Chapter 15
BANK REGULATORY CAPITAL, BASEL RULES AND ICAAP

A bank's strategy is closely linked to its capital position. That said, a bank's capital position also drives its strategy. Like all commercial enterprises, the return shareholders receive for their investment in a bank or financial holding company is of critical importance when considering the value generated. Furthermore, the regulators and society in general require banks to be well capitalised to reduce friction to the financial system. Well‐regulated and strongly capitalised banks are fundamental to a robust financial system.

Bank capital is a concept that is central to the understanding, and management, of a bank's business strategy and the risk exposure associated with that strategy. In the business media, it is often suggested that capital is the most important aspect of bank risk management, but although such a view is not wholly correct (liquidity and funding are as important certainly, if not more so), it is indeed the case that effective capital management is essential if a bank is to continue to deliver shareholder returns through the economic cycle. Put simply, understanding capital is key to understanding what banks do, the risks they take, and how best these risks should be managed.

Often capital is spoken of as being “held” or “put aside” by a bank in order to support lending operations, as if it was some kind of asset. This is an unfortunate turn of phrase. Far from being an asset, capital is a liability, alongside all the other forms of liability the bank has, and as such a form of funding for the bank. However, unlike the other forms of liability it has no fixed interest cost, indeed given that core capital is not obliged to pay out any form of coupon at any time it has no explicit interest cost. Moreover, because it has no repayment date it is able to absorb losses. Such losses could otherwise threaten a bank's solvency, so it is easy to see why a sufficient capital base to cover all eventualities is essential for every bank. Alternative sources of “non‐core Tier 1” capital with contractual costs and different levels of loss absorption are also available to banks. In this chapter, the core issues of capital management from both a bank governance viewpoint as well as the regulatory requirement viewpoint are discussed. Then the issues surrounding the delivery and presentation of the internal capital adequacy assessment process, or ICAAP, and stress testing issues associated with the ICAAP are presented.

THE BANKING MODEL AND CAPITAL

This chapter describes the best‐practice framework within which capital should be planned and managed within a bank, including the internal processes undertaken to ensure regulatory compliance (perhaps best exemplified by the “ICAAP” process, which is covered later in the chapter). Before that, however, the concepts of capital and its purpose are introduced. The best‐practice recommended approach to use of capital is also presented.

The business model and capital

The importance of capital to a bank and an appropriate appreciation of its importance requires a genuine understanding of what banks actually do. In essence they:

  1. Provide transaction services for customers, primarily payments, which enable them to settle commercial transactions;
  2. Provide funding, in the form of credit, to customers to enable them to enter into commercial transactions; and
  3. Provide risk management services to customers, ranging from the simple current account (“checking account”) to more complex services that enable customers to manage and hedge their foreign exchange and interest‐rate risk exposures.

Services 2 and 3 require a bank to undertake two fundamentally contradictory things: lend money for as long a period as the customer requires, and accept deposits on an “instant access” basis from customers. This is the process of “maturity transformation”, the very definition of the banking business model, and it is the risk exposures generated by operating this model that make capital and liquidity so important for a bank. Liquidity was covered in Chapters 10 and 11.

A stylised bank balance sheet is shown in Figure 15.1.

Schematic illustration of the stylised representation of a typical commercial bank balance sheet.

Figure 15.1 Stylised representation of a typical commercial bank balance sheet

Bank balance sheet

The balance sheet is a snapshot in time of the bank's financial strength. Note that the capital amount must, at all times, be more than sufficient to absorb customer loan losses (or losses incurred for other reasons, such as the result of proprietary trading losses or ineffective hedging resulting in unexpected losses). However, the reality of government regulation, which every bank in the world is subject to, means that banks don't need sufficient capital to absorb only losses. They also need sufficient capital to absorb losses and still, after such absorption, be able to demonstrate capital levels that are above the regulatory minimum. Banking is all about confidence. If customers have confidence in the bank, they will continue to place their funds on deposit there. If they do not, they will not. A bank that dips below its regulatory minimum capital ratios, even if it has still absorbed all its losses to date, will not be able to maintain that confidence.

In other words, good capital management, and indeed considered by some practitioners as best‐practice capital management, is all about managing capital on a going concern basis. The Board of a bank takes responsibility to articulate its risk appetite such that this requirement is met. It is generally considered bad practice to manage capital on a gone concern basis. The available capital, the actual amount that can be used to absorb losses, is the surplus above the minimum required by the regulator. Capital that meets the regulator's requirement is not, in truth, available to absorb losses on a going concern basis. It is essential that bank Boards and executive directors manage the institution on this basis.

Invariably banks may fail. In such circumstances the capital sources must be adequate to recover the bank or, if this is not possible, resolve the bank without undue stress to the financial system. This, however, is more feasible in theory than in practice. If a bank fails, one can assume, to a reasonable and safe extent, that its capital base will be insufficient to recover it, and for large banks to resolve it either.

Treatment of bank capital

The core Tier 1 capital base of a bank comprises its initial capital, or start‐up capital, and retained earnings that have been placed in the reserves. Generally, the simplest and most transparent model is to consider that the complete capital base is used as part of a leveraged business model in which it represents equity backing for borrowed funds, which are invested in assets. The return on the assets covers for the cost of borrowing, and the surplus over this and all other costs is the shareholder value‐added for the equity owner.

In its simplest form, the bank's capital should not be exposed to risk. Ideally, it must be placed in an instantly liquid risk‐free asset, with zero counterparty risk, so that it itself is not in danger of erosion and can be retrieved easily if needed, either to cover losses or to fund further expansion and investment. The only assets that fit this category are a deposit at the central bank or an investment in the sovereign bonds of the same currency. All other investments carry an element of counterparty and/or liquidity risk and may be considered unsuitable assets in which to invest the bank's capital.

The logic is straightforward: given that capital available must be sufficient to cover unexpected losses, as well as expected losses, if the capital itself was placed at risk, then there would be no guarantee that it would be able to absorb all losses at any one time. A loss elsewhere in the portfolio may occur at the same time as losses from assets that were funded with capital. This is what is meant when managing capital on a going concern basis is referred to.

The equity and funding provide the sources of funding to invest in assets. The bank has to hold sufficient liquid assets and cash to ensure liquidity pressures can be met immediately. Given that capital is generally only returned through dividends, the capital therefore has a very long behavioural term. The Treasury of the bank acts as the “bank to the bank”, that is, to provide funding to all assets and pay for all liabilities. From an accounting perspective, the cost of funding of capital is nil. An endowment benefit therefore arises as no expense is incurred for this funding. In order to ensure that businesses in a bank group do not unduly benefit from such capital structures, the central Treasury charges a funding cost on all assets and pays a funding cost to all liabilities, including capital.

So the capital base itself should not be expected to generate a return. Where it does, for example, the coupon return from a holding of government bonds, this income on capital should accrue to a central book or asset–liability committee “ALCO” book, and not to any business line. Neither is it allocated on a pro‐rata basis to the business lines, otherwise the calculation of shareholder value‐added by the businesses will be skewed. The business lines are assumed to utilise matched funding instruments to fund their operations. Certain banks also charge a capital risk premium, which will also accrue to the “ALCO” book. Views vary on the treatment of this endowment benefit. Some banks keep the benefit in the ALCO book and implement an economic profit type of management account framework, while others allocate some or all of the benefit to incentivise business, hence there is no cost to allocate.

The target return on equity, set by the shareholder and therefore the Board as their representatives, sets the hurdle rate for the business or the legal entities in the group. Senior management generally then translate these hurdles for each of the business lines, who benefit indirectly from the existence of the capital base. This hurdle rate can be a minimum for all the businesses (which is very unlikely as the returns per line of business vary greatly, for example, between asset and liability lines), or it can be modified to suit the differing requirements of each business. It is imperative to note how important it is for the bank's return on capital (RoC) target to be set at a Board level, reflecting the needs of the shareholder and thereby the “cost” of that equity.

The example below describes the treatment of share capital further.

The treatment and allocation of capital described here represents what is considered business best practice at the one bank observed. However, it is not universal. In some cases, a deviation from the above is justified where a portion of the capital base is allocated for use as “working capital”, for example, in a start‐up situation to cover cash requirements such as rental and salary expenses. In this case, the amount to be allocated should be identified in advance and once the business has declared a profit, then the same amount should be restored to the capital base or the bank needs to adjust its reported capital base. So there could well be other treatments of the capital base that are justified, hence some banks may still deviate from the above.

Expected and unexpected losses

Banks' normal course of business involves exposing themselves to risk of loss due to customer loan default. Losses will vary from one year to the next, unsurprisingly closely correlated to the economic cycle. The extent of exposure also varies, from “AAA”‐rated exposure to lower‐rated exposure, by type of customer, and product. The extent of collateral provided by a loan customer also dictates the level of loss.

Obviously, it is not possible to know in advance what the extent of loss in the next 12 months (or any time period) will be. Banks estimate the average level of losses they expect to incur over the next budgeting period based on their historical experience. This is the bank's expected losses. The level of expected loss dictates the nature of future business. For example, since it can be seen as part of the cost of doing business, expected loss levels will influence:

  • The level of future balance sheet expansion and lending levels;
  • The rate of interest charged to customers.

Banks must also, however, account for unexpected losses. This should be self‐evident: it would not be possible to estimate accurately what future losses will be. It is common for actual loss rates to far exceed expected loss rates, especially if historical rates were used to estimate expected losses and the last 5 years had seen the economy booming with the central bank raising interest rates. It is these unexpected losses that banks require a buffer of capital to absorb, and as was said earlier, if the bank is to manage itself on a going concern basis, this buffer must be sufficient to absorb losses and still remain above the regulatory minimum. Otherwise of course it would no longer be a going concern. This is because a bank that falls even 1 basis point below the regulator's minimum will suffer a loss of confidence and a run on the bank (as well as the inevitable credit rating downgrade to junk status).

Unexpected losses are harder to estimate than expected losses. The way it is approximated is the basis of the orthodox credit risk management methodology process in banks. Figure 15.2 provides a stylised illustration of the distribution of credit losses.

Graphical illustration of the expected and unexpected losses.

Figure 15.2 Expected and unexpected losses

Area B is the extent of unexpected losses, and the bank will calculate the probability of such losses and the amount.

Understanding the difference between capital and liquidity

It is evident then that a bank's capital base and its holding of genuinely liquid assets are of equal importance in helping to mitigate against its main bank balance sheet risks. Arguably, liquidity risk is of greater importance because a failure of liquidity sourcing can kill a bank in an instant, compared with a shortage of capital that may take longer to force the bank into failure. But this aside, it should be noted that in the same way as banks operating models differ, so does the type of risk exposure that capital and liquidity are used to manage against differ. We reiterate that capital is a liability, on the same side of the balance sheet as all other liabilities, and is a source of funding. The balance sheet has to balance of course, and liquid assets are on the other side of the balance sheet as a use of funding. (The most liquid asset is a deposit at the central bank, or failing that the domestic sovereign Treasury bill.) The requirement to have both sufficient capital and sufficient liquid assets requires balance sheet managers to be aware of the details surrounding the source of funds and the use of funds. In other words, how much capital is available capital that is perpetual (it has no repayment date), has no obligation to pay dividends, and can absorb losses on a going concern basis? And how truly liquid are the liquid assets?

Capital regulation

As will be seen later in this chapter, how much minimum capital a bank needs is determined by legislation – so the answer to this question is straightforward. Indeed, Basel III enshrines in law a limit on how much balance sheet leverage a bank can employ. But it is a useful exercise to determine what the capital requirement would look like if there was no regulator.

