Basel Three Pillars and Regulatory Architecture - Article

Introduction

Modern banking regulation cannot depend on a single capital ratio.

A bank may technically satisfy a minimum capital requirement and still face serious risks arising from:

• concentration;

• interest-rate movements;

• liquidity stress;

• weak governance;

• poor risk management;

• inadequate internal controls; or

• risks not fully captured by standard regulatory calculations.

The Basel framework therefore uses three mutually reinforcing pillars.

The current IIBF CAIIB BFM Module B specifically covers capital charges for credit, market and operational risks, Pillar 2 – Supervisory Review Process and Pillar 3 – Market Discipline under “Risk Regulations in Banking Industry”. Module D also expressly identifies Pillar 1 – Minimum Capital Requirements, Pillar 2 – Supervisory Review Process and Pillar 3 – Market Discipline under Basel norms.

The basic structure is:

Pillar 1 – Minimum regulatory requirements Pillar 2 – Supervisory review and bank-specific risk assessment Pillar 3 – Market discipline through disclosure

These pillars are complementary. One pillar cannot fully replace another.

Learning Objectives

After studying this topic, you should be able to:

• explain the purpose of each Basel pillar;

• distinguish Pillar 1, Pillar 2 and Pillar 3;

• understand ICAAP and supervisory review under Pillar 2;

• explain how disclosures support market discipline;

• understand the broader Basel III regulatory architecture; and

• distinguish Basel international standards from RBI implementation in India.

Why Three Pillars Are Needed

Consider three different regulatory questions.

Question 1

What minimum capital should the bank maintain against measured risks?

This is mainly addressed through Pillar 1.

Question 2

Are there other material risks or bank-specific weaknesses that the minimum calculation does not adequately capture?

This is addressed through Pillar 2.

Question 3

Do investors, depositors, counterparties and markets have sufficient information to assess the bank’s risk and capital position?

This is addressed through Pillar 3.

Therefore:

Pillar 1 provides the quantitative foundation.

Pillar 2 provides supervisory judgement and internal capital assessment.

Pillar 3 provides transparency and external discipline.

Pillar 1 – Minimum Capital Requirements

Pillar 1 establishes minimum regulatory capital requirements against specified risks.

For CAIIB, the three major risk categories to remember are:

• Credit Risk

• Market Risk

• Operational Risk

These are directly reflected in the current IIBF BFM Module B syllabus.

Credit Risk under Pillar 1

Credit risk arises when a borrower or counterparty may fail to meet its obligations.

It can arise from:

• loans and advances;

• investments;

• guarantees;

• Letters of Credit;

• counterparty exposures; and

• other funded or contingent facilities.

The applicable regulatory framework converts these exposures into risk-weighted amounts according to prescribed methods.

Credit-risk mitigation may recognise eligible:

• collateral;

• guarantees; or

• other approved risk mitigants

subject to applicable conditions.

Market Risk under Pillar 1

Market risk arises from adverse movements in market prices or rates.

It can include exposure to:

• interest rates;

• foreign exchange;

• equities;

• commodities; and

• other relevant market factors.

Trading activities therefore require appropriate market-risk capital in accordance with the applicable framework.

Operational Risk under Pillar 1

Operational risk relates to loss arising from inadequate or failed:

• internal processes;

• people;

• systems; or

• external events.

The Basel framework maintains a specific regulatory capital treatment for operational risk.

This recognises that a bank can suffer major losses even without:

• borrower default; or

• adverse market-price movement.

What Pillar 1 Achieves

Pillar 1 creates a common minimum prudential foundation.

It links:

Risk Exposure → Risk Measurement → Risk-Weighted Exposure → Required Capital

This helps ensure that greater risk is supported by an appropriate amount of loss-absorbing capital.

What Pillar 1 Cannot Do Alone

No regulatory formula can perfectly measure every possible risk.

For example:

• two banks may have similar Pillar 1 numbers but very different concentrations;

• a new business model may create risks not well represented by historical calculations;

• interest-rate risk in the Banking Book may be material;

• weak governance may increase future losses;

• liquidity stress may not appear directly in a credit-risk calculation.

