Banking-Risk Identification and Classification Cases - Article

Introduction

Risk-identification questions in CAIIB often provide a banking situation instead of directly asking for a definition.

The learner must decide:

• What is the primary risk?

• Are other risks also present?

• Is the exposure in the Banking Book, Trading Book or Off-Balance-Sheet?

• Is the risk financial or non-financial?

• Has one risk triggered another?

• Is the problem caused by the borrower, market, funding, people, process, system or external event?

The current IIBF CAIIB BFM Module B specifically includes Risk Identification in Banking Business, the Banking Book, the Trading Book, Off-Balance-Sheet Exposures and Banking Risks – Definitions under “Risks in Banking Business.”

The correct approach is:

Identify the source of loss first. Then classify the risk.

Learning Objectives

After studying this topic, you should be able to:

• identify the primary risk in a banking case;

• recognise secondary and interacting risks;

• distinguish Banking Book, Trading Book and Off-Balance-Sheet exposures;

• separate credit, market, liquidity and operational risks;

• identify counterparty, legal, reputational and concentration risks; and

• avoid common classification traps in CAIIB case-based questions.

A Simple Method for Identifying Banking Risk

When a case appears, ask four questions.

1. What Can Cause the Loss?

Look for the immediate risk driver.

Examples:

• borrower fails to repay → credit risk;

• bond price falls → market risk;

• bank cannot obtain funds → liquidity risk;

• employee or system fails → operational risk.

2. Where Is the Exposure?

Identify whether it arises mainly from:

• Banking Book;

• Trading Book; or

• Off-Balance-Sheet activity.

3. Is There More Than One Risk?

Many cases contain several risks.

For example:

A derivative counterparty weakens when market prices move adversely.

This may involve both:

• counterparty credit risk; and

• market risk.

Basel’s current counterparty-credit-risk guidance specifically states that CCR is affected by interactions among credit, market, operational and liquidity risks.

4. Which Risk Is Primary?

In an exam case, choose the risk most directly responsible for the situation described.

Secondary consequences should not distract you from the original source.

Quick Risk Classification Guide

Basel currently defines market risk as the risk of losses in on- or off-balance-sheet risk positions arising from movements in market prices.

Operational risk is the risk of loss resulting from inadequate or failed internal processes, people and systems, or external events.

Case 1: Strong Security but Borrower Cannot Repay

A bank grants a term loan to a manufacturing company.

After two years:

• sales fall sharply;

• cash flows become inadequate;

• instalments remain unpaid.

The loan is secured by factory property with substantial value.

The branch manager says:

“The bank has strong security, so there is no credit risk.”

Identification

The primary risk is Credit Risk.

The borrower has failed to meet the repayment obligation.

Why the Security Does Not Change the Classification

Collateral is a credit-risk mitigant.

It may reduce the bank’s eventual loss, but it does not remove:

• borrower default;

• recovery delay;

• collateral-value risk; or

• enforcement risk.

Exposure Classification

The term loan is a typical Banking Book exposure.

Secondary Risks

The case may also contain:

• collateral-value risk;

• concentration risk, if the exposure is large; and

• liquidity impact if expected loan inflows do not arrive.

CAIIB Lesson

Default identifies Credit Risk. Security affects loss mitigation, not the basic risk classification.

Case 2: Bond Price Falls after Interest Rates Rise

A bank’s treasury purchases bonds for trading.

Market interest rates rise sharply.

The market value of the bonds falls.

The issuer remains financially strong and continues making payments.

Identification

The primary risk is Market Risk, specifically interest-rate-related market risk.

Basel defines market risk by reference to losses arising from movements in market prices.

Why It Is Not Credit Risk

The issuer has not defaulted.

The loss has occurred because market yields changed and bond prices fell.

Exposure Classification

The securities are held for trading and therefore the case relates to the Trading Book, assuming the position meets the applicable regulatory Trading Book criteria.

CAIIB Lesson

Price movement without borrower/issuer default → Market Risk

Case 3: Rupee Moves against an Open Forex Position

A bank has an open foreign-currency position.

The exchange rate moves sharply against the position and the bank suffers a valuation loss.