Certain key ratios (including the leverage ratio) help to provide an estimate answer to this question. This is because not all assets on a bank's balance sheet are the same – some assets are (credit) riskier than others, so each asset type is assigned a risk weight to reflect how risky it is deemed to be. These weights are then applied to the bank's assets to give a risk‐weighted asset (RWA) value. This is then used to calculate the capital ratio, the bank's capital amount as a percentage of the RWA amount. It is seen that it is easy enough to alter the capital ratio value by adjusting either the numerator or the denominator – or both.

In such an instance the capital requirement would be based on the internal view of risk and the level of financial resources required to ensure the bank remains a going concern within the tolerances set by its risk appetite. This is the economic capital requirement of the bank.

KEY CAPITAL CONSIDERATIONS

For a bank to ensure that it has adequate capital to support its business, it must consider the following:

  • Regulatory requirements;
  • Risk appetite and risk profile;
  • Rating agency (for example, S&P) considerations;
  • Equity investor expectations.

Regulatory requirements will be the primary driver of the bank's capital structure, involving consideration for a number of metrics across the regulatory spectrum. The Board sets the risk appetite of the firm. One of the risk appetite metrics will consider the level of friction the bank wishes to endure before breaching regulatory requirements. Capital will be held as a buffer on the regulatory buffer to minimise regulatory friction. Also, from an S&P perspective, risk‐adjusted capital (RAC) is an important ratings score determinant and is key in influencing the achievable optimum capital mix. Equity investor considerations around dividend capacity and RoC expectations would influence the capital mix. The importance of each factor will vary according to the risk appetite of each firm.

Regulatory requirements are those of the national regulator and international regulatory considerations as set by the Basel capital rules. In the UK, for example, the requirements would include the Capital Requirements Directive IV (CRDIV) (the European Union's legislative implementation of Basel III), the buffer requirements of the UK Prudential Regulatory Authority (PRA), the leverage ratio, and also any relevant ring‐fencing rules. For a bank in South Africa, the considerations are similar as the South African Reserve Bank (SARB) is a member of the Basel Committee. The SARB compares the capital strategies of banks by type of bank with smaller banks having considerably higher capital requirements than their larger counterparts, given the lack of diversification in the portfolio.

A rating agency will consider issues including: access to bank financing, issuance capability in the capital markets, implicit support for government or a foreign parent, and the price the bank has to pay to raise long‐term funding.

Equity investors will be concerned with the “value vs growth” equity outlook, the formal dividend policy, and their expectations for RoC. These are considered in further detail below.

Regulatory capital requirements

In the first instance, capital structure considerations are essentially given by the Capital Requirements Regulation (CRR)/CRDIV (in the EU) and in other jurisdictions by the local interpretation of Basel III. Figure 15.3 is a summary of this requirement.

Schematic illustration of the capital structure considerations under Capital Requirements Regulation (CRR/CRDIV).

Figure 15.3 Capital structure considerations under CRR/CRDIV

For Basel III, paper BCBS 189 (June 2011) footnote 47 states:

Common Equity Tier 1 must first be used to meet the minimum capital requirements (including the 6 per cent Tier 1 and 8 per cent Total capital requirements if necessary) before the remainder can contribute to the capital conservation buffer.

For banks in the EU, the requirement of CRDIV as stated in Article 124 (July 2011) is that:

Institutions shall meet the requirement imposed by the Countercyclical Capital Buffer with Common Equity Tier 1 capital, which shall be additional to any Common Equity Tier 1 capital maintained to meet the own finds requirement imposed by Article 87 of Regulation [total capital ratio of 8 per cent], the requirement to maintain a Capital Conservation Buffer…

The buffers set in the capital requirements can be utilised during times of stress. However, in such circumstances distributions to shareholders and staff will be restricted.

Sources of capital

Core equity Tier 1 capital consists in principle of share capital, share premium, and retained earnings attributed as regulatory capital. Certain deductions apply.

The features that make a long‐dated liability eligible as Additional Tier 1 (AT1) and Tier 2 (T2) are as follows:

AT1:

  • Perpetual; not callable prior to year 5;
  • Non‐cumulative, discretionary distributions;
  • Deeply subordinated;
  • Conversion to equity or principal write‐down at a trigger of CET1 < 5.875% (or higher);
  • Conversion or write‐down at the point of non‐viability, where the point of non‐viability is determined at the discretion of the SARB prior to the failure of the bank.

T2:

  • Minimum maturity of 5 years (with capital credit amortising 20% per year 5 years prior to maturity);
  • Subordinated;
  • Conversion or write‐down at the point of non‐viability.

Given the requirements of Basel III, at a strategic level the main ingredients of capital planning are essentially given: that is, the attachment points for maximum distributable amounts can be set quite easily. The most transparent way to illustrate this is to assume that one is setting up a bank from scratch, as shown in Table 15.1, with the theoretical illustration at Figure 15.4 and 15.6.

Table 15.1 Capital framework based on the Basel III framework: hypothetical bank start‐up

c15t001
Schematic illustration of the combined buffer requirement for a bank under Basel III.

Figure 15.4 Combined buffer requirement for a bank under Basel III

Schematic illustration of the risk‐weighted asset (RWA) breakdown.

Figure 15.5 RWA breakdown

The Pillar 2A add‐on is stipulated by the national regulator.

In other jurisdictions, as in the UK, the PRA has stated that the Pillar IIA add‐on of up to 2% must comprise at least 56% CET1 and the remainder of a combination of AT1 and T2. For a new bank, the minimum capital requirement would allow the requirements under Basel III to be met, as well as to allow for sufficient capital should a countercyclical buffer requirement be implemented by the regulator SARB.

Hypothetical example: vanilla commercial bank

To illustrate the considerations involved from a first‐principles basis, an assumed example of a UK commercial bank that is being set up from scratch, with an inherited portfolio, is considered. What would be the primary factors driving the capital planning process? The balance sheet RWA breakdown is shown in Figure 15.5.

The main factors that (say) a ratings agency review would consider include: asset mix (for example, whether there is a concentration in assets such as commercial real estate (CRE)); advanced – vs foundation – IRB being applied; Pillar II impacts; stress buffers required; and any capital release opportunities. With a total balance sheet RWA of just over GBP 13 billion, the bank is below 1% of UK GDP in size, so the countercyclical, globally systemically important institutions (G‐SIFIs), and ring‐fence buffers do not apply. Hence, the capital considerations that must be accounted for are shown below.

Schematic illustration of the capital considerations.

Figure 15.6 Capital considerations

This argues for an indicative capital structure of 15%. However, as this is a fairly small portfolio, the individual capital guidance received from the regulator will more likely impose a higher requirement. This would be a working assumption taking into account:

  • Regulator feedback (for example, the requirement for the amount of total loss‐absorbing capacity);
  • Potential impact of stress tests on the capital plan. Such stresses are then accounted for to a certain level of confidence using economic capital principles;
  • Peer‐group analysis;
  • Market expectations;
  • Rating agency feedback.

Assuming the 15% capital base is accepted as a minimum requirement, there are two main scenarios that present themselves. The first is Scenario 1, the all‐equity scenario, while Scenario 2 describes an equity plus other capital structure. The latter is shown in Figure 15.7.

Schematic illustration of the hypothetical new bank capital structure minimum compliance with Basel III.

Figure 15.7 Hypothetical new bank capital structure minimum compliance with Basel III

A capital base as shown in Figure 15.7 would enable the bank to meet both the standing buffer requirements and the macro‐prudential one. Note that the PRA has stipulated that CET1 must be used to fill Pillar IIA requirements prior to the combined capital buffer. The residual 3.0% of CET1 would be available to meet any remaining capital or buffer requirements, including the Pillar IIA requirements.

What factors should guide the capital planning process with respect to the structure of the capital base? The all‐equity scenario presents the following features:

  • The most robust form from a regulatory perspective;
  • It may result in an incremental (one‐notch) rating benefit;
  • As the most expensive structure, it is least efficient from a shareholder return perspective;
  • Compared to the equity plus other capital format, there is a substantial decrease in RoC.

The equity plus other capital liability structure has the following features:

  • It is a more efficient capital structure;
  • Ultimately, it remains subject to national regulatory approval;
  • The rating agency position towards this structure is neutral to negative;
  • The T2 issuance would of course be subject to investor demand for this paper;
  • The structure allows for further gearing/leverage of the capital base. The level of leverage is restricted under Basel III and in particular in South Africa as discussed below.

Table 15.2 is a summary of the requirements for capital instruments to be AT1 and T2 eligible. In its capital planning, a bank may consider the following rationale for issuance of one or both of these instruments:

Table 15.2 AT1 and T2 instrument requirements

Additional Tier 1 Tier 2
Tenor Perpetual May be dated. Must have minimum 5 years maturity
Subordination Subordinated to depositors, general creditors, and subordinated debt of the bank Subordinated to depositors and general creditors of the bank
Distribution Bank must have full discretion to cancel payments (non‐cumulative) No requirement for deferral/ cancellation of coupon
Call features May be callable by the issuer after a minimum of 5 years (subject to regulatory approval) May be callable by the issuer after a minimum of 5 years (subject to regulatory approval)
Going concern loss absorption Must have principal loss absorption through either conversion to shares or a write‐down mechanism N/a
Gone concern loss absorption Write‐off or conversion if required by the regulator Write‐off or conversion if required by the regulator
  • Free up common equity to count towards buffer requirements (capital buffers are additive to minimum total capital requirements);
  • Pillar II or bail‐in capital requirements;
  • Non‐dilutive (absent conversion);
  • Tax deductible;
  • Able to be sold to a fixed income investor base;
  • Acts as a cushion for senior debt investors;
  • Supports credit rating requirements (S&P RAC eligible).

In undertaking its capital planning, a bank must consider the Pillar II requirements. When conducting its Pillar II review (that is the review of the bank's Internal Capital Adequacy Assessment Process or ICAAP), the local regulator will consider both those risks to banks that are not fully captured under Pillar IIA and those risks a firm may be exposed to in future, for example, regulatory changes (Pillar IIB). The key considerations are:

  • Pillar IIA: in addition to the Pillar I requirements of Basel III (in the EU, CRR/CRDIV), certain regulators including the PRA regard Pillar IIA capital as the minimum level of regulatory capital a bank should maintain at all times to cover against risks, with the implication being that CET1 must be used to fill the Pillar IIA requirement prior to being used for the capital conservation buffer (CCB);
  • Pillar IIB: Pillar IIB buffers will be required for firms where the regulator (PRA included) deems that the Basel III or CRDIV buffers may not be sufficient to enable a firm to meet its capital requirements under stress. The Pillar IIB buffer will replace the existing (in the UK jurisdiction) capital planning buffer (CPB), and will be set based upon a range of factors, including firm‐specific stress test results.

Leverage ratio

The leverage ratio limit is a Basel III requirement. It will initially be implemented as a Pillar II measure, although from January 2016 it will be a binding measure. However, prior to harmonisation, at this point national regulators are free to apply the leverage ratio requirements as they see fit. The Bank of England has already applied the 3.33% ratio limit, and the numerator is given by Tier 1 capital.

In CRDIV the leverage ratio is defined as T1 capital divided by a total exposure measure; the simplest form is given by:

(15.1)images

Credit rating considerations

In proceeding with issuance of an AT1 or T2 hybrid capital instrument, the capital planning process will also consider the treatment of the instrument by the international credit rating agencies (S&P, Moody's, Fitch). Ideally, the instrument will be eligible as capital, therefore strengthening the capital base to the benefit of the bank's final rating. S&P, for instance, issue guidelines for eligibility as RAC capital.

