Risk Management in Banks: Basel III, RAROC & Capital for IIBF 2026

Sound risk management is what allows a bank to take risk deliberately rather than accidentally, and the IIBF Risk Management paper examines its frameworks and models in depth. Effective risk management measures each exposure, prices it correctly, holds capital against it and monitors it continuously. This guide focuses on the Basel III capital framework, the credit-risk models, and the performance measures that turn risk into informed decisions.

The Basel III Capital Framework

The Basel III framework is the global backbone of bank risk management, strengthening the quality and quantity of capital after the global financial crisis. It rests on three pillars: Pillar 1 sets minimum capital requirements for credit, market and operational risk; Pillar 2 covers the supervisory review process, including the bank's own Internal Capital Adequacy Assessment Process; and Pillar 3 enforces market discipline through disclosure.

Capital is tiered into Common Equity Tier 1 (CET1), Additional Tier 1 and Tier 2, with CET1 being the highest-quality, loss-absorbing capital. Basel III adds buffers — the capital conservation buffer, the countercyclical buffer and a surcharge for systemically important banks — plus a non-risk-based leverage ratio and the LCR and NSFR liquidity standards. The Capital to Risk-weighted Assets Ratio (CRAR) is the headline solvency measure. For the exam, the capital tiers, buffers and minimum ratios are high-frequency questions, so commit them to memory. Practise the capital-computation questions with our IIBF risk management practice tests.

Credit Risk Models: PD, LGD and EAD

Credit risk is quantified through three parameters. The Probability of Default (PD) estimates the likelihood that a borrower defaults over a given horizon; the Loss Given Default (LGD) is the proportion of exposure lost after recoveries; and the Exposure at Default (EAD) is the amount outstanding when default occurs. Their product gives the Expected Loss, which is covered by provisions, while unexpected loss is covered by capital.

Under Basel, banks may compute credit-risk capital using the Standardised Approach, which applies regulator-set risk weights often linked to external ratings, or the Internal Ratings-Based (IRB) approaches, where qualifying banks use their own estimates of PD, LGD and EAD. The choice affects how risk-sensitive the capital charge is. Candidates should be able to compute expected loss and explain the difference between expected and unexpected loss, since these appear as numericals. A robust internal rating model is central to modern risk management. Reinforce the parameters with our risk modelling match game.

Market and Operational Risk

Market risk in the trading book is measured using Value at Risk (VaR), which estimates the maximum loss over a horizon at a confidence level, complemented by stress testing, back-testing and the increasingly favoured expected shortfall. Sensitivity measures such as duration and PV01 capture interest-rate exposure. The bank holds a market-risk capital charge against these positions under Pillar 1.

Operational risk — loss from failed processes, people, systems or external events — is managed through Risk and Control Self-Assessment, Key Risk Indicators and an internal loss database, with capital computed under Basel's standardised approach based on a business indicator. The RBI's prudential and capital norms are issued by the Reserve Bank of India. For the exam, connect each risk type to its measurement tool and its Pillar 1 capital treatment. Understanding how the three risks combine into total capital is essential. Deepen your grasp through our advanced bank financial management course.

RAROC, ICAAP and Risk Governance

Risk management is not only defensive; it also guides where to deploy capital for the best risk-adjusted return. Risk-Adjusted Return on Capital (RAROC) divides risk-adjusted income (net of expected loss) by the economic capital allocated to an exposure, allowing the bank to compare the profitability of different businesses on a like-for-like basis. A higher RAROC signals a more attractive use of scarce capital, and the measure underpins risk-based pricing.

The Internal Capital Adequacy Assessment Process (ICAAP) under Pillar 2 requires the bank to assess all material risks — including those not fully captured in Pillar 1, such as concentration and interest-rate risk in the banking book — and to hold capital commensurate with its own risk profile and strategy. Sound risk governance flows from the board through a Risk Management Committee to the Chief Risk Officer, supported by the three lines of defence. A banker who integrates capital, models, RAROC and governance practises risk management in the fullest sense. Stay current on Basel and RBI updates via our IIBF news tracker.

Exam Strategy and Quick Revision

For the risk management paper, prioritise the Basel III three pillars, the capital tiers and buffers, and the credit-risk parameters PD, LGD and EAD with the expected-loss formula. These quantitative topics generate the bulk of the marks and the numerical questions.

Memorise the CRAR and minimum capital ratios, the difference between the standardised and IRB approaches, and the RAROC formula. Understand ICAAP's role under Pillar 2 and the three lines of defence in governance. Pair this targeted revision with regular mock practice to build speed on the numericals. Test yourself with a timed risk management mock and read more on our study blog.

Conclusion

Risk management ties together the Basel III capital framework, the credit-risk models, the market and operational risk tools, and performance measures like RAROC. Master the capital tiers, the expected-loss formula and the three pillars, since these recur in every session. Test your readiness with a timed risk management mock and continue with our advanced banking course.