Trusted by 100,000+ readers worldwide
RLM
Banking Industry Analysis · Express Fintech 2026

Risk &
Liquidity
Management

Credit NPL & Provisions
Liquidity LCR / NSFR
Market VaR & Stress
Operational Non-financial Risk

Risk management is the infrastructure of banking — the frameworks, models, and governance processes that determine whether a bank can survive economic stress and continue serving its customers and shareholders across cycles.

January 4, 2026 Read 9 min By EF Research

Scroll

01
Chapter 01

The Risk Framework

Bank risk falls into four primary categories — credit, liquidity, market, and operational. Each requires distinct measurement frameworks, governance structures, and capital allocation to manage effectively.

Credit risk — the risk that borrowers default — is the largest single risk for most banks, absorbing 70–80% of regulatory capital. It is managed through underwriting standards, portfolio diversification, and provisioning models.

Liquidity risk — the risk of being unable to meet obligations — is existential. SVB demonstrated in 2023 that a solvent bank can fail in 48 hours if liquidity management fails. Basel III's LCR and NSFR ratios are the regulatory response.

Three Lines Model

Best-practice risk governance follows the Three Lines of Defence: business units own risk (1st line), Risk Management functions independently oversee it (2nd line), and Internal Audit provides independent assurance (3rd line).

Credit Risk
70–80% of regulatory capital
Liquidity Risk
LCR min 100% — SVB lesson
Market Risk
VaR + stressed VaR models
Op Risk
~15% of total RWA on avg
02
Chapter 02

Credit Risk Framework

Credit risk management encompasses origination standards, portfolio monitoring, impairment measurement, and workout — spanning the full loan lifecycle.

01
PD / LGD / EAD
The three components of expected credit loss — Probability of Default, Loss Given Default, and Exposure at Default. Together they determine loan-level provisioning requirements.
02
CECL / IFRS 9
Forward-looking expected credit loss standards replaced incurred loss models post-2018. Banks now provision for lifetime expected losses based on macroeconomic forecasts.
03
Stress Testing
Annual DFAST / EBA stress tests subject bank portfolios to severe recession scenarios — determining capital adequacy and informing dividend / buyback approvals.
04
NPL Resolution
Early warning systems identify deteriorating credits for proactive restructuring. Speed of NPL recognition and workout execution are key to minimising ultimate credit losses.
03
Chapter 03

Liquidity Risk

Liquidity risk management has two dimensions — short-term survival (LCR) and structural funding stability (NSFR). Both were tightened significantly after the 2008 and 2023 bank failures.

  • LCR (30-day) — Bank must hold HQLA sufficient to cover net outflows in a 30-day stress scenario. Minimum 100%; major banks average 120–130%.
  • NSFR (1-year) — Available stable funding must exceed required stable funding over a 1-year horizon. Prevents over-reliance on short-term wholesale funding.
  • Intraday liquidity — Real-time monitoring of intraday cash positions — SVB demonstrated that digital bank runs can exhaust intraday liquidity in hours.
  • Contingency plans — Recovery and Resolution Plans (living wills) require banks to document how they can be safely wound down without systemic contagion.
  • Liquidity stress testing — Internal scenarios supplement regulatory minimums — banks model severe outflows across multiple stress horizons simultaneously.

Liquidity Ratios — US Banks Q4 2025

Bank LCR NSFR
JPMorgan Chase 117% 122%
Bank of America 118% 131%
Wells Fargo 125% 120%
Goldman Sachs 131% 114%
Regulatory Min 100% 100%
04
Chapter 04

Market & Operational Risk

Beyond credit and liquidity, banks face market risk from trading positions and operational risk from process failures, cyber attacks, and conduct issues.

01
Value at Risk (VaR)
Statistical measure of maximum potential trading loss at a given confidence level (99%). Supplemented by stressed VaR and Expected Shortfall post-Basel III.
02
FRTB
Fundamental Review of the Trading Book — Basel IV overhaul of market risk capital that significantly increases capital for complex trading positions.
03
Operational Risk
Risk of loss from inadequate processes, systems, human error, or external events. Measured via Advanced Measurement Approach or Standardised Approach under Basel.
04
Cyber & Conduct
Cyber risk and conduct risk are the fastest-growing operational risk categories — requiring board-level attention and increasingly significant regulatory capital allocation.
05
Chapter 05

Risk Outlook 2026

The 2026 risk landscape is dominated by credit stress in CRE, tightening liquidity regulation post-SVB, and the emerging challenge of AI model governance.

  • CRE credit cycle — Office loan NPL surge the defining credit event of 2025–2026 — US regional banks with heavy CRE concentration under most pressure.
  • Enhanced LCR scope — US regulators expanding enhanced LCR requirements to banks above $100B — previously only applying to G-SIBs.
  • AI model risk — Regulators issuing guidance on AI model governance — banks must validate, monitor, and explain AI-driven credit and risk decisions.
  • Climate stress tests — Mandatory climate scenario analysis being introduced by ECB, PRA, and APRA — requiring banks to model physical and transition risks on portfolios.
  • Geopolitical risk — Sanctions compliance costs rising sharply — geopolitical fragmentation creating new concentration and counterparty risks in cross-border exposures.
Key Insight 2026

Banks with robust early warning systems and proactive NPL recognition will outperform in the 2026 credit stress — speed of problem identification and workout execution are the key differentiators in credit downcycles.

Credit Risk LCR NSFR CRE Stress CECL FRTB