Unit 12 Risk Management: An Overview: Objectives
Unit 12 Risk Management: An Overview: Objectives
Unit 12 Risk Management: An Overview: Objectives
Objectives
After studying this unit you should be able to:
l Understand the meaning, scope and objectives of the risk management function;
l Distinguish various categories of risk;
l Identify the steps in risk management;
l Appreciate need for integration of risks enterprise-wide.
Structure
12.1 Introduction
12.2 Risk Management
12.3 Categories of Risk
12.4 Steps in Risk Management
12.5 Integration of Risks leading to Enterprise-wise Risk Management System
12.6 Requirements for an Effective Risk Management System
12.7 Risks and Bank Capital
12.8 Summary
12.9 Self Assessment Questions
12.10 Further Readings
Annexure: Risk Management Systems in Banks
12.1 INTRODUCTION
The business of banking today is synonymous with active risk management than it
was ever before. The success and failure of a banking institution heavily depends on
the strength of the risk management system in the current environment. This is true
as the business of banking is risk taking in its traditional role of an intermediary, i.e.
interposing between savers (depositor) on one hand and the borrower on the other
hand, thereby accepting the risks of intermediation. With the rapid development of
public capital markets worldwide, there has been a steady reduction in the dependence
of borrowers on the banking system for funding their activities.This ‘disintermediation’
not only by the borrowers but also by the bank depositors directly investing their
funds in capital market instruments, has caused a significant change in the business of
banking. To arrest the fall in customer business and base owing to disintermediation,
banks entered into a host of fee based services such as cash management, funds
transfer etc., capital market activities such as merchant banking, public issue
management, private placement of issues and advisory services to diversity from fund-
based to fee-based activities. Another outcome of the disintermediation is the rapid
growth in the size of investment portfolio of banks over a period of time at the cost of
advances portfolio which can be attributed to various other reasons apart from
disintermediation, thereby changing the complexion of banking risks. Over the period
of time, the income from the businesses of lending, investments and fee based services
have come down due to competition both from within and outside the industry. To
counter this, the latest in the array of new products is the provision of specialized
5
Risk Management services by structuring products to meet the unique requirements of corporate
customers and also to high networth individual clients for improving fee income. The
scope of the business of structuring products has widened to a significant level with
the introduction of derivative products in the markets. The net result of all the above
developments is a metamorphic change in the risk and return profile compared to the
past. This will continue in future with more and more of derivatives entering into the
various segments of the market. While the complexities have increased tremendously,
tools to manage the complexities have to be in place to manage the complexities.
Activity 1
Compare income from fund based services and fee based services of a few banks from
the data available in their annual reports. It is useful to compare the figures of public
sector banks with that of private banks and foreign banks operating in India.
...................................................................................................................................................
...................................................................................................................................................
...................................................................................................................................................
...................................................................................................................................................
Objectives
The very basic objective of risk management system is to put in place and operate a
systematic process to give a reasonable degree of assurance to the top management
that the ultimate corporate goals that are vigorously pursued by it would be achieved
in the most efficient manner. In this way, all the risks that come in the way of the
institution achieving the goals it has set for itself would be managed properly by the
risk management system. In the absence of such a system, no institution can exist in
the long-run without fulfilling the objectives for which it was set up.
The matrix above has been prepared for main products. The matrix can be detailed to
go down to individual product level risks for better identification of risks present.
2) Risk Measurement: This step is the most crucial of all. Having identified the
risks, tools for measurement of each one of the risks need to be put in place to
measure each one of the risks in a numerical form. The most challenging task is
the selection of an appropriate tool or methodology for quantification of risks.
The measures of quantification range from simple to highly complex. What is
important is to use an appropriate quantification method or tool suitable for the bank
3) Risk Control and Monitoring: Risk control and monitoring deal with setting up
of limits to each one of the risks and monitoring them to ensure that the actual
exposure to each one of the risks defined is within the limits prescribed in the risk
management policy. Any violation of limits needs to be thoroughly investigated
to ascertain the reasons for violation and to avoid such violations in future.
The traditional control based risk management ends with step 3 above. The modern
risk management which strives to align risk management with overall corporate
objectives and strategies to achieve the objectives takes two more additional steps in
the form of capital allocation and risk adjusted performance measurement as
explained in the following section.
Activity 2
A few corporates have implemented SWM measures. Learn how they are computed
and used for various purposes
...................................................................................................................................................
...................................................................................................................................................
...................................................................................................................................................
