error
Subscriptions are not available for this site while you are logged into your current account.
close
Skip to main content

      The ECB's streamlined approval framework promises faster implementation of material IRB model changes. But the real shift is strategic: supervisors are placing greater reliance on banks' own governance, validation and assurance functions. Institutions that strengthen those capabilities now will be best positioned to benefit.

      Ian Nelson

      Head of Regulatory, Head of Financial Services

      KPMG in Ireland


      A shift in supervisory accountability

      In 2025, the ECB conducted 74 internal model investigations, the majority relating to new model approvals and material model changes. From October 2026, the approval process for many model changes will begin to look very different.

      From 1 October 2026, the ECB will allow banks to implement material changes to credit risk internal models shortly after submitting a complete application package, provided the bank’s internal control function credibly confirms regulatory compliance and implementation readiness.

      Banks should not view the reform as deregulation. The ECB is changing how assurance is obtained, not reducing supervisory expectations. Governance, validation and implementation readiness are becoming increasingly important determinants of supervisory outcomes.

      Previous process

      1. Application 
      2. ECB assessment
      3. IMI approval 
      4. Implementation

      Streamlined process

      1. Application 
      2. Credible internal controls 
      3. Earlier implementation
      4. Ex-post IMI


      Faster approvals, unchanged accountability

      Eligible material IRB model changes may, in some circumstances, be implemented without waiting for a dedicated Internal Model Investigation. While approvals may be faster, supervisory safeguards remain.

      The ECB may still apply risk-weight floors, conduct targeted investigations or require the standard approval process for higher-risk cases. The result is a faster pathway for some model changes, not a lower supervisory standard.


      What supervisors will focus on next

      • Internal assurance

        Validation and audit functions must provide supervisory-grade assurance.

      • Governance & controls

        Strong governance is becoming a gateway to streamlined approvals.

      • Supervisory engagement

        Early engagement will help align expectations and avoid delays.

      • Post-implementation risk

        Faster implementation does not remove the risk of future challenge.


      Governance is becoming a supervisory differentiator

      The ECB's proposals signal a shift in accountability for demonstrating model compliance and implementation readiness. Rather than relying primarily on investigation before implementation, supervisors are increasingly expecting banks' own governance, validation and audit functions to provide credible evidence that model changes are compliant and operationally ready.

      For many institutions, this will require a shift from a compliance-driven sign-off process to a genuinely evidence-based assurance model. Independent Validation, Internal Audit and model governance functions will need to demonstrate effective challenge, clear accountability and robust oversight.

      The ECB has also indicated that supervisory resources will increasingly focus on higher-risk institutions, portfolios and models. Firms with unresolved findings, governance weaknesses, data quality concerns or anomalous model outcomes may therefore continue to attract heightened scrutiny.

      Understanding which weaknesses matter most to supervisors will become increasingly important as the framework evolves.

      • Model governance

        Robust governance across the model lifecycle

      • Independent validation

        Independent, evidence-based assurance

      • Internal audit

        Independent assessment of readiness and controls

      • Documentation

        Clear evidence supporting key decisions



      Five questions for Boards, CROs and Heads of Model Risk

      Banks should use the transition period to assess whether their governance and assurance frameworks are ready for increased supervisory reliance on internal control functions.

      Key questions include:

      • Independent Validation

        Can Independent Validation provide supervisory-grade challenge and assurance?

      • Internal Audit

        Is Internal Audit equipped to independently assess model changes and implementation readiness?

      • Governance

        Are governance decisions consistently evidenced and traceable?

      • Historic findings

        Have historic internal model findings been fully remediated?

      • Supervision

        Are we engaging supervisors early enough to align expectations and avoid unnecessary delays?


      Addressing these questions early can help banks identify capability gaps, strengthen governance arrangements and reduce the risk of delays or adverse findings during future supervisory reviews.

      Institutions that address these questions now are likely to be better positioned to benefit from streamlined approvals while reducing the risk of future supervisory challenge.


      Preparing for greater supervisory reliance

      • Remediate legacy weaknesses

        Prioritise governance, data and model performance issues.

      • Strengthen internal controls

        Ensure control functions can provide credible, well-evidenced assurance.

      • Engage JSTs early

        Align expectations early and reduce implementation uncertainty.

      • Prioritise strategically

        Focus on changes with clear business value and strong readiness.



      Conclusion

      The ECB's simplification of IRB model change approvals represents one of the most significant developments in internal model supervision in recent years. While the reforms are intended to make approvals faster and more predictable, they do not signal a reduction in supervisory expectations.

      Instead, they reflect a broader shift towards greater reliance on banks' governance, validation and assurance frameworks.

      The institutions most likely to benefit from the new regime will be those that strengthen governance, complete remediation programmes, enhance validation and audit capabilities, and maintain proactive engagement with supervisors.

      The competitive advantage will not come from implementing model changes faster. It will come from being able to demonstrate, with credible evidence, that those changes can be implemented safely, effectively and in line with supervisory expectations.


      How KPMG can help

      • Model governance

        Strengthen IRB model governance frameworks, including inventories, change classification, approval pathways and management oversight, helping banks demonstrate readiness for the ECB's streamlined approval framework.

      • Independent validation

        Enhance Independent Validation frameworks through evidence-based challenge, well-supported conclusions and effective remediation tracking, providing the substantive assurance expected under the ECB's new approach.

      • Internal audit support

        Support internal audit in assessing model governance, change controls and implementation readiness, helping banks evidence independent assurance and preparedness for supervisory scrutiny.

      • Regulatory engagement

        KPMG can help banks prepare supervisory-ready model change submissions, supporting JST engagement, ECB reviews and implementation planning while strengthening readiness for post-implementation assessment.


      Assess your readiness for the ECB's new supervisory model

      The institutions most likely to benefit from the ECB's streamlined approval framework will be those that can demonstrate strong governance, credible validation and effective internal assurance.

      Now is the time to assess whether your model change framework would withstand supervisory challenge.

      Ian Nelson

      Head of Regulatory, Head of Financial Services

      KPMG in Ireland

      Adrian Toner

      Managing Director

      KPMG in Ireland


      Discover more in Banking and Capital Markets

      Something went wrong

      Oops!! Something went wrong, please try again

      Banking

      What's next for the banking sector in the face of continued challenges?
      Euro coins