Risk Management
Comprehensive reference to insurance and securities risk, credit and market risk, derivatives, solvency, capital, underwriting, reinsurance, liquidity and cyber resilience—with in-depth tables, case calculations and exam practice.
☰ Browse all 33 Risk Management chapters
01. Risk Management: Meaning, Objectives and Scope
Risk management systematically identifies, measures, monitors, controls and reports uncertainty affecting financial objectives. Across banking, insurance and securities it aims to make risk-taking deliberate, transparent and resilient.
Practical / examination insight: Risk cannot be eliminated; compare expected return with plausible loss and ability to absorb it.
| Risk term or metric | Operational meaning and application |
|---|---|
| Risk appetite | Amount and type of risk accepted |
| Risk capacity | Maximum sustainable risk |
| Risk tolerance | Permitted deviation from targets |
| Inherent risk | Exposure before controls |
| Residual risk | Exposure after controls |
| Risk register | Documented risks and owners |
02. Risk Taxonomy Across BFSI
Insurers face mortality and catastrophe claims; banks face credit and funding risks; investment funds face price, concentration and redemption risks. All face operational, conduct, technology and legal risk.
Practical / examination insight: Do not assume a product with low market risk also has low liquidity or counterparty risk.
| Risk term or metric | Operational meaning and application |
|---|---|
| Market risk | Adverse price changes |
| Credit risk | Counterparty non-payment |
| Liquidity risk | Cannot fund or sell promptly |
| Insurance risk | Unexpected insured claims |
| Operational risk | Process, people or system failures |
| Conduct risk | Consumer harm or mis-selling |
03. Risk Governance and Three Lines
The board approves appetite and oversight, management owns business risk, independent risk/compliance functions challenge it, and internal audit provides independent assurance. Governance design depends on entity regulations.
Practical / examination insight: Compliance and internal audit are not identical, and a CRO should have suitable independence.
| Risk term or metric | Operational meaning and application |
|---|---|
| Board | Sets oversight and accountability |
| Business line | Owns and manages risk |
| Risk function | Independent review and challenge |
| Compliance | Checks regulatory obligations |
| Internal audit | Independent assurance |
| Risk committee | Oversight of major exposures |
04. Risk Identification and Risk Register
Institutions use process mapping, incident history, scenario workshops and product assessments to capture exposures. A risk register records cause, consequence, likelihood, impact, mitigants and named owner.
Practical / examination insight: A heatmap prioritises work; it is not a precise measure of expected loss.
| Risk term or metric | Operational meaning and application |
|---|---|
| Cause | Underlying risk driver |
| Event | Incident that may occur |
| Consequence | Financial or service impact |
| Likelihood | Estimated event frequency |
| Severity | Estimated event magnitude |
| Owner | Person accountable for controls |
05. Probability, Expected Loss and Scenario Analysis
For a simple event, expected loss equals probability multiplied by loss magnitude. Complex outcomes require distributions and correlated scenarios; expected loss alone misses extreme tails.
Practical / examination insight: An expected annual loss of ₹2 lakh does not mean precisely ₹2 lakh will be lost annually.
| Risk term or metric | Operational meaning and application |
|---|---|
| Probability | Likelihood from 0 to 1 |
| Loss severity | Loss conditional on event |
| EL | Probability × loss severity |
| Scenario | Specified adverse sequence |
| Tail event | Low frequency severe result |
| Model risk | Inaccuracy of assumptions |
06. Credit Risk and Borrower Appraisal
Credit risk arises when borrowers or counterparties fail to pay. Appraisal reviews income, repayment capacity, financial statements, cash flows, collateral and concentration within regulatory policies.
Practical / examination insight: Collateral reduces potential severity; it cannot replace sustainable repayment cash flow.
| Risk term or metric | Operational meaning and application |
|---|---|
| PD | Probability of default |
| LGD | Loss given default |
| EAD | Exposure at default |
| DSCR | Cash available / debt service |
| LTV | Loan / collateral value |
| Concentration | Large correlated borrower exposure |
07. PD–LGD–EAD Credit Loss Model
A simplified expected credit loss is PD × LGD × EAD. If PD is 2%, LGD is 40% and EAD is ₹10 crore, expected loss is ₹8 lakh. Real regulatory and accounting models can be more complex.
Practical / examination insight: Distinguish expected loss from economic capital for unexpected loss.
| Risk term or metric | Operational meaning and application |
|---|---|
| PD example | 2% default probability |
| LGD example | 40% loss rate on default |
| EAD example | ₹10 crore exposure |
| EL result | ₹8 lakh illustrative |
| Credit enhancement | Eligible guarantee or security |
| Unexpected loss | Variability beyond expected loss |
08. NPA, SMA, Provisioning and Recovery
Banks monitor arrears, early-warning signals and asset quality. For many term loans, interest or principal overdue for more than 90 days triggers NPA classification, while agricultural and other facilities have exceptions.
