes • Non-binding • Immediately available

For optimal preparation of your strategy session:

Your strategic goals and challenges
Desired business outcomes and ROI expectations
Current compliance and risk situation
Stakeholders and decision-makers in the project

Prefer direct contact?

Direct hotline for decision-makers

Strategic inquiries via email

Detailed Project Inquiry

For complex inquiries or if you want to provide specific information in advance

ADVISORI Logo
BlogCase StudiesAbout Us
info@advisori.de+49 69 913 113-01