Financial Risk Management and Basel Norms: Types of Risk, Capital, CAMELS, PCA and ECL for RBI Grade B Finance

Last updated: 2026-11-13 · MockMentor

"Financial Risk Management" opens the General Topics unit of the RBI Grade B Phase 2 Finance syllabus, and for a banking regulator it is central. Objective questions test the types of risk, the components of Basel III capital, the Liquidity Coverage Ratio, the thresholds of Prompt Corrective Action and the meaning of beta. Descriptive questions ask how banks manage credit or liquidity risk, or what the move to expected credit loss provisioning means. This chapter covers the full topic, from the definition of risk to the latest Basel III rules applicable from April 2027.

In one line: banks face credit, market, liquidity, operational and other risks; they manage them through identification, measurement, limits and capital, and RBI enforces this through Basel III capital and liquidity rules, risk-based supervision, Prompt Corrective Action and, from April 2027, expected credit loss provisioning.

Basic concepts

• Risk: the possibility that actual outcomes differ from expected outcomes, causing a loss. In finance, risk is usually measured by the variability of returns.
• Risk and return: investors demand higher expected returns for taking on higher risk. A government bond pays less than a corporate bond because it is safer.
• Capital: the buffer of shareholders' funds and certain instruments that absorbs losses, protecting depositors. The riskier a bank's assets, the more capital it needs.
• Risk-weighted assets (RWA): a bank's assets multiplied by risk weights that reflect their riskiness. A loan to the central government in rupees carries a zero weight; an unsecured personal loan carries a high weight.
• Capital to Risk-weighted Assets Ratio (CRAR): capital ÷ risk-weighted assets. Also called the capital adequacy ratio.
• Systematic and unsystematic risk: systematic risk affects the whole market and cannot be diversified away; unsystematic risk is specific to a firm and can be reduced by diversification.

Why in News?

1. RBI issued final directions on capital charge for credit risk under the Basel III standardised approach in April 2026, effective 1 April 2027. They make risk weights more sensitive to the actual risk of each exposure.
2. RBI's final expected credit loss (ECL) framework, released in July 2026, will replace the incurred-loss approach to provisioning from 1 April 2027, using three stages based on changes in credit risk.
3. RBI continued to name SBI, HDFC Bank and ICICI Bank as Domestic Systemically Important Banks (D-SIBs), with extra capital requirements.
4. Earlier, RBI raised risk weights on unsecured consumer credit in November 2023 to slow risky lending, a clear example of macroprudential policy.

Types of risk

Credit risk

The risk that a borrower or counterparty fails to repay as agreed. It is the largest risk for most banks.

• Default risk: the borrower does not pay.
• Counterparty risk: the other party in a derivative or securities trade fails.
• Concentration risk: too much lending to one borrower, group or sector.
• Country risk: a foreign borrower cannot pay because of events in its country.

Credit risk is measured through the probability of default (PD), the loss given default (LGD) and the exposure at default (EAD). Expected loss = PD × LGD × EAD.

Example: a loan of ₹100 crore with a 2% probability of default and a 40% loss given default has an expected loss of 100 × 0.02 × 0.40 = ₹0.8 crore.

Market risk

The risk of losses from movements in market prices.

Value at Risk (VaR) estimates the maximum loss over a given period at a given confidence level. For example, a one-day 99% VaR of ₹10 crore means that on 99 days out of 100, losses should not exceed ₹10 crore. Basel rules have moved towards Expected Shortfall, which measures the average loss beyond the VaR level.

Interest rate risk in detail

• Gap risk (repricing risk): assets and liabilities reprice at different times.
• Basis risk: the rates on assets and liabilities are linked to different benchmarks.
• Yield curve risk: short and long rates move differently.
• Embedded option risk: borrowers prepay loans or depositors withdraw early.

Interest Rate Risk in the Banking Book (IRRBB) is the risk to earnings and the economic value of a bank's loans and deposits. The failure of Silicon Valley Bank in 2023 showed how serious it can be.

Liquidity risk

The risk that a bank cannot meet its obligations as they fall due, because it cannot raise funds or sell assets quickly without large losses.

• Funding liquidity risk: depositors withdraw or lenders refuse to roll over.
• Market liquidity risk: assets cannot be sold at fair prices.

Banks manage it through Asset-Liability Management (ALM), which compares maturities of assets and liabilities in time buckets, and through the Basel III liquidity ratios.

Operational risk

Basel defines it as the risk of loss from inadequate or failed internal processes, people and systems, or from external events. It includes fraud, cyber attacks, system failures, legal risk and natural disasters. It does not include strategic and reputational risk.

Other risks

Systemic and systematic risk are often confused. Systematic risk is market-wide risk that affects all assets, such as a recession. Systemic risk is the risk of the collapse of the whole financial system, as in 2008.

Risk in the banking book and the trading book

• Banking book: loans and investments held to maturity. Main risks: credit risk and interest rate risk.
• Trading book: securities and derivatives held for trading. Main risk: market risk.
• Off-balance sheet items: guarantees, letters of credit, undrawn commitments and derivatives, which can turn into exposures. They are converted into on-balance sheet equivalents using credit conversion factors.

