NBFC Liquidity Risk Management Framework: ALM Buckets, LCR and HQLA (2026)
The NBFC Liquidity Risk Management Framework is the single most tested "risk" topic in the IIBF NBFC Certificate examination, and for good reason: almost every large NBFC failure in India has been a liquidity failure rather than a capital failure. A finance company can be comfortably capitalised, show a healthy CRAR and still collapse in a fortnight because it borrowed short and lent long. That is exactly why the Reserve Bank of India layered a detailed asset-liability management (ALM) discipline, granular maturity buckets and a Liquidity Coverage Ratio (LCR) requirement on top of the existing prudential rules for non-banking financial companies.
This guide walks through the framework the way the examiner tests it — who it applies to, how the buckets and tolerance limits work, how LCR and HQLA are computed, and which governance structures the Board must put in place. Pair it with your Recent RBI Initiatives chapter for full coverage.
🏦 Why Liquidity Risk Is Different for NBFCs
Banks fund themselves largely through granular retail deposits and enjoy access to the RBI's liquidity windows. NBFCs do neither. Their liability side is dominated by bank term loans, non-convertible debentures, commercial paper, external commercial borrowings and securitisation proceeds — all wholesale, all concentrated, and all prone to disappearing at the first hint of a credit event. Their asset side, by contrast, is full of vehicle loans, gold loans, microfinance advances, infrastructure exposures and home loans with contractual maturities running from three months to twenty years.
That structural mismatch is legitimate — maturity transformation is what a finance company is for. The regulatory question is never "should there be a mismatch" but "how large a mismatch, in which bucket, and with what buffer behind it". The 2018 sequence of defaults by a large infrastructure finance group made this concrete: rollover of commercial paper stopped, mutual funds refused fresh subscriptions, and companies with perfectly performing loan books found themselves unable to meet next-week obligations. The Reserve Bank's response was the liquidity risk management framework notified in November 2019, which for the first time gave NBFCs a bank-style toolkit.
Understanding this context matters for the exam because several questions are framed as "why" rather than "what" — why the 1-30 day bucket was split, why LCR is denominated in stressed rather than contractual flows, and why deposit-taking companies face the requirement irrespective of size. Revise the NBFCs Types and Roles chapter first, since applicability is keyed to the category and asset size of the entity.
💡 Exam Tip: Liquidity risk is a funding and market access risk, not a credit risk. An NBFC with zero NPAs can still fail the framework if its 8-14 day bucket carries an excessive negative mismatch.
📋 Who the Framework Applies To
Applicability is the highest-yield factual area in this topic and is almost always worth a mark or two. The ALM and liquidity risk management guidelines apply to all deposit-taking NBFCs irrespective of asset size, to all non-deposit-taking NBFCs with an asset size of ₹100 crore and above, and to Core Investment Companies. Housing finance companies were brought under a comparable discipline after their regulation moved to the Reserve Bank.
The Liquidity Coverage Ratio is narrower. It applies to all deposit-taking NBFCs regardless of size, and to non-deposit-taking NBFCs with an asset size of ₹10,000 crore and above, which were required to reach a 100% LCR through a phased glide path that began at 50% and completed at 100%. A lighter glide path — beginning at 30% — was prescribed for non-deposit-taking NBFCs with asset size of ₹5,000 crore and above but below ₹10,000 crore, again converging on 100%. Type 1 NBFC-NDs, non-operating financial holding companies and standalone primary dealers were kept outside the LCR net.
Since October 2021 all of this sits inside the scale-based regulation architecture, where an NBFC's Base, Middle, Upper or Top layer placement determines the intensity of supervision applied to its liquidity governance. The underlying ALM arithmetic, however, has not changed — only the supervisory overlay has. For a broader view of how prudential requirements stack up across the categories, see our note on NPA Provisioning Norms for NBFCs.

⏱️ ALM Buckets and Tolerance Limits
The operational heart of the framework is the Structural Liquidity Statement, in which every asset and liability is slotted into a time bucket by residual maturity and the gap in each bucket is measured. The reform of 2019 split the old, uselessly broad 1-30 day bucket into three granular buckets: 1-7 days, 8-14 days and 15-30 days. Granularity matters because a company can show a comfortable one-month position while being unable to meet a payment due on day five.
