IT Engineering & Operations for Businesses

Impairment tests (PAAR) were a key focus of BaFin’s audits in 2025 and will continue to shape audit practice in 2026. In this article, we provide a concise overview of the regulatory context, the procedure model for a PAAR audit, and our experiences and observations from supporting institutions before and during the audit.

The Open Risk and Reporting Platform (msg.ORRP) offers integrated data management that ensures a consistent and transparent database for risk management and regulatory reporting. This article explains the key aspects of data management and shows how these functions ensure data quality and effectively support users in their daily work.

SAP systems are the digital heart of numerous banks – and therefore an attractive target for cyberattacks. These applications are complex and made up of many components that require regular maintenance and updates. To address this, SAP regularly releases security patches to remediate newly discovered vulnerabilities. Unpatched systems are low-hanging fruit for attackers. If patches are not applied promptly, security gaps remain exploitable. SAP security is therefore not merely an IT matter, but a strategic leadership responsibility.

Transparent and comprehensible data form the basis for sound analysis and evaluation in banks. This article highlights the challenges facing data storage and shows how the msg.ORRP data platform can be used to overcome the growing complexity of risk management, regulatory reporting, and controlling.