Practical / examination insight: A technical write-off does not by itself forgive borrower debt.
| Risk term or metric | Operational meaning and application |
|---|---|
| SMA | Special Mention Account |
| NPA | Non-Performing Asset |
| DPD | Days Past Due |
| Provision | Charge or reserve for loss |
| Write-off | Accounting removal under rules |
| Recovery | Collection of obligations |
09. Market Risk: Equity, Bonds and FX
Market risk reflects changes in shares, yields, currencies and commodity prices. A bond's price generally falls when yields rise; unhedged foreign-currency positions change with exchange rates.
Practical / examination insight: A bond issued by a strong government may still experience market-value losses.
| Risk term or metric | Operational meaning and application |
|---|---|
| Equity beta | Sensitivity to market return |
| Duration | Bond rate sensitivity |
| Delta | Option sensitivity to underlying |
| FX exposure | Currency value sensitivity |
| Basis risk | Imperfect hedge movement |
| Volatility | Dispersion of returns |
10. Value at Risk and Expected Shortfall
Value at Risk estimates a portfolio loss threshold over a chosen horizon and confidence level. Expected shortfall describes average loss beyond a selected quantile, given model assumptions. Both can fail under structural breaks.
Practical / examination insight: VaR is not a maximum possible loss and must report horizon and confidence.
| Risk term or metric | Operational meaning and application |
|---|---|
| VaR | Quantile loss threshold |
| ES | Expected loss in tail beyond VaR |
| Horizon | One day or other duration |
| Confidence | Specified probability level |
| Backtesting | Compare forecast with outcomes |
| Stress test | Evaluate severe scenarios |
11. Interest-Rate Risk and Duration
Fixed-rate portfolios respond to yield changes. Approximate bond price percentage change = −modified duration × yield change, for small parallel shifts; convexity improves approximation for larger changes.
Practical / examination insight: A 1 percentage point yield change is 0.01 in decimal form.
| Risk term or metric | Operational meaning and application |
|---|---|
| Modified duration | Price sensitivity per yield unit |
| Convexity | Curvature of price-yield relation |
| Yield curve | Rates across maturities |
| Repricing gap | Mismatch of rate-reset exposures |
| IRRBB | Interest Rate Risk in Banking Book |
| Hedging | Offsetting risk position |
12. Liquidity and Funding Risk
Liquidity risk includes inability to meet payment obligations and inability to sell an asset without significant price impact. Maturity mismatches, run dynamics and concentrated funding make firms vulnerable.
Practical / examination insight: Solvent institutions can still fail from a liquidity shortfall.
| Risk term or metric | Operational meaning and application |
|---|---|
| Funding liquidity | Ability to meet cash outflows |
| Market liquidity | Ability to trade efficiently |
| LCR | High-quality liquid assets / stressed outflows |
| NSFR | Available / required stable funding |
| HQLA | High-quality liquid assets |
| Contingency plan | Prearranged funding response |
13. Asset–Liability Management
ALM monitors maturity, interest-rate, currency and liquidity mismatches between assets and liabilities. Committees review gap reports, stress results, funding plans and exposure limits.
Practical / examination insight: ALM is not limited to matching deposit and loan maturities exactly.
| Risk term or metric | Operational meaning and application |
|---|---|
| ALCO | Asset Liability Committee |
| Maturity gap | Assets minus liabilities by bucket |
| Duration gap | Rate sensitivity mismatch |
| NII | Net interest income |
| EVE | Economic value of equity |
| Contingency buffer | Available emergency liquidity |
14. Operational Risk and Resilience
Operational risk arises from failed internal processes, people, systems or external events. Resilience assesses whether essential operations can continue through disruptions; impact tolerances and recovery exercises are crucial.
Practical / examination insight: Operational risk includes fraud and outages but excludes ordinary investment price volatility.
| Risk term or metric | Operational meaning and application |
|---|---|
| RCSA | Risk and Control Self-Assessment |
| KRI | Key Risk Indicator |
| BCP | Business Continuity Plan |
| DRP | Disaster Recovery Plan |
| Near miss | Incident without realised loss |
| Third-party risk | Dependence on service providers |
15. Cybersecurity and Data Privacy
Financial entities face phishing, ransomware, data theft, credential compromise and third-party breaches. Controls include least privilege, MFA, encryption, segmentation, monitoring and tested recovery.
