Liquidity Governance, Policy and Risk Appetite - Article

Introduction

Liquidity-risk management requires more than maintaining sufficient cash or complying with regulatory liquidity ratios.

A bank needs a clear governance framework that answers:

• Who decides how much liquidity risk the bank can accept?

• Who develops and implements the liquidity strategy?

• Who monitors liquidity positions and limits?

• Who responds when liquidity conditions deteriorate?

• How are liquidity risks communicated to senior management and the Board?

The current Basel liquidity-risk framework, consolidated in 2026, states that a bank is responsible for the sound management of its liquidity risk and should maintain a robust framework capable of supporting sufficient liquidity even under severe stress.

RBI's liquidity-risk management framework similarly places overall responsibility with the Board of Directors, supported by the Risk Management Committee, Asset-Liability Management Committee (ALCO) and ALM support structure. RBI also requires an explicit liquidity-risk tolerance appropriate to the bank's business strategy, financial condition and funding capacity.

For CAIIB, remember the hierarchy:

Board sets direction and tolerance → Senior Management/ALCO implements → ALM function measures and monitors → Independent controls and audit provide assurance

Learning Objectives

After studying this topic, you should be able to:

• explain liquidity-risk governance;

• understand the Board's responsibilities;

• explain the role of the Risk Management Committee and ALCO;

• understand liquidity-risk appetite and tolerance;

• identify important elements of liquidity policy;

• explain the purpose of liquidity limits;

• understand funding diversification and liquidity cushions;

• explain reporting and escalation requirements; and

• avoid common CAIIB governance traps.

Why Liquidity Governance Is Important

Liquidity problems can develop very quickly.

A bank may appear financially stable but suddenly face:

• large deposit withdrawals;

• loss of wholesale funding;

• collateral calls;

• market disruption;

• unexpected credit-line utilisation; or

• inability to sell assets at expected prices.

Effective governance ensures that management does not begin thinking about liquidity only after a crisis starts.

Liquidity management should operate during:

• normal conditions;

• emerging stress; and

• severe stress.

Basel specifically requires the liquidity framework to be integrated into the bank-wide risk-management process and to maintain sufficient liquidity, including an appropriate cushion of unencumbered high-quality liquid assets.

Liquidity-Risk Governance Structure

RBI's framework identifies an organisational structure involving:

• Board of Directors;

• Risk Management Committee;

• Asset-Liability Management Committee;

• ALM Support Group or equivalent function.

The exact names and structure may vary between banks, but the principles remain similar.

Role of the Board of Directors

The Board has ultimate responsibility for the bank's liquidity-risk framework.

Basel states that the Board is ultimately responsible for the liquidity risk assumed by the bank and should establish a suitable liquidity-risk tolerance. It should also approve and review liquidity strategy, policies and practices at least annually.

RBI similarly places overall responsibility for liquidity-risk management with the Board.

Important Board responsibilities include:

• approving liquidity-risk strategy;

• setting liquidity-risk tolerance;

• approving important policies and limits;

• understanding the bank's overall liquidity profile;

• ensuring adequate liquidity under normal and stressed conditions;

• reviewing major liquidity exposures;

• overseeing the Contingency Funding Plan;

• ensuring adequate MIS and controls;

• monitoring material breaches; and

• ensuring senior management implements approved policies.

Board Oversight vs Daily Management

The Board does not normally manage day-to-day cash positions.

Its main role is:

Approve → Oversee → Review → Challenge

Daily implementation belongs to senior management and ALCO.

Role of the Risk Management Committee

RBI's liquidity framework places the Risk Management Committee under the Board-level governance structure.

Its role is to evaluate the bank's overall risk position, including liquidity risk, and consider how liquidity interacts with other risks.

This is important because liquidity may be affected by:

• credit deterioration;

• market losses;

• operational disruption;

• reputational problems; or

• funding-market stress.

The committee therefore supports an integrated risk view.

Example

A significant deterioration in loan quality may initially appear to be a credit-risk problem.

