Enterprise Risk Management
Where our Regulatory Expertise is Applied
Capital & Liquidity Planning (ICAAP, ILAAP, CFP)
Capital & Liquidity Planning (ICAAP, ILAAP, CFP)
Business Continuity & Recovery Planning
Business Continuity & Recovery Planning
Enterprise Stress Testing & Early Warning Frameworks
Enterprise Stress Testing & Early Warning Frameworks
Risk Appetite Framework Design & Alignment
Risk Appetite Framework Design & Alignment
Capital & Liquidity Planning (ICAAP, ILAAP, CFP)
AFS is the region's most experienced architect of ICAAP and ILAAP frameworks, with a proven track record of successful submissions that have passed CBUAE, SAMA, and CBE reviews, including many cleared at first submission with no adverse findings. Our capital and liquidity planning programs are designed to satisfy regulatory examination requirements while addressing the practical governance needs of banks operating across diverse balance sheet structures.
AFS's ICAAP coverage spans all three Pillars: Pillar 1 minimum capital requirements, Pillar 2 internal capital assessment covering all material risk types including concentration risk, IRRBB, pension, strategic, and reputational risks, and Pillar 3 disclosure requirements.
Our ILAAP programs cover all nine supervisory areas, including liquidity risk appetite, stress scenario design, survival horizon analysis, LCR and NSFR framework validation, intraday liquidity management, funding plan alignment, Contingency Funding Plan (CFP) development, and board-level narrative documentation.
AFS has developed in-house capital and liquidity stress testing engines built in Python and calibrated to various macroeconomic conditions, producing ICAAP and ILAAP outputs aligned with central bank submission formats. Multiple AFS-developed ICAAP and ILAAP submissions have been reviewed by CBUAE and SAMA examiners, resulting in the clearance of previous regulatory observations and no new findings.
What AFS Delivers:
- Full-scope ICAAP covering Pillar 1, Pillar 2, Pillar 3, all material risk types, and risk correlations.
- ILAAP coverage across all nine supervisory workstreams.
- Proprietary stress testing engine built in Python with macroeconomic calibration capabilities.
- Contingency Funding Plan (CFP) design, testing, and board-level documentation.
- Regulatory observation remediation and re-submission management.
- Annual ICAAP / ILAAP refresh programs with built-in recalibration protocols.
Business Continuity & Recovery Planning
Regulators expect banks to maintain credible, operationally tested Business Continuity Plans and Recovery Plans—not documents that exist only for supervisory comfort. AFS has designed and implemented BCP and Recovery Planning frameworks for banks across the UAE, Saudi Arabia, Egypt, and Bahrain, aligned with FSB standards, CBUAE guidance, SAMA BCP requirements, and ISO 22301.
AFS's BCP engagements cover Business Impact Analysis (BIA), Recovery Time and Recovery Point Objective (RTO/RPO) definition, continuity strategy design, crisis communication planning, and tabletop exercise facilitation. Our Recovery Planning engagements design comprehensive recovery option libraries, trigger and escalation frameworks, recovery capacity assessments, and board-level playbook documentation, including desktop simulation exercises that stress-test executability under genuine crisis conditions.
AFS has supported banks in addressing central bank findings related to BCP inadequacy and Recovery Plan credibility gaps, rebuilding frameworks that subsequently passed regulatory reviews without further observations.
What AFS Delivers:
- Business Impact Analysis (BIA) and criticality tiering.
- RTO / RPO definition by critical business function.
- Recovery option library and capacity assessment aligned with FSB standards.
- Recovery trigger and escalation framework design.
- Crisis communication and board crisis governance protocols.
- Tabletop simulation and BCP testing program design.
- Regulatory observation remediation and re-submission support.
Enterprise Stress Testing & Early Warning Frameworks
Enterprise stress testing has become one of the most scrutinized areas of bank supervision across the GCC. AFS has designed and executed stress testing programs for banks subject to CBUAE, SAMA, and CBE supervisory reviews, building scenario libraries, macro-financial satellite models, and stress capital quantification methodologies that meet the severity and credibility standards expected by regional regulators.
