Standardised Approach for Operational Risk Capital: BIC and ILM (CAIIB RM)

The standardised approach for operational risk capital is the single method Basel III now requires every bank to use for computing capital against operational risk — the risk of loss from failed internal processes, people, systems or external events. The Basel Committee finalised this approach in its December 2017 reforms package, and it replaces the three older methods banks used earlier. For CAIIB Risk Management candidates, this is a high-yield numeric topic: the exam tests both the Business Indicator Component (BIC) formula and the Internal Loss Multiplier (ILM) mechanics that sit on top of it.

This article walks through both building blocks, shows how they combine into the final operational risk capital charge, and works a full numeric illustration so you can see the formula in action before you meet it in a case-study question.

📊 Why Basel III Replaced BIA, TSA and AMA

Before Basel III's operational risk reforms, banks could use one of three approaches: the Basic Indicator Approach (BIA), which applied a flat percentage to average gross income; the Standardised Approach / Alternative Standardised Approach (TSA/ASA), which applied business-line-specific percentages; and the Advanced Measurement Approach (AMA), which let large banks build internal statistical loss models. In practice this created two problems regulators wanted fixed — capital charges that were not comparable across banks, and AMA models that were so complex and bank-specific that supervisors struggled to benchmark them.

The Basel Committee's response was to scrap all three and replace them with one standardised approach for operational risk capital, applicable to every bank regardless of size. It keeps the simplicity of a formula-driven method while adding a bank-specific adjustment for actual loss experience — something BIA and TSA never captured. This sits within the broader risk management framework chapter, alongside how operational risk is positioned next to credit, market and liquidity risk in a bank's overall capital planning.

🧮 Business Indicator and the BIC Formula

The Business Indicator (BI) is a financial-statement-based proxy for the scale of a bank's operations, built from three components, each taken as a three-year average of absolute values: the Interest, Leases and Dividend Component (ILDC); the Services Component (SC), covering fee and commission