However, it may also:

• reduce expected loan recoveries;

• weaken investor confidence;

• increase deposit withdrawals; and

• reduce access to wholesale funding.

The Risk Management Committee should consider these interactions rather than examining liquidity in isolation.

Role of ALCO

The Asset-Liability Management Committee (ALCO) is central to day-to-day strategic liquidity management.

RBI requires ALCO to ensure adherence to Board-approved risk tolerance and limits and to implement the bank's liquidity-risk strategy.

ALCO may deal with matters such as:

• asset-liability structure;

• liquidity gaps;

• funding requirements;

• deposit strategy;

• maturity profile;

• funding concentration;

• pricing;

• market developments;

• liquidity limits;

• stress-test results;

• liquidity buffers; and

• contingency funding arrangements.

ALCO should have sufficient seniority to take timely balance-sheet decisions.

RBI states that the CEO/CMD or Executive Director should normally head ALCO so that decisions can respond promptly to market developments.

ALCO Is Not Only a Reporting Committee

An important conceptual point is that ALCO should not merely receive liquidity reports.

It should use them to take decisions.

Possible actions include:

• change deposit pricing;

• increase stable funding;

• reduce short-term borrowing dependence;

• modify asset growth;

• build liquidity reserves;

• reduce maturity mismatch;

• diversify funding; or

• activate contingency arrangements.

Role of the ALM Support Function

An ALM Support Group or equivalent analytical function provides the information needed by ALCO.

Its responsibilities may include:

• collecting asset and liability data;

• preparing maturity profiles;

• measuring cash-flow gaps;

• monitoring limits;

• preparing liquidity ratios;

• conducting stress analysis;

• analysing funding concentration;

• monitoring early-warning indicators; and

• preparing management information.

This function converts raw balance-sheet information into useful liquidity-risk analysis.

The quality of ALCO decisions therefore depends heavily on:

• accurate data;

• timely reporting;

• appropriate assumptions; and

• reliable measurement systems.

Liquidity-Risk Appetite and Risk Tolerance

A bank cannot eliminate liquidity risk completely.

It must decide how much risk it is willing to accept while pursuing its business strategy.

Basel uses the concept of liquidity-risk tolerance and requires it to be appropriate to:

• business strategy;

• financial condition;

• funding capacity; and

• the bank's role in the financial system.

RBI similarly requires banks to have an explicit liquidity-risk tolerance set by the Board.

What Does Liquidity-Risk Tolerance Mean?

Liquidity-risk tolerance represents the level of liquidity risk the bank is willing to assume.

It should help answer:

• How much maturity mismatch is acceptable?

• How much dependence on volatile funding can be tolerated?

• How concentrated can funding sources become?

• How much liquidity should remain available during stress?

• How much exposure to a particular currency is acceptable?

The exact measures depend on the bank's size, business model and complexity.

Risk Appetite vs Limit

These terms are related but not identical.

Risk Appetite/Tolerance

A broad statement of how much liquidity risk the bank is prepared to accept.

Limit

A specific operational boundary used to keep actual exposure within that appetite.

For example:

Risk appetite: Maintain a conservative liquidity profile with limited reliance on unstable short-term funding.

Possible operational limits might address:

• short-term funding concentration;

• maturity gaps;

• depositor concentration;

• currency mismatch; or

• minimum liquidity buffer.

Characteristics of a Good Liquidity-Risk Tolerance

A useful tolerance should be:

• approved by the Board;

• consistent with business strategy;

• understandable to management;

• appropriate to financial strength;

• forward-looking;

• applicable in normal and stressed conditions;

• supported by measurable limits; and

• reviewed periodically.

Basel states that tolerance should be expressed so that all levels of management understand the trade-off between liquidity risk and profit.

This is important because taking more liquidity risk may sometimes increase short-term profitability.

For example, a bank may increase earnings by:

• holding fewer liquid assets; or

• relying on cheaper short-term funding.

However, this may increase vulnerability during stress.