AFS's stress testing frameworks cover macroeconomic stress scenarios including oil price, GDP, unemployment, real estate, and exchange rate shocks, along with sector-specific shocks, idiosyncratic bank-level scenarios, and reverse stress testing to identify the precise conditions under which capital or liquidity thresholds are breached. Our in-house Python-based stress engine produces outputs directly usable in ICAAP, ILAAP, and regulatory submission documents.
Beyond stress testing, AFS builds Early Warning Framework (EWF) infrastructure, KRI libraries, threshold calibration methodologies, escalation protocols, and board reporting dashboards that transform stress scenario outputs into actionable risk monitoring tools rather than periodic regulatory exercises.
What AFS Delivers:
- Macroeconomic stress scenario design aligned with NGFS, CBUAE, and SAMA expectations.
- Sector, idiosyncratic, and combined stress scenario libraries.
- Reverse stress testing methodology and breach scenario identification.
- Python-based stress engine with ICAAP / ILAAP output integration.
- Early Warning Framework design including KRI libraries, thresholds, and escalation mechanisms.
- Board and ALCO stress testing management information (MI) pack design.
Risk Appetite Framework RAF Design & Alignment
A Risk Appetite Framework that exists only in a policy document without live linkage to business limits, capital targets, and product-level guardrails provides no governance value. AFS has built and operationalized Risk Appetite Frameworks for banks across the GCC and MENA, translating board-level risk tolerance into quantitative thresholds that genuinely govern credit, market, liquidity, and operational risk decisions.
AFS designs RAF architecture across three tiers: institutional level covering capital buffer targets, maximum tolerable loss, and earnings volatility bands; portfolio level covering concentration limits, sector exposure caps, and PD migration triggers; and product level covering per-product ECL budgets, vintage performance triggers, and acceptance criteria. These tiers connect to live RAG reporting that surfaces threshold breaches at the appropriate governance level in real time.
AFS has helped multiple banks address central bank observations related to inadequate RAF documentation, working directly with Board Risk Committees to rebuild risk appetite statements on data-driven and stress-tested foundations.
What AFS Delivers:
- Three-tier RAF architecture covering institutional, portfolio, and product levels.
- Quantitative threshold calibration linked to stress testing outputs.
- RAF integration with ICAAP, ILAAP, and capital planning frameworks.
- RAG dashboard and Board Risk Committee reporting pack design.
- Risk appetite statement drafting and board adoption support.
- Annual RAF refresh and recalibration program.
- Central bank observation remediation related to RAF inadequacy.
Turning Enteprise Risk into Strategic Advantage
Our Enterprise Risk services help financial institutions strengthen resilience, improve regulatory readiness, enhance strategic decision-making, and proactively manage enterprise-wide risks in an increasingly complex and evolving financial environment.
- Stronger financial resilience and stability.
- Improved regulatory compliance and governance.
- Better strategic and risk-informed decision-making.
- Enhanced preparedness for economic and market disruptions.
- Greater visibility into enterprise-wide risks and vulnerabilities.
- Optimized capital and liquidity management.
- Improved operational resilience and business continuity.
- Early identification of emerging risks and portfolio deterioration.
- Stronger alignment between risk appetite and business strategy.
- Increased confidence from regulators, stakeholders, and executive management.
Ready to Optimize your Enterprise Risk?
Speak to our experts
Our Advisory Services
We provide comprehensive advisory services designed to help you optimize your strategies and regulatory alignment.
Emerging Mandates
Climate risk, ESG, AI governance, model risk, and tail risk frameworks, the frontier of bank risk management.
Credit Lending
Credit product design, scoring models, portfolio strategy, and decision infrastructure enabling banks to lend profitably and responsibly at scale.
Credit Risk
IFRS 9 model development and validation, ECL governance, portfolio monitoring, and credit rating frameworks built to withstand central bank examination across various jurisdictions.