Negative mismatches — cumulative outflows exceeding cumulative inflows — are capped at 10% of cumulative cash outflows in the 1-7 day bucket, 10% in the 8-14 day bucket and 20% in the 15-30 day bucket. Beyond thirty days the Board is expected to fix its own internal tolerance limits for each successive bucket, with the mismatch monitored on a cumulative rather than a standalone basis. Alongside the structural statement, NBFCs must prepare a dynamic liquidity statement that projects flows on a business-plan basis rather than a contractual one, and must track a suite of stock-approach ratios.
| Element | Requirement | Board can tighten? | Regulator-prescribed cap? |
|---|---|---|---|
| 1-7 day mismatch | Max 10% of cumulative outflows | ✅ | ✅ |
| 8-14 day mismatch | Max 10% of cumulative outflows | ✅ | ✅ |
| 15-30 day mismatch | Max 20% of cumulative outflows | ✅ | ✅ |
| Buckets beyond 30 days | Internal limits set by Board | ✅ | ❌ |
| Liquidity Coverage Ratio | HQLA ≥ 100% of net 30-day outflows | ✅ | ✅ |
| Contingency Funding Plan | Board-approved, periodically tested | ✅ | ❌ |
⚠️ Common Mistake: Candidates read the caps as percentages of total assets. They are percentages of cumulative cash outflows in that bucket. Getting the denominator wrong costs the mark.
💧 LCR, HQLA and the 30-Day Stress Test
The Liquidity Coverage Ratio asks a deliberately simple question: if wholesale funding markets shut for thirty calendar days, does the company hold enough unencumbered, immediately monetisable assets to survive? The ratio is stock of High Quality Liquid Assets divided by total net cash outflows over the next thirty days, expressed as a percentage, with a floor of 100% after the glide path concluded.
HQLA is tiered. Level 1 assets — cash, bank balances withdrawable on demand, Government of India securities and other sovereign paper carrying zero risk weight — are counted at full value with no haircut and no cap. Level 2A assets attract a 15% haircut, while Level 2B assets attract a 50% haircut. Total Level 2 assets cannot exceed 40% of the HQLA stock and Level 2B cannot exceed 15%. Assets pledged, encumbered or otherwise unavailable for immediate sale do not qualify, however liquid they may look on the balance sheet.
The denominator is stressed, not contractual. Expected outflows over the thirty-day window are multiplied by a stress factor, and expected inflows are multiplied by a haircut factor and then capped: recognised inflows cannot exceed 75% of stressed outflows, so an NBFC can never claim it needs no buffer merely because large repayments are scheduled. NBFCs must maintain the LCR on a consolidated basis where applicable and disclose the ratio, along with the composition of HQLA, in their financial statements. The mechanics mirror those taught in banking risk syllabi — compare with this companion guide to liquidity risk LCR NSFR to see where the NBFC treatment diverges from the bank treatment.
📌 Remember: Inflow cap = 75% of stressed outflows. So the minimum effective buffer is always at least 25% of stressed outflows, whatever the inflow profile looks like.

👥 Governance: ALCO, the Board and the Contingency Funding Plan
The framework is explicit that liquidity risk is a Board responsibility that cannot be delegated away to the treasury desk. The Board sets the company's liquidity risk tolerance, approves the strategy and reviews the position at defined intervals. Below it sits the Risk Management Committee of the Board, which reports directly to the Board and evaluates overall risks including liquidity. Day-to-day execution rests with the Asset Liability Committee, chaired by the CEO or Managing Director and responsible for pricing, balance sheet profile and mismatch decisions. Supporting ALCO is the ALM Support Group, which assembles the data, runs the analytics and prepares the statements ALCO acts upon.