The risk management process

1. Identification of risks in each business.
2. Measurement and assessment, using ratings, models, stress tests and scenario analysis.
3. Control and mitigation, through limits, collateral, diversification, hedging and insurance.
4. Monitoring and reporting to senior management and the board.

Banks follow the "three lines of defence": business units own the risk, an independent risk management and compliance function oversees it, and internal audit gives independent assurance. A Chief Risk Officer reports to the board's risk management committee. RBI requires an Internal Capital Adequacy Assessment Process (ICAAP) in which banks assess their capital needs for all risks.

The Basel Accords

The Basel Committee on Banking Supervision (BCBS), set up in 1974 at the Bank for International Settlements in Basel, Switzerland, frames global standards for bank regulation. India is a member.

Basel I (1988)

• Focused only on credit risk.
• Minimum capital of 8% of risk-weighted assets.
• Five broad risk weights: 0%, 10%, 20%, 50% and 100%.
• India adopted it from 1992, following the Narasimham Committee.
• Market risk was added in 1996.

Basel II (2004)

Built on three pillars:

India implemented Basel II from 2008 for foreign banks and large Indian banks and from 2009 for all others.

Basel III (2010 onwards)

After 2008, Basel III raised the quality and quantity of capital and introduced liquidity rules.

Capital requirements in India

India's requirements are higher than the global minimum, reflecting RBI's conservative approach.

Components of capital

Leverage ratio

The leverage ratio is Tier 1 capital ÷ total exposure (not risk-weighted). It acts as a backstop to risk-based ratios. RBI requires 4% for D-SIBs and 3.5% for other banks; the global minimum is 3%.

Liquidity ratios

RBI revised the LCR rules in 2025, assigning higher run-off rates to retail deposits that can be withdrawn instantly through internet and mobile banking, effective April 2026.

Basel III finalisation (sometimes called Basel IV)

The BCBS finalised reforms in 2017 to reduce variation in how banks calculate risk-weighted assets, including a revised standardised approach for credit risk, a new standardised approach for operational risk, limits on internal models and an output floor. RBI's directions of April 2026 implement the revised standardised approach for credit risk from April 2027. Under them, risk weights depend more on factors such as the loan-to-value ratio for property loans, credit ratings and the type of borrower.

Capital Adequacy example

A bank has CET1 capital of ₹700 crore, AT1 of ₹100 crore and Tier 2 of ₹200 crore. Its risk-weighted assets are ₹8,000 crore.

• CET1 ratio = 700 ÷ 8,000 = 8.75% (requirement with CCB: 8%)
• Tier 1 ratio = 800 ÷ 8,000 = 10%
• CRAR = 1,000 ÷ 8,000 = 12.5% (requirement with CCB: 11.5%)

The bank meets the requirements.

CAMELS rating

Before risk-based supervision, RBI rated banks on CAMELS:

Foreign banks were rated on CALCS: Capital adequacy, Asset quality, Liquidity, Compliance and Systems. RBI now uses Risk-Based Supervision, which uses a similar set of factors but focuses supervisory effort on banks with higher risk.

Prompt Corrective Action (PCA) framework

PCA allows RBI to act early when a bank's financial health weakens. The revised framework of 2021 (effective January 2022) applies to all scheduled commercial banks except RRBs, payments banks and small finance banks.

Actions include restrictions on dividends, branch expansion, management pay and new lending to risky borrowers, and in serious cases a change of management or a merger. Several public sector banks were under PCA between 2017 and 2022 and came out after recovering.

Expected Credit Loss (ECL) framework

Under the current "incurred loss" approach, banks provide for loans mainly after they become NPAs. The ECL approach, in line with Ind AS 109 and IFRS 9, requires banks to provide for expected losses in advance.

RBI's final framework applies from 1 April 2027 to scheduled commercial banks (other than small finance banks, payments banks and RRBs) and select AIFIs, with a transition period to spread the initial impact on capital. The NPA definition itself does not change.

Asset-liability management in practice

Structural liquidity statement

RBI requires banks to place their assets and liabilities in time buckets according to when they mature, and to report the gaps.

A negative gap in the near buckets (more outflows than inflows) is a liquidity risk. RBI sets limits on the negative gap in the shortest buckets, for example a mismatch of no more than 5% of outflows on the next day and 10%, 15% and 20% for the next three buckets up to 30 days.

Interest rate gap analysis

The repricing gap is the difference between rate-sensitive assets (RSA) and rate-sensitive liabilities (RSL) in each bucket.

Change in net interest income ≈ Gap × Change in interest rate

Example: a bank has RSA of ₹800 crore and RSL of ₹1,000 crore in the one-year bucket, a negative gap of ₹200 crore. If rates rise by 1 percentage point, its net interest income falls by about ₹2 crore, because its liabilities reprice upwards faster than its assets.

