{
  "url": "https://openlegislation.uk/eu-regulation-2018-959/article-17",
  "json_url": "https://openlegislation.uk/eu-regulation-2018-959/article-17.json",
  "legislation": "eur/2018/959",
  "legislation_title": "Commission Delegated Regulation (EU) 2018/959 of 14 March 2018 supplementing Regulation (EU) No 575/2013 of the European Parliament and of the Council with regard to regulatory technical standards of the specification of the assessment methodology under which competent authorities permit institutions to use Advanced Measurement Approaches for operational risk (Text with EEA relevance)",
  "legislation_url": "https://openlegislation.uk/eu-regulation-2018-959",
  "path": "article/17",
  "kind": "article",
  "number": "17",
  "heading": "Audit and internal validation governance",
  "text": "Competent authorities shall assess that an institution's audit and internal validation governance is of a high quality by confirming at least the following:\n(a) that audit programs for reviewing the AMA framework cover all significant activities that could expose the institution to material operational risk, including outsourced activities;\n(b) that the internal validation techniques are proportionate to changing market and operating conditions, and that their outcomes are subject to audit review.",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eur/2018/959/article/17",
    "retrieved_at": "2026-11-01T14:44:03.296202+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}