Basel II/III UEMOA Maturity · Overall risk management
Your risk management framework, measured against the UEMOA prudential framework and turned into a costed action plan.
10 themes, a 5-level scale. And the action that moves each level to the next.
The framework’s 10 themes, already written from L1 to L5. One company, one business unit, or 300 at once.
Basel II/III UEMOA Maturity · Overall risk management
10 themes, 5-level scale.
Nordhavn Industries
53 / 100
They measure their maturity with Datamensio
An example
This could be your situation.
Take one company as an example: three sites, three spreadsheets, no shared answer.
Nobody can consolidate.
Nordhavn Industries, 2,400 people in Hamburg, Lyon and Porto. A client asks where the group stands. Each site answers in its own spreadsheet, with its own scales.
Three weeks, a single base.
One Prudential framework applicable to credit institutions and financial companies of the UEMOA (Basel II/III, effective from 1 January 2018) assessment launched across all three sites at once, from the managers’ interview notes. The framework was already written, its 10 themes and levels L1 to L5 too.
Two costs avoided before being committed.
A score of 53 out of 100, with the gap concentrated on three themes. The AI companion spotted that two actions duplicated those of another audit. The committee report took one sentence to request.
What it saved them
- 3sites measured on the same base, instead of three questionnaires to reconcile
- 2duplicate actions caught before the spend
- 1committee report, with no manual rework
These figures are an example. They could be yours.
The standard imposes processes. Datamensio says where you stand.
01
The framework is already written
Themes, questions and levels L1 to L5, all written. You do not start from an empty spreadsheet.
02
The score lands the same day
Online, by self-assessment link or in interview. Theme by theme, comparable over time.
03
The gap becomes a costed plan
Every step up carries its action. The AI prioritises on expected effect, not on the order of the standard.
04
Progress can be demonstrated
Campaign after campaign, against your target and against your own past. That is what your board asks for.
The maturity scale
One level, the next, and the action that links the two.
This mechanism (one level, the level above, and the action linking the two) is what turns a finding into a trajectory.
Is risk appetite broken down into operational limits monitored by the business lines?
- N1
No formalised risk appetite statement. Existing limits are inherited from past practice with no explicit link to a risk strategy.
- N2
A risk appetite statement has been approved by the board, but it is not broken down into limits by activity, portfolio or entity.
- N3
Risk appetite is broken down into operational limits shared with the business lines. Monitoring is carried out periodically and breaches are reported.
- N4
Limits are monitored with alert thresholds, breaches follow a traceable escalation procedure and are reviewed by the risk committee.
- N5
Appetite and limits are reviewed at each budget cycle and after each stress test, with a documented history of revisions and their rationale.
Action to move from L2 to L3
Translate the risk appetite statement into figures by risk family and business line, integrate them into the risk dashboard, and present them to the risk committee at its next quarterly meeting.
« With Datamensio, we meet our objectives far more efficiently. The ERDF inspection services and our supervising ministry particularly appreciated an approach that gives them reliable data. »
Director, CCI 94CCI Île-de-France
« We believe this is the most suitable solution to scale our transformation project and measure impact according to our needs. »
Maja SucekChief Operating Officer, Interreg Danube
Rarely on its own
Frameworks combine. Put several together to cover your business, or have the AI write yours.
Take your first measurementon UEMOA.
What this framework covers
The prudential framework applicable to credit institutions and financial companies of the UEMOA, effective from 1 January 2018, transposes the Basel II and Basel III accords to the context of the Union. It structures requirements around three pillars: minimum capital requirements covering credit risk, market risk and operational risk, a supervisory review process including the internal capital adequacy assessment, and market discipline through disclosure. It is accompanied by an overall risk management framework, capital buffers, and liquidity and leverage ratios.
In practice, the difficulty is not knowing the text but knowing where the institution actually stands. Questions arise quickly: does the risk map cover subsidiaries and recent activities, or only historical portfolios? Is risk appetite broken down into operational limits monitored by the business lines, or does it remain a board statement? Is the data feeding the capital requirement calculations produced by a controlled chain, or reconstructed at each reporting date? A framework that is complete on paper may remain poorly repeatable in practice.
