Sparkasse Borken-Schwalmstadt: Bafin ordnet zusätzliche Eigenmittel an

The bank violated §25a KWG, which mandates proper business organisation and risk management. This action underscores that supervisory capital add-ons can be triggered by governance and operational failures, not just credit or market risk. For compliance teams, the key takeaway is that operational resilience and outsourcing oversight are now direct drivers of capital adequacy.

Institutions should conduct a gap analysis against §25a KWG requirements, particularly in IT security, business continuity, and third-party risk management. Documenting robust remediation plans and engaging proactively with supervisors is critical. Boards should ensure that risk management frameworks are adequate and that any deficiencies are addressed before they attract supervisory measures.

While this order targets one savings bank, the underlying supervisory expectations apply across the banking sector. Firms should review their own governance arrangements and assess whether current own funds sufficiently cover operational and governance risks. This is also a reminder that Bafin will use additional own funds as a tool to enforce compliance.

RegCanary recommends a proactive review of business organisation and outsourcing arrangements to avoid similar escalation.