Portfolio Monitoring and Concentration-Risk Management - Article

Introduction

A bank may have thousands of individually acceptable loans and still have a risky credit portfolio.

This happens because credit exposures may be connected through a common factor.

For example, a bank may have separate loans to:

• a steel manufacturer;

• an iron-ore supplier;

• a transport company serving steel plants; and

• an engineering company dependent on steel-sector orders.

Each borrower may appear satisfactory when assessed separately. However, a severe downturn in the steel industry can weaken all four borrowers together.

This is portfolio credit risk.

The current 2026 CAIIB BFM syllabus specifically includes Credit Control and Monitoring at Portfolio Level and Active Credit Portfolio Management under Credit Risk in Module B.

Portfolio monitoring therefore asks:

What can cause several credit exposures to deteriorate at the same time?

The basic process is:

Aggregate exposures → Identify concentration → Measure vulnerability → Compare with limits → Stress test → Take corrective action → Continue monitoring

Learning Objectives

After studying this topic, you should be able to:

• distinguish borrower-level risk from portfolio-level risk;

• explain concentration and correlation risk;

• identify different forms of credit concentration;

• understand connected-counterparty risk;

• interpret portfolio monitoring indicators;

• understand the role of limits and stress testing;

• recognise hidden concentrations across apparently different borrowers; and

• solve CAIIB portfolio-risk cases logically.

Borrower Risk vs Portfolio Risk

Borrower-level analysis asks:

Will this borrower repay?

Portfolio-level analysis asks:

What happens to the bank if many exposures are affected by the same event?

Consider 100 individually sound housing loans.

If all borrowers:

• work for the same employer;

• live in the same industrial town; and

• depend on the same local economy,

the portfolio is less diversified than the number of borrowers suggests.

Therefore:

Many borrowers do not automatically mean a diversified portfolio.

Systematic and Unsystematic Credit Risk

Understanding concentration begins with two broad categories of risk.

Unsystematic Risk

Unsystematic risk is borrower-specific or idiosyncratic risk.

Examples include:

• failure of one company's management;

• fraud in one borrower;

• breakdown of one factory;

• loss of one company's major customer; or

• failure of a specific project.

Diversification across independent borrowers can reduce the impact of such risk.

Systematic Risk

Systematic credit risk arises from broader factors that may affect many borrowers simultaneously.

Examples include:

• recession;

• sharp increase in interest rates;

• major commodity-price movement;

• economy-wide demand slowdown;

• severe regional disruption; or

• broad financial-market stress.

Diversification cannot completely remove systematic risk.

A portfolio may also contain correlation risk, where different borrowers become weaker together because they share economic dependencies.

What Is Concentration Risk?

Credit concentration exists when a significant part of the bank's credit exposure depends on a limited number of borrowers or common risk factors.

Basel's current credit-risk guidance requires banks to identify and aggregate exposures creating concentrations and large exposures on a timely basis and to actively manage them.

Concentration can arise even when no individual account appears unusually risky.

Major Forms of Concentration

The last category is especially important because it may not be visible from ordinary sector classification.

Hidden Concentration

Suppose a bank has exposures to:

• an airline;

• an airport-service company;

• a tourism operator;

• a hotel chain; and

• an aviation-fuel supplier.

These borrowers belong to different formal business categories.

However, all may be affected by a severe fall in air travel.

Therefore, diversification should be assessed according to economic dependence, not merely account names or industry codes.

Connected Counterparties

Looking only at individual legal entities may underestimate concentration.

Two or more counterparties may need to be viewed together when they are connected through:

• control; or

• economic interdependence.

Current Basel supervisory principles describe connected counterparties in terms of control relationships or economic interdependence where financial problems in one counterparty are likely to create financial difficulty for another.

Control Relationship

Companies may be connected through:

• common ownership;

• parent-subsidiary relationship;

• voting control; or

• another form of control.

Economic Interdependence

Entities may not have common ownership but may depend heavily on one another.

For example:

• Company A sells most of its output to Company B.

• Company B depends on Company A for an essential input.

A serious failure in one may therefore affect the other.

For portfolio monitoring, exposures should not be treated as independent merely because they have different legal names.

RBI Large Exposures Framework

For Indian banks, portfolio concentration management also operates within RBI's prudential framework.

The RBI's current regulatory handbook records, for Scheduled Commercial Banks under the Large Exposures Framework (LEF):

• exposure to a single counterparty: generally 20% of Tier 1 capital, extendable to 25% with Board approval; and

• exposure to a group of connected counterparties: 25% of Tier 1 capital.