Practical / examination insight: No legitimate bank employee should request an OTP, PIN or password.
| Risk term or metric | Operational meaning and application |
|---|---|
| MFA | Multi-Factor Authentication |
| Phishing | Deceptive message attack |
| Ransomware | Malware used for extortion |
| Encryption | Protected data representation |
| Incident response | Detect contain and recover |
| Data minimisation | Collect only necessary data |
16. Insurance Risk Pooling and Underwriting
Insurance pools uncertain losses across policyholders. Underwriting evaluates risk characteristics and prices contracts subject to product terms, regulation, expense assumptions and competitive conditions.
Practical / examination insight: Risk pooling reduces uncertainty for the pool; it does not mean claims become predictable individually.
| Risk term or metric | Operational meaning and application |
|---|---|
| Underwriting | Assess and accept insured risk |
| Risk pool | Combined insured exposure |
| Frequency | Expected number of claims |
| Severity | Cost per claim |
| Adverse selection | High risks disproportionately seek cover |
| Moral hazard | Behaviour changes after cover |
17. Mortality, Morbidity and Longevity Risk
Life insurers model probability of death, illness and survival, while annuity providers face longevity risk. Claims and reserves depend on demographic assumptions, experience and policy characteristics.
Practical / examination insight: Mortality risk and longevity risk can affect different products in opposite directions.
| Risk term or metric | Operational meaning and application |
|---|---|
| qₓ | Probability of death at age x |
| Mortality | Risk of death |
| Morbidity | Incidence of illness |
| Longevity | Living longer than expected |
| Persistency | Policy continuation experience |
| Reserve | Estimated future obligation |
18. General Insurance: Catastrophe and Accumulation
Motor, fire, marine, agriculture and liability policies face frequency and severity uncertainty. Disasters can produce correlated claims; geographic exposure and reinsurance programmes are therefore important.
Practical / examination insight: A low annual average claim does not eliminate catastrophe tail risk.
| Risk term or metric | Operational meaning and application |
|---|---|
| Catastrophe | Severe aggregate event |
| Accumulation | Many insured risks in one event |
| PML | Probable Maximum Loss estimate |
| Deductible | Loss paid by policyholder |
| Sum insured | Maximum specified cover basis |
| Exclusion | Risk outside policy cover |
19. Claims Reserves and IBNR
Insurers estimate reported-but-unpaid claims and incurred-but-not-reported claims. Reserve adequacy depends on development patterns, inflation, settlement delays, legal conditions and actuarial judgment.
Practical / examination insight: Cash claim payments in one year are not the same as ultimate claims incurred that year.
| Risk term or metric | Operational meaning and application |
|---|---|
| Outstanding claims | Reported not fully settled |
| IBNR | Incurred But Not Reported |
| IBNER | Incurred But Not Enough Reported |
| Loss development | Changes in claim estimates |
| Claims inflation | Growth in settlement costs |
| Reserve adequacy | Sufficiency against obligations |
20. Reinsurance and Risk Transfer
Insurers transfer part of assumed risk to reinsurers. Proportional treaties share premiums and losses; non-proportional cover attaches after specified thresholds. Reinsurance adds counterparty and contract risk.
Practical / examination insight: Reinsurance lowers net exposure but does not remove the original insurer's policy obligations.
| Risk term or metric | Operational meaning and application |
|---|---|
| Quota share | Fixed proportional sharing |
| Surplus treaty | Risk sharing above retention |
| Excess of loss | Cover above attachment |
| Retention | Risk insurer keeps |
| Attachment point | Level at which reinsurer pays |
| Reinsurer credit risk | Possible non-payment |
21. Premium Pricing and Combined Ratio
General insurance pricing reflects expected claims, expenses, acquisition costs, reinsurance, investment assumptions and capital charge. Combined ratio is typically loss ratio plus expense ratio under a specified accounting basis.
Practical / examination insight: A combined ratio above 100% signals underwriting loss on that basis, not necessarily overall net loss.
| Risk term or metric | Operational meaning and application |
|---|---|
| Loss ratio | Claims / earned premiums |
| Expense ratio | Underwriting expenses / premium base |
| Combined ratio | Loss ratio + expense ratio |
| Earned premium | Revenue attributable to risk period |
| Risk premium | Expected claims cost |
| Rate adequacy | Premium sufficient for obligations |
22. Insurance Solvency and Capital
Insurers maintain regulatory solvency margins to absorb unexpected loss. Relevant IRDAI rules depend on insurer type and current directions; actuarial valuation and asset-liability monitoring support resilience.