One frequent confusion is worth clearing up: the UEMOA prudential framework is not an identical copy of the European CRR. Risk weightings, national discretions, the buffer phase-in timetable and the treatment of sovereign exposures reflect choices specific to the Union. Furthermore, overall risk management is not limited to calculating the solvency ratio: it covers risk governance, the role of the risk management function, its interaction with internal control, and reporting to the board of directors.
The maturity assessment answers a different question from an inspection mission. An inspection checks compliance with a requirement and concludes with an observation or an injunction. The assessment places each practice on a progressive scale and identifies the precise action that moves it up a level. On a framework this broad, this reading helps prioritise: should you first consolidate the quality of credit data, or first the formalisation of risk appetite?
In Datamensio, the framework is ready to use and can be adapted to your institution. The AI adjusts themes, questions and levels according to the CMMI method, or builds a custom version from your risk policies and procedures. Assessments carried out across several subsidiaries can be compared with each other and over time.
Reference standard: Prudential framework applicable to credit institutions and financial companies of the UEMOA (Basel II/III, effective from 1 January 2018)
The themes assessed
Risk governance and appetite
Role of the board of directors and the risk committee, risk appetite statement, breakdown into limits, independence and positioning of the risk management function.
General overall risk management framework
Formalised risk policies, mapping of significant risks, interaction with internal control and audit, periodic review of the framework.
Credit and counterparty risk
Origination and delegation, internal counterparty rating, exposure monitoring, loan classification and provisioning, collateral management, recovery.
Risk concentration and large exposures
Identification of connected counterparties, calculation and monitoring of regulatory limits, alert mechanism in case of breach, exposures to connected parties.
Market risk and interest rate risk
Scope of the trading book, measurement of foreign exchange and interest rate positions, banking book sensitivity, limits and second-line controls.
Liquidity and funding risk
Liquidity ratio, cash flow gaps, diversification of funding sources, liquid asset buffer, liquidity contingency plan.
Operational risk
Collection of incidents and losses, process mapping, capital requirement, business continuity, outsourcing, IT system risks.
Capital and capital adequacy
Composition of capital, solvency ratio and buffers, leverage ratio, internal capital adequacy assessment process, capital planning.
Stress testing and scenarios
Choice of scenarios, scope covered, frequency, use of results in management decisions and the capital plan.
Prudential reporting and disclosure
Data quality and traceability, production chain for regulatory returns, submission deadlines, information disclosed under pillar III.
A short version of the framework is available for the online self-assessment.
Frequently asked questions
Does this assessment issue a certificate of compliance with the prudential framework?
No. Datamensio measures the maturity of your practices and prepares the ground for inspection work. Verifying compliance with requirements falls to the UMOA Banking Commission and, for the accounts, to the statutory auditors.
What is the difference between this assessment and an inspection mission?
An inspection mission concludes with a finding of compliance or a gap against a requirement. The assessment places each practice on a progressive scale and identifies the action that moves it up a level. The two are complementary: the assessment prepares, the inspection validates.
How long does the evaluation take?
The short version can be completed in a single working session with the head of risk. The full version, run collaboratively with the business lines, finance and internal control, takes one to two weeks, with most of the time spent gathering supporting evidence.
Can the framework be adapted to our institution?
Yes. Questions, levels and themes can be changed, and you can add your own internal requirements or those of your parent entity. The AI can also build a custom version from your risk policies and procedures.
Does the framework cover banking groups on a consolidated basis?
The assessment can be run entity by entity, then consolidated. The benchmark compares subsidiaries with each other and each one with its own history, and a cross-entity roadmap groups together actions common to several entities.
Is modelling expertise needed to answer?
The questions concern management and governance practices, not calculation mechanics. Some require input from the finance department or the ALM team: the collaborative mode allows these questions to be assigned to the right person.
Where is the data hosted?
In France, with OVH, backed up with Scaleway. No transfer outside the European Union. The AI models used can be selected, including from European solutions.