This limitation creates the need for Pillar 2.

Pillar 2 – Supervisory Review Process

Pillar 2 goes beyond mechanical minimum capital calculations.

The current Basel Framework states that the Pillar 2 supervisory review process seeks to ensure that banks maintain adequate capital and liquidity to support all risks in their business, particularly risks not fully captured by Pillar 1, while encouraging sound risk management. The current Supervisory Review Process standard is effective as of 1 January 2026.

Pillar 2 therefore asks:

Considering the bank’s complete risk profile, is its capital and risk-management framework really adequate?

ICAAP – Bank’s Internal Assessment

A central Pillar 2 concept is the Internal Capital Adequacy Assessment Process (ICAAP).

Through ICAAP, the bank internally evaluates:

• its material risks;

• risk profile;

• capital needs;

• available capital;

• future capital requirements; and

• ability to remain adequately capitalised under stress.

ICAAP should not be treated merely as an annual regulatory document.

It should be integrated with:

• strategy;

• risk appetite;

• capital planning;

• budgeting;

• stress testing; and

• management decisions.

Pillar 1 vs ICAAP

Pillar 1 asks:

What is the minimum regulatory requirement under prescribed methods?

ICAAP asks:

Considering our actual business and risks, how much capital do we need?

The two amounts need not always be identical.

Risks beyond Pillar 1

Pillar 2 becomes particularly important where risks are:

• not captured;

• inadequately captured; or

• difficult to capture

under Pillar 1.

A current example is Interest Rate Risk in the Banking Book (IRRBB). The current Basel Framework treats IRRBB through Pillar 2 because of the heterogeneous nature of this risk. The revised IRRBB provisions became effective on 1 January 2026.

Depending on the bank, Pillar 2 assessment can also consider matters such as:

• concentration risk;

• residual risk;

• strategic risk;

• reputational effects;

• weaknesses in risk management;

• stress conditions; and

• other material risks.

SREP – Supervisor’s Review

ICAAP is the bank’s assessment.

The supervisor independently reviews that assessment through the supervisory process.

For an Indian bank, RBI performs the relevant supervisory role under the applicable Indian framework.

The supervisor considers whether:

• risks have been properly identified;

• measurement methods are reasonable;

• capital is adequate;

• governance is effective;

• internal controls are sound;

• stress testing is meaningful; and

• remedial action is necessary.

The supervisor does not simply accept the bank’s own assessment.

Four Key Principles of Pillar 2

The current Basel Framework identifies four key supervisory-review principles.

Principle 1 – Bank Assesses Its Capital Adequacy

Banks should have a process for assessing overall capital adequacy in relation to their risk profile and a strategy for maintaining capital.

This is the foundation of ICAAP.

Principle 2 – Supervisor Reviews the Assessment

Supervisors should evaluate:

• the bank’s internal capital assessment;

• capital strategy;

• ability to monitor capital; and

• compliance with regulatory requirements.

If the supervisor is not satisfied, it should take appropriate action.

Principle 3 – Capital above Minimum May Be Needed

Supervisors should expect banks to operate above minimum regulatory capital ratios and should be able to require additional capital where necessary.

Therefore:

Regulatory minimum does not automatically equal adequate capital for every bank.

Principle 4 – Early Supervisory Intervention

Supervisors should intervene early if capital is at risk of falling below prudent levels and should require timely remedial action.

The objective is prevention rather than waiting until a bank has already become critically weak.

Pillar 3 – Market Discipline

Regulation and supervision occur mainly between:

• the bank; and

• the regulator.

But markets also influence bank behaviour.

Investors and counterparties can impose discipline only when they have meaningful information about a bank’s:

• capital;

• risks;

• exposures; and

• prudential position.

This is the purpose of Pillar 3.

The current Basel Framework states that Pillar 3 aims to promote market discipline through regulatory disclosure requirements. The disclosures help market participants assess a bank’s regulatory capital and risk exposures and improve comparability between banks. The current disclosure standard is effective from 1 January 2026.

