IIBF RM Exam Guide to credit risk management Essentials
Credit risk management is the single most heavily weighted topic in the IIBF Risk Management (RM) certificate exam, and mastering it is the difference between a comfortable pass and a frustrating retake. At its core, credit risk management is the discipline of identifying, measuring, monitoring and controlling the risk that a borrower or counterparty fails to meet its obligations. For exam purposes you must be fluent in the quantitative building blocks — probability of default (PD), loss given default (LGD) and exposure at default (EAD) — as well as the regulatory framework that the Reserve Bank of India layers on top of them. This guide walks you through every sub-topic the syllabus tests, in the order examiners tend to probe them, with practical India-specific context.
If you are also revising for other banking certifications, the same fundamentals reappear across the CAIIB syllabus and in our broader study blog, so the effort you invest here compounds.
The Three Pillars: PD, LGD and EAD
Every modern approach to credit risk management rests on three measurable parameters. Probability of default (PD) is the likelihood that a borrower will default over a defined horizon, conventionally one year. Loss given default (LGD) is the share of exposure a bank actually loses after recoveries and collateral realisation, expressed as a percentage. Exposure at default (EAD) is the rupee amount outstanding at the moment of default, which for revolving facilities includes a credit conversion factor on undrawn limits.
These three combine into the central formula of credit risk management — Expected Loss (EL) = PD × LGD × EAD. Examiners love to test this with simple numerical sums, so practise plugging in values until it is automatic. For example, a ₹100 crore exposure with a PD of 2% and an LGD of 45% carries an expected loss of ₹0.9 crore. Beyond expected loss sits unexpected loss, the volatility around the average, which is what regulatory capital is designed to absorb. Understanding the EL-versus-UL distinction is essential: expected loss is covered by provisions and pricing, while unexpected loss is covered by capital. The RBI's prudential norms on income recognition, asset classification and provisioning operationalise the expected-loss side for Indian banks.

Internal Rating Models and Credit Scoring
Sound credit risk management depends on consistently ranking borrowers by their riskiness. Banks do this through internal rating models for corporate and institutional exposures and credit scoring models for retail and small-ticket lending. An internal rating assigns each obligor to a grade on a master scale, and each grade maps to a calibrated PD. The granularity of the scale, the quality of the data, and the rigour of model validation all feed directly into the reliability of the bank's loss estimates.
Credit scoring, by contrast, is statistical and largely automated. Logistic regression and, increasingly, machine-learning techniques score applicants on bureau data, repayment history, income and behavioural variables to produce an application or behavioural score. For the RM exam, remember the difference between through-the-cycle ratings, which smooth out economic fluctuations, and point-in-time scores, which react to current conditions. You should also be able to explain rating philosophy, override policies, and the role of an independent validation unit. Good credit risk management never lets the same team that originates a loan also approve its rating without challenge — segregation of duties is a recurring exam theme. The performance of these models is monitored through metrics such as the Gini coefficient and the accuracy ratio. To drill these concepts with timed questions, work through our RM practice tests, which mirror the IIBF question pattern.

Exposure Limits, Concentration and Basel III IRB Approaches
Even perfectly rated borrowers create danger if a bank lends too much to one name, group or sector. A robust credit risk management framework therefore enforces exposure limits and actively manages concentration risk. The RBI's Large Exposures Framework caps a bank's exposure to a single counterparty at 20% of eligible Tier 1 capital (25% in specific cases) and to a group of connected counterparties at 25%. Sectoral and geographic caps, single- and group-borrower ceilings, and substantial-exposure thresholds all form part of the same discipline.
On the capital side, Basel III offers two routes. Under the Standardised Approach, risk weights are prescribed by the regulator or driven by external ratings. Under the Internal Ratings-Based (IRB) approaches, banks use their own estimates: the Foundation IRB (F-IRB) permits internal PD but supervisor-set LGD and EAD, while the Advanced IRB (A-IRB) allows internal estimates of all three parameters. The Basel risk-weight function then converts PD, LGD and EAD into capital requirements using a regulatory asymptotic single-risk-factor model. Indian banks currently operate predominantly on the Standardised Approach, but the RM syllabus expects you to know the IRB mechanics and the eligibility conditions. The framework is set out by the Basel Committee at the Bank for International Settlements, the definitive external authority for these standards.

RAROC, Stress Testing and ICAAP
The final cluster of topics ties credit risk management to performance measurement and capital planning. RAROC (Risk-Adjusted Return on Capital) evaluates whether a loan earns enough to justify the economic capital it consumes. Conceptually, RAROC = (Revenue − Expected Loss − Costs) ÷ Economic Capital. A deal that clears the bank's hurdle rate creates value; one that does not destroys it, no matter how large the headline margin. Examiners may ask you to identify which inputs raise or lower RAROC.
Stress testing probes the resilience of the portfolio under severe but plausible scenarios — a sharp recession, a sectoral shock, or a spike in default rates. Sensitivity analysis flexes a single factor; scenario analysis flexes several together; reverse stress testing starts from failure and works backwards. The results feed the Internal Capital Adequacy Assessment Process (ICAAP), the Pillar 2 mechanism under which a bank assesses all material risks and holds capital beyond the Pillar 1 minimum. The RBI reviews each bank's ICAAP through the Supervisory Review and Evaluation Process. Together, RAROC, stress testing and ICAAP turn credit risk management from a measurement exercise into a live capital-allocation discipline. For the latest prudential circulars and policy rates that shape these calculations, consult the Reserve Bank of India and keep our RBI rates tracker handy during revision.
Frequently Asked Questions
What is the expected loss formula in credit risk management?
Expected Loss equals PD × LGD × EAD. Probability of default, loss given default and exposure at default are multiplied to give the average loss a bank anticipates over a one-year horizon. Unexpected loss — the volatility around this average — is covered by regulatory capital rather than provisions.
What is the difference between Foundation and Advanced IRB?
Under the Foundation IRB approach a bank estimates only PD internally, while LGD and EAD are set by the supervisor. Under the Advanced IRB approach the bank estimates PD, LGD and EAD using its own validated internal models, subject to stricter data and governance requirements set by Basel III.
How does RAROC support credit risk management decisions?
RAROC measures risk-adjusted return on capital by deducting expected loss and costs from revenue and dividing by the economic capital a loan consumes. It lets banks compare deals on a like-for-like basis and approve only those that clear the hurdle rate, ensuring lending creates rather than destroys value.
What is ICAAP and why does the RM exam emphasise it?
ICAAP, the Internal Capital Adequacy Assessment Process, is the Pillar 2 requirement under Basel III for banks to assess all material risks and hold capital above the Pillar 1 minimum. The RBI reviews it through the Supervisory Review and Evaluation Process, making it a core exam topic linking credit risk to capital planning.
Credit risk management is a wide topic, but breaking it into PD/LGD/EAD, rating and scoring models, exposure limits, IRB approaches, and the RAROC-stress-testing-ICAAP cycle makes it manageable. The fastest way to lock in these concepts is repeated, timed practice on exam-style questions. Start your preparation now with our IIBF RM mock tests and turn this framework into marks on exam day.
Take a free mock test, download chapter PDFs, or watch a video class — all included on iibf.store.