IRR Limits, Controls, RBI IRRBB Guidance and Integrated Cases - Article

Introduction

Measuring Interest Rate Risk is not enough.

A bank must also decide:

• how much IRR it is willing to accept;

• who can take that risk;

• how exposures will be monitored;

• when management must act;

• how assumptions and models will be controlled; and

• what happens if exposure becomes excessive.

Under the current Reserve Bank of India (Commercial Banks – Asset Liability Management) Directions, 2025, banks must assess Interest Rate Risk through both:

• Traditional Gap Analysis (TGA) for the earnings perspective; and

• Duration Gap Analysis (DGA) for the economic-value perspective.

The Board/Risk Management Committee must approve internal limits for Earnings at Risk (EaR) and volatility in Market Value of Equity (MVE), based on the bank’s risk-bearing and risk-management capacity.

The 2026 IIBF BFM syllabus includes Interest Rate Risk Management in Module D, making governance, measurement and control of IRR directly relevant for CAIIB.

Learning Objectives

After studying this topic, you should be able to:

• explain the role of IRR limits and governance controls;

• distinguish EaR limits from MVE limits;

• understand the responsibilities of the Board, RMC and ALCO;

• interpret RBI’s current supervisory 200-basis-point MVE test;

• understand behavioural, model-validation and stress-testing controls; and

• analyse integrated IRR cases involving earnings, economic value and regulatory escalation.

IRR Control Begins with Two Perspectives

RBI requires a bank to assess IRR from two complementary perspectives.

Earnings Perspective

Focuses on how interest-rate changes affect:

• interest income;

• interest expense;

• Net Interest Income; and

• Earnings at Risk.

The benchmark measurement approach is TGA.

Economic-Value Perspective

Focuses on how interest-rate changes affect the economic values of:

• Rate-Sensitive Assets;

• Rate-Sensitive Liabilities;

• relevant off-balance-sheet positions; and

• Market Value of Equity.

The benchmark measurement approach is DGA.

Internal IRR Limits

RBI does not simply require measurement.

It requires banks to establish internal limits.

The Board or RMC must approve appropriate limits on:

• Earnings at Risk; and

• volatility in MVE.

These limits must reflect the bank’s:

• risk-bearing capacity;

• capital strength;

• business model;

• risk-management capability; and

• ability to rebalance exposures.

EaR Limit

The EaR limit controls how much earnings the bank is prepared to place at risk under adverse interest-rate scenarios.

The limit is linked to NII under the current RBI framework.

MVE Limit

The MVE limit controls acceptable economic-value volatility.

It is linked to the bank’s MVE/Net Worth.

Therefore:

EaR Limit → Earnings Risk

MVE Limit → Economic-Value Risk

These should not be treated as interchangeable.

Role of the Board and RMC

At the governance level, the Board or RMC approves the bank’s internal IRR limits.

RBI also requires the Board/ALCO to periodically review those limits after considering:

• alternative interest-rate scenarios;

• resulting NII volatility; and

• resulting Net Worth volatility.

Therefore, limits should not remain unchanged simply because they were approved several years earlier.

A change in:

• balance-sheet structure;

• interest-rate environment;

• product mix;

• customer behaviour; or

• capital strength

may require the limits to be reconsidered.

Role of ALCO

ALCO converts risk policy into balance-sheet action.

For IRR, ALCO may consider:

• asset and liability repricing;

• fixed versus floating-rate mix;

• maturity structure;

• pricing of new business;

• funding structure;

• investment duration; and

• derivative hedging.

For DGA specifically, RBI requires prior ALCO approval for decisions concerning items such as:

• yields;

• assumptions;

• bucketing; and

• behavioural studies.

This makes ALCO an important control point between model assumptions and actual reported risk.

Interest Rate Sensitivity Statement

RBI requires banks to prepare the Interest Rate Sensitivity Statement under both TGA and DGA.

The statement uses 11 interest-rate-sensitivity buckets, beginning with:

• 1–28 days;

• 29 days to 3 months;

• over 3–6 months;

• over 6 months–1 year;

and continuing through longer buckets and a Non-sensitive category.

The IRS Statement under TGA and DGA is required to be submitted monthly.

Monitoring therefore cannot be treated as an annual balance-sheet exercise.

Limits on Individual Gaps

A bank may also maintain internal limits on individual repricing gaps.

This is important because an acceptable overall annual exposure may hide a large concentration in one bucket.

For example:

• the cumulative one-year gap may appear modest;

• but a very large negative gap may exist in the first three months.