The LEF remains current and has continued to be amended; RBI issued a further amendment relating to exempted exposures on 9 June 2025, applicable immediately.

These are regulatory ceilings. A bank may adopt stricter internal limits according to its risk appetite.

What Should a Bank Monitor at Portfolio Level?

Portfolio monitoring requires aggregation across many individual accounts.

Important indicators include:

• total exposure;

• borrower and group exposure;

• sector-wise exposure;

• geographical distribution;

• product-wise distribution;

• rating-grade distribution;

• rating migration;

• delinquency and default trends;

• collateral concentration;

• large exposures;

• connected counterparties;

• expected-loss trends;

• stressed losses; and

• limit utilisation.

Concentration by Borrower and Group

The bank should know:

• its largest borrowers;

• largest connected groups;

• exposure relative to internal limits;

• exposure relative to capital; and

• whether concentration is rising.

A borrower may remain financially strong while its exposure grows too large relative to the bank's own capacity.

Sector Concentration

Sector monitoring may identify excessive exposure to:

• real estate;

• infrastructure;

• power;

• textiles;

• metals;

• automobiles;

• NBFCs; or

• another industry.

The important questions are:

• How much exposure exists?

• What is the portfolio quality?

• Is exposure growing faster than the bank's overall portfolio?

• Are ratings deteriorating?

• What happens under sector stress?

Rating Distribution

A portfolio should also be examined by risk grade.

Suppose total lending remains unchanged, but many borrowers migrate from stronger grades to weaker grades.

The portfolio has become riskier even without any increase in total exposure.

Therefore:

Portfolio size unchanged ≠ Portfolio risk unchanged

Rating Migration

Monitoring should identify:

• upgrades;

• downgrades;

• movement toward high-risk grades; and

• movement into default.

A growing number of downgrades in one sector may provide an early warning before widespread defaults emerge.

Collateral Concentration

Diversification of borrowers does not guarantee diversification of recovery protection.

Suppose hundreds of loans are secured primarily by commercial property in one city.

A sharp fall in property prices could:

1. weaken borrowers dependent on that property market; and

2. reduce collateral recovery at the same time.

This creates a dangerous interaction between default risk and LGD risk.

Role of Correlation

Correlation describes the tendency of risks to move together.

If two borrowers are almost independent, financial difficulty in one may have little effect on the other.

If they depend on the same:

• market;

• customer;

• commodity;

• geography;

• supplier;

• source of funding; or

• economic activity,

their credit quality may deteriorate together.

This is why portfolio analysis should not simply add individual borrower risks.

Correlation Often Rises During Stress

Relationships observed during normal conditions may change during a crisis.

Borrowers that previously appeared diversified may become affected by the same shock.

Basel therefore emphasises scenario analysis and stress testing where concentrations are difficult to avoid or where risks may become strongly correlated during adverse conditions.

Portfolio Limits

Banks can control concentration using internal limits.

Examples include:

• single-name limits;

• group limits;

• sector limits;

• country limits;

• product limits;

• rating-grade limits;

• unsecured-exposure limits; and

• collateral-concentration limits.

Limits should reflect:

• risk appetite;

• capital;

• portfolio size;

• borrower quality;

• economic outlook;

• stress-test results; and

• regulatory requirements.

An effective limit system should also provide early-warning thresholds.

Waiting until the final limit is breached may be too late.

For example:

70% utilisation → normal monitoring

85% utilisation → heightened review

95% utilisation → restrict new exposure

The exact thresholds depend on the bank's policy.

Stress Testing Credit Concentrations

Normal portfolio statistics may not reveal what happens during a severe downturn.

Stress testing asks questions such as:

• What if property prices fall sharply?

• What if an important commodity price collapses?

• What if interest rates rise materially?

• What if a region suffers a serious economic disruption?

• What if defaults in one sector increase significantly?

• What if collateral values decline while borrower ratings deteriorate?

Basel's 2026 stress-testing principles describe stress testing as a core risk-management tool for identifying unexpected adverse outcomes and the financial resources that may be required to absorb them.

Current Basel credit-risk guidance also states that stress-test results should be reported to the Board and senior management and, where appropriate, should influence the calibration of limits.

Case Study 1: Rapid Growth in Commercial Real Estate

A bank's commercial real-estate portfolio has grown rapidly.