Liquidity-Risk Policy

A liquidity-risk policy converts governance objectives into operating rules.

A comprehensive policy should cover areas relevant to the bank's business.

Important Policy Areas

Governance

Define:

• Board responsibilities;

• committee responsibilities;

• management authority;

• reporting lines; and

• escalation procedures.

Risk Tolerance and Limits

Specify:

• liquidity-risk tolerance;

• quantitative limits;

• qualitative restrictions; and

• breach-management procedures.

Asset-Liability Management

Address:

• maturity mismatch;

• cash-flow projections;

• liquidity gaps; and

• balance-sheet structure.

Funding Strategy

Define the desired mix of:

• retail deposits;

• wholesale funding;

• secured funding;

• long-term funding; and

• other sources.

Funding Concentration

Establish controls for excessive dependence on:

• individual depositors;

• markets;

• instruments;

• currencies; and

• maturity buckets.

Liquidity Buffer

Set expectations regarding readily available liquid assets that can be used during stress.

Collateral Management

Identify:

• available collateral;

• encumbered assets;

• collateral requirements; and

• capacity to mobilise assets rapidly.

Currency Liquidity

Address liquidity needs separately in important currencies.

Intraday Liquidity

Ensure payment and settlement obligations can be met throughout the day.

Stress Testing

Define:

• scenarios;

• frequency;

• assumptions;

• reporting; and

• management response.

Contingency Funding Plan

Explain actions to be taken during serious liquidity stress.

Early-Warning Indicators

Define indicators and escalation triggers.

MIS and Reporting

Specify:

• reports;

• frequency;

• recipients; and

• materiality thresholds.

Basel requires the liquidity strategy to address the composition and maturity of assets and liabilities, funding diversity and stability, currency liquidity, intraday liquidity and assumptions regarding asset liquidity and marketability.

Funding Strategy

A sound funding strategy seeks to maintain sufficient and diversified funding.

It should consider:

• source;

• tenor;

• currency;

• market;

• counterparty; and

• stability of funds.

RBI specifically requires banks to establish a funding strategy providing effective diversification in both the source and tenor of funding.

Why Diversification Matters

Suppose a bank obtains 30% of its funding from one institutional depositor.

The funds may currently be cheap and stable.

However, withdrawal by that depositor can create sudden pressure.

A diversified structure reduces dependence on any one provider.

Funding strategy should therefore not be based solely on:

Which source is cheapest today?

It should also consider:

Which sources are likely to remain available under stress?

Liquidity Limits

Limits convert Board-approved tolerance into measurable boundaries.

Examples may include limits relating to:

• cash-flow gaps;

• cumulative maturity mismatch;

• funding concentration;

• short-term wholesale funding;

• large depositors;

• currency mismatch;

• intraday exposure; or

• encumbrance.

The precise limit structure depends on the bank's risk profile and applicable RBI requirements.

Basel emphasises that limits should reflect the bank's business, financial condition and liquidity-risk tolerance.

Limit Breach

A limit breach should trigger:

1. identification;

2. reporting;

3. investigation;

4. authorised decision;

5. corrective action; and

6. follow-up.

The correct response is not simply to revise the limit upward because it has been exceeded.

A limit may be changed if the bank's approved risk framework genuinely changes, but it should not be altered merely to hide an exception.

Internal Pricing of Liquidity

Liquidity has a cost.

Basel requires banks to incorporate liquidity:

• costs;

• benefits; and

• risks

into internal pricing, performance measurement and new-product approval for significant activities.

Why?

Suppose a business unit generates a long-term loan funded by short-term deposits.

The loan may appear highly profitable if the business unit is charged only the current short-term funding cost.

However, the bank as a whole bears:

• refinancing risk;

• liquidity-buffer cost; and

• maturity risk.

The internal pricing system should therefore reflect the liquidity risk created by the transaction.

This helps prevent business units from earning apparent profits while transferring liquidity risk to the bank.