Such concentration can expose NII to a sudden rate rise before later offsets occur.

The current RBI framework expects banks to monitor their IRR positions and take corrective action with reference to internal limits on MVE volatility and individual gaps.

Case 1: EaR Limit Breach but MVE Within Limit

A bank has:

• large short-term Rate-Sensitive Liabilities;

• slower-repricing assets;

• moderate duration mismatch.

Interest rates rise sharply.

Effect

Funding costs rise before asset yields.

The bank’s projected NII falls significantly.

Its EaR exceeds the Board-approved limit.

However, the DGA result remains within the MVE limit.

Correct Interpretation

The bank still has an IRR problem.

Management should not argue:

“MVE is within limit, so no action is required.”

The earnings perspective has breached risk tolerance.

ALCO may consider:

• shortening asset repricing periods;

• increasing suitable floating-rate assets;

• altering liability repricing;

• changing funding mix; or

• hedging the relevant exposure.

This demonstrates why separate limits are needed.

Case 2: NII Stable but Economic Value Is Vulnerable

A bank has a reasonably matched one-year RSA/RSL profile.

Its TGA suggests limited short-term NII volatility.

However, the bank holds:

• long-duration fixed-rate loans;

• long-duration securities; and

• shorter-duration liabilities.

A sharp rate rise produces a significant positive Duration Gap and substantial MVE erosion.

Correct Interpretation

A small repricing gap does not guarantee low economic-value risk.

Management must consider:

• duration;

• long-term cash flows;

• asset and liability value sensitivity; and

• MVE limits.

This is the classic reason RBI requires both TGA and DGA.

Supervisory 200-Basis-Point Test

Under the current ALM Directions, a bank is treated as a supervisory outlier under Pillar II if the economic value of its banking book declines by more than 20% of MVE under a standardised 200-basis-point interest-rate shock.

If such a shock results in a decline above the threshold, RBI treats the level of IRR as excessive and may require corrective action.

Important Distinction

RBI also requires IRR measurement across the bank’s entire balance sheet, including banking and trading books.

However, the 20% supervisory outlier criterion relates specifically to the economic-value decline of the banking book under the prescribed shock.

Case 3: MVE Declines by More than the Supervisory Threshold

A bank’s DGA shows that a prescribed 200-basis-point shock would reduce the economic value of its banking book by more than the permitted supervisory threshold.

The result should not be treated merely as:

“A theoretical accounting loss.”

RBI treats such exposure as excessive IRR from the Pillar II perspective.

Possible supervisory or management responses can include:

• reducing IRR exposure;

• rebalancing the banking book;

• strengthening hedging;

• tightening internal limits; or

• holding additional capital where required through the supervisory process.

The 2025 Capital Adequacy Directions similarly state that where IRRBB is excessive, RBI may require the bank to reduce risk, hold additional capital or use a combination of measures.

Regulatory Limit vs Internal Limit

These concepts should not be confused.

A well-managed bank should normally operate within internal risk limits before reaching a supervisory outlier position.

Behavioural Assumptions as a Control

Many IRR exposures cannot be measured correctly using contractual maturity alone.

Examples include:

• savings deposits;

• current accounts;

• mortgage loans;

• prepayment options; and

• other products with embedded optionality.

RBI requires behavioural studies for such exposures.

These studies must be:

• supported by a documented framework;

• applied consistently;

• reviewed at least annually;

• revised where necessary in the first quarter of the financial year; and

• based on at least three years of data.

Case 4: Stable-Deposit Assumption Becomes Outdated

A bank assumes that a very high proportion of savings balances behaves like long-term funding.

Market competition increases sharply and depositors begin moving money to higher-rate products much faster than historical patterns suggest.

If the bank continues using its old assumption:

• liability duration may be overstated;

• repricing exposure may be understated; and

• reported IRR can become misleading.

The correct response is to update the behavioural assumption using current evidence.

RBI requires material assumptions to be updated regularly and the assumption-development process to be formalised and reviewed at least annually.

Stress Testing

Normal TGA and DGA measurements should not be the end of IRR analysis.

The 2025 Capital Adequacy Directions require banks to consider:

• parallel interest-rate shocks;

• yield-curve twists;

• yield-curve inversions;

• basis-risk movements; and

• other relevant scenarios.

Stress testing and scenario analysis should form part of IRRBB assessment.

RBI’s ALM Directions also require banks to measure vulnerability under stressed market conditions, including possible breakdown of key assumptions, and to use the results when setting or reviewing limits and policies.