CAPITAL MANAGEMENT POLICY

Bank capital management should be articulated formally in a policy standard in the same way that liquidity management is (described in Chapters 8, 9 and 10). The objective of the policy is to describe how the bank will:

  • Meet its regulatory and other legal obligations;
  • Maintain its capital resources and buffer as required and in line with the stated risk profile of the business;
  • Manage its capital planning in an efficient and cost‐effective manner;
  • Recover from stress events.

A benchmark standard template for a bank's capital management policy is given here.

Capital management

The starting point for the capital management policy is the regulatory capital ratios. The requirements of any overseas regulators, from jurisdictions that the bank also operates in, are also included. The next step is a consideration of internal capital requirements (economic capital) as the Board has a duty to meet regulatory requirements but where these requirements are inadequate, as indicated by the internal risk assessment, to demand higher capital ratios. The buffers on regulatory ratios are required to reduce the likelihood of a limit breach and form the basis of the capital risk appetite of the bank. This is followed by a description of the monitoring process and escalation process for limit breaches.

The policy template would cover:

Capital targets

The bank will monitor and report its forecast regulatory capital base and risk‐weighted assets (RWAs) per business line to Finance, Risk, and Treasury. The responsibility for regulatory reporting lies typically with the Regulatory Reporting department within Finance. The bank's current operational targets are:

Core Tier 1: [ ] %
Total Tier 1: [ ] %
Total capital: [ ] %

The Finance department will maintain a 3‐year rolling forecast and report this to ALCO. Forecast or actual breaches of the internal capital ratios and ultimately the regulatory capital ratios will be reported to the Head of Treasury and to ALCO as well as the regulatory authority. A regulatory breach should be very rare and the bank's risk management processes will require escalation prior to such an event. Upon escalation, management actions will be considered to rectify the position.

The Treasury department will undertake capital stress testing to assess the potential capital impact of changes in firm‐specific and market‐wide business conditions. Where the test results indicate a potential breach of target ratios, this must be reported to ALCO. Mitigating action should then be undertaken after approval from ALCO.

The actions considered to rectify any capital adequacy positions will also be tested during the stress testing exercises. There, actions range from the improvement of business processes, the sell‐down of assets, and the change in balance sheet strategy, to a rights issue to obtain more capital. Each action will have wide ranging impact and therefore needs to be considered in detail.

Risk‐weighted assets and economic capital demand

RWA balances (i.e. the regulatory Pillar I view of risk) and economic capital demand (the internal view of risk) must be reported to Finance, Treasury, and the business lines. The frequency of reporting may vary from inter‐day to monthly depending on the type of risks. RWA forecasts are prepared at month‐end; any inconsistency with the Finance general forecast must be reported to ALCO. The RWA forecast should be in line with the bank's capital allocation process. The impact of any business line transaction, whether asset or liability, that is likely to result in a reduction in capital must be reported immediately to ALCO. The process applied is similar in nature to the actuarial control cycle.

Business line profit

The net profit after direct and indirect costs of each business line must be transferred to the central book at year‐end. This is a direct cash transfer.

Capital resource management

A subset of the capital management policy is the capital resource management policy. The object of this document is to articulate formally how each business line will meet its requirements with regard to adherence to the capital management policy standard, and to ensure that use of capital at the business level is at an optimum in terms of allocation, planning, and management. The efficient use of capital is also a metric in business performance evaluation. The capital resource management policy is part of the process to ensure that capital is allocated efficiently and as part of the bank's strategy.

Capital allocation

Each business line prepares a business case for capital demand, based on RWAs and economic capital. Each business case contains key metrics, including RoC, net generation of equity, and economic profit. The Balance Sheet Management department sets targets for RWAs and capital usage as part of the budget forecast and allocation process. Capital is allocated to produce optimum return, in line with the strategy and risk appetite of the bank. The strategy and risk appetite will drill down to each business line. Treasury Balance Sheet Management will present capital usage limits at month‐end, for approval by ALCO (see Chapter 10 for template Treasury organisation structure). Treasury Balance Sheet Management will report current and forecast capital usage to ALCO on a weekly basis.

If a forecast exceeds a limit, the business line will submit a request for mitigating action to be taken, or for an increase in limit.

Performance metrics

The Board, having delegated authority to the executive management committee (ExCo), will set performance metrics targets for each business line. This will include RoC and capital usage (RWA) metrics, against which performance of each business is evaluated. Some banks also consider economic profit or profit after regulatory capital cost, depending on which view of risk is more onerous.

Portfolio credit risk management

ALCO is responsible for reviewing and approving the asset pool for credit risk management purposes. This is to ensure that provisions are signed off in a consistent manner, that all transactions are in line with the business strategy and risk profile, and that they follow policy on capital usage and regulatory requirements.

Capital management strategy

We conclude that bank strategy should focus on serving customers and driving the business via this customer focus. This strategy will be articulated in terms of a financial plan containing all key metrics. It should include a return on equity target set in advance, which is aligned to the bank's risk–reward preference. The capital strategy follows on from the overall strategy, and describes how and what capital is allocated to each business line. The plans are then stress tested. The outcomes indicate the potential frictions that may be experienced by each business area. At that point, the bank sets its core Tier 1 capital target level to achieve in line with the risk appetite set by the Board. The point being made here is that capital strategy is a coherent, articulated, and formal plan of action that builds on a regular review of the business, allocation of capital to those businesses, and desired return on capital. This should all be documented as part of the bank's capital strategy, which feeds into the overall strategy. This may sound obvious, but the layperson would be surprised by how few banks actually do this.

A bank's management may think that the core Tier 1 ratio to have in place is the starting point of the strategy. In fact, almost the contrary could be true: the desired core equity Tier 1 ratio should be arrived at after consideration of the business lines, the results of stress testing, and the share of capital allocated to each to support the revenue and return on equity target that is desired. The bank should compile an annual, 3‐year, and 5‐year capital ratio target, aligned to a strategic funding plan, and then target the optimum Tier 1 ratio through setting optimal capital structures. This will be achieved through management of dividends (regular or special), rights issues for significant opportunities, AT1 and T2 issuances, or repurchases and liability management exercises.

Schematic illustration of the formulating capital management strategy.

Figure 15.8 Formulating capital management strategy

Source: Choudhry 2012.

As a key part of strategy, the capital management framework at a bank should address the requirements of all the various stakeholders. It should be communicated in a transparent fashion to all internal and external stakeholders, articulating:

  • How the risk appetite is aligned to their needs and expectations;
  • How and why capital allocation and capital constraints are integrated with funding capabilities and assigned to each business line;
  • The extent of tolerance for earnings volatility;
  • The framework in which each of the business lines operates, with respect to risk exposure and the type of business undertaken.

Figure 15.8 is a reprise of the capital management strategy process. Bank's capital management is part of the overall strategy and is encompassed in a “capital management framework”.

Stress testing, as part of the regulatory capital adequacy process, is considered in a later section.

CAPITAL ADEQUACY AND STRESS TESTING

To recap, Pillar I of the Basel regulatory capital framework describes the capital requirements for credit, market, and operational risk, while Pillar II focuses on the economic and internal perspective of banks' capital adequacy. Banks are required to employ satisfactory procedures and systems in order to ensure their capital adequacy is sufficient over the long term, with due attention to all material risks. These procedures are referred to collectively as the internal capital adequacy assessment process or ICAAP. The standard process by which the regulator determines whether a bank is managing capital on a satisfactory basis is also referred to, almost universally, as the ICAAP, which sometimes is taken to refer to the individual capital adequacy assessment process. It is known by other terms in certain jurisdictions, but irrespective of the name, we refer here to the process by which a bank stress tests its capital level for sufficiency through a range of scenarios and presents its results to the regulator. The regulatory authority will determine if it agrees with the results and thereby determine the level of capital required.

The ICAAP enables them to identify, measure, and aggregate all material risk types and calculate the economic, or internal, capital necessary to cover these risks. As such, the ICAAP process is key to the preservation of financial stability and is subject to a high degree of supervisory scrutiny, which does on the other hand make the process very bureaucratic and administrative. That said, because banks come in many different shapes and sizes, and a variety of balance sheet risk exposures, a number of different approaches may be observed when it comes to the ICAAP process. Business best practice for a vanilla commercial banking institution is described here.

ICAAP primer

In essence, the Basel Accord and its amendments form the basis for the ICAAP. In the EU, the legislative framework was described in CRD2. Further guidance was provided by CEBS (2006), which published 10 principles for the implementation of a consistent and comprehensive ICAAP. In short, all banks are required to document and specify fully the ICAAP, integrate it into the regular risk management process, and review it continuously to ensure it remains fit for purpose.

The ICAAP needs to be a risk‐based document, comprehensive and detailed, as well as forward looking. Of course, the results of the ICAAP process need to be consistent with the bank remaining a going concern – if they are not, the bank's Board must implement management actions to redress the matter before presenting results to the regulator. While there is considerable commonality, each ICAAP is ultimately unique to the bank in question, reflecting its specific balance sheet structure and exposure.

Risk taxonomy and quantification

Before quantifying balance sheet risk exposure, it is important to categorise it, or as some banks term it, compile a taxonomy of risk. Not all banks exhibit all identified risk type exposures. Under Pillar II, all material risk types need to be quantified, and thereby covered with adequate capital provision. Certain types of risk (conduct risk, reputation, etc.) are not straightforward to quantify, so banks will apply a qualitative assessment. Typically, banks and, crucially, certain regulators employ the Value‐at‐Risk (VaR) technique to estimate risk exposure on the balance sheet. For those familiar with VaR, the logic of its methodology is consistent with a trading book, or a pool of assets that are repriced on a regular basis. However, this logic is less consistent in a banking book. Nevertheless, the VaR approach remains the one that is most in use and often demanded by the regulator to assess the VaR to the firm. The actual methods vary from simple risk weights to detailed economic risk assessments. In addition, regulators use peer group comparisons as well and any outliers per business area are interrogated further.

Table 15.3 summarises the Level 1 risks within the risk taxonomy for a vanilla UK commercial bank, with 1st and 2nd line‐of‐defence (LoD) responsibilities indicated.

Table 15.3 Level 1 risk taxonomy

Level 1 Risk Taxonomy
The table below summarises the Level 1 risks within the risk taxonomy for Rainbow
Level 1 Risk 1st LoD Risk Owners 2nd LoD Risk Owner Definition
CREDIT MDs of each business area/MD Sales and Marketing CRO Risk of loss from the failure of a customer to meet their obligation to settle outstanding amounts, including concentration risk.
OPERATIONAL COO, Head of HR, Legal and CFO The risk of loss resulting from inadequate or failed internal processes, people, or from external events, including legal risk and supplier risk.
IT Head of IT Loss of technology services due to loss of data, system, or data centre including, where applicable, failure of back‐up processes and/or a third party to restore services.
COMPLIANCE ExCo members The risk of material financial costs (including rectification and remediation costs), legal and regulatory sanctions, or reputational damage the bank may suffer as a result of its failure to comply with relevant laws, regulations, principles, rules, standards, and codes of conduct applicable to its activities, in letter and spirit. Within compliance:
  • Conduct is the risk that actions undertaken by the bank and/or its staff could lead to customer detriment, employee detriment (outside of appetite), inappropriate control of financial crime and related activity, or negative impact on market stability;
  • Prudential compliance is the risk of material loss or liability, legal or regulatory sanctions, or reputational damage arising from breaching existing relevant prudential policy, laws, or regulations, in any jurisdiction in which the entity operates.
NON‐TRADED MARKET RISK Head of Treasury The market risk arising in non‐trading assets and liabilities.
CAPITAL AND STRESS TESTING CFO The risk of not being able to conduct business in base or stress conditions due to insufficient qualifying capital as well as the failure to assess, monitor, plan, and manage capital adequacy requirements.
FUNDING AND LIQUIDITY Head of Treasury The risk that the company is not able to meet its liabilities as they fall due, or has insufficient resources to repay withdrawals.
REPUTATIONAL ExCo members The risk of brand damage and/or financial cost due to the failure to meet stakeholder expectations of the company's conduct and/or performance.
BUSINESS CFO/(+MDs of business areas) The risk that the company suffers losses as a result of adverse variance in its revenues and/or costs relative to its business plan and strategy.
STRATEGIC CEO (Board) The risk that the company will make inappropriate strategic choices, is unable to successfully implement selected strategies, or changes arise that invalidate strategies. This includes all divestment programme‐related risks.
GROUP CEO The dependency of the company on the group for key support areas, e.g. funding, liquidity, capital, and other back office functions, etc.