Practical / examination insight: Solvency ratio is not the same as claim settlement ratio.
| Risk term or metric | Operational meaning and application |
|---|---|
| Available solvency | Eligible capital/resources |
| Required solvency | Regulatory capital requirement |
| Solvency ratio | Available / required measure |
| Actuary | Professional valuation role |
| Investment risk | Asset value uncertainty |
| Stress test | Severe claims/market scenario |
23. Mutual Fund Risk Management
Fund risks differ by equity, debt, hybrid and passive mandates. AMCs monitor liquidity, concentration, counterparty exposures, tracking error, valuation and investor redemptions under SEBI rules.
Practical / examination insight: The riskometer is a disclosure aid, not a promise of principal protection.
| Risk term or metric | Operational meaning and application |
|---|---|
| Riskometer | Product-risk disclosure |
| Tracking error | Return deviation from benchmark |
| Credit duration | Debt sensitivity and quality |
| Concentration | Large issuer/sector exposure |
| Redemption risk | Potential forced asset sales |
| TER | Total Expense Ratio |
24. Stock Exchange and Clearing Risk
Exchanges and clearing corporations control order execution, margins, default management, collateral and settlement exposures. Market-wide safeguards aim to contain contagion without guaranteeing an investor's returns.
Practical / examination insight: Exchange trading does not eliminate clearing-member, operational or market risk.
| Risk term or metric | Operational meaning and application |
|---|---|
| SPAN | Portfolio risk margining method |
| MTM | Mark To Market |
| Margin call | Additional collateral demand |
| Clearing member | Clearing participant |
| Default waterfall | Predefined loss allocation |
| Settlement guarantee | Rule-based performance framework |
25. Derivatives and Hedging
Futures, options, forwards and swaps may hedge exposures but introduce leverage, liquidity, basis, counterparty and model risk. Hedging effectiveness depends on contract terms and position size.
Practical / examination insight: A long call buyer usually risks the premium; a naked call writer may face unbounded loss.
| Risk term or metric | Operational meaning and application |
|---|---|
| Forward | Bilateral future exchange agreement |
| Future | Standardised exchange-traded contract |
| Option | Right not obligation for buyer |
| Swap | Exchange of agreed cashflows |
| Delta hedge | Manage underlying price sensitivity |
| Basis risk | Mismatch between hedge and exposure |
26. Portfolio Diversification and Correlation
Diversification can reduce idiosyncratic risk when exposures are not perfectly correlated. Correlations can rise in crises, reducing diversification benefits; allocation also depends on time horizon and liquidity needs.
Practical / examination insight: Holding ten stocks from one sector is not necessarily diversified.
| Risk term or metric | Operational meaning and application |
|---|---|
| Systematic risk | Market-wide common risk |
| Idiosyncratic | Asset-specific risk |
| Correlation | Co-movement from −1 to +1 |
| Covariance | Joint return variation |
| Portfolio weight | Allocation to a security |
| Rebalancing | Restore target allocations |
27. Risk-Adjusted Return: Sharpe and Sortino
Risk-adjusted metrics compare performance to volatility or downside deviation. Sharpe ratio commonly equals portfolio return minus risk-free rate divided by return volatility, using consistent time periods.
Practical / examination insight: A ratio based on past returns is not a forward return guarantee.
| Risk term or metric | Operational meaning and application |
|---|---|
| Sharpe | Excess return / volatility |
| Sortino | Excess return / downside deviation |
| Alpha | Return beyond chosen model benchmark |
| Beta | Systematic market sensitivity |
| Tracking difference | Fund minus index return |
| Drawdown | Decline from peak to trough |
28. Stress Testing and Reverse Stress Testing
Stress tests evaluate performance under severe but plausible shocks; reverse stress starts with a failure condition and identifies scenarios that could produce it. Good scenarios combine financial, operational and confidence shocks.
Practical / examination insight: Stress testing complements rather than replaces capital and liquidity buffers.
| Risk term or metric | Operational meaning and application |
|---|---|
| Sensitivity test | One variable change |
| Scenario test | Combined changes |
| Reverse stress | Identify failure-triggering scenario |
| Contagion | Shock transmission across entities |
| Recovery plan | Measures to restore viability |
| Early warning | Threshold prompting intervention |
29. Regulatory Framework: RBI, IRDAI and SEBI
The RBI supervises banks and specified financial entities, IRDAI supervises insurance and SEBI regulates securities markets. Risk requirements differ across sectors and products; avoid assuming one common capital ratio.