Duration gap

The duration gap measures the effect of rate changes on the economic value of equity:

Duration gap = Duration of assets − (Liabilities ÷ Assets) × Duration of liabilities

A positive duration gap means the value of equity falls when rates rise, because the value of long-duration assets falls more than that of liabilities. RBI's guidelines on IRRBB require banks to measure both earnings and economic value effects under a set of rate shock scenarios.

Stress testing

A stress test asks how a bank would fare under severe but plausible shocks.

• Sensitivity analysis: the effect of a single shock, such as a 2 percentage point rise in rates or a 10% fall in the rupee.
• Scenario analysis: the effect of several shocks together, such as a recession with rising bad loans, falling share prices and higher rates.
• Reverse stress testing: finding the shock that would make the bank fail, and judging how likely it is.

RBI's Financial Stability Report runs macro stress tests on the banking system under baseline, medium and severe stress scenarios, and reports whether banks' capital would stay above the minimum. Banks run their own stress tests under ICAAP.

Measuring operational risk

Credit risk mitigation

Banks reduce credit risk through:

• Collateral: cash, gold, government securities, shares and property, with haircuts to reflect price risk.
• Guarantees: from the government, banks or credit guarantee schemes such as CGTMSE, which lower the risk weight on the guaranteed part.
• Netting: offsetting amounts owed to and by the same counterparty.
• Credit derivatives: such as credit default swaps.
• Diversification and limits: on borrowers, groups, sectors and countries.

Large Exposures Framework

RBI's Large Exposures Framework, effective from April 2019, limits a bank's exposure to a single counterparty to 20% of its Tier 1 capital (extendable to 25% by the board in exceptional cases) and to a group of connected counterparties to 25% of Tier 1 capital. Exposures of 10% of Tier 1 capital and above must be reported to RBI.

Special Mention Accounts

Before a loan becomes an NPA, banks classify signs of stress:

Banks report large SMA accounts to CRILC, and lenders must start reviewing a resolution plan once a large borrower is in default, under the June 2019 framework.

Asset classification and provisioning (current rules)

These incurred-loss rules will be replaced by the ECL stages from April 2027, though the NPA definition remains.

Climate risk

Climate change creates two kinds of financial risk:

• Physical risk: losses from floods, cyclones, droughts and heat waves that damage borrowers' assets and incomes.
• Transition risk: losses as the economy moves to low-carbon energy, which can make coal plants or polluting industries unviable.

RBI joined the Network for Greening the Financial System (NGFS) in 2021, issued a draft disclosure framework on climate-related financial risks in 2024, and has asked banks to integrate climate risk into governance, strategy and risk management. Climate stress testing is at an early stage in India.

Countercyclical Capital Buffer

The Countercyclical Capital Buffer (CCyB) asks banks to build extra capital, of up to 2.5% of risk-weighted assets, when credit grows too fast in good times, and lets them release it in bad times. RBI's framework (2015) uses the gap between the credit-to-GDP ratio and its long-term trend as the main indicator, along with other signals. RBI has not activated the CCyB so far, keeping it at zero.

Risk and return in investments: beta and CAPM

Beta measures how much a stock's return moves with the market.

The Capital Asset Pricing Model (CAPM) gives the expected return of an asset:

Expected return = Risk-free rate + Beta × (Market return − Risk-free rate)

Example: if the risk-free rate is 6%, the expected market return is 12% and a stock's beta is 1.2, the expected return is 6 + 1.2 × (12 − 6) = 13.2%.

The term (Market return − Risk-free rate) is the market risk premium. CAPM considers only systematic risk, because unsystematic risk can be diversified away.

Challenges in risk management

• Rising unsecured retail lending and microfinance stress.
• Cyber and fraud risks, and dependence on third-party vendors.
• Climate risk, for which data and models are still developing.
• Interest rate risk in a period of rising inflation and rate hikes.
• Smooth transition to ECL and the revised Basel III rules without a sudden capital shock.
• Model risk as banks use AI for credit decisions.

Way forward

1. Build data systems and models for ECL and climate risk.
2. Strengthen board-level risk committees and the independence of risk officers.
3. Use stress testing and scenario analysis regularly, including for liquidity runs through digital channels.
4. Raise capital ahead of the new rules.
5. Apply proportionate rules to smaller banks and NBFCs.

Possible exam and interview questions

1. Explain the main types of risk faced by banks. How does Basel III address them? (620 words)
2. What is the expected credit loss framework? How will it change provisioning by Indian banks? (420 words)
3. Calculate the expected return of a stock with a beta of 0.8 when the risk-free rate is 6.5% and the market return is 13%.
4. What are the Liquidity Coverage Ratio and the Net Stable Funding Ratio?
5. Interview: Why are India's Basel III requirements stricter than the global minimum?

Related reading: derivatives, corporate governance in banking, and banking reforms and developments.

More in Finance

• Financial System
• Functions of RBI
• Banking System
• Banking Reforms
• Financial Institutions

Prepare with MockMentor

RBI Grade A/B 2027 Super-Elite Course (₹7,500) – Complete Phase 1 and Phase 2 preparation with the Descriptive Writing Programme. 365 days validity.