It is common to see the variance‐covariance (“parametric”), historical simulation, and Monte Carlo simulation approaches used in equal measure among banks. Typically, banks apply a 1‐year holding period and one‐sided confidence levels of 95% or 99%. For market risk, banks often apply a 1‐day and 10‐day holding period. Note that most banks classify interest‐rate risk in the banking book (IRRBB) as a market risk, albeit a non‐traded market risk. Again, it is common to observe VaR as the preferred measurement technique for IRRBB as well; however, the author's recommended approach is to supplement this with traditional modified duration analysis (“gap” analysis) as well.

Stress tests

In the post‐2008 era, all banks, except perhaps the very smallest, specify a large number and variety of stress tests. That said, there is considerable commonality in approach. Generally, the primary focus is on scenario analyses, often based on 5‐year historical worst‐case values or hypothetical scenarios. The latter are sometimes also required to include a “reverse stress test”, which is a hypothetical scenario that would break the bank. In theory, as stress tests allow for the identification of sensitivities to specific risk factors, they should be a worthwhile exercise as they provide value‐added input to the bank's risk management process and subsequent management actions. The danger, as with all exercises subject to considerable regulatory supervision, is that the stress testing process becomes an excessively bureaucratic one and more of a “box‐ticking” exercise. This must be avoided and ALCO is the appropriate forum to review the process and ensure this does not happen.

ICAAP process guidelines

To recap, Basel II introduced the three‐pillar architecture for capital and risk management (see Figure 15.9, as reproduced from the BCBS document).

Schematic illustration of the three pillars of capital and risk management.

Figure 15.9 The three pillars of capital and risk management

On the one hand, Pillar II (Supervisory Review and Evaluation Process) requires banks to implement a process for assessing their capital adequacy in relation to their risk profiles as well as a strategy for maintaining their capital levels. This is the ICAAP. On the other hand, Pillar II also requires the regulatory authority to review all banks for their capital adequacy and to impose any necessary supervisory measures following such review. So there are two parts to this process:

  • The ICAAP, which comprises all of a bank's procedures and measures designed to ensure that there exists:
    • The appropriate identification and measurement of all balance sheet risks;
    • An appropriate level of internal capital in relation to the bank's risk profile;
    • The application and further development of suitable risk management systems.
  • The supervisory review process or SRP (sometimes SREP), which covers the processes and measures defined in the principles listed above, including the review and evaluation of the ICAAP process, an independent assessment of the bank's risk profile, and where necessary instructing the bank to undertake further prudential measures.

ICAAP implementation

Before a bank can begin designing its ICAAP, it should first define its relevant target state. The steps involved are those illustrated in Figure 15.10.

Schematic illustration of the steps involved in the Internal Capital Adequacy Assessment Process (ICAAP) production and approval process.

Figure 15.10 Steps involved in the ICAAP production and approval process

© Chris Westcott 2017. Used with permission.

What does Figure 15.10 mean in practice? Each step is considered in turn below.

Definition of bank‐specific requirements (target state): In the first step, the bank compiles its strategy based on its goal or vision. It will test this strategy against a list of requirements based on national regulator statements, for example, the EU CRDIV. Next, these requirements have to be specified for the individual bank, thus in the course of a self‐assessment the bank should identify its material risks, which arise from the implementation of its strategy. The ICAAP therefore facilitates assessing the sensitivity and risks in a firm's strategy. The requirements with regard to ICAAP methods should be defined in light of the bank's risk profile, as they need to be fit for purpose but also meet regulatory rigour. Typically, the introduction of new methods begins with relatively simple, robust solutions which are then developed and refined on an ongoing basis. The full list of requirements then represents the target state for ICAAP purposes and defines requirements with regard to methods, procedures, processes, and organisation.

Gap analysis: Once the target state has been defined, the bank should analyse those requirements that are currently not (or not completely) fulfilled. These gaps pertain both to the execution of strategy as well as the capital assessment process. It is the business team's responsibility to address the former and its risk management teams would survey the current state of methods, processes, and organisation in place in the internal risk management system. This might include the regulator's requirements for calculating capital amounts, or activities aimed at fulfilling the minimum standards for the credit origination business. The process is not restricted to risk managers. In terms of the three lines of defence model, the process starts with all business lines, which should analyse their current state and report it centrally to Risk (and ALCO). Gaps in implementation can then be identified by comparing the requirements with the current state. This comparison of target and actual states could be carried out in the course of a workshop attended by representatives from the business lines, with the results documented and reported to all relevant stakeholders. The bank can then assess the significance and consequences of the gaps identified as well as identify the necessary management actions as a result.

Implementation planning: In implementation planning, the first step is to prioritise the required measures identified in the previous process. This way a clear ranking can be defined in order to deploy implementation resources effectively. Measures identified should be combined in individual work packages and coordinated with business lines; this process requires that specific roles and responsibilities be identified and assigned. As part of the process, the bank should set binding deadlines, which reflect resource and capacity available within the firm.

Implementation: Put simply, this stage involves undertaking and delivering on the process measures identified in the previous stage. This includes employing human resources as well as IT capacity as required by the ICAAP. The process‐related aspects and responsibilities within the ICAAP can then be defined and documented. This may involve quantifying and aggregating risks and coverage capital, monitoring limits, or taking measures in the ex‐post control process. The ICAAP is integrated into the bank's strategic and operational control mechanisms (for example, annual budgeting and planning on the basis of risk indicators and coverage capital). Once implementation is completed, the bank should have in place adequate methods, processes, and systems to ensure its risk‐bearing capacity over the long term.

What makes a good ICAAP?

In essence, the ICAAP process and its published output as presented to the national regulator should be a value‐added exercise that reflects the interests of all stakeholders in the long‐term viability of the bank as a going concern. This is not a platitude. However, because of the onerous regulation and reporting process in place in most jurisdictions, the process often boils down to producing something that the regulator signs off on. This is not the best approach to ICAAP production. To the question “What makes a good ICAAP?” the obvious answer is a document that presents the firm's strategy with all material risk exposures, on a forward‐looking basis, and demonstrates that these exposures are covered by adequate capital levels, risk management systems, and management actions to rectify stresses in order to ensure the successful implementation of the strategy.

As a checklist, we should note that the following factors are crucial in the actual implementation and successful presentation of an ICAAP:

  • Early detection of gaps in fulfilment:

        A bank should make efforts to detect gaps in the fulfilment of requirements as early as possible so that it can take the appropriate measures in a timely and economical manner. Closing these gaps quickly will improve the bank's internal risk management and thus enhances its ability to ensure its risk‐bearing capacity.

  • Selection of methods:

        The bank should determine the methods and procedures that best suit its needs, as these determine the validity of the ICAAP as well as the required implementation resources. In the course of selecting methods, the bank should not only consider its current risk profile but also anticipate planned developments in individual risk types. If, for example, a decision has already been made that trading will be expanded in the medium term, then it makes sense to introduce more advanced procedures from the outset when designing the ICAAP.

  • Master plan and project management:

        The bank should develop a master implementation plan that covers planning, budgeting, and a prioritisation of all ICAAP implementation tasks. There should be one overall, dedicated project manager (most probably someone within Risk or Treasury). This master plan forms the basis for requesting internal and external capacities and may well involve planning resources over a period of several years. For example, implementation might already be well under way for the most important risk types, while measures for other risk types are still being planned. Once it reaches a certain scale, the master plan should be transformed into a detailed project plan, which serves to reduce complexity and create transparency with regard to the current implementation status. It is also important to set binding deadlines and responsibilities on the basis of this plan. A project manager should then monitor and control the performance of individual tasks. Project management should seek to prevent any conflicts of interest between the business lines involved in implementation and to maintain an aggregate and holistic view of the project.

  • Communication:

        The need for, and benefits of, the ICAAP have to be clearly communicated to all staff. The fundamental concept of the ICAAP is not something for senior executives only to appreciate, but for all business lines. An example is a newly designed limit allocation system or a change to the organisation chart, more likely to be supported by staff if they are informed about the need for these measures in a transparent and understandable manner. Insufficient communication in implementation projects often results in low levels of identification or even rejection and demotivation. By applying an appropriate communication policy and setting a good example, senior executives should generate the employee acceptance necessary for successful implementation of the ICAAP.

  • Know‐how and resources:

        One major objective of the ICAAP is to foster the development of an appropriate internal risk management culture. For this reason, expertise in this area is a key success factor in the implementation of the ICAAP. It is important for the bank to have the necessary resources (employees, systems) at its disposal in the ICAAP implementation process. Resource requirements will depend on the bank's size and risk profile as well as the difference between the current status and the defined requirements.

  • Data quality and IT systems:

        Data quality (completeness, availability) is especially important because it determines the reliability and accuracy of calculated results (for example, risk indicators and coverage capital). The process of data quality assurance begins with accurate data capture and goes as far as ensuring data availability in the ICAAP. Especially for risk management, it is necessary and worthwhile to ensure timely automated evaluations due to the large data quantities involved and the sometimes complex calculation algorithms used. In its ICAAP, the bank can rely on existing risk management systems (risk measurement, limit monitoring) if they meet the defined requirements. Historically, maintaining and updating the IT structures of many banks requires copious resources. It is a required investment, however, because the lack of uniform data pools can create considerable difficulties in assessing the true extent of balance sheet risk.

Principal ICAAP requirements

Based on supervisory requirements and the benefits from a business perspective, the basic requirements to be taken into account in the production of an ICAAP are:

  • Securing capital adequacy: Banks should define a risk strategy that contains descriptions of its risk policy instruments and objectives. This is a Board‐level statement. The explicit formulation of such a risk strategy aids in the early detection of deviations from appetite and tolerance;
  • ICAAP as an internal management tool: The ICAAP should form an integral part of the management and decision‐making process;
  • Responsibility of the management: The overall responsibility for the ICAAP is assigned to the Board and senior executive, which must ensure that the bank's risk‐bearing capacity is secured and that all material risks are identified, measured, and limited;
  • Assessment of all material risks: The ICAAP focuses on ensuring bank‐specific internal capital adequacy from a business perspective. For this purpose, all material risks must be assessed. Therefore, the focus is laid on those risks that are (or could be) significant for the individual bank;
  • Processes and internal review procedures: Merely designing risk assessment and control methods is not sufficient to secure a bank's risk‐bearing capacity. It is only in the implementation of appropriate processes and reviews that the ICAAP is actually brought to bear. This ensures that every employee knows which steps to take in various situations. For the sake of improving risk management on an ongoing basis, the development of an ICAAP should be regarded not as a one‐time project but as a continuous development process. In this way, input from ongoing experience can be used to develop simpler methods into a more complex system with enhanced control functions.

