To be sure, there remains the question of how certain components of an AMA, such as external data and scenario analysis, are expected to be used in arriving at an appropriate level of operational risk capital.
It may be necessary to provide banks with a more concrete sense of what supervisors are looking for in this regard, and regulators in the United States are currently working to do so.