How Market Discipline Works

Suppose Bank A and Bank B report similar profits.

However, Pillar 3 information reveals that:

• Bank A has strong capital and diversified risks;

• Bank B has weaker capital and higher-risk exposures.

Market participants may respond by:

• demanding higher returns from Bank B;

• reducing exposure to it;

• questioning its strategy; or

• requiring stronger financial protection.

Management therefore faces an external incentive to maintain sound risk practices.

Pillar 3 Is More than Publishing Financial Statements

Accounting financial statements mainly explain financial performance and position under accounting rules.

Pillar 3 focuses specifically on prudential information.

It can include information relating to:

• regulatory capital;

• risk-weighted assets;

• risk exposures;

• leverage;

• liquidity;

• risk-management practices; and

• other prescribed prudential metrics.

The Basel Framework requires Pillar 3 information to provide accessible and meaningful prudential information to users.

How the Three Pillars Reinforce Each Other

The pillars should not be studied as three independent chapters.

They create one architecture.

Pillar 1 without Pillar 2

A bank might satisfy minimum calculations while ignoring material risks not fully captured by those calculations.

Pillar 2 without Pillar 3

The supervisor may understand the bank, but other stakeholders may lack sufficient transparency.

Pillar 3 without Pillar 1

Disclosure alone cannot substitute for mandatory minimum prudential requirements.

Therefore:

Pillar 1 sets the floor. Pillar 2 provides supervisory judgement. Pillar 3 provides transparency and external discipline.

Basel III Is Broader than the Three Pillars

The Three-Pillar structure was introduced under Basel II and remains an important foundation of Basel III.

However, the current Basel regulatory architecture is much wider.

The consolidated Basel Framework also contains requirements concerning areas such as:

• definition of regulatory capital;

• leverage ratio;

• Liquidity Coverage Ratio;

• Net Stable Funding Ratio;

• large exposures;

• capital buffers;

• margin requirements;

• supervisory review; and

• disclosure requirements.

These additional safeguards should not be called new Pillars 4, 5 or 6.

They operate within the broader Basel III prudential architecture.

Regulatory Architecture: Basel to an Indian Bank

The framework can be understood in layers.

Layer 1 – Basel Committee

The Basel Committee on Banking Supervision (BCBS) is the international standard setter for prudential banking regulation.

It develops Basel standards.

Basel standards themselves are international standards, not automatically Indian law.

Layer 2 – RBI

RBI establishes the applicable prudential requirements for banks in India under its legal and regulatory powers.

The latest Basel III Capital Regulations Master Circular located in RBI’s current master-circular framework is dated 1 April 2025 and applies to specified Scheduled Commercial Banks, excluding the categories stated in that circular. Subsequent amendments continue to modify individual requirements where applicable.

Layer 3 – Bank’s Board and Senior Management

Within the bank:

• Board oversees capital and risk;

• senior management implements the framework;

• risk functions measure and monitor risks;

• ICAAP assesses internal capital needs; and

• disclosures support Pillar 3 requirements.

Layer 4 – Market Participants

Investors, counterparties and other users analyse disclosed prudential information and impose market discipline.

The complete flow is therefore:

BCBS Standards → RBI Regulation and Supervision → Bank Governance and ICAAP → Pillar 3 Disclosure → Market Discipline

Pillar 2 vs Risk-Based Supervision

These terms are related but should not be treated as identical.

Pillar 2

Part of the Basel capital and supervisory architecture.

It focuses on:

• bank-specific capital adequacy;

• risks not fully captured by Pillar 1;

• ICAAP;

• supervisory review; and

• early intervention.

Risk-Based Supervision

A broader supervisory approach under which the regulator directs greater attention towards institutions and activities presenting higher material risk.

Therefore:

Pillar 2 is an important part of supervisory architecture, while risk-based supervision is the broader approach to allocating supervisory attention according to risk.

Practical Banking Application

Assume a bank satisfies its Pillar 1 minimum capital requirements.