Risk indicators

The ICAAP should present all relevant material balance sheet risk through a series of risk exposure indicators. These are specific to the risk types. Indicators presenting the aggregate view are also required, i.e. the firm's capital adequacy ratios as well as risk‐adjusted performance indicators.

Credit risk indicators

The structure of the credit portfolio provides initial indications of a bank's risk appetite. A large share of loans in a certain asset class (for example, CRE) may point to increased risk. In addition, the presence of complex financing transactions such as specialised lending (project finance, for instance) may also indicate a larger risk appetite. For an approximate initial assessment, in the EU a bank can use the asset classes defined in Directive 2000/12/EC, or the asset classes outlined in the BA200 submission to the SARB, to examine the distribution of its credit portfolio. A bank can use credit assessments (such as credit ratings) to measure the share of borrowers with poor creditworthiness in its portfolio; this provides an indication of default risk. The bank will also consider the portfolio in terms of delinquency and impairment. The amount of available collateral – and thus the unsecured volume – also plays a role in this context. The lower the unsecured volume is, the lower the risk generally is; this relationship is also reflected in future supervisory regulations for calculating capital requirements. In this context, however, the type and quality of collateral are decisive; this can be assessed by asking the following questions:

  • To what extent is the retention or liquidation of the collateral legally enforceable?
  • How will the value of the collateral develop?
  • Is there any correlation between the value of the collateral and the creditworthiness of the debtor?

A close inspection of the credit portfolio will provide further insights with regard to any existing concentration risks. In order to assess the size structure or granularity of its portfolio, the bank can also assess the size and number of large exposures. The bank should also consider the distribution of exposures among industries (for example, construction business, transport, tourism, and so on) in assessing its concentration risk. If a bank conducts extensive operations overseas (share of foreign assets), it is appropriate to take a close look at the risks associated with those activities as well, such as country and transfer risks. The share of foreign currency loans in a bank's credit portfolio can also point to concentration risks. If the share of foreign currency loans is very high, exchange rate fluctuations can have adverse effects on the credit quality of the borrowers. If the foreign currency loans are serviced using a repayment vehicle that is heavily exposed to market risks, this indicates an additional source of risk that should be monitored accordingly and controlled as necessary.

Market risks in the trading book, foreign exchange risks at the overall bank level

This exposure is calculated using a VaR approach. A bank can determine its sensitivity to foreign exchange fluctuations on the basis of its open foreign exchange positions and (in the broadest sense) open term positions. The influence of foreign exchange fluctuations on the default probability of borrowers with foreign currency loans is also considered.

Interest‐rate risk in the banking book

The results reported in interest‐rate risk statistics (part of regulatory reporting requirements) constitute an essential indicator of the level of interest rate risk in the banking book. The traditional approach here is to apply modified duration analysis such as parallel yield curve shifts (for example, the effects of a 200 basis point interest‐rate shock on the present value of the balance sheet). Of course, if this method demonstrates that material interest‐rate risks exist in the banking book, regulators usually require more “sophisticated” risk measurement methods to be applied, with output including a precise quantification of risks in terms of their effects on the income statement. Another risk indicator should cover proprietary trading both on‐ and off‐balance‐sheet. In accordance with the proportionality principle in the ICAAP (larger, more sophisticated balance sheets require larger, more sophisticated ICAAPs), the corresponding requirements increase in line with the scale of derivatives trading activities. Even in cases where a bank primarily uses derivatives to hedge other transactions or portfolios, the effectiveness of hedging transactions (the hedge effectiveness) should be examined in order to avoid undesirable side effects. In the case of on‐balance‐sheet proprietary transactions, the need for more precise risk control grows along with the scale and complexity of the positions held, for example, “alternative investments” or structured bonds.

Operational risk indicators

Two important indicators of operational risk are the size and complexity of a bank. As the number of employees, business partners, customers, branches, systems, and processes at a bank increases, its risk potential also tends to rise. Another risk indicator in this category is process intensity, for example, the number of transactions and volumes handled in payments processing, loan processing, securities operations, and proprietary trading. Failures (for example, due to overloaded systems) can bring about severe economic losses in banks with high levels of process intensity.1 The number of lawsuits filed against a bank can also serve as an indicator of operational risks. A large number of lawsuits suggests that there are substantial sources of risk within the bank, such as inadequate system security or insufficient care in processes and control mechanisms. In cases where business operations (for example, the processing activities mentioned above) are outsourced, the bank cannot automatically assume that operational risks have been eliminated completely. This is because a bank's dependence on an outsourcing service provider means that risks incurred by the latter can have negative repercussions for the bank. Therefore, the content and quality of the service level agreement, as well as the quality and creditworthiness of the outsourcing service provider, can also serve as risk indicators in this context.

The risk indicators may be presented as per the following template (note that more than one bank has been amalgamated to reflect different approaches), as illustrated in Table 15.4.

Table 15.4 Example risk indicator levels

c15t004

For Bank A, the risk types mentioned above would have little significance under the proportionality principle. The bank shows a low level of complexity and low risk levels. Besides, Bank A does not have any trading positions. For the purpose of measuring its risks and calculating its internal capital needs, Bank A could calculate its capital requirements using the Standardised Approach, or the Basic Indicator Approach in the case of operational risk.

In terms of its total assets and number of employees, Bank B is comparable to Bank A, but Bank B's transactions show a markedly higher risk level. In addition, concentration risks exist with regard to size classes (for example, several relatively large loans to medium‐sized businesses), borrowers in the same industry, and foreign currency loans. In this bank, methods that go beyond the Standardised Approach should be employed and/or adequate qualitative measures (monitoring/reporting) should be set. Furthermore, Bank B should pay attention to concentration risks, for example, by adhering to suitable individual borrower limits based on creditworthiness or by implementing minimum standards for foreign currency loans. In this example, using more advanced systems may be appropriate in other areas, such as interest rate risk in the banking book.

Bank C shows high credit exposures to SMEs and has also granted a number of relatively large loans. This results in a certain degree of concentration risk. In addition, the bank is exposed to relatively high interest‐rate risks. In fact, Bank D has large exposures to almost all risk types. The bank's size and structure can be described (such as a VaR model) for interest‐rate risk at Banks C and D; Bank D should also use a more sophisticated model for market risk. Due to the higher risk level and the existing complexity with regard to credit risk, the bank may use other risk‐sensitive techniques based on the internal ratings‐based (IRB) approach or a credit portfolio model.

The individual institutions in this example have to define the scale and type of risk management system that is appropriate to their activities, with due attention applicable to the regulator's requirements. The choice of suitable risk measurement procedures to determine risks and internal capital needs plays a key role in this context. Moreover, the proportionality concept also has effects on process and organisational design: banks that demonstrate a high level of complexity or a large risk appetite have to fulfil more comprehensive requirements.

An example of the presentation of the risk indicators is given in Table 15.5.

Table 15.5 Sample incorporation of an institution's relevant risk types in the ICAAP

Risk type Risk subtype Risk level Justification (if immaterial) Risk assessment procedure used
Credit risk Counterparty/default risk Very high   Foundation IRB Approach
Equity risk Immaterial Equity investments as share of total assets < 0.5% Foundation IRB Approach
Country/transfer risk Medium   Strict limitation (structural limit)
Securitisation risk Immaterial No involvement in securitisation programmes (neither as originator nor as investor) Not considered
Credit risk concentration High   Strict limitation (structural limit) and increased monitoring
Residual risk from credit risk mitigation techniques Medium   Qualitative assessment, process‐based reduction of risk (use of standard contracts, “four eyes” principle, regular revaluation of collateral, etc.)
Market risk Market risks in the trading book Low   Standard supervisory methods
Foreign exchange risks in the banking book Medium   Standard supervisory methods
Interest‐rate risks in the banking book   High   Value‐at‐Risk model
Operational risk   Medium   Basic Indicator Approach
Liquidity risk   Low   Qualitative measures
Other risks Strategic risk Medium   Cushion
Reputation risk Low   Cushion
Capital risk Medium   Cushion
Earnings risk Medium   Cushion

Documentation requirements

The ICAAP is a living document. That means the Board must use the ICAAP document to familiarise and challenge risk as well as capital management processes in the bank. The ICAAP has to be designed in a transparent and comprehensible manner. This will not only aid bank staff in understanding, accepting, and applying the defined procedures, it will also make it easier for the bank to review the adequacy of its methods and rules regularly and to enhance them on an ongoing basis. Critically, it makes the SRP (or SREP) process by the regulator a smoother one.

For this reason, it is necessary to compile formal written documentation on all essential elements of the ICAAP. In creating the required documentation, the bank should ensure that the depth and scope of its explanations are tailored to the relevant target group. It is sensible to use various levels of detail in the actual implementation of documentation requirements. For illustration purposes, a sample scenario with three levels is shown in Figure 15.11.

Schematic illustration of the three‐level scenario.

Figure 15.11 Three‐level scenario

At the top level, it is advisable to articulate the bank's fundamental strategic attitude toward risk management. This will reflect the institution's basic orientation and guide all ICAAP‐related decisions. The basic strategic attitude can be documented in the form of the firm's strategy – that is, the purpose and objectives of the bank and how it executes on this purpose. This will be executed via a business plan. The business plan will be delivered subject to a risk strategy. The essential components of such a strategy include:

  • Risk policy principles;
  • Statements as to the bank's appetite;
  • A description of the bank's fundamental orientation with regard to individual risk types;
  • Comments on the current business strategy and future development of the business;
  • Areas of risk and uncertainty in the business strategy, and how these risks are managed in terms of the risk policy principles and the bank's risk appetite.

The risk strategy should be approved by the entire management Board of the bank and so it should be in summary form. At the next level down, the bank should provide a more detailed explanation of the methods and instruments employed for risk control and management. In practice, such a document is frequently referred to as the bank's risk management policy manual. Essentially, the risk manual contains a description of the risk management process, definitions of all relevant risk types, explanations of evaluation, control, and monitoring procedures for risk positions (separate for each risk type), and a discussion of the process of launching new products or entering new markets. In general, the depth of these explanations also implies that it will be necessary to revise at least certain parts of the document on a regular basis.

This level of detail will be contained in the executive summary of the report. Further outline will be provided in the body, while all technical detail required will be provided in appendices to the document.

ICAAP PROCESS – WORKED EXAMPLE OF PRESENTATION

In this section, a worked example of a typical ICAAP presentation to a regulator is presented. The bank in question is a vanilla UK commercial bank with retail and corporate business line exposure, and with a balance sheet of approximately £22 billion.

Table 15.6 is a summary of the key ICAAP processes undertaken in the bank. Figure 15.12 illustrates the governance structure of the ICAAP framework, mapping the components of the ICAAP to the internal processes, governance, and approvals, ultimately for the regulatory review known as the “SREP”.

Table 15.6 ICAAP process

Process Short description
Risk appetite Risk appetite is an integral part of ABC's risk management framework, designed to deliver the strategic risk objectives of capital adequacy, market confidence, stable earnings growth and access to funding and liquidity.
Material integrated risk assessment An exercise that identifies, evaluates, and assesses all material financial and non‐financial risks whether quantifiable or not.
Stress testing programme A comprehensive programme of stress testing that is designed to ensure senior management involvement, is aligned to regulatory requirements, and is integrated into the budgeting and capital planning processes.
9+3 capital planning and budgeting An annual budgeting and capital planning process incorporating business and financial plans for the current year and project at least an additional 2 years under a base case (normal conditions) and 3 years under stressed conditions.
Schematic illustration of the Internal Capital Adequacy Assessment Process (ICAAP) governance process: the commonly observed process.

