Model Risk Directory emblemModel Risk Directory
BCBS Core Principles

Basel Core Principles and internal-model governance

The Basel Core Principles provide a global baseline for banking supervision, including board oversight, comprehensive risk management, independent control functions, and supervisory review. Model-specific requirements sit throughout the consolidated Basel Framework, especially where banks use internal ratings, market-risk models, stress tests, and other methods to calculate risk or regulatory capital. This page treats Basel as a collection of model-governance requirements, not as a nonexistent standalone document called the 'Basel model risk management principles.'

Published: Last updated: Last reviewed by: Model Risk Directory editorial team
Quick answer

The Basel Committee does not publish a single, general-purpose MRM standard equivalent to SR 26-2. Its Core Principles, consolidated Basel Framework, and model-specific capital rules establish supervisory expectations for governance, risk measurement, validation, controls, and independent review that national regulators apply to banks using internal models.

Jurisdiction
International
MRM relevance
Model-specific prudential guidance
Effective date
Current Basel Framework version varies by chapter
Issuing body
Basel Committee on Banking Supervision
Official reference
www.bis.org/basel_framework/chapter/BCP/40.htm

What it covers

  • Board and senior-management accountability for a bank's risk-management framework and risk appetite.
  • Independent risk-management, compliance, and internal-audit functions with sufficient authority and resources.
  • Supervisory assessment of the bank's methods for identifying, measuring, monitoring, and controlling material risks.
  • Model-specific standards for internal ratings and regulatory-capital approaches, including validation, data, use, and governance expectations.
  • Proportional implementation based on a bank's risk profile, systemic importance, business model, and complexity.

Adoption status

The Basel Core Principles are international supervisory standards rather than a directly enforceable rulebook for every bank. Member jurisdictions implement them through local law, regulation, and supervision. Procurement teams should identify the exact Basel chapter and local implementing rule relevant to the model under review instead of citing 'Basel' generically.

Reference only. This page explains what BCBS Core Principles covers; it is not a claim that Model Risk Directory or any listed vendor satisfies it. Verify alignment directly against the issuing body's own current text before relying on it.

Sources. source 1 · source 2 · source 3. Data as of 2026-07-29. See methodology.

Related content

GuideModel Risk ManagementModel risk management (MRM) is the discipline of identifying, measuring, and controlling the risk that a bank's quantitative models produce incorrect or misused results. An MRM advisory firm helps build or run that discipline: model inventory, tiering, governance, and independent validation, rooted in Federal Reserve SR 26-2 (formerly SR 11-7) and OCC guidance.GuideModel Risk Management FrameworkA model risk management framework is the documented set of policies, roles, and processes an institution uses to identify, tier, govern, and validate its models. Under SR 26-2, a sound framework covers model development and use, independent validation, and governance and controls, scaled to the institution's size and model risk profile rather than applied uniformly.GuideModel Risk ValidationModel risk validation is the independent testing of a specific model's conceptual soundness, ongoing performance, and outcomes, performed by staff or a third-party firm genuinely separate from that model's development. It is the 'effective challenge' function required under SR 26-2 and SR 11-7, distinct from broader model risk management program design.InsightThe global map of model risk management frameworksThere is no single global MRM rulebook. This map separates enterprise model risk guidance from model-specific and adjacent controls so banks, insurers, and procurement teams can identify the right source before scoping validation work.