ICAAP Framework Development

Yes. All six GCC central banks, CBUAE, SAMA, CBB, QCB, CBK and CBO, require licensed banks to maintain an ICAAP framework, submitted at least annually with Board approval. The level of granularity expected scales with institutional size and complexity. Smaller banks and NBFCs face lighter requirements but still need a defensible framework.

The minimum set typically includes concentration risk, IRRBB (interest rate risk in the banking book), liquidity risk, and strategic / business risk. Most GCC banks also quantify reputation risk, model risk, and compliance / conduct risk. Materiality assessment determines the depth of quantification per risk type, material risks need full economic capital methodology; immaterial risks need documented monitoring with thresholds.

ICAAP and stress testing share scenario assumptions but answer different questions. Stress testing quantifies P&L and capital impact under specific shocks; ICAAP determines whether the bank holds enough capital to withstand those impacts under its specific risk profile. Riskweise builds the two with shared scenario libraries, so the stress test outputs flow directly into ICAAP capital adequacy projections, with no reconciliation gap.

Yes. We prepare the full SREP submission pack, narrative documentation, capital adequacy templates, supporting evidence, and brief the bank team for regulator dialogue. Where gaps exist between current state and supervisory expectations, we develop a remediation roadmap that the Board can approve as part of the ICAAP submission itself.

A first-time ICAAP build for a mid-sized bank takes 14-18 weeks from kickoff to a Board-approved submission pack. Banks updating an existing framework typically run 8-12 weeks. Complex multi-jurisdictional banks with subsidiary consolidation can run 20-26 weeks. The methodology and documentation are reusable across years, so subsequent annual cycles are materially shorter.

The ICAAP model itself is an Excel-based capital adequacy tool with full Pillar II risk quantification, scenario integration, multi-year projection logic, and Board reporting templates. Every formula is open and editable. Methodology, governance, and policy documents are delivered as Word artefacts. The full pack is ready for supervisory review on delivery, with no further packaging required. What you do not get is a 200-page report with Excel outputs nobody inside the bank understands: the calculation engine is the deliverable, and your team is trained to run it.