Figure 15.12 ICAAP governance process: the commonly observed process

The framework described in the foregoing could be said not to meet the “use test”, which requires that the process and planning are to be derived from the business strategy, and that the business lines take an active part in the process. Figure 15.13 is an illustration of an all‐embracing process for ICAAP preparation and submission, in that it shows the incorporation of the business lines. Figure 15.14 is a qualitative description of the process.

Schematic illustration of the all‐embracing Internal Capital Adequacy Assessment Process (ICAAP) governance process.

Figure 15.13 All‐embracing ICAAP governance process

Schematic illustration of the summary of the ICAAP planning and implementation process, linking strategy and capital management.

Figure 15.14 Summary of the ICAAP planning and implementation process, linking strategy and capital management

Components of the internal capital assessment

The Basel regulatory regime prescribes three “pillars” of risk exposure capital input (see Chapter 2). In the UK, generally the capital assessment process combines two views: a point‐in‐time (Pillar I and Pillar IIA) and a forward‐looking (Pillar IIB) view. These are described as follows:

  • Point‐in‐time capital assessment (1‐year horizon) Pillar I and Pillar IIA: these form part of an Individual Capital Guidance (ICG), which is the minimum capital requirements the bank has to meet at all times. Pillar IIA assesses risks not in Pillar I or risks not adequately captured under the Pillar I framework. The process is illustrated in Figure 15.15.
Schematic illustration of the point‐in‐time capital assessment (1‐year horizon) Pillar I and Pillar IIA.

Figure 15.15 Point‐in‐time capital assessment (1‐year horizon) Pillar I and Pillar IIA

In an emerging market economy such as South Africa, a similar approach is used. Pillar I is fundamentally the same but Pillar IIA refers to an emerging market minimum capital requirement deemed by the SARB to be appropriate for South African banks. Banks prepare their own internal view of risk towards capital for the Pillar I requirement. This is based on internal economic capital models evaluated in aggregate rather than per individual risk type. Pillar IIB refers to the individual capital guidance and is set for each bank, based on the output of the bilateral SREP process where the regulatory capital requirement is compared to the internal/economic capital requirement.

  • The capital planning buffer (CPB): which is part of the internal capital target, is the amount of capital to be held in addition to the ICG such that it can be used in stress to absorb losses in order to prevent the bank from breaching its ICG. It reflects the change in the capital surplus/deficit and is illustrated in Figure 15.16.
Schematic illustration of the capital surplus/deficit.

Figure 15.16 Capital surplus/deficit

The governance of this process is not cast in stone: different banks will organise it in different ways. Certainly, there is no one single correct way to approach this, but the governance structure must be fit for purpose in a way that provides confidence to the regulator and clearly articulates the risk appetite to the Board. The author's recommendation is first to compile a “risk taxonomy” associated with the capital management and ICAAP process, and then allocate roles and responsibilities based on this taxonomy.

In order to ensure a consistent approach to risk identification and measurement, it is preferable to compile a “risk taxonomy” associated with the risk management framework of the bank and used in the capital management and ICAAP process.

Roles and responsibilities will be defined based on the risk management framework of the bank. This is often based on the three lines of defence framework, based on business as the first line, risk as the second line, and audit and the Board as the third line, affirming that the second line review process functions properly.

Table 15.7 is a summary of a template risk taxonomy for the ICAAP and capital stress testing process.

Table 15.7 Capital management risk taxonomy

Aspect Key facts
Definition The risk taxonomy is a catalogue of the inherent risks associated with the ABC Bank business, its customers, and the regulatory environment in which it operates.
Rationale In order to establish and maintain the risk framework and its various components, it is important to agree a list of risks (risk taxonomy) and associated accountabilities around which the framework is designed and built. The risk taxonomy provides a common risk language for all stakeholders whether internal or external.
Preparation The group taxonomy has been used as a starting point and then tailored to the ABC Bank business based on discussion with business and risk stakeholders (subject matter experts), coupled with a review of ABC Bank's strategy, including product strategy, profit and loss account, and balance sheet and other related information/documentation. This will need to change and evolve as the company's internal and external environments change.
Structure There are three levels of risks as follows:

Level 1: These are the headline risk types common to most financial institutions, e.g. credit, market, and operational.

Level 2: These are the identifiable subrisks of the Level 1, e.g. core lending risk and concentration risk are subrisks of Level 1 credit Risk.

Level 3: These arise where Level 2 risks require to be subdivided further into specific risks requiring risk management.

Status ExCo have approved the risk taxonomy and this will now be used when rolling out the risk framework.
Importance for ICAAP The risk taxonomy is an important starting point for the MIRA process outlined on the next slide, which in turn is used in the capital assessment process.

The MIRA

The material integrated risk assessment (MIRA) is a key part of the ICAAP process. It helps to place the key drivers of the ICAAP in context. It is a basic “top‐down” risk assessment tool across all risk types. It identifies material risks and assesses the risk and control framework in place to mitigate those risks. The MIRA is an important input to the capital assessment process because it identifies material risks and then assesses the capital treatment required for each of those risks. Material risks are either managed and have capital set aside or else they are managed away, not requiring capital. An example illustration of the output is given in the next section.

Capital treatment of material risks

In our example illustration, the MIRA material risks are summarised below. These are used to determine whether the risk is either “managed and capitalised” or else just “managed”. In this case, the MIRA has identified that the material add‐on risks are for credit risk concentration, operational risk, and non‐traded market risk and these are then discussed in more detail in Table 15.8.

Table 15.8 MIRA material risks

Risk type Pillar I Pillar IIA
Credit Risk Advanced Internal Ratings Based (subject to PRA approval) and Standardised approaches are utilised. Single Name, Sector, Geographical–Methodology to calculate capital charges is work in progress.
Operational Risk (including IT risk) The Standardised Approach (TSA) is utilised. The 3‐year average gross income grouped by business line is multiplied by a % factor (12%, 15%) depending on business line. ABC Bank is developing a comprehensive scenario analysis programme from now and throughout 2014. In the interim, ABC Bank will adopt a scaling approach based on the Group operational risk economic capital model, which takes into account internal loss event experience, relevant scaled scenario analyses from the Group, scenario analyses outputs, and relevant external loss event data. ABC Bank will scale itself against the Group UK Retail and Corporate Banks based on Gross Income as at year end 2012.
Compliance Risk Conduct and prudential compliance risks
Covered through the Operational Risk capital charge.
Non‐Traded Market Risk Not covered in Pillar I VaR approach is adopted for capital assessment.
Liquidity and Funding Risk Liquidity and Funding risk is covered by the ILAA.
Capital and Stress Testing Risk Capital and Stress Testing Risk is managed through the capital planning process, stress testing, and scenario analysis.
Strategic Risk Not covered in Pillar I Managed through the Business and Risk strategy and not capitalised.
Reputational Risk Not covered in Pillar I Any financial losses related to reputational risk are covered by the capital treatment relevant to the risk type through which the loss manifests. For non‐financial events the relevant capital treatment is predominantly covered by the operational risk capital charge.
Business Risk Not covered in Pillar I The risk is managed and taken into account under integrated stress testing where income and expenses are stressed. For capital purposes this risk is captured through the Capital Planning Buffer (Pillar IIB).
Key:
Risk is managed and capitalised
Risk is managed
Pillar IIA Risk

Pillar II add‐on

From the above, the bank in question has to calculate its Pillar II add‐on for credit risk concentration and non‐traded interest‐rate risk. The relevant points here are:

  • Single name concentration (SNC):

    One methodology to address this is the Pythkin approach, which is aligned with the theoretical (Vašíček) approach underlying the regulatory capital formula. The alternative Gordy approach, which is sometimes advocated, is also used although it is based on a different underlying model. In our example the add‐on for SNC is highest for large exposures with high PD.

  • Sector concentrations (SRC):

    This is an add‐on for excess concentration in certain sectors such as CRE.

  • Non‐traded market risk (NTMR) – method of assessment:

    The bank does not incur traded market risk. Non‐traded market risk arises from:

    • Repricing risk: arises from timing differences in the maturity (for fixed‐rate) and repricing (for floating‐rate) of assets and liabilities. There repricing mismatches can expose net interest income and economic value to fluctuations in interest rates.
    • Yield curve risk: arises when yield curve shifts differently between the short end and the long end and this can have adverse effects on a bank's economic value where repricing mismatches exist. The Liquid Asset Buffer (LAB) of £3.5bn is expected to be held in gilts for an average duration of 4 to 7 years, and this would be subject to fluctuating gilts prices if unhedged or to swap spread risk if hedged with swaps. For the purpose of an interim capital assessment, NTMR is measured using a VaR model based on a 99% confidence interval over a 1‐year holding period. In addition, a parallel shift of +/–100 and +/–200 basis point parallel shifts are also calculated and reported to ALCO. Non‐traded market risk (NTMR) – estimates of exposure: The risk exposure on the estimated LAB is a PV01 of circa £820k for an average 4‐year duration. The VaR estimated on a hedged or unhedged basis (using a 99% confidence interval for a 1‐year holding period) is between £50 and £80m. Thus, the Pillar II add‐on will be £80mm.

Operational risk

In normal circumstances, to calculate a robust Pillar II operational risk capital charge, a bank would use a variety of data including internal loss event data, external loss event data, key risk indicators, and the output of scenario analyses. For a new bank, there may be insufficient internal loss event data specific to its operations to be able to undertake any meaningful modelling capability. As a consequence, such a bank (as in our case study here) would develop a comprehensive programme for scenario analysis, which it would use until such time as 3 years' worth of loss event data was accumulated.

In the meantime, while the scenario analysis approach is being developed, the example bank here adopts a scaling approach based on the Group operational risk economic capital model, which considers Group internal loss event experience, its own programme of scenario analyses outputs, and relevant external loss event data.

ICAAP approach

In order to deliver a credible Pillar IIA operational risk capital charge, the bank takes its five largest risks based on its Material Integrated Risk Assessment (MIRA) and subjects them to workshopped scenario analysis. All other MIRA risks will be reviews to ensure that their exclusion from this process would not have a meaningful impact on the capital number generated by the five largest risks. These are:

  • Technology/business process change/system failure;
  • Third‐party supplier failure (RBS);
  • Customer retention;
  • AML and sanctions; and
  • Change management.

The outcomes of these scenarios will be subjected to a scenario analysis economic capital model.

Even though the internal risk assessment may be higher, banks in South Africa will only hold more capital if the aggregate internal risk view is higher than the regulatory view. Alternatively, the regulator may give guidance requesting increases under Pillar IIB.

STRESS TESTING

Stress tests show the effects of events that cannot (or not sufficiently) be accounted for under business as usual circumstances. Banks are repeatedly confronted with these exceptional scenarios: market crashes, country crises, critical political events, or major bankruptcies, for example. For situations of this kind, the assumptions of the usual assessment methods do not appear sufficient, which can lead to substantial underestimation of risk. For this reason, it is important for a bank to define relevant stress scenarios.

For example, fluctuations on international financial markets will have a different effect on a bank with high market risks than on a regional bank that primarily focuses on customer business. Nevertheless, it is necessary to account for the fact that these shocks can also have a noticeable impact on banks operating in more remote segments. After a market crisis, interest in funds and equities diminishes, which in turn brings about a decline in fee and commission income for many banks (even those that only operate regionally). For this reason, it may be helpful to define relevant stress scenarios for all of a bank's material risk types and to analyse the effect the simultaneous occurrence of such exceptional situations would have on the bank's risk‐bearing capacity. The institution‐specific business focuses can be taken into account by assigning different weights, for example. Banks that assume correlations in their ICAAP calculations should not assume any diversification effects in their stress scenarios. In practice, banks will apply systemic stress tests where the correlation between risk types is implicit in the risk factors evaluated in the macro‐economic scenario. Banks also use specific stress events and reverse stress tests to obtain a broad understanding of the impact of individual risks and the interplay between them on the business plans and their inherent risk profiles.