Practical / examination insight: Apply the regulator and operative rule appropriate to the entity, not the product label alone.
| Risk term or metric | Operational meaning and application |
|---|---|
| RBI | Banking and payment-system oversight |
| IRDAI | Insurance oversight |
| SEBI | Securities market oversight |
| Basel framework | International banking standards |
| Actuarial solvency | Insurance valuation framework |
| SEBI RMF | Mutual-fund risk governance expectations |
30. 2026 Developments and Forward Effective Dates
RBI's October 23, 2026 release provides implementation detail for a revised standardised operational-risk capital approach scheduled from 1 April 2027 for covered commercial banks. Do not present the future framework as already operative.
Practical / examination insight: Publication date, effective date and institutional scope must each be checked.
| Risk term or metric | Operational meaning and application |
|---|---|
| 23 Oct 2026 | RBI amendment publication |
| 1 Apr 2027 | Scheduled revised Basel III start |
| Scope | Covered commercial banks |
| SFB/RRB/PB | Different applicable requirements |
| RBI 2025 circular | Existing Basel III guidance |
| 2026 SEBI RMF | Current mutual-fund governance guidance |
31. Applied Numericals and Worked Risk Cases
For a ₹5 crore exposure, PD 3% and LGD 30%, expected loss = ₹4.5 lakh. A bond with modified duration 4 losing 0.5 percentage-point in yield has an approximate 2% price gain (before convexity). With losses ₹75 and expenses ₹30 against premium ₹100, combined ratio is 105%.
Practical / examination insight: Always show denominator, time horizon and sign in financial numericals.
| Risk term or metric | Operational meaning and application |
|---|---|
| Credit EL | ₹5 cr × 3% × 30% = ₹4.5 lakh |
| Duration example | −4 × (−0.005) = +2% |
| Combined ratio | (75+30)/100 = 105% |
| Risk-return | Compare annualised measures |
| Diversification | Correlation matters |
| Model caution | Assumptions affect outcomes |
25 examination questions on banking, insurance and securities risk management, with numerical traps and detailed explanations. Submit answers for instant marking and reset to repeat.
32. Risk Management FAQs and Revision
Revision should connect each risk to its driver, measurement, mitigation and residual exposure. The most common exam traps are confusing risk metrics, placing a regulator in the wrong sector, or assuming insurance and hedges eliminate risk.
Practical / examination insight: Define the risk first, then choose its measurement and control.
What is risk management?
The process of identifying, assessing, controlling, monitoring and reporting uncertainty against defined objectives.
Is risk management the same as eliminating risk?
No. It manages acceptable residual risk within risk appetite and capacity.
What is PD?
Probability of default: estimated likelihood that a borrower or counterparty defaults over a defined period.
What is LGD?
Loss given default: proportion of exposure lost when default occurs after recoveries.
What is EAD?
Exposure at default: amount exposed when the counterparty defaults.
What is a simple expected loss formula?
Expected loss = PD × LGD × EAD, with consistent assumptions and units.
What is VaR?
Value at Risk is a quantile threshold for loss over a defined period and confidence level.
Can a VaR threshold cap every loss?
No. Losses beyond VaR are possible and can be severe.
What is expected shortfall?
A measure of average tail loss beyond the specified loss quantile under model assumptions.
What is liquidity risk?
Risk of not meeting cash obligations or selling without large price concessions.
What is duration?
A measure used to approximate a bond’s sensitivity to yield changes.
What is IBNR?
Insurance claims incurred but not yet reported.
What is a combined ratio?
Generally the sum of claims/loss and expense ratios using specified consistent accounting bases.
Does reinsurance remove insurer obligations?
No. The direct insurer remains responsible to policyholders under its policy terms.
What is a deductible?
The portion of covered loss borne by the policyholder under a policy.
What is the three-lines model?
Management owns risk, risk/compliance provides oversight and challenge, and internal audit supplies assurance.
Can derivatives increase risk?
Yes. Hedging may reduce specified exposures, but leverage, basis, liquidity and counterparty risks remain.
When is revised RBI operational-risk capital due?
RBI announced 1 April 2027 for the covered commercial banks, subject to the applicable directions.
33. Official Sources and Further Learning
Use updated primary materials from RBI, IRDAI and SEBI to check regulatory scope, effective dates, accounting definitions and disclosures. Product-specific interpretation belongs to the applicable policy or scheme documents.
Practical / examination insight: Never insert guessed current risk ratios or regulatory thresholds.
- RBI – Basel III Capital Regulations (2025)
- RBI – October 2026 forthcoming operational-risk framework
- RBI – Operational Risk and Resilience Guidance
- SEBI – Mutual Fund Risk Management Framework (March 2026)
- SEBI – Official Website
- IRDAI – Official Website
- BIS Basel Committee
- International Association of Insurance Supervisors
- IOSCO – Global Securities Standards