Identification

The primary risk is Foreign-Exchange Risk, which is a form of Market Risk.

Why?

The loss has arisen from movement in a market price—the exchange rate.

Exam Trap

Do not classify every foreign-currency transaction as “international banking risk” or “credit risk”.

Ask:

What specifically caused the loss?

Here, the answer is an exchange-rate movement.

Case 4: Major Corporate Depositor Withdraws Funds

A bank depends heavily on a few large corporate deposits.

One major depositor unexpectedly withdraws a substantial amount.

The bank must urgently obtain expensive short-term funding.

Identification

The primary risk is Liquidity Risk.

More specifically, the underlying weakness is funding concentration.

Basel defines funding liquidity risk as the risk that a bank cannot efficiently meet expected and unexpected current and future cash-flow or collateral needs without adversely affecting its operations or financial condition.

Risk Interaction

The case contains:

Funding Concentration → Liquidity Pressure → Higher Funding Cost

Why It Is Not Credit Risk

No borrower has failed to repay.

The problem is the bank’s ability to obtain sufficient funding.

CAIIB Lesson

A bank can have valuable assets and still face serious liquidity risk.

Case 5: Bank Guarantee Is Invoked

A bank issues a performance guarantee of ₹20 crore on behalf of a corporate customer.

The guarantee is later validly invoked.

The bank pays the beneficiary, but the customer cannot reimburse the bank.

Before Invocation

The guarantee represents an Off-Balance-Sheet contingent exposure.

Credit risk already exists because the bank may have to perform under its undertaking.

At Invocation

The contingent obligation results in a cash outflow.

This creates:

• liquidity impact; and

• potential funded credit exposure against the customer.

After Customer Fails to Reimburse

The primary resulting risk is clearly Credit Risk.

Risks Present

The complete case can therefore involve:

• Off-Balance-Sheet exposure;

• Credit Risk;

• Liquidity Risk;

• Operational Risk, if the guarantee was improperly processed; and

• Legal Risk, if the guarantee wording creates a dispute.

CAIIB Lesson

Off-Balance-Sheet does not mean risk-free.

Case 6: Letter of Credit Devolves

A bank opens an import Letter of Credit for its customer.

Complying documents are presented.

The bank becomes liable to honour the LC.

On the payment date, the importer does not provide funds.

Identification

Initially, the LC is an Off-Balance-Sheet contingent exposure.

When the bank has to pay and the customer cannot reimburse it, the exposure can become funded.

The main resulting risk is Credit Risk.

Additional Risk

The bank also faces Liquidity Risk because it must arrange funds for the payment when due.

Exam Trap

An LC does not become risky only after devolvement.

The bank accepts a contingent obligation when it issues the LC.

Case 7: Derivative Counterparty Defaults

A bank has entered into an interest-rate derivative.

Market movements have made the contract valuable to the bank.

Before final settlement, the counterparty defaults.

Identification

The primary risk is Counterparty Credit Risk (CCR).

Basel defines CCR as the risk that the counterparty to a transaction could default before the final settlement of the transaction’s cash flows.

Why This Case Is Different from an Ordinary Loan

For a normal term loan, the amount owed is generally known from the credit exposure.

In a derivative, exposure may change as market conditions change.

Therefore, both:

• counterparty creditworthiness; and

• market movement

can affect the risk.

Secondary Risk

The case also contains Market Risk because the value of the derivative changes with underlying market factors.

CAIIB Lesson

Derivative value moves because of market risk; loss from counterparty default is counterparty credit risk.

Case 8: Employee Bypasses a Control

A bank employee bypasses the maker-checker control and processes an unauthorised transaction.

The transaction is detected before any money leaves the bank.

Identification

The primary risk is Operational Risk.

The source is:

• people; and

• failure of an internal process/control.

Basel’s operational-risk definition expressly covers losses arising from inadequate or failed internal processes, people, systems or external events.

No Loss Does Not Mean No Risk

The transaction was stopped in time, but the incident reveals a serious control weakness.

It is effectively a near miss.

Secondary Risks

If the failure had continued, it could have created:

• financial loss;

• fraud;

• legal consequences; and

• reputational damage.