Liquidity Cushion

A liquidity cushion provides resources that can be used when normal funding becomes difficult.

Basel requires banks to maintain a cushion of unencumbered high-quality liquid assets capable of supporting the bank through stress events.

The cushion should be:

• genuinely available;

• not already pledged;

• capable of monetisation; and

• appropriate to the bank's stress profile.

A large asset portfolio does not automatically represent a strong liquidity buffer if those assets are:

• encumbered;

• illiquid; or

• likely to lose marketability during stress.

Stress Testing and Governance

Liquidity strategy should not be based only on normal conditions.

Stress tests may examine:

• bank-specific stress;

• market-wide stress; and

• combined stress.

RBI requires regular stress tests covering short-term and prolonged institution-specific and market-wide scenarios and expects the results to influence policies, positions and contingency arrangements.

Basel similarly requires banks to use stress-test outcomes to adjust liquidity strategies, build liquidity cushions and support contingency funding planning.

Governance Importance

A stress test has little value if:

• management does not review it;

• unrealistic assumptions are used;

• severe results are ignored; or

• no action follows.

Stress-test findings should influence real decisions.

Contingency Funding Plan and Governance

A Contingency Funding Plan (CFP) sets out how the bank will respond to serious liquidity stress.

RBI requires banks to maintain a formal CFP containing strategies for addressing liquidity shortfalls and clear lines of responsibility, implementation and escalation.

A CFP may address:

• warning triggers;

• crisis-management responsibilities;

• alternative funding sources;

• asset monetisation;

• communication;

• collateral mobilisation;

• funding priorities; and

• escalation.

The plan should be prepared before a crisis.

A document that cannot be implemented quickly under stress is not an effective contingency plan.

Management Information System

Liquidity decisions require timely information.

A sound MIS should help management understand:

• current liquidity;

• future cash-flow gaps;

• funding concentration;

• available liquid assets;

• collateral position;

• limit utilisation;

• currency positions;

• stress-test results; and

• early-warning signals.

Basel requires comprehensive systems for accurate and timely identification, aggregation, monitoring and reporting of liquidity exposures and funding needs across the bank.

Liquidity information should be available:

• bank-wide;

• across material legal entities;

• across currencies; and

• across relevant business lines.

Internal Controls and Independent Review

A liquidity-risk framework also needs effective controls.

Basel requires senior management to ensure the integrity of the liquidity-risk process through appropriate internal controls and states that internal audit should regularly review the framework's implementation and effectiveness.

Independent control functions should be capable of challenging:

• business assumptions;

• funding assumptions;

• model assumptions;

• behavioural assumptions; and

• reported liquidity positions.

This reduces the risk of overly optimistic assumptions.

Example

A business unit may assume that all corporate deposits will remain stable during stress.

An independent risk function should challenge whether that assumption is realistic.

Communication Across the Bank

Liquidity policy is ineffective if understood only by ALCO.

Basel requires liquidity strategy and key policies to be communicated throughout the organisation, particularly to business units whose activities affect liquidity.

Relevant areas may include:

• lending;

• deposits;

• treasury;

• payments;

• derivatives;

• international banking; and

• product development.

Employees need not all become liquidity specialists, but business units should understand how their activities create liquidity costs and risks.

Practical Banking Application

Consider a bank experiencing rapid corporate-loan growth.

The loans are long term, while much of the additional funding comes from:

• large short-term corporate deposits;

• wholesale borrowings; and

• a small number of funding counterparties.

The loans are profitable, and business units want further expansion.

Board Perspective

The Board should ask whether the growth remains consistent with approved liquidity-risk tolerance.

ALCO Perspective

ALCO should assess:

• maturity mismatch;

• funding concentration;

• refinancing risk;

• liquidity buffer;

• funding cost; and

• stress-test results.

Risk Management Perspective

The independent risk function should test assumptions such as:

• depositor stability;

• ability to refinance;

• asset marketability; and

• availability of alternative funding.

