Other risks

In addition to the above risks described in detail, the Group identifies and assesses the following risk types:

• Compliance risk;
• Strategic risk;
• Business cycle risk;
• Reputation risk;
• Outsourcing risk.

Compliance risk

Compliance risk is the risk that the effects of the Group’s non-compliance with the law, internal regulations and codes of conduct will occur. The Group also takes into account compliance risk generated both by the Bank and its subsidiaries, and manages the said risk arising from cooperation with Poczta Polska S.A.

The compliance risk management process is based on written policies and procedures that define the key principles to be followed by the Bank’s employees and explain the key processes that identify the said risk, enabling its management at all organizational levels of the Group.

Thescope of compliance risk management includes:

• The Group’s compliance with the law and requirements imposed on banks;
• Compliance with appropriate market standards, good practices and codes of conduct adopted by the banking sector;
• Preventing money laundering and the funding of terrorism;
• Preventing fraud detrimental to the Group.

The compliance risk management process includes risk identification, measurement, monitoring, mitigating and reporting.

Compliance risk identification is a continuous process which is carried out:

• When internal regulations are consulted by the compliance unit for their conformity with the law and requirements imposed on banks;
• Based on the outcome of compliance tests and internal regulations compliance self-assessment;
• Based on ongoing analyses, including operational risk events base, follow-up functional control and internal audit reports, record of court cases, information on customer complaints related to compliance risk, information from organizational unit heads regarding compliance risks, and fraud reports.

Identified compliance risk events are recorded by the compliance unit in the compliance risk events database.

Compliance risk measurement is performed on a quarterly basis by the compliance unit using a risk scoring model that takes into account the anticipated effects of compliance risk on the organization and its clients, including the probability of its occurrence, and other criteria, such as:

• The number of compliance risk events or actual losses arising from such risk;
• The number of negative press publications and accusations regarding compliance risk in the Bank.

As a result of measurement, risk is scored using a 3-level scale (low, medium or high).

As far as compliance risk arising from cooperation between the Bank and Poczta Polska S.A. is concerned, the compliance unit records compliance risk events and monitors measures aimed at explanation and mitigation of the said risk.

Strategic risk

Strategic risk is the risk to which the Group is directly, and its financial performance and equity indirectly, exposed due to unfavorable or incorrect strategic decisions, failure to implement or improper implementation of the strategy and developments in the business environment or incorrect response to such changes.

In June 2014 the Supervisory Board of the Bank approved “Development Strategy of Bank Pocztowy S.A. for 2014-2017" whose assumptions have underlain the new direction and speed of Bank's development. The key strategic assumption of the Bank is to build a modern and simple offer with multi-channel access, addressed mostly to regional domestic clients, at the same time improving Bank’s efficiency and profitability on a continuous basis.

Strategy implementation monitoring, taking into account the (direct or potential) effect of external factors, is aimed at examining the effectiveness of initiatives undertaken with a view to accomplishing the Bank’s objectives defined in the Strategy.

Business cycle risk

The business cycle risk is the risk of long-term negative effects of an unfavorable stage of the business cycle (e.g. economic slowdown or recession) on the financial performance or equity of the Group.

As the economic standing affects the condition of the banking sector, the Group monitors the macro-economic ratios presenting the situation of the Polish economy on a continuous basis and once a month, prepares detailed macro-economic reports that underlie the decision-making processes in the Group.

The business cycle risk occurs when the overall economic situation deteriorates. In the case of growing unemployment, taxes, inflation, or interest rates or when significant changes in foreign exchange rates occur, the financial standing of customers may deteriorate (including that of the elderly people as target clients), which may translate into a limited capacity to pay their liabilities at their due dates and a reduced demand for the products offered by the Bank (loans, deposits). A slowdown may also result in increased impairment losses on loans and advances or a slower rise in the value of the Group’s credit portfolio due to a drop in demand for loans and in the number of clients that meet the loan granting criteria. Unstable market conditions, economic slowdown and growing unemployment may also result in a material decrease in the value of the clients’ assets, among others real property on which loans are collateralized.

In 2014, due to instability of business and political environment affecting countrywide business activity level, the assessment of economic risk in the Group was maintained on the material level. Despite Polish economy having solid foundations, labor market seeing moderate improvement and the ongoing recovery of public finance, global events including Russian-Ukrainian conflict, a drop in crude oil prices or growing deflation may contribute to further easement of monetary policy that will adversely affect the banking sector.

Reputational risk

The reputational risk is related to damage to the Group’s reputation in the eyes of its existing and potential clients and stakeholders. This may result in unfavorable effects on the Group’s equity, i.e. the negative impact on its planned performance, among others through outflow of the existing clients or no inflow of new clients.

Reputational risk management is to protect the Group's image and minimize the probability of damaging that would adversely affect the Group’s capital.

Reputational risk management includes:

• Ongoing monitoring and analysis of events and media communications that may affect the Group’s image and if necessary, implementation of preventive measures;
• Regular reporting on the reputation risk level.

Outsourcing risk

Outsourcing risk is a risk third party’s negative impact on the continuity, integrity or quality of the Bank's operations, its assets or employees.

Outsourcing banking activities and the related banking business processes to third parties necessitates the Bank’s performance of numerous analyses, both before establishing a relationship and in the course of cooperation with the insourcer. Outsourcing risk materiality assessment depends on the scope of outsourced activities and the number of entities that perform them for and on behalf of the Bank. Outsourcing a broad range of activities to a small number of third parties creates concentration risk and potential problems with timely performance of the activities if the said entities discontinue their services. On the other hand, too large a number of insourcers gives rise to a risk that the Bank may lose control over the performance of the outsourced activities.

Outsourcing risk management in the Bank is based on written policies and procedures defining methods of identification, measurement and monitoring of outsourcing risk. The regulations determine also the scope of competencies assigned to each unit of the Bank in outsourcing banking activities and the related banking business processes.