CAIIB Lesson

Operational-risk identification does not depend on an actual loss already occurring.

Case 9: Core Banking System Fails

A bank’s core banking system becomes unavailable for several hours.

Customers cannot complete transactions.

No borrower has defaulted and market prices have not caused the problem.

Identification

The primary risk is Operational Risk, arising from system failure.

Possible Secondary Effects

A prolonged outage can lead to:

• customer dissatisfaction;

• regulatory concerns;

• compensation costs;

• reputational risk; and

• liquidity or payment difficulties.

Basel notes that operational risk is inherent in banking products, activities, processes and systems.

CAIIB Lesson

Technology failure is usually classified within Operational Risk rather than as Market or Credit Risk.

Case 10: Cyber Fraud through Compromised Credentials

A cybercriminal obtains valid customer credentials and initiates fraudulent payments.

Primary Classification

The principal classification is Operational Risk, with technology/cyber and external-fraud dimensions.

Why?

The loss arises from:

• external malicious activity;

• compromised access; and

• failure or circumvention of controls.

Secondary Risks

The event can create:

• legal risk;

• compliance risk;

• reputational risk; and

• financial loss.

Exam Lesson

A cyber event should not automatically be treated as a completely separate traditional Basel capital-risk class. Its operational-risk characteristics must be recognised.

Case 11: Excessive Exposure to One Sector

A bank’s individual corporate borrowers are currently performing well.

However, 35% of a particular portfolio is concentrated in one industry that is highly sensitive to economic conditions.

No borrower has yet defaulted.

Identification

The key risk is Concentration Risk.

It is primarily connected with portfolio credit risk.

Why It Matters

If one common economic factor affects the industry, many borrowers may weaken simultaneously.

Basel’s credit-risk guidance requires banks to manage credit risk not only at individual transaction level but also across the overall portfolio.

Exam Trap

“Every borrower is currently regular” does not mean the portfolio has low risk.

Case 12: Unenforceable Security Document

A borrower defaults.

The bank attempts to enforce its security but discovers a serious documentation defect that prevents effective enforcement.

Identification

Two risks are visible.

Credit Risk

The borrower has failed to repay.

Legal/Operational Risk

Defective documentation has reduced the bank’s ability to recover.

Under the Basel operational-risk framework, legal risk is included within operational risk for the regulatory operational-risk definition.

Which Is Primary?

It depends on the question.

If asked:

“What caused the loan loss initially?”

Answer: Credit Risk.

If asked:

“What risk arose from defective documentation?”

Answer: Legal/Operational Risk.

Case 13: Bad Publicity Triggers Deposit Withdrawals

News reports disclose serious misconduct at a bank.

Customers begin withdrawing deposits even though the bank’s loan portfolio has not suddenly deteriorated.

Risk Sequence

Misconduct → Reputational Risk → Deposit Withdrawal → Liquidity Risk

The immediate funding problem is liquidity risk, but reputational damage has triggered it.

Basel liquidity guidance specifically requires banks to understand how credit, market, operational and reputational risks can affect liquidity.

CAIIB Lesson

Look for both:

• the original risk driver; and

• the resulting risk.

Case 14: Bank Chooses an Unsuitable Business Strategy

A bank aggressively enters a new unsecured-loan segment.

Management focuses on rapid growth but does not develop:

• adequate underwriting;

• collection systems;

• experienced staff; or

• fraud controls.

Defaults and fraud subsequently rise.

Initial Risk

The decision reflects Strategic Risk.

Resulting Risks

It generates:

• Credit Risk;

• Operational Risk;

• Compliance Risk; and

• Reputational Risk.

Exam Lesson

Strategic risk can act as a risk driver that later produces measurable financial losses in other risk categories.

Primary Risk vs Secondary Risk

Case-study questions become easier when this distinction is clear.

Primary Risk

The risk directly associated with the event described.

Secondary Risk

A risk arising because the primary risk has materialised or worsened.

For example:

Cyberattack → Operational Risk → Reputation Damage → Deposit Withdrawal → Liquidity Risk

The bank should manage all these risks.

However, if an exam question asks:

“What risk arises from the cyberattack itself?”

the best answer is generally Operational Risk.