Possible Management Action

The bank may:

• slow asset growth;

• raise more stable deposits;

• increase long-term funding;

• diversify funding;

• build additional liquidity buffers; or

• revise product pricing to reflect liquidity cost.

The wrong response would be:

“Continue growth because all regulatory liquidity ratios are currently above minimum requirements.”

Regulatory ratios are important, but they do not replace the bank's own liquidity-risk management.

Basel explicitly states that quantitative regulatory requirements are not a substitute for banks' own active measurement and management of liquidity risk.

CAIIB Exam Focus

Remember these high-value points:

• The Board has ultimate responsibility for liquidity-risk governance.

• The Board sets or approves liquidity-risk tolerance.

• Liquidity-risk tolerance should reflect business strategy, financial condition and funding capacity.

• The Board should review liquidity strategy and critical policies at least annually.

• The Risk Management Committee considers liquidity together with other material risks.

• ALCO implements liquidity strategy and ensures adherence to approved limits.

• ALM support functions provide measurement, analysis and MIS.

• Liquidity-risk appetite/tolerance is broader than individual operational limits.

• Limits translate risk tolerance into measurable boundaries.

• Funding strategy should diversify both sources and tenors.

• Cheapest funding is not necessarily the safest funding.

• Liquidity cost should be reflected in pricing and performance measurement.

• Stress testing should influence actual management decisions.

• A Contingency Funding Plan should specify responsibilities, triggers and actions.

• Banks should maintain an appropriate cushion of unencumbered high-quality liquid assets.

• Liquidity policy should cover both normal and stressed conditions.

• Liquidity should be managed across legal entities, business lines and material currencies.

• Internal controls and independent review are important.

• MIS should provide timely and comprehensive information.

• Compliance with regulatory liquidity ratios does not replace internal liquidity-risk management.

Common Exam Traps

Trap 1: “Treasury alone is responsible for liquidity risk.”

Incorrect. Treasury may manage important liquidity activities, but overall governance involves the Board, senior management, ALCO, risk functions and other relevant business units.

Trap 2: “ALCO sets the bank's ultimate liquidity-risk appetite independently.”

Incorrect. The Board has ultimate responsibility for establishing or approving liquidity-risk tolerance. ALCO implements the approved framework.

Trap 3: “Risk tolerance and liquidity limits mean exactly the same thing.”

Incorrect. Tolerance states the overall acceptable risk level, while limits translate it into specific operational boundaries.

Trap 4: “Meeting LCR or another regulatory ratio proves that liquidity risk is fully controlled.”

Incorrect. Regulatory minimums supplement, but do not replace, the bank's internal liquidity-risk framework.

Trap 5: “The cheapest funding source should always be preferred.”

Incorrect. Stability, maturity, concentration and availability during stress are also important.

Trap 6: “A liquidity policy is needed only for normal market conditions.”

Incorrect. It must also address stressed conditions.

Trap 7: “The Contingency Funding Plan should be prepared once liquidity stress begins.”

Incorrect. It should be developed and maintained in advance.

Trap 8: “A large investment portfolio automatically provides a strong liquidity cushion.”

Incorrect. The assets must be sufficiently liquid, available and unencumbered.

Trap 9: “Stress testing is only a regulatory exercise.”

Incorrect. Results should influence liquidity strategy, buffers, limits and contingency plans.

Trap 10: “A limit breach can be corrected simply by increasing the limit.”

Incorrect. The underlying reason and risk must first be evaluated and any change must follow approved governance.

Memory Technique

Remember the governance structure as B–R–A–S:

B — Board: Sets strategy and tolerance. R — Risk Committee: Reviews overall and interconnected risk. A — ALCO: Acts on liquidity and balance-sheet positions. S — Support Function: Supplies measurement, monitoring and MIS.

For risk appetite, remember:

Tolerance → Policy → Limits → Monitoring → Escalation

The central CAIIB principle is:

The Board decides how much liquidity risk the bank can accept; management must operate the balance sheet within that boundary in both normal and stressed conditions.