Model Validation and Independent Audit

Interest-rate-risk models can fail even when the mathematical framework appears sophisticated.

Problems may arise from:

• incorrect data;

• wrong repricing dates;

• stale behavioural assumptions;

• inappropriate yields;

• wrong duration inputs;

• software errors; or

• incomplete treatment of OBS positions.

RBI therefore requires periodic model validation.

Where internal models or software packages are used, banks must ensure the integrity and validation of data and assumptions. The IRR-management system must also be independently audited by an experienced internal or external auditor familiar with risk-management processes. The Audit Committee of the Board is responsible for ensuring auditor suitability.

Documentation Control

RBI requires documentation covering areas such as:

• discount rates;

• coupons;

• assumptions;

• bucketing;

• behavioural studies; and

• validation processes.

Material assumptions must be supported by analysis and documentation, which must be available for:

• model validation;

• internal audit;

• statutory audit; and

• RBI inspection.

This means a bank cannot defend an IRR result simply by saying:

“The system generated it.”

The assumptions and methodology must be explainable and auditable.

Currency-Specific Controls

RBI requires TGA and DGA to be applied separately to a currency where either assets or liabilities in that currency constitute 5% or more of the bank’s global assets or global liabilities.

Other residual currencies are measured separately on an aggregate basis.

Case 5: Overall Gap Acceptable but USD Exposure Is Large

A bank has:

• a positive rupee repricing position;

• a significant negative USD repricing position; and

• a broadly balanced global aggregate.

The aggregate position may hide the currency-specific risk.

If USD rates rise sharply while rupee rates remain stable, the bank can still suffer.

Therefore:

Global Netting Does Not Eliminate Significant Currency IRR

Significant currencies must be separately assessed.

Off-Balance-Sheet Controls

Rate-sensitive OBS positions must also be captured.

These can include:

• interest-rate swaps;

• FRAs;

• futures;

• options; and

• other derivatives.

RBI requires relevant OBS exposures to be included in TGA and DGA.

A hedge can reduce one risk but create:

• basis risk;

• counterparty risk;

• option risk;

• liquidity risk; or

• model risk.

Therefore, controls should examine residual exposure after hedging, not merely whether a derivative exists.

Current RBI IRRBB Guidance – Important Exam Nuance

RBI issued updated final guidelines titled Governance, Measurement and Management of Interest Rate Risk in Banking Book on February 17, 2023.

However, the current Reserve Bank of India (Commercial Banks – Prudential Norms on Capital Adequacy) Directions, 2025 state that the implementation date of those updated guidelines will be communicated separately. Banks are advised to remain prepared for measuring, monitoring and disclosing IRRBB under that framework, and meanwhile must make the advised disclosures.

At the same time, the Commercial Banks – Asset Liability Management Directions, 2025 are currently effective and prescribe operative TGA/DGA measurement, limits, monitoring and reporting requirements.

Therefore, the correct exam-oriented distinction is:

• 2025 ALM Directions → current operative TGA/DGA framework;

• 2023 updated IRRBB guidelines → final guidelines issued, but the current Capital Adequacy Directions still state that their implementation date will be separately communicated;

• banks must meanwhile remain prepared and comply with the advised disclosure requirements.

Case 6: Hedge Brings EaR within Limit but MVE Risk Increases

A bank has a negative short-term repricing gap.

It enters into derivatives to protect NII against rising rates.

After the hedge:

• EaR falls within the approved limit;

• but the effective duration of the balance sheet changes;

• the MVE sensitivity rises above the bank’s internal tolerance.

Correct Response

The hedge should not automatically be considered successful.

The bank must assess both perspectives after hedging.

ALCO may need to:

• resize the hedge;

• alter its tenor;

• change underlying balance-sheet positions; or

• use a different hedging combination.

The goal is not simply to improve one risk measure while worsening another beyond tolerance.

Case 7: Limit Is Within Range but Stress Assumption Fails

A bank’s ordinary IRR report shows:

• EaR within limit;

• MVE within limit; and

• acceptable individual gaps.

Stress testing assumes that savings deposits remain stable.

A severe rate shock causes customers to migrate quickly to higher-rate deposits, invalidating the assumption.

The stressed EaR becomes excessive.

Lesson

Compliance under normal assumptions does not eliminate risk.

RBI specifically requires banks to assess the breakdown of key assumptions when evaluating stressed-market vulnerability.

