ICAAP maturity in WAEMU · Bank capital adequacy
Your ICAAP measured against the Banking Commission’s expectations, with the gap costed.
8 themes, a 5-level scale. And the action that moves each level to the next.
The framework’s 8 themes, already written from L1 to L5. One company, one business unit, or 300 at once.
ICAAP maturity in WAEMU · Bank capital adequacy
8 themes, 5-level scale.
Nordhavn Industries
53 / 100
They measure their maturity with Datamensio
An example
This could be your situation.
Take one company as an example: three sites, three spreadsheets, no shared answer.
Nobody can consolidate.
Nordhavn Industries, 2,400 people in Hamburg, Lyon and Porto. A client asks where the group stands. Each site answers in its own spreadsheet, with its own scales.
Three weeks, a single base.
One ICAAP Circular · WAMU Banking Commission assessment launched across all three sites at once, from the managers’ interview notes. The framework was already written, its 8 themes and levels L1 to L5 too.
Two costs avoided before being committed.
A score of 53 out of 100, with the gap concentrated on three themes. The AI companion spotted that two actions duplicated those of another audit. The committee report took one sentence to request.
What it saved them
- 3sites measured on the same base, instead of three questionnaires to reconcile
- 2duplicate actions caught before the spend
- 1committee report, with no manual rework
These figures are an example. They could be yours.
The standard imposes processes. Datamensio says where you stand.
01
The framework is already written
Themes, questions and levels L1 to L5, all written. You do not start from an empty spreadsheet.
02
The score lands the same day
Online, by self-assessment link or in interview. Theme by theme, comparable over time.
03
The gap becomes a costed plan
Every step up carries its action. The AI prioritises on expected effect, not on the order of the standard.
04
Progress can be demonstrated
Campaign after campaign, against your target and against your own past. That is what your board asks for.
The maturity scale
One level, the next, and the action that links the two.
It is this mechanism (a level, the next level, and the action linking the two) that turns an observation into a trajectory.
Do stress test results actually influence capital planning?
- N1
No formalised stress testing. Capital is managed against regulatory minima only.
- N2
Scenarios exist for the annual ICAAP report, but their results are neither discussed in committee nor linked to planning.
- N3
Stress tests follow a documented methodology and their results are presented to the governing body.
- N4
Results systematically feed the capital trajectory and trigger management actions identified in advance.
- N5
Scenarios are updated with the regional context and the supervisor's observations, with documented tracking of their effect on decisions.
Action to move from L2 to L3
Formalise the stress testing methodology (scenario choice, severity, frequency), put the presentation of results on the risk committee's agenda and keep the record in the ICAAP file.
« With Datamensio, we meet our objectives far more efficiently. The ERDF inspection services and our supervising ministry particularly appreciated an approach that gives them reliable data. »
Director, CCI 94CCI Île-de-France
« We believe this is the most suitable solution to scale our transformation project and measure impact according to our needs. »
Maja SucekChief Operating Officer, Interreg Danube
Rarely on its own
Frameworks combine. Put several together to cover your business, or have the AI write yours.
Take your first measurementon ICAAP.
What this framework covers
The ICAAP is the second pillar of WAEMU's Basel II/III prudential framework. Where pillar 1 sets uniform minima (solvency, regulatory capital), the ICAAP asks each institution to demonstrate, through an internal process, that its capital covers all of its significant risks, including those pillar 1 does not capture: concentration, interest rate risk in the banking book, liquidity, reputation. Responsibility lies with the governing body, not with the risk function alone.
That is precisely what makes it hard to steer. Many institutions treat the ICAAP as a documentary exercise: a report produced each year for the Banking Commission, then filed away. The texts require the opposite: a process integrated into management. Are stress scenarios updated, or rolled over from one year to the next? Do their results actually influence the capital trajectory and growth decisions? Does the map of significant risks cover the eight member states of the Union where the group operates, or only the head office?
The regional context adds its own requirements. Pan-African banking groups must articulate the ICAAP with consolidated supervision; smaller institutions must calibrate a framework proportionate to their profile rather than copying a large bank; and the Banking Commission's level of expectation has risen steadily since the Basel II/III framework entered into force, as the observations issued on the first ICAAP reports show.
A maturity diagnostic answers a different question from an inspection. The inspection checks the framework's compliance and concludes with observations. The diagnostic places your practices on a progressive mastery scale, and shows the precise actions that take you to the next level.
In Datamensio, the framework is ready to use. You can also adapt it to your context: the AI adjusts themes, questions and levels, or builds a tailored variant from your own documents.
Reference standard: ICAAP Circular · WAMU Banking Commission
The themes assessed
ICAAP governance
Responsibility of the governing body, validation of the framework, committee structure, documentation, articulation with risk governance.
Identification of significant risks
A map covering pillar 1 risks and those not captured: concentration, interest rate risk in the banking book, liquidity, reputation, cross-border risks.
Quantification and aggregation
Measurement methods per risk, assumptions used and their justification, aggregation of internal capital needs.
Capital planning
Multi-year horizon, trajectories under central and adverse scenarios, articulation with the budget and the strategic plan.
Stress tests and scenarios
Choice and severity of scenarios, updates, sensitivity analyses, management actions tied to the results.
Risk appetite and integration into management
Translation into operational limits, dashboards, effective use in credit and investment decisions.
ICAAP report and supervisor relationship
Content and quality of the report, deadlines, handling of the Banking Commission's observations.
Independent review and continuous improvement
Review by internal audit, methodology updates, comparison over time, maturity of the framework itself.
A short version of the framework is available for the online self-assessment.
Frequently asked questions
Is the ICAAP mandatory in WAEMU?
Yes. WAEMU's Basel II/III prudential framework and the Banking Commission's dedicated circular require credit institutions to run an internal capital adequacy assessment process, with a report submitted periodically to the supervisor. Requirements are proportionate to the institution's size and complexity.
What is the difference between the ICAAP and the solvency ratio?
The solvency ratio belongs to pillar 1: uniform minima computed under common rules. The ICAAP belongs to pillar 2: an internal assessment, specific to each institution, of all its significant risks and the capital needed to cover them. The two are complementary; the ICAAP explains and anticipates what the ratio records.
Are we concerned as a small institution?
Yes, with proportionate requirements. The point is not to reproduce a large bank's framework, but to demonstrate a sincere assessment of your risks and your capital. The diagnostic helps you calibrate a framework proportionate to your profile.
How does this diagnostic relate to the other BCEAO texts?
The ICAAP rests on the same foundation as credit institution governance, internal control and the prudential framework. The transverse roadmap lets you cross the action plans from several diagnostics without duplicating common actions.
How long does the assessment take?
The short version takes 20 to 30 minutes. The full version, in collaborative mode with the risk, finance and audit functions, usually spans one to two weeks, most of the time being spent collecting input from the different teams.
Do I need quantitative expertise to answer?
The questions cover management practices, not the models themselves. A risk manager or internal auditor can answer them. Quantification and stress testing topics can be assigned to the relevant correspondent through collaborative mode.
Where is the data hosted?
In France, with OVH, backed up with Scaleway. No transfer outside the European Union. The AI models involved can be selected, including from European providers.