Individual borrowers generally have:

• acceptable ratings;

• adequate collateral;

• regular repayment; and

• no major account-level warning signals.

However, commercial real estate now represents a very large share of total corporate lending.

Property prices have also risen sharply.

Risk Identification

The main issue is sector concentration risk.

Individual loan quality does not remove the possibility of a common sector shock.

A property-market downturn could simultaneously:

• reduce borrower cash flows;

• delay projects;

• increase defaults; and

• reduce collateral values.

Appropriate Portfolio Response

The bank should:

• measure aggregate sector exposure;

• compare it with internal concentration limits;

• examine recent growth;

• review rating distribution;

• stress borrower cash flows;

• stress collateral values;

• restrict further concentration if necessary; and

• report material vulnerability to appropriate management.

CAIIB Lesson

Good individual accounts do not eliminate portfolio concentration risk.

Case Study 2: Different Borrowers, Same Corporate Group

A bank has the following exposures:

• ₹600 crore to Company A;

• ₹350 crore to Company B; and

• ₹250 crore to Company C.

Each facility was sanctioned separately by different business units.

Further review shows that all three entities belong to the same controlled corporate group.

Each exposure individually remains within the bank's borrower limit.

Risk Identification

The bank should not assess these exposures only as three independent names.

It must examine:

• connected-counterparty treatment;

• aggregate group exposure;

• common ownership;

• financial links;

• guarantees and cross-support;

• common business risks; and

• applicable internal and regulatory group limits.

CAIIB Lesson

Separate legal entities do not necessarily represent separate economic risks.

Case Study 3: Hidden Commodity Concentration

A bank's portfolio includes:

• a tyre manufacturer;

• a logistics company;

• a rubber-products exporter;

• a plantation company; and

• a trading company.

They are classified under different industries.

Portfolio analysis reveals that all are highly sensitive to movements in natural-rubber prices.

Risk Identification

Ordinary sector classification has hidden a common risk-factor concentration.

The bank should assess:

• exposure to the common commodity driver;

• direction of sensitivity;

• borrower ability to pass on price changes;

• hedging arrangements;

• financial resilience; and

• stressed portfolio losses.

CAIIB Lesson

Portfolio diversification should be based on economic risk drivers, not merely industry labels.

Case Study 4: Rating Migration Without Increase in Exposure

A bank's total MSME exposure remains unchanged for one year.

Management concludes that portfolio risk is stable.

However, portfolio data show:

• fewer borrowers in strong rating grades;

• significant migration into weaker grades;

• rising overdue accounts; and

• increasing restructuring requests in one industry.

Correct Interpretation

Portfolio size may be unchanged, but portfolio quality has deteriorated.

The bank should:

• analyse downgrade trends;

• identify affected sectors;

• review PD and expected-loss movement where relevant;

• tighten underwriting where necessary;

• reassess concentration limits; and

• increase monitoring of vulnerable accounts.

CAIIB Lesson

Exposure amount is only one dimension of portfolio risk.

Case Study 5: Diversified Borrowers but Common Collateral

A bank provides loans to hundreds of different businesses.

The portfolio appears diversified by borrower and industry.

However, a large proportion of the loans is secured by commercial property in the same metropolitan area.

A sharp decline in local property prices occurs.

Risk Identification

There is collateral concentration risk.

If borrowers default during the same downturn:

• collateral values may be lower;

• sale periods may become longer;

• many banks may attempt recovery simultaneously; and

• LGD may rise across the portfolio.

The bank should therefore monitor collateral concentration independently of borrower concentration.

CAIIB Lesson

Diversification of borrowers does not guarantee diversification of recovery risk.

Case Study 6: Portfolio Within Limits but Stress Loss Is Excessive

A bank's exposures are within:

• borrower limits;

• group limits;

• sector limits; and

• regulatory ceilings.

Management assumes concentration risk is therefore satisfactory.

A severe recession stress test shows very large losses because several major sectors are linked to the same economic cycle.

Correct Interpretation

Compliance with limits is necessary but does not prove that portfolio risk is acceptable.

Limits may fail to capture:

• hidden correlations;

• multiple simultaneous downgrades;

• collateral deterioration;

• liquidity problems; or

• extreme macroeconomic stress.

Management should consider whether:

• internal limits need recalibration;

• growth in vulnerable segments should be restricted;

• exposure should be diversified or reduced; and

• additional portfolio controls are necessary.

