Circular 06/2026 (BA): Minimum Requirements for Risk Management - MaRisk

The Federal Financial Supervisory Authority (BaFin) establishes minimum requirements for risk management, internal control systems, and organizational guidelines for institutions supervised by BaFin, including CRD third-country branches and branches of German institutions abroad. The document mandates the implementation of robust governance arrangements, effective risk identification and steering processes, and specific controls for credit, trading, and real estate businesses. It defines materiality thresholds, such as a 5% non-performing loan ratio for specific reporting obligations, and integrates requirements for ESG risks, outsourcing, and stress testing into the proportional framework for small and very small institutions.

Get Bundesbank alerts — same-day email on every new publication.

BA 54 – MaRisk dated 30.06.2026 Federal Financial Supervisory Authority (BaFin)

Table of Contents
AT 1 Objective of the Circular 7
AT 2 Scope of Application 9
AT 2.1 Target Group 9
AT 2.2 Risks 10
AT 2.3 Transactions 11
AT 3 Responsibility of Management and Supervisory Body 14 AT 3.1 Overall Responsibility of Management 14 AT 3.2 Responsibility of the Supervisory Body and its Committees 14 AT 4 General Requirements for Risk Management 15 AT 4.1 Risk Capacity 15 AT 4.2 Strategies 17 AT 4.3 Internal Control System 19 AT 4.3.1 Structural and Process Organization 19 AT 4.3.2 Risk Steering and Controlling Processes 20

Read the rest free, and get an email when Bundesbank publishes again

Email me when Bundesbank publishes something newOne email per publication, same day. Sign in below to keep reading.

Lineage: In force

amendssupersedesissued underrefers toproposed or not in RegAlertarrows run from the older text to the one that changes it

Source: Deutsche Bundesbank — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works