Banking Book, Trading Book and OBS Case Clues

The IIBF syllabus specifically requires learners to understand all three exposure areas as part of risk identification.

Risk Interrelationships

A major risk event can move through the bank in stages.

Example

A large borrower defaults.

Borrower Default → Credit Loss → Lower Earnings → Capital Pressure → Market Concern → Funding Withdrawal → Liquidity Risk

Another example:

Market Shock → Derivative Exposure Increases → Counterparty Weakens → Counterparty Credit Risk Rises

Basel’s current CCR guidance emphasises that effective management requires techniques across credit, market, operational and liquidity-risk disciplines.

Practical Banking Application

When analysing an actual banking case, use this sequence:

Step 1: Identify the Exposure

Is it:

• loan;

• investment;

• trading position;

• guarantee;

• LC;

• commitment;

• derivative; or

• operational process?

Step 2: Identify the Trigger

Ask what went wrong.

• non-payment?

• market movement?

• cash shortage?

• system/process failure?

• legal defect?

• concentration?

• loss of confidence?

Step 3: Name the Primary Risk

Choose the closest risk classification.

Step 4: Look for Secondary Risks

A complete risk-management analysis should identify interactions.

Step 5: Check the Book

Determine whether the exposure principally relates to:

• Banking Book;

• Trading Book; or

• Off-Balance-Sheet.

Step 6: Do Not Confuse Risk with Mitigation

Collateral, guarantees, hedges and insurance may reduce risk.

They do not automatically change the underlying risk that originally arose.

CAIIB Exam Focus

Remember these high-value concepts:

• IIBF specifically includes risk identification, Banking Book, Trading Book, Off-Balance-Sheet exposures and banking-risk definitions in Module B.

• Borrower non-payment indicates Credit Risk.

• Adverse price or rate movements indicate Market Risk.

• Foreign-exchange risk is a form of Market Risk.

• Inability to meet cash obligations when due indicates Liquidity Risk.

• People, process, system and external-event failures indicate Operational Risk.

• Basel operational risk includes legal risk but excludes strategic and reputational risk from that definition.

• Derivatives can create both Market Risk and Counterparty Credit Risk.

• A guarantee or LC creates risk even while it remains Off-Balance-Sheet.

• Devolvement or invocation can convert a contingent exposure into funded exposure.

• Concentration risk can exist even where individual borrowers are currently performing.

• Banking risks are interconnected.

• Reputational problems can create liquidity pressure.

• Market movements can increase counterparty-credit exposure.

• The primary risk should be identified from the source of the problem, not merely its final consequence.

Common Exam Traps

Trap 1: “Any Financial Loss Is Credit Risk”

Incorrect.

The cause may be market movement, liquidity stress or operational failure.

Trap 2: “A Secured Loan Has No Credit Risk”

Incorrect.

Collateral mitigates loss. Borrower default risk still exists.

Trap 3: “A Guarantee Has No Risk until Invocation”

Incorrect.

The bank accepts a contingent exposure when the guarantee is issued.

Trap 4: “A Bond Price Fall Must Mean Credit Risk”

Incorrect.

If the fall is caused by general interest-rate movement, it is primarily Market Risk.

Trap 5: “A System Outage Is Market Risk because Money Is Lost”

Incorrect.

The source is system failure, making Operational Risk the primary classification.

Trap 6: “Liquidity Risk and Insolvency Are the Same”

Incorrect.

A solvent bank can face a temporary inability to meet cash obligations.

Trap 7: “Derivative Risk Is Always Market Risk”

Incorrect.

Derivatives can also create Counterparty Credit Risk when the counterparty may default before final settlement.

Trap 8: “Only One Risk Can Exist in a Case”

Incorrect.

Banking risks frequently interact. Identify the primary risk first and then the secondary risks.

Memory Technique

Remember B-M-F-P:

• B – Borrower fails: Credit Risk

• M – Market moves: Market Risk

• F – Funding fails: Liquidity Risk

• P – People/process/system fails: Operational Risk

Then ask:

Is there another risk created by the first one?

That final question helps solve integrated CAIIB case studies.