However, it has:

• very high concentration in one industry;

• rapidly increasing interest-rate risk in the Banking Book;

• aggressive growth plans; and

• weaknesses identified in stress testing.

Pillar 1

The bank calculates the prescribed minimum capital for relevant credit, market and operational risks.

It may technically remain above the minimum requirement.

Pillar 2

The bank’s ICAAP should identify:

• concentration;

• IRRBB;

• stress vulnerability; and

• future capital needs.

RBI, as supervisor, can assess whether the bank’s risk-management and capital position are adequate and require corrective action where appropriate.

Pillar 3

The bank publishes prescribed prudential disclosures, allowing market participants to assess relevant risk and capital information.

The case demonstrates why all three pillars are necessary.

A bank that merely says:

“Our Pillar 1 ratio is above the minimum, so no further analysis is necessary”

is applying an incomplete Basel approach.

CAIIB Exam Focus

Remember these high-value concepts:

• The Three-Pillar framework originated with Basel II and continues within Basel III.

• Pillar 1 deals with minimum regulatory requirements.

• Credit, Market and Operational Risk are the major CAIIB Pillar 1 risk categories.

• Pillar 1 does not fully capture every material banking risk.

• Pillar 2 is the Supervisory Review Process.

• ICAAP is the bank’s internal assessment of capital adequacy.

• Supervisory review independently evaluates the bank’s capital and risk-management position.

• Pillar 2 can address risks not fully captured under Pillar 1.

• IRRBB is currently treated through Pillar 2 in the Basel Framework.

• Supervisors may expect capital above minimum regulatory ratios where justified by the bank’s risk profile.

• Early supervisory intervention is one of the four key Pillar 2 principles.

• Pillar 3 promotes market discipline through regulatory disclosures.

• Pillar 3 improves transparency and comparability of banks’ capital and risk positions.

• Pillar 3 disclosure is not identical to ordinary accounting disclosure.

• Basel III retains the Three-Pillar architecture while adding or strengthening capital buffers, leverage, liquidity and other safeguards.

• LCR, NSFR and leverage ratio are not additional Basel pillars.

• BCBS develops international standards; RBI determines applicable requirements for Indian banks.

Common Exam Traps

Trap 1: “Pillar 1 Covers Every Risk Faced by a Bank”

Incorrect.

Some material risks may be inadequately captured or not captured through Pillar 1 and therefore require Pillar 2 consideration.

Trap 2: “ICAAP Is Conducted by RBI”

Incorrect.

ICAAP is the bank’s internal process. RBI conducts the supervisory assessment/review under the applicable framework.

Trap 3: “If Pillar 1 Minimum Capital Is Met, the Supervisor Cannot Require More Capital”

Incorrect.

Pillar 2 expressly recognises that supervisors may expect or require capital above regulatory minimums where justified.

Trap 4: “Pillar 3 Means Supervisory Inspection”

Incorrect.

Pillar 3 concerns market discipline through disclosure.

Trap 5: “Pillar 3 Replaces Financial Statements”

Incorrect.

Prudential disclosure complements rather than simply replaces wider accounting and financial reporting.

Trap 6: “LCR Is Pillar 4 of Basel III”

Incorrect.

Basel continues to use the Three-Pillar architecture. LCR is an additional liquidity standard within the broader Basel framework.

Trap 7: “Basel Standards Automatically Become Indian Regulation”

Incorrect.

BCBS sets international standards. RBI implements applicable requirements within India.

Trap 8: “Pillar 2 Deals Only with Additional Capital”

Incomplete.

Pillar 2 also emphasises risk management, governance, internal assessment, supervisory review, capital planning and early corrective action.

Memory Technique

Remember C-S-D:

• C – Capital: Pillar 1 establishes minimum capital requirements.

• S – Supervision: Pillar 2 covers ICAAP and supervisory review.

• D – Disclosure: Pillar 3 promotes market discipline.

Then remember:

1 calculates, 2 evaluates, 3 communicates.