CAIIB Lesson

Limit compliance and risk adequacy are not the same thing.

Managing Concentration Risk

Once a concentration is identified, possible actions include:

Restrict New Exposure

The bank may stop or slow additional lending to an over-concentrated segment.

Reduce Existing Exposure

Exposure may decline through:

• scheduled repayment;

• non-renewal;

• partial reduction; or

• other permitted portfolio-management actions.

Diversify Future Lending

New business can be directed toward:

• different industries;

• regions;

• borrower groups; or

• risk grades.

Tighten Underwriting

Where sector risk is rising, the bank may require:

• stronger repayment capacity;

• lower leverage;

• higher borrower contribution;

• stronger covenants; or

• better risk-adjusted pricing.

Strengthen Monitoring

High-concentration areas may require:

• more frequent reviews;

• enhanced MIS;

• lower early-warning thresholds;

• targeted stress tests; and

• senior-management reporting.

The aim is not to eliminate all concentration. Some concentration may arise naturally from the bank's market, expertise or business strategy.

The objective is to ensure that concentration remains identified, measured and within the bank's capacity to absorb losses.

Portfolio Reporting

A useful portfolio-risk report should highlight more than total loans.

It may include:

Basel requires information systems capable of identifying and aggregating concentration exposures in a timely manner and supporting forward-looking scenario analysis.

CAIIB Exam Focus

Remember these high-value points:

• Borrower-level and portfolio-level credit risk are different.

• Many borrowers do not necessarily mean diversification.

• Concentration may arise by borrower, group, sector, geography, product, rating, collateral or common economic factor.

• Connected counterparties may arise through control or economic interdependence.

• Different legal entities may represent one economic concentration.

• Unsystematic risk can be reduced through diversification.

• Systematic risk cannot be fully diversified away.

• Correlation measures the tendency of risks to move together.

• Correlations may become stronger during stress.

• Portfolio quality can deteriorate even when total exposure remains unchanged.

• Rating migration is an important portfolio-monitoring indicator.

• Collateral concentration can increase LGD across many accounts simultaneously.

• Limits should be monitored before they are breached.

• Regulatory limits are ceilings, not lending targets.

• Internal limits may be stricter than regulatory limits.

• Stress testing complements concentration limits.

• A portfolio within all limits may still contain material hidden risk.

• Stress results should influence management decisions and, where appropriate, limit calibration.

• Portfolio monitoring requires timely aggregation across the bank.

Common Exam Traps

Trap 1: “A portfolio with many borrowers is automatically diversified.”

Incorrect. Borrowers may depend on the same sector, region, commodity or economic factor.

Trap 2: “If every individual account is within its limit, there is no concentration risk.”

Incorrect. Aggregate group, sector and other common-factor concentrations may still be excessive.

Trap 3: “Different legal entities always represent independent credit risks.”

Incorrect. Connected entities may share ownership or economic dependence.

Trap 4: “Diversification eliminates systematic credit risk.”

Incorrect. Economy-wide or broad sector shocks can affect many borrowers simultaneously.

Trap 5: “Portfolio risk remains unchanged if total loan exposure is unchanged.”

Incorrect. Rating downgrades, collateral deterioration or changes in sector composition can increase risk.

Trap 6: “Sector classification captures every concentration.”

Incorrect. Borrowers in different sectors may share the same economic driver.

Trap 7: “Strong collateral removes concentration risk.”

Incorrect. Concentration in one collateral type can itself create portfolio vulnerability.

Trap 8: “Remaining below regulatory exposure limits proves the portfolio is safe.”

Incorrect. Regulatory limits are minimum prudential boundaries. Internal risk appetite, correlations and stress results may require stricter limits.

Trap 9: “Concentration risk should be assessed only after defaults begin.”

Incorrect. Its purpose is to identify vulnerability before correlated losses materialise.

Trap 10: “Stress testing is unnecessary when concentration limits are not breached.”

Incorrect. Stress testing may reveal vulnerabilities that ordinary limits and historical measures do not capture.

Memory Technique

Remember N–G–S–G–P–C for major concentration checks:

N — Name: Is exposure concentrated in one borrower? G — Group: Are borrowers connected? S — Sector: Is one industry dominant? G — Geography: Is one region dominant? P — Product: Is one loan segment excessive? C — Collateral/Common factor: Is there a hidden shared risk?

Then ask:

“What single adverse event could affect many of these borrowers together?”

That question is the key to identifying portfolio concentration.