Concentration Risk in Bank Lending: Measurement & Limits (IIBF RFS)

Concentration risk in bank lending is one of the most exam-relevant ideas in the IIBF Risk in Financial Services syllabus, because it explains why banks can fail even when every individual loan on the book looks perfectly sound. It arises when a bank's credit portfolio is clustered too tightly around a small number of borrowers, industries, or regions, so that a single shock can hurt many accounts at the same time instead of just one.

This article breaks down how concentration builds up inside a loan book, how RBI's regulatory limits contain it, and how risk teams measure and manage it in day-to-day practice — all framed the way RFS exam questions typically test it.

📊 What Is Concentration Risk in Bank Lending

Concentration risk in bank lending is the risk that losses will be unusually large because exposures are not spread across enough independent borrowers. A well-diversified portfolio of a thousand small, unrelated loans absorbs a handful of defaults without much strain. A portfolio dominated by a few large groups does not have that cushion.

Three classic triggers show up repeatedly in case studies. A single large corporate borrower defaults and drags down a disproportionate share of the loan book. An entire sector — real estate, textiles, or infrastructure — hits a downturn together, so many accounts turn bad in the same quarter. Or a natural disaster or regional slowdown hits every borrower headquartered in one geography at once.

Banks first learn to size individual borrower risk through obligor and borrower risk assessment, but concentration risk only becomes visible when those individual assessments are aggregated across the whole book. A borrower rated perfectly safe in isolation can still be part of a dangerously concentrated cluster.

💡 Exam Tip: Concentration risk is a portfolio-level property, not a single-borrower property — a question describing "too many eggs in one basket" is almost always testing this concept.

🏦 Types of Concentration Risk Banks Must Track

RFS candidates should be able to name and separate at least four common forms of lending concentration, since exam questions often ask which type a given scenario illustrates.

Single-borrower and group concentration is exposure to one obligor or a connected group of companies that is large relative to the bank's capital. Sectoral concentration is exposure clustered in one industry, such as commercial real estate or power generation. Geographic concentration is exposure clustered in one state, city, or export market. Collateral concentration is reliance on the same type of security — for example, most loans backed only by land in one micro-market — so that a fall in one asset class hits recovery values across the whole book simultaneously.

These categories interact. A bank lending heavily to real estate developers in one metro city is simultaneously carrying sectoral, geographic and collateral concentration, which compounds the risk rather than simply adding it up. The credit risk management framework chapter sets out how a bank's risk function is expected to identify and escalate exactly this kind of layered concentration before it becomes a solvency event.

Unlike strategic risk in financial services, which flows from business decisions and competitive positioning, concentration risk is a structural feature of how the balance sheet is built up loan by loan, sanction by sanction.

⚖️ RBI's Large Exposures Framework and Regulatory Limits

Indian banks do not manage concentration risk purely on internal judgement — RBI's Large Exposures Framework sets hard ceilings on how much a bank can lend to a single counterparty or a group of connected counterparties, expressed as a percentage of the bank's eligible capital base (Tier 1 capital). The intent is straightforward: cap the maximum damage any one relationship can do to the bank, regardless of how creditworthy that borrower looks today.

The framework applies tighter limits to a single counterparty than to a group of connected counterparties, and requires banks to identify "connected" entities through common control or economic interdependence, not just common ownership — two borrowers can be treated as one exposure if a default by one would very likely trigger a default by the other. Boards are expected to set internal prudential limits that sit inside these regulatory ceilings, not merely at them.

This regulatory design mirrors how sovereign exposure is capped through a separate lens. If you have studied sovereign risk in banking, the same underlying philosophy applies — even a "safe" concentrated exposure deserves a ceiling, because safety assessments can be wrong or can change quickly. Current large exposure limits and other RBI prudential ratios are published on RBI rates and prudential norms, and candidates should always confirm the latest figures directly from rbi.org.in before an exam attempt, since these ceilings are revised periodically through master directions.

⚠️ Common Mistake: Candidates often assume the Large Exposures Framework only caps single-borrower lending. It also caps exposure to connected groups, which is where most real-world concentration breaches actually occur.

🧮 Measuring and Managing Concentration Risk

Regulatory ceilings set a floor for compliance, but banks need their own tools to see concentration building up before it hits a limit. The Herfindahl-Hirschman Index (HHI) is a common statistical measure — it sums the squared share of each exposure in the portfolio, producing a single number that rises sharply as the book becomes dominated by fewer, larger accounts. A rising HHI trend is an early warning even while every individual limit is technically still respected.

Banks also run granularity adjustments inside their economic capital models, add a capital buffer specifically for concentration that generic portfolio credit risk models tend to understate, and use sector-wise and geography-wise exposure caps set internally, well inside the RBI ceilings. Stress testing plays a central role: simulating a sharp downturn in the top three sectors, or a default cascade across a connected group, reveals concentration damage that a static exposure table cannot show.

Where concentration cannot be reduced quickly by running down the book, banks use risk transfer instead — securitisation, credit-linked notes, or the instruments covered under credit derivatives, which let a bank keep a client relationship while shifting part of the default exposure off its own balance sheet. Even accurate underwriting models, including the credit risk models used to price individual loans, cannot substitute for portfolio-level concentration discipline — a model can correctly price one loan and still miss that the bank is writing forty similar loans into the same fragile sector.

Remember: a limit-compliant portfolio can still be dangerously concentrated if every exposure sits just under its individual ceiling in the same sector or region — the goal of these measurement tools is to catch that pattern before it becomes a breach.

📌 Concentration Risk vs Other Related Risk Measures

RFS exam questions frequently test whether candidates can tell concentration risk apart from neighbouring risk concepts that sound similar but are measured and managed differently. The table below lines up the key differences.

Notice that concentration risk and market risk measurement in banks sit at completely different levels — one is about how exposure is distributed across counterparties, the other is about how a trading position moves with the market. Confusing the two is a frequent source of lost marks. Similarly, an emerging exposure like cyber risk quantification deals with operational loss potential, not credit clustering, even though a major cyber incident at a large borrower can indirectly worsen concentration losses.

🧠 Practice MCQs: Concentration Risk in Bank Lending

Want chapter-wise mock tests with 100+ MCQs? Start practising free →

Frequently Asked Questions

Conclusion

Concentration risk in bank lending sits at the intersection of underwriting, portfolio management and regulation — it is the reason a bank can pass every individual credit check and still take a large, correlated hit. For the IIBF Risk in Financial Services exam, focus on separating the four types of concentration, knowing what the Large Exposures Framework actually caps, and recognising HHI and stress testing as the practical tools that catch concentration before a limit breach does. Ready to test yourself? Attempt the full course modules and the practice MCQs above, then browse more coverage of this subject on the Risk in Financial Services article archive.