...................................................................................................................................................
Business
ica e
Technology
tio
Strategies
n
Accurate Risk
Data Tolerance
Best Independent
First Class Best Practice
Practice
Operations Infrastructure Active Risk Policies
Management
l Limits Management Authorities
l Risk Analysis
l Capital Attribution
l Pricing Risk
l Portfolio
People Management
l Risk Education
(Skills) l etc.
Disclosure
Best Practice
Methodologies
RARO (Formulas)
Market and
Credit Risk
Pricing and
Operational
Valuation
Risk
Source: Mark, Risk Oversight for the Senior Manager: Controlling Risk in Dealers, in
Schwartz and Clifford (Eds.) Derivatives Handbook (1997), Chapter 11.
11
Risk Management
12.7 RISKS AND BANK CAPITAL
The extent of risk taken by a bank and its capital requirements for such risk taking is
all about capital adequacy standards. Prior to the implementation of the Basle’s first
capital accord in the beginning of nineties, there was no relationship between capital
and risk taking. Banking business, being one of the highly levered businesses, is
significantly prone to shocks. Moreover, banking business is the business of public
confidence. If public confidence is eroded, it would be difficult for a bank to be in
business. Hence, it was thought that a limit on risk taking linked to capital was
suggested by the Basle committee. Basle committee recommended a minimum
capital to risk-weighted assets ratio, thereby limiting the risk exposure to availability
of capital. Initially the capital accord recognized only credit risk. Subsequently, the
market risk was also brought under the capital accord. Recently in the Basle capital
accord – II, sweeping changes have been suggested for the computation of capital
adequacy as Basle capital accord – 1 miserably failed to achieve its objective of
strengthening the financial position of the banks and financial institutions.
Apart from credit and market risks, the operational risk would also require minimum
capital to be maintained under Basle Capital Accord – II. The objectives of the new
accord are to:
l Promote safety and soundness of the financial system by prescribing a minimum
level of capital to be maintained by the banks to support their risk taking
activities.
l Constitute a more comprehensive approach to risks by eliminating the criticisms
of the first accord and to cover more types of risks such as interest rate risk in
banking book and operational risk.
l Enhance competitive equality to ensure that two banks with same portfolios
should hold the same capital wherever they are located.
l Higher focus on internationally active banks, otherwise known as Large
Complex Banking Organisations (LCBOs).
To achieve the objectives above, Basle committee proposed a three-pillared framework
as under:
Pillar 1: Minimum Capital Requirements: Under this, as in the current accord, a
minimum capital has been prescribed to be maintained. To arrive at the capital for
various types of risks, a number of approaches, widely classified as standardized
approach and internal approach have been prescribed. The critical issues in the
internal approach in which the banks are free to develop out their own approach to
measuring risks, are validating the internal approach and ensuring consistency
across banks.
Pillar 2: Supervisory Review Process: The responsibility on the bank supervisors to
ensure that banks follow rigorous processes, measure their risk exposures correctly
and maintain capital in accordance with risk exposure. The recent initiatives of the
RBI on the introduction of Risk Based Supervision and Risk Based Internal Audit are
in conformity with this pillar.
Pillar 3: Market Discipline: This aims to strengthen the safety and soundness
of the banking system through better disclosure risk exposures and capital
maintained. This is expected to help the market participants to better assess the
position of banks.
12
Activity 3 Risk Management:
An Overview
a) Compare the capital adequacy ratio of different categories of banks over a period
of time. Is there any relationship between them and accounting performance in
the form of return on assets, return on equity etc.
..........................................................................................................................
..........................................................................................................................
..........................................................................................................................
..........................................................................................................................
..........................................................................................................................
..........................................................................................................................
b) Identify the risk management initiatives of a number of banks from the reports in
annual report.
..........................................................................................................................
..........................................................................................................................
..........................................................................................................................
..........................................................................................................................
..........................................................................................................................
..........................................................................................................................
12.8 SUMMARY
Risk management is a crucial function in today’s environment of heightened volatility.
It reduces the cost of distress and aims at strengthening the decision making process
for an optimum risk-return trade-off. Risk management does not prevent taking risks.
Taking risks consciously is the only way to improve the expected returns to the
shareholders. As a number of risks are highly interrelated to each other, a
compartmentalized approach to risk management would be a disaster. What is
required is an enterprise-wide risk management system leading to capital allocation to
the businesses within the bank and risk adjusted performance measurement both at
bank level and at lower levels.