Integrated IRR Case-Study Framework

When analysing a complex CAIIB case, use this sequence.

Step 1: Identify the Source of Risk

Look for:

• repricing mismatch;

• duration mismatch;

• basis risk;

• yield-curve risk; or

• option risk.

Step 2: Identify the Perspective

Is the case testing:

• NII/EaR;

• MVE/EVE; or

• both?

Step 3: Check the Relevant Limit

Determine whether the issue concerns:

• individual gap limit;

• EaR limit;

• MVE-volatility limit; or

• supervisory outlier threshold.

Step 4: Check the Assumptions

Review:

• repricing dates;

• behavioural assumptions;

• prepayments;

• deposit behaviour;

• yields; and

• currency treatment.

Step 5: Apply Stress

Consider whether the result remains acceptable under:

• parallel shocks;

• non-parallel yield-curve movements;

• basis movements; or

• assumption failure.

Step 6: Check Hedging and OBS Positions

Determine the residual risk after derivatives.

Step 7: Identify Governance Responsibility

Ask whether action belongs to:

• Board/RMC;

• ALCO;

• risk-management function;

• internal audit; or

• supervisory escalation.

Step 8: Take Corrective Action

Possible actions include:

• repricing assets;

• altering liabilities;

• changing duration;

• changing fixed/floating mix;

• hedging;

• reducing exposure; or

• strengthening capital where required.

Step 9: Re-Measure

The bank should confirm that the corrective action actually reduces the targeted risk.

CAIIB Exam Focus

1. Both TGA and DGA Are Required

TGA measures NII sensitivity; DGA measures MVE sensitivity.

2. EaR and MVE Limits Are Internal Board/RMC Limits

They should reflect the bank’s risk capacity.

3. EaR Limit Is Linked to NII

Do not confuse it with economic-value exposure.

4. MVE Limit Is Linked to Net Worth

It controls economic-value volatility.

5. Remember the Supervisory Test

A banking-book MVE decline of more than 20% under a standardised 200-bps shock is treated as excessive IRR.

6. Internal Limits Can Be Tighter

The supervisory threshold is not a target risk level.

7. Behavioural Studies Matter

CASA and mortgage behaviour can materially change measured IRR.

8. Significant Currencies Require Separate Assessment

The current threshold is 5% of global assets or global liabilities.

9. Model Validation and Independent Audit Are Controls

Measurement systems themselves must be tested.

10. Current Regulatory Status Must Be Read Carefully

The 2025 ALM Directions are operative, while the current Capital Adequacy Directions still state that the implementation date of the 2023 updated IRRBB guidelines will be communicated separately.

Common Exam Traps

Trap 1: “If EaR Is within Limit, Total IRR Is within Limit”

Wrong. MVE exposure may still be excessive.

Trap 2: “20% Is the Bank’s Normal Internal MVE Limit”

Wrong. It is the supervisory outlier threshold under the specified 200-bps banking-book test. Internal limits can be tighter.

Trap 3: “The 200-bps Test Applies Only to NII”

Wrong. The supervisory outlier criterion relates to economic-value decline.

Trap 4: “Behavioural Assumptions Can Be Set Once and Used Permanently”

Wrong. RBI requires review and updating.

Trap 5: “A Sophisticated Model Does Not Need Independent Validation”

Wrong. RBI requires periodic validation and independent audit controls.

Trap 6: “Derivatives Can Be Ignored after the Hedge Is Executed”

Wrong. Residual OBS exposure must continue to be measured.

Trap 7: “Aggregate Global IRR Makes Currency-Wise Measurement Unnecessary”

Wrong for significant currencies.

Trap 8: “An MVE Decline Is Automatically an Accounting Loss”

Wrong. RBI distinguishes economic-value impact from immediate accounting loss.

Trap 9: “RBI’s 2023 IRRBB Guidelines Were Only a Draft”

Wrong. Final updated guidelines were issued in 2023; the current directions separately address their implementation timing.

Trap 10: “A Limit Breach Is Solved Once a Hedge Is Executed”

Wrong. The bank must re-measure the resulting EaR, MVE and residual risks.

Memory Technique

Remember:

M – L – S – C

• M = Measure through TGA and DGA

• L = Limits for EaR, MVE and gaps

• S = Stress and validate assumptions

• C = Correct and control exposure

For governance:

Board Sets → ALCO Acts → Risk Monitors → Audit Validates

And for the supervisory test:

200 bps → 20% MVE → Excessive IRR if breached