Three further obligations are frequently examined. First, every NBFC must maintain a Board-approved Contingency Funding Plan setting out early warning indicators, escalation triggers, named responsibilities and the specific funding actions to be taken under stress — and it must be tested, not merely filed. Second, the company must monitor a defined set of liquidity risk monitoring tools: concentration of funding by counterparty, by instrument and by currency; available unencumbered assets; and market-related early warning signals such as widening spreads on its own paper. Third, liquidity risk must be assessed across all business lines and in all currencies in which the company is materially exposed, including intra-group flows and off-balance-sheet commitments such as undrawn credit lines.
These structures deliberately mirror the wider governance architecture expected of finance companies; read them alongside NBFC corporate governance norms and the Regulatory Requirements Compliance chapter. The primary text is available on the Reserve Bank's site at rbi.org.in, and newer product-specific rules such as those covering NBFC-P2P lending norms assume this base framework is already in place. More topic guides are collected on our NBFC tag hub.

🧠 Practice MCQs: NBFC Liquidity Risk Management
Q1. The negative mismatch in the 1-7 day time bucket of an NBFC must not exceed what proportion of cumulative cash outflows in that bucket? (a) 5% (b) 10% (c) 15% (d) 20%
Answer: (b) — The cap is 10% for both the 1-7 day and 8-14 day buckets, and 20% for the 15-30 day bucket.
Q2. Under the LCR framework, Level 2 assets are subject to which overall ceiling within total HQLA? (a) 15% (b) 25% (c) 40% (d) 50%
Answer: (c) — Level 2 assets are capped at 40% of the HQLA stock, with Level 2B further capped at 15%.
Q3. Recognised cash inflows in the LCR denominator are capped at what percentage of stressed cash outflows? (a) 50% (b) 60% (c) 75% (d) 90%
Answer: (c) — Inflows cannot exceed 75% of stressed outflows, ensuring a minimum residual buffer.
Q4. Which committee is ordinarily chaired by the CEO or Managing Director and takes day-to-day balance sheet mismatch decisions? (a) Audit Committee (b) ALCO (c) Nomination Committee (d) ALM Support Group
Answer: (b) — The Asset Liability Committee executes strategy; the ALM Support Group only prepares data and analytics for it.
Q5. The LCR requirement applies to deposit-taking NBFCs on what basis? (a) Only above ₹100 crore assets (b) Only above ₹5,000 crore assets (c) Only above ₹10,000 crore assets (d) Irrespective of asset size
Answer: (d) — All deposit-taking NBFCs are covered regardless of size; asset-size thresholds apply only to non-deposit-taking NBFCs.
Want chapter-wise mock tests with 100+ MCQs? Start practising free →
❓ Frequently Asked Questions
Is the LCR requirement the same for NBFCs as for banks?
The formula and the HQLA tiering are broadly the same, but the stress factors, applicability thresholds and the glide path differ. NBFCs also lack access to central bank liquidity windows, so the composition of their HQLA is more conservative in practice.
Does a small non-deposit-taking NBFC need to prepare ALM statements?
The ALM discipline applies to non-deposit-taking NBFCs with asset size of ₹100 crore and above, and to all deposit-taking NBFCs. Smaller entities still face general prudential expectations but not the full statement set.
What is the difference between structural and dynamic liquidity statements?
The structural statement buckets existing assets and liabilities by residual maturity. The dynamic statement projects expected business flows, including new disbursements and planned borrowings, over a shorter horizon.
How often should a Contingency Funding Plan be reviewed?
It must be Board-approved and reviewed periodically, and its assumptions and triggers should be tested rather than left on paper. Supervisors expect evidence that escalation paths and named responsibilities actually work under simulated stress.
🎯 Conclusion
Liquidity is where NBFC risk management is decided. Master three things and you will handle almost any question the paper throws at you: the applicability thresholds, the granular bucket caps of 10%, 10% and 20%, and the LCR arithmetic with its 40% Level 2 ceiling and 75% inflow cap. Layer the governance structure — Board, Risk Management Committee, ALCO, ALM Support Group, Contingency Funding Plan — on top, and the topic becomes predictable rather than intimidating. Ready to test yourself under exam conditions? Take a free NBFC mock test now →
Practice this topic
Take a free mock test, download chapter PDFs, or watch a video class — all included on iibf.store.
Keep reading