Moreover, tests prescribed by supervisory authorities also have to be integrated into the design of relevant stress scenarios (for example, when certain methods are used to calculate capital requirements or large exposures). A bank can depict the effects of stress scenarios within the framework of risk‐bearing capacity analysis. In this context, the bank should consider stress scenarios on the risk side as well as the effects of exceptional situations on the capital side. The results of the stress tests provide indications that may be helpful in identifying any existing weaknesses. This information can be used to develop countermeasures such as restricting dividend payouts, raising additional forms of capital, limiting certain business lines, redeveloping business architectures or in terms of certain specific risk criteria, limiting certain asset concentrations or introducing security checks and access authorisations in order to reduce operational risks, or drawing up general contingency plans.

ICAAP stress testing framework: worked example

For the example UK commercial bank, the templates used to describe the stress testing framework used as part of the ICAAP are presented.

Stress testing is a key internal risk management tool and is used as an input into a number of bank key business processes (including strategic planning, risk appetite, ICAAP, ILAA, and so on). This section summarises the different objectives of stress testing within the bank, structured across four main areas as follows:

  • Strengthen risk management:
    1. Assess the impact of certain macro‐economic and systemic events on a portfolio and bank as a whole;
    2. Identify a variety of hidden, unmatured risks at a group, portfolio, and divisional level;
    3. Formulate risk appetite and better manage the business through improved understanding of the underlying risks and sensitivities;
    4. Reverse stress testing: test the vulnerabilities of the business model and the resulting actions would improve the resilience of the entity under stress.
  • Inform capital and liquidity requirements:
    1. Support the assessment of capital and liquidity requirements for the bank;
    2. Contribute to continuous improvement of the bank's capital and liquidity models.
  • Maintain confidence in the bank's resilience to stress:
    1. Evaluate all of the material consequences of stress events, across all risk classes;
    2. Facilitate the development of risk mitigation plans and implement a framework of early warning indicators.
  • Meet regulatory requirements:
    1. Respond promptly and effectively to regulator‐mandated stresses;
    2. Support regulatory assessment of capital and liquidity requirements (for example, the UK PRA ICG and ILG requirements).

Stress testing approaches

Table 15.9 is a slide that would be presented at the start of the ICAAP deck to the regulator during the SREP, with initial capital assessment shown at Table 15.10 and projection at Table 15.11.

Table 15.9 SREP slide

Three types of stress testing are applied:

Type of stress testing Objectives Type of activities
Entity‐wide or integrated stress testing
  • Assess the impact of certain macro‐economic and systemic events on a portfolio and the banks as a whole.
  • Support the assessment of capital and liquidity requirements for the bank.
  • Facilitate the development of risk mitigation plans and implement a framework of early warning indicators.
  • Support regulatory assessment of capital and liquidity requirements (i.e. CPB, ICG, and ILG requirements).
  • Top‐down, integrated, macro‐economic stress testing to support the following:
    1. – ICAAP and other supervisory mandated stress tests (e.g. CPP)
    2. – Risk appetite setting
    3. – Sensitivity analysis of the business plan (covering business and strategic risk).
Risk specific
  • Better manage the business through improved understanding of the underlying risks and sensitivities.
  • Contribute to continuous improvement of the bank's capital and liquidity models.
  • Bottom‐up, risk‐specific stress testing to cover the risk types defined in the ABC Bank risk taxonomy:
    1. – Credit risk;
    2. – Non‐traded market risk;
    3. – Funding and liquidity risk;
    4. – Operational risk (including compliance and reputational risk).
Reverse stress testing
  • Identify a variety of hidden, unmatured risks at a total, portfolio, and divisional level.
  • Identify the circumstance where the business model fails.
  • Remain in line with regulatory requirements related to stress testing, including completing regulator‐mandated stresses.
  • Developing scenarios that would threaten the bank's business model.
  • Calibrating a level of stress that would lead to bank failure.
  • Complementing setting of risk appetite and recovery and resolution planning.

Table 15.10 Initial capital assessment

Assessment as at 30 June 2013, £mn
RWAs Mixed Capital @8% Mixed RWAs Standardised Capital @8% Standardised
Pillar 1        
Credit 11,279  902.3 13,380 1,070.4
Credit Counterparty Risk (Derivatives)    295   23.6    295   23.6
Non‐Credit Assets (Fixed Assets)    106     8.5    106    8.5
Operational Risk  1,576   126.1  1,576   126.1
Total Pillar 1 13,256 1,060.5 15,357 1,228.6
Pillar 2A Add‐ons        
Single Name Concentration     10.0      10.0
Sector Concentration    267.0     267.0
Non‐Traded Market Risk     80.0      80.0
Operational Risk     90.0      90.0
Total Pillar 2A    447.0     447.0
Total Pillar 1 and Pillar 2A Capital   1,507.5   1,675.6
ICG Multiplier      42%      36%

Table 15.11 Base case scenario projection

Base Case
£m 2014 2015 2016 2017 2018
Required          
RWAs 12,647 12,870 13,387 13,877 14,488
Pillar 1 – Capital 1,012 1,030 1,071 1,110 1,159
Pillar 2A (proposed ICG) – Capital 426 434 451 468 489
Total Required Capital 1,438 1,464 1,522 1,578 1,648
Total CT1 1,748 1,970 2,206 2,478 2,757
Deductions −230 −290 −268 −246 −225
Total Tier 1/CT1 1,518 1,680 1,938 2,231 2,532
Tier 2 374 374 374 374 374
Total Available Capital (T1 and T2) 1,892 2,054 2,312 2,605 2,906
Surplus 453 591 790 1,027 1,258
Ratios          
Core Tier 1 (based on Pillar 1 RWAs) 12.0% 13.1% 14.5% 16.1% 17.5%
Total Capital (based on Pillar 1 RWAs) 15.0% 16.0% 17.3% 18.8% 20.1%

The stress testing framework should emphasise integrated stress testing for the aggregate balance sheet. Remember that the ICAAP is designed to be a forward‐looking process, so that the anchor point for start of testing would be today and then built around scenarios over the next 1, 3, and 5 years.

For the case study here on the UK commercial bank, the top‐level scenario planning looked like this:

  • A recession for the first 2 years, triggered by contagion from a re‐intensification of Eurozone sovereign concerns; this scenario is relevant for the UK bank as it is a UK‐based recession although the trigger is outside the UK. The scenario addresses the key vulnerabilities in the bank's portfolio, being UK focused affecting CRE and mortgage exposures with the key economic parameters below:
    • UK real GDP falls at an annualised rate of 5.7% at the trough of the recession;
    • Unemployment peaks at the highest to 11.4%, affecting household consumption and business consumption;
    • House prices fall by more than 20% over the first two scenarios and remain volatile thereafter;
    • M4 lending and holdings contract but at different rates;
    • Interest rates (3‐month Libor) increase in the first 3 years and then fall for the next 2 years.
  • The contraction is followed by a slow recovery, with growth eventually returning close to trend towards the end of the scenario.

Of course, banks would design their stress test relevant to their operating environment. A South African bank would concentrate on the economic impact of recession in South Africa.

The scenario is then subject to drilldown to see the impact on financials:

  • Balance sheet under stress:
    • Asset balances decline under stress due to debt flow, fall in new lending, and in consumer/household spending as reflected in the relevant economic parameters;
    • Additional assumptions are being taken with regard to CRE decline as shown in scenario 3.
  • Operating and funding costs:
    • Balance sheet decline will cause a corresponding fall in income in the first 2 years of the stress and then picks up the following 3 years;
    • Net interest margin declines compared to base case and remains low in the first few years of the recovery;
    • Costs will follow the base balance sheet forecast and any cost cutting will be taken as a management action;
    • Funding costs would reflect the scenario interest rates but would increase if the funding gap increases.
  • Impairments:
    • Impairments are equal to EL and taken into the P&L;
    • The scenario has a negative effect on unemployment, house prices, and CRE index and this has a significant impact on impairments during the stress period as creditworthiness deteriorates. Consequently, PDs and expected losses increase causing impairments to more than double during the stress period;
    • Similarly, an economic recovery would result in lower impairments.
  • RWA credit:
    • The effects of a decline in house prices and property values during stress would decrease the value of the security of the loan and hence increase LGDs. This and the increase in PDs would cause a sharp increase in RWAs and this is offset by debt flow (defaults) and contraction of the balance sheet.
  • Operational risk losses and RWAs:
    • It is assumed that certain operational risk losses (for example, external fraud) crystallise under stress;
    • Operational risk RWAs are recalculated according to the Standardised Approach and would decline in line with income.
  • Capital plans:
    • Capital deductions remain although there will be no excess provisions over EL as provisions are equal to or greater than EL;
    • The assets in the Liquid Asset Buffer (LAB), also termed Available For Sale (AFS), are revalued and profits/losses taken against capital and not P&L in line with accounting rules;
    • The combined effects of a deterioration in P&L and an increase in RWAs causes CT1 and total capital ratios to decline compared to base. This will then be assessed against regulatory minima.

The above summary is presented as a template as to how a bank could set the stress testing framework for impact on financials.

Impact of Basel III/CRDIV capital buffers

The capital buffers described earlier in the chapter are not all relevant to all banks (as we discussed). Individual banks would have to determine which ones applied and then integrate the requirements of relevant buffers into their capital planning.

To recap, for banks in the EU, CRDIV specifies five new buffers:

  • A micro‐prudential buffer – the CCB set at 2.5%;
  • Macro‐prudential buffers – the CCB set buffers for Global Systemically Important Institutions (G‐SIFIs), the buffer for other Systemically Important Institutions (O‐SIIs), and the Systemic Risk Buffer.

These buffers are all additive and only the G‐SIFI buffer takes into account the size of the financial situation. The UK PRA specifies a firm‐specific PRA buffer to ensure firms are meeting capital requirements in line with the PRA's risk appetite, which may result in capital requirements over and above the other capital buffers. These combined requirements and, in particular, the increase in proportion of CET1, are super‐equivalent and could put UK banks at a competitive disadvantage to overseas banks operating through UK branches.

The increase in the proportion of CET1 may disproportionately increase the cost of capital for UK banks and, hence, result in additional costs for borrowers. For smaller banks, who arguably already face reduced access to capital, this effect would potentially be exacerbated and could consequently become a deterrent to entry into the banking sector contrary to the OFT and ICB intentions of encouraging new challenger banks to compete in the industry.

For the case study here on the UK commercial bank, which has a balance sheet of approximately £22 billion, and is not a “G‐SIFI” bank, its capital planning process would include the possibility of the PRA buffer being required to be maintained, thus increasing its capital requirements.

DIVIDEND POLICY

As part of its capital management and capital planning process, it is important for a bank to have in place a formal dividend policy statement. This should reflect the bank's overall risk appetite and be referred to in the risk appetite statement. Dividend policy is a critical part of the capital management process, because it is part of the process by which its capital buffers are built up and retained.

