Risk Retention
What is Risk Retention?
A deliberate decision to accept the burden of loss from a particular risk, typically when the cost of mitigation exceeds the expected loss.
Frameworks that govern risk retention
What the standards actually require on risk retention
Requirements naming risk retention across 3 standards, quoted from the control text.
Backup makes copies of data, records, configuration and software so that none of them is lost or left unusable and restore returns them when required, supporting disaster recovery; it is distinct from archiving and is not used as an archive.
gamp-5-good-automated-manufacturing-practice::O9 · Appendix O9 Backup and Restore →Gives the key elements of a sound risk management system for credit risk transfer activities (securitisation, credit derivatives and similar): corporate governance, policies, procedures and limits, credit assessment and review, risk measurement and valuation,...
hkma-spm::CR-G-12 · CR-G-12 Credit Risk Transfer Activities →Limited Exemption for entities with fewer than 20 employees and independent contractors, less than $7.5M gross annual revenue (3-year avg from NY operations), or less than $15M year-end total assets, exempted from specified sections.
§500.19 · Exemptions →Questions people ask about risk retention
What is Risk Retention?
Why is Risk Retention important for compliance?
Which compliance frameworks address Risk Retention?
Where can I learn more about Risk Retention?
See how Risk Retention applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.