14
Annexure 12.1: Risk Management Systems in Banks Risk Management:
An Overview
1. INTRODUCTION
Banks in the process of financial intermediation are confronted with various kinds of
financial and non-financial risks viz., credit, interest rate, foreign exchange rate,
liquidity, equity price, commodity price, legal, regulatory, reputation, operational, etc.
These risks are highly interdependent and events that affect one area of risk can have
ramifications for a range of other risk categories. Thus, top management of banks
should attach considerable importance to improve the ability to identify, measure,
monitor and control the overall level of risks undertaken.
The broad parameters of risk management function should encompass:
i) organisational structure;
ii) comprehensive risk measurement approach;
iii) risk management policies approved by the Board which should be consistent with
the broader business strategies, capital strength, management expertise and
overall willingness to assume risk;
iv) guidelines and other parameters used to govern risk taking including detailed
structure of prudential limits;
v) strong MIS for reporting, monitoring and controlling risks;
vi) well laid out procedures, effective control and comprehensive risk reporting
framework;
vii) separate risk management framework independent of operational Departments
and with clear delineation of levels of responsibility for management of risk; and
viii) periodical review and evaluation.
Source: www.rbi.org.in 15
Risk Management should design stress scenarios to measure the impact of unusual market conditions and
monitor variance between the actual volatility of portfolio value and that predicted by
the risk measures. The Committee should also monitor compliance of various risk
parameters by operating Departments.
2.2 A prerequisite for establishment of an effective risk management system is the
existence of a robust MIS, consistent in quality. The existing MIS, however, requires
substantial upgradation and strengthening of the data collection machinery to ensure
the integrity and reliability of data.
2.3 The risk management is a complex function and it requires specialised skills and
expertise. Banks have been moving towards the use of sophisticated models for
measuring and managing risks. Large banks and those operating in international
markets should develop internal risk management models to be able to compete
effectively with their competitors. As the domestic market integrates with the
international markets, the banks should have necessary expertise and skill in managing
various types of risks in a scientific manner. At a more sophisticated level, the core
staff at Head Offices should be trained in risk modelling and analytical tools.
It should, therefore, be the endeavour of all banks to upgrade the skills of staff.
2.4 Given the diversity of balance sheet profile, it is difficult to adopt a uniform
framework for management of risks in India. The design of risk management
functions should be bank specific, dictated by the size, complexity of functions, the
level of technical expertise and the quality of MIS. The proposed guidelines only
provide broad parameters and each bank may evolve their own systems compatible to
their risk management architecture and expertise.
2.5 Internationally, a committee approach to risk management is being adopted.
While the Asset - Liability Management Committee (ALCO) deal with different types
of market risk, the Credit Policy Committee (CPC) oversees the credit /counterparty
risk and country risk. Thus, market and credit risks are managed in a parallel
two-track approach in banks. Banks could also set-up a single Committee for
integrated management of credit and market risks. Generally, the policies and
procedures for market risk are articulated in the ALM policies and credit risk is
addressed in Loan Policies and Procedures.
2.6 Currently, while market variables are held constant for quantifying credit risk,
credit variables are held constant in estimating market risk. The economic crises in
some of the countries have revealed a strong correlation between unhedged market risk
and credit risk. Forex exposures, assumed by corporates who have no natural hedges,
will increase the credit risk which banks run vis-à-vis their counterparties. The
volatility in the prices of collateral also significantly affects the quality of the loan
book. Thus, there is a need for integration of the activities of both the ALCO and the
CPC and consultation process should be established to evaluate the impact of market
and credit risks on the financial strength of banks. Banks may also consider
integrating market risk elements into their credit risk assessment process.
3. CREDIT RISK
3.1 General
3.1.1 Lending involves a number of risks. In addition to the risks related to
creditworthiness of the counterparty, the banks are also exposed to interest rate,
forex and country risks.
3.1.2 Credit risk or default risk involves inability or unwillingness of a customer or
counterparty to meet commitments in relation to lending, trading, hedging, settlement
and other financial transactions. The Credit Risk is generally made up of transaction
16
risk or default risk and portfolio risk. The portfolio risk in turn comprises intrinsic and Risk Management:
concentration risk. The credit risk of a bank’s portfolio depends on both external and An Overview
internal factors. The external factors are the state of the economy, wide swings in
commodity/equity prices, foreign exchange rates and interest rates, trade restrictions,
economic sanctions, Government policies, etc. The internal factors are deficiencies in
loan policies/administration, absence of prudential credit concentration limits,
inadequately defined lending limits for Loan Officers/Credit Committees, deficiencies
in appraisal of borrowers’ financial position, excessive dependence on collaterals and
inadequate risk pricing, absence of loan review mechanism and post sanction
surveillance, etc.
3.1.3 Another variant of credit risk is counterparty risk. The counterparty risk arises
from non-performance of the trading partners. The non-performance may arise from
counterparty’s refusal/inability to perform due to adverse price movements or from
external constraints that were not anticipated by the principal. The counterparty risk
is generally viewed as a transient financial risk associated with trading rather than
standard credit risk.
3.1.4 The management of credit risk should receive the top management’s attention
and the process should encompass:
a) Measurement of risk through credit rating/scoring;
b) Quantifying the risk through estimating expected loan losses i.e. the amount of
loan losses that bank would experience over a chosen time horizon (through
tracking portfolio behaviour over 5 or more years) and unexpected loan losses
i.e. the amount by which actual losses exceed the expected loss (through standard
deviation of losses or the difference between expected loan losses and some
selected target credit loss quantile);
c) Risk pricing on a scientific basis; and
d) Controlling the risk through effective Loan Review Mechanism and portfolio
management.
3.1.5 The credit risk management process should be articulated in the bank’s Loan
Policy, duly approved by the Board. Each bank should constitute a high level Credit
Policy Committee, also called Credit Risk Management Committee or Credit Control
Committee etc. to deal with issues relating to credit policy and procedures and to
analyse, manage and control credit risk on a bank wide basis. The Committee should
be headed by the Chairman/CEO/ED, and should comprise heads of Credit
Department, Treasury, Credit Risk Management Department (CRMD) and the Chief
Economist. The Committee should, inter alia, formulate clear policies on standards
for presentation of credit proposals, financial covenants, rating standards and
benchmarks, delegation of credit approving powers, prudential limits on large credit
exposures, asset concentrations, standards for loan collateral, portfolio management,
loan review mechanism, risk concentrations, risk monitoring and evaluation, pricing of
loans, provisioning, regulatory/legal compliance, etc. Concurrently, each bank should
also set up Credit Risk Management Department (CRMD), independent of the Credit
Administration Department. The CRMD should enforce and monitor compliance of
the risk parameters and prudential limits set by the CPC. The CRMD should also lay
down risk assessment systems, monitor quality of loan portfolio, identify problems
and correct deficiencies, develop MIS and undertake loan review/audit. Large banks
may consider separate set up for loan review/audit. The CRMD should also be made
accountable for protecting the quality of the entire loan portfolio. The Department
should undertake portfolio evaluations and conduct comprehensive studies on the
environment to test the resilience of the loan portfolio.
17
Risk Management 3.2 Instruments of Credit Risk Management
Credit Risk Management encompasses a host of management techniques, which help
the banks in mitigating the adverse impacts of credit risk.
l Depth of Reviews
The loan reviews should focus on:
l Approval process;
l Accuracy and timeliness of credit ratings assigned by loan officers;
l Adherence to internal policies and procedures, and applicable laws/regulations;
l Compliance with loan covenants;
22
l Post-sanction follow-up; Risk Management:
An Overview
l Sufficiency of loan documentation;
l Portfolio quality; and
l Recommendations for improving portfolio quality.
3.2.8 The findings of Reviews should be discussed with line Managers and the
corrective actions should be elicited for all deficiencies. Deficiencies that remain
unresolved should be reported to top management.
3.2.9 The Risk Management Group of the Basle Committee on Banking Supervision
has released a consultative paper on Principles for the Management of Credit Risk.
The Paper deals with various aspects relating to credit risk management. The Paper is
enclosed for information of banks.
7. MARKET RISK
7.1 Traditionally, credit risk management was the primary challenge for banks. With
progressive deregulation, market risk arising from adverse changes in market
variables, such as interest rate, foreign exchange rate, equity price and commodity
price has become relatively more important. Even a small change in market variables
causes substantial changes in income and economic value of banks. Market risk takes
the form of:
1) Liquidity Risk,
2) Interest Rate Risk,
3) Foreign Exchange Rate (Forex) Risk,
4) Commodity Price Risk, and
5) Equity Price Risk.
9.9 Simulation
9.9.1 Many of the international banks are now using balance sheet simulation models
to gauge the effect of market interest rate variations on reported earnings/economic
values over different time zones. Simulation technique attempts to overcome the
limitations of Gap and Duration approaches by computer modelling the bank’s interest
rate sensitivity. Such modelling involves making assumptions about future path of
interest rates, shape of yield curve, changes in business activity, pricing and hedging
strategies, etc. The simulation involves detailed assessment of the potential effects of
changes in interest rate on earnings and economic value. The simulation techniques
involve detailed analysis of various components of on-and off-balance sheet positions.
Simulations can also incorporate more varied and refined changes in the interest rate
environment, ranging from changes in the slope and shape of the yield curve and
interest rate scenario derived from Monte Carlo simulations.
9.9.2 The output of simulation can take a variety of forms, depending on users’ need.
Simulation can provide current and expected periodic gaps, duration gaps, balance
sheet and income statements, performance measures, budget and financial reports.
The simulation model provides an effective tool for understanding the risk exposure
under variety of interest rate/balance sheet scenarios. This technique also plays an
integral-planning role in evaluating the effect of alternative business strategies on risk
exposures.
9.9.3 The simulation can be carried out under static and dynamic environment. While
the current on and off-balance sheet positions are evaluated under static environment,
the dynamic simulation builds in more detailed assumptions about the future course of
interest rates and the unexpected changes in bank’s business activity.
9.9.4 The usefulness of the simulation technique depends on the structure of the
model, validity of assumption, technology support and technical expertise of banks.
9.9.5 The application of various techniques depends to a large extent on the quality of
data and the degree of automated system of operations. Thus, banks may start with
the gap or duration gap or simulation techniques on the basis of availability of data,
information technology and technical expertise. In any case, as suggested by RBI in
the guidelines on ALM System, banks should start estimating the interest rate risk
exposure with the help of Maturity Gap approach. Once banks are comfortable with
the Gap model, they can progressively graduate into the sophisticated approaches.
Under the FTP mechanism, the profit centres (other than funds management) are
precluded from assuming any funding mismatches and thereby exposing them to
market risk. The credit or counterparty and price risks are, however, managed by
these profit centres. The entire market risks, i.e interest rate, liquidity and forex are
assumed by the funds management profit centre.
9.10.3 The FTP allows lending and deposit raising profit centres determine their
expenses and price their products competitively. Lending profit centre which knows
the carrying cost of the loans needs to focus on to price only the spread necessary to
compensate the perceived credit risk and operating expenses. Thus, FTP system could
effectively be used as a way to centralise the bank’s overall market risk at one place
and would support an effective ALM modelling system. FTP also could be used to 33
Risk Management enhance corporate communication; greater line management control and solid base for
rewarding line management.
12.3 MEASUREMENT
There is no uniformity of approach in measurement of operational risk in the banking
system. Besides, the existing methods are relatively simple and experimental, although
some of the international banks have made considerable progress in developing more
advanced techniques for allocating capital with regard to operational risk.
Measuring operational risk requires both estimating the probability of an operational
loss event and the potential size of the loss. It relies on risk factor that provides some
indication of the likelihood of an operational loss event occurring. The process of
operational risk assessment needs to address the likelihood (or frequency) of a
particular operational risk occurring, the magnitude (or severity) of the effect of the
operational risk on business objectives and the options available to manage and
initiate actions to reduce/ mitigate operational risk. The set of risk factors that
measure risk in each business unit such as audit ratings, operational data such as
volume, turnover and complexity and data on quality of operations such as error rate
or measure of business risks such as revenue volatility, could be related to historical
loss experience. Banks can also use different analytical or judgmental techniques to
arrive at an overall operational risk level. Some of the international banks have
already developed operational risk rating matrix, similar to bond credit rating. The
operational risk assessment should be bank-wide basis and it should be reviewed at
regular intervals. Banks, over a period, should develop internal systems to evaluate
the risk profile and assign economic capital within the RAROC framework.
Indian banks have so far not evolved any scientific methods for quantifying
operational risk. In the absence any sophisticated models, banks could evolve simple
benchmark based on an aggregate measure of business activity such as gross revenue,
fee income, operating costs, managed assets or total assets adjusted for off-balance
sheet exposures or a combination of these variables.
35
Risk Management 12.4 Risk Monitoring
The operational risk monitoring system focuses, inter alia, on operational
performance measures such as volume, turnover, settlement facts, delays and errors.
It could also be incumbent to monitor operational loss directly with an analysis of
each occurrence and description of the nature and causes of the loss.
37