For example, where one has observed a dividend payment made to the shareholder, which was in excess of 50% of the reported post‐tax profit, this would suggest a Board that was not placing capital preservation as a priority. Such an approach would not be a common one for, for instance, a “challenger” bank. Typically, banks that are in some form of challenger mode, such as start‐ups, niche players, or those operating under a revised business model, pay little or no dividend for the first few years. A good example of this is TSB Bank in the UK, which was divested in 2014 from Lloyds Banking Group, with a balance sheet of approximately £25 billion. It stated on listing that it expected to pay no dividend for at least the next 5 years. The statement went on to describe the rationale for this policy, which included the desire to build up regulatory capital buffers to above peer group levels. A policy similar to that of TSB would be more in line with what one would expect to observe at most banks under competitive or other stress.

In the EU, Article 141 of the CRDIV (paragraph 2) states that institutions that fail to meet the combined buffer requirement shown in Exhibit 3 must calculate a “maximum distributable amount” (MDA). If a bank falls below its combined buffer capital requirement, it must reduce discretionary distributions of earnings (including dividend payments, share buybacks, discretionary cash payments on AT1 instruments, and bonus payments) in accordance with its MDA calculations. Hence, equity and AT1 investors must assume that AT1 distributions would be cancelled at the point of MDA breach and should focus on this calculation attachment point, in addition to any CET1 write‐down or conversion trigger embedded in AT1 instruments. In essence, banks that fail to meet the combined buffer required are prohibited from distributing more than the MDA through any (a) distribution in connection with CET1, (b) bonus payments, or (c) payments on AT1.

The MDA is given by after‐tax profits generated since the most distribution referred to in (a)–(c) above, multiplied by the appropriate “factor”. This factor ranges from 0% to 60%, and is based on the quartile of the combined buffer requirement in which the bank's CET1 ratio falls. If CET1 falls in the upper quartile, 60% of the MDA may be distributed, falling in 20% increments to 0% in the lowest quartile.

CASE STUDY: INTERNAL CAPITAL ASSESSMENT

The quantitative output from an “internal capital assessment” (ICA) exercise at an EU commercial bank (“ABC Bank”) is illustrated. It is a baseline input to the ICAAP process (the headings are the same as would be used in the ICAAP) as well as valuable management information in its own right, provided the output is used to inform management actions. An example of the list of possible management actions in stress is also illustrated. This output would be for senior management and the Board to approve before its content was submitted to the regulator. The key balance sheet objectives are those shown in Figure 15.17, with the base case capital projection shown at Figure 15.18.

Schematic illustration of the progress towards key strategic balance sheet objectives.

Figure 15.17 Progress towards key strategic balance sheet objectives

Graphical illustration of base case capital projection.

Figure 15.18 Base case capital projection

Assessment of capital buffers

As there is more than one approach that can be taken when determining the capital buffer requirement, in most banks the process will involve running a range of different scenarios, such that one will be left with a range of different capital buffer requirements. It is a Board and/or senior executive decision as to which approach one should adopt finally.

In our case study example of the same bank that has been considered in the previous section, the following approaches were considered:

  1. Assessment of capital buffers: mixed approach;
  2. Forward‐looking capital assessment: standard approach;
  3. Assessment of capital buffers: standard approach.

The results for each approach are shown at Figures 15.19, 15.20 and 15.21.

The results for each are presented in Figures 15.19 to 15.21.

Approach (1): Assessment of capital buffers: mixed approach

Graphical and summary illustrations of assessment of capital buffers mixed approach.

Figure 15.19 Assessment of capital buffers mixed approach

Approach (2): Forward‐looking capital assessment: standard approach

Graphical and summary illustrations of forward‐looking capital assessment: standard approach.

Figure 15.20 Forward‐looking capital assessment: standard approach

Approach (3): Assessment of capital buffers: standard approach

Graphical and summary illustrations of the assessment of capital buffers: standard approach.

Figure 15.21 Assessment of capital buffers: standard approach

Summary of management actions in stress

Table 15.12 is a summary of the analysis on management action in stress, which is an Appendix to the ICA and also an integral part of the ICAAP submission. The table is the complete list of possible capital related management and recovery actions that could be put in place at ABC Bank, including a summary of their impact on capital, liquidity, and P&L. Of course, the exact content of the table will differ by type of banking institution and specific business model. In reality, some of these actions will not be on a “going concern” basis, or would so damage the franchise as to render the firm moribund. The emphasis must be on realistic going concern management actions.

Table 15.12 Summary of management actions in stress

Management actions in stress
The table below is the complete list of possible capital related management and recovery actions that could be put in place, including a summary of their impact on capital, liquidity, and P&L
Management options Description Damage to franchise Numbers
A. Stop selling Capital Liquidity P&L impact
A.1 Business lending Cease all new business lending via loans and overdrafts High £202m £2bn £60m pa
A.2 Mortgages Cease all new mortgages Low £17.2m £1.2bn £44.4m pa
A.3 Personal lending Cease all new personal loans. This is normally unsecured borrowing and carries significant RWA Medium £45.1m £376m £37m pa
A.4 Stop renewals Loans, commercial bullet facilities that do not contractually require renewal Medium £9.6m £80m £2.4m pa
  B. Capital maximisation
B.1 Adjust limits Cancel all undrawn limits on accounts including utilised overdrafts High £50.4m Nil £21m
B.2 RWA Stop high RWA items Medium See A1 See A1 See A1
  C. Capital raising
C.1 Sell a stake in the business Seek buyers for element of the business via private placement Low £200m £200m £30m pa
C.2 Debt Convert debt to shares. (Bail in senior debtholders) Low £200m Nil £18m
C.3 Rights issue Launch rights issue Low £200m £150m Nil
  D. Debt buyback
D.1 Debt Buy back own debt if opportunity for capital gain Low £129m (in retained profits) £180m £129m
  E. Capital retention
E.1 Dividends Withhold any unpaid dividends, stop new ones Low £45m £45m Nil
  F. Fixed asset sales
F.1 Property Sale and leaseback or sublease Low Net negligible £32m Nil
  G. Sell assets
G.1 Operations Outsource with “free” period up front Medium £20.2m (in retained profits) £26m £26m
G.2 Mortgage book Sell mortgage book Medium £104.4m £5,800m £435m
G.3 Credit card book Sell receivables Low £36m £300m £6m
G.4 Data Sell marketing data Medium £0.78m £1m £1m
G.5 Sale “tall trees” debt Sell off debt for customers over £30m debt Low £187.5m £1,860m £56m
  H. Repricing
H.1 Deposits Increase rate paid to customers to enhance liquidity None Corporate: £0.58m Retail: £1.55m Corporate: £100m Retail: £100m Corporate: £0.75m Retail: £2m
H.2 Lending Increase pricing to enhance profitability and retain liquidity by reducing demand Medium £211.4m £2,860.8m −£113.1m
H.3 MTA Increase pricing to enhance profitability Medium £1.0m £1.3m £1.3m
H.4 LOBO Exercise review clause under “lender option–borrower option” contracts (LOBO) Low ? ? ?
  I. Radical cost cutting
I.1 Bonus/incentives Stop all discretionary salary elements Low £12.4m (in retained profits) £16m £16m
I.2 Pay cut 10% pay cut for staff Low £13.2m (in retained profits) £17m £17m
I.3 Non‐staff Stop all discretionary payments, e.g. marketing, travel, etc. Low £14.9m (in retained profits) £19.2m £19.2m
I.4 Reduce footprint Close branches High 0 −£2.5m £0.3m
I.5 Recruitment Stop all recruitment activity including in‐flight. Give notice to terminate consultants/agency, etc. Stop all recruitment Low £0.38m (in retained profits) £0.5m £0.5m
I.6 Cost reduction Impose flat 10% budget reduction across all areas Low £38.75m (in retained profits) £50m £50m

CONCLUSIONS

Capital management is a critical part of managing a bank. Indeed, to suggest it is “risk management” is to somehow underplay its importance; capital along with liquidity is the lifeblood of banking and must be managed on a conservative basis, with a going concern outlook throughout the economic cycle.

This chapter has presented the role of capital management within the business of banking. The ICAAP process has been designed to ensure that long‐term through‐the‐cycle capital planning is an inherent part of banking, but with any regulatory supervision process it tends to be downgraded to a bureaucratic “tick‐box” exercise. This is an undesirable route for any bank to take.

Risk is a significant aspect of business activities in a market economy. As risk taking or transformation of risks constitutes a major characteristic of the banking business, it is especially important for banks to address risk management issues. The necessity from a business perspective has arisen from developments on the financial markets and the increasing complexity of the banking business. These circumstances call for functioning systems that support the limitation and control of risk exposure. The implementation of an ICAAP is not rooted exclusively in regulatory considerations; rather it is in the best interests of all stakeholders of an institution. The owners are inherently interested in the continued existence of the bank as they expect a reasonable return on their investment and wish to avoid capital losses. But certainly, a bank's employees, customers, and lenders also have an interest in its survival. The individual interests of these groups are not mutually exclusive; in fact, all stakeholders should be interested in ensuring that the institution does not take on risk positions that might endanger its continued existence. The main motive for the ICAAP can therefore be seen in ensuring a viable risk position by dealing with risks in the appropriate manner. In particular, it is important to detect developments that may endanger the institution as early as possible in order for the bank to take suitable management action in response. In this regard, delivering an ICAAP serves the interests of all the internal and external stakeholders of the bank.

This raises two issues: first, when calculating the bank's risk‐bearing capacity, it is necessary to determine the extent to which a bank can afford to take certain risks at all. For this purpose, the bank needs to ensure that the available risk coverage capital is sufficient at all times to cover the risks taken. Second, the bank must review the extent to which risks are worth assuming; that is, it is necessary to analyse the opportunities arising from risk taking (evaluation of the risk/return ratio, typically a risk‐adjusted measure such as RARoC). The main objective of the ICAAP is to confirm the bank's risk‐bearing capacity. Comprehensive risk/return management follows as a next step. The ICAAP thus constitutes a comprehensive package that delivers significant benefits from a business perspective.

BIBLIOGRAPHY

  1. BIS Enhancements to the Basel II framework, http://www.bis.org/publ/bcbs157.pdf
  2. BIS Principles for sound stress testing practices and supervision, http://www.bis.org/publ/bcbs155.pdf
  3. Choudhry, M. (2012). The Principles of Banking, Singapore: John Wiley & Sons Ltd., Chapters 2, 16, 17.
  4. Churm and Radia (2012). “The Funding for Lending Scheme”, Bank of England Quarterly Bulletin, Q4. Available at http://www.bankofengland.co.uk/publications/Documents/quarterlybulletin/qb120401.pdf
  5. De La Mora, Matten and Barfield (2010). “Capital management in banking: the way forward”, The Journal, PWC, December. Available at http://www.pwc.com/gx/en/banking‐capital‐markets/pdf/capital‐management.pdf
  6. EBA (2013). Guidelines on retail deposits. Available at http://www.eba.europa.eu/regulation‐and‐policy/liquidity‐risk/guidelines‐on‐retail‐deposits‐subject‐to‐higher‐outflows‐for‐the‐purposes‐of‐liquidity‐reporting
  7. Freer, J. (2011). “Capital management: banking's trickiest juggling act”, Bank Director, 3 June. Available at: www.bankdirector.com/magazine/archives/4th‐quarter‐2009/capital‐management‐bankings‐trickiest‐juggling‐act
  8. Gropp, R. and Heider, F. (2009). The determinants of bank capital structure. Available at www.ecb.europa.eu/pub/pdf/scpwps/ecbwp1096.pdf
  9. Marshall, P. (2012). Capital management in stressful times: taking a holistic approach. Available at http://businessfinancemag.com/article/capital‐management‐stressful‐times‐taking‐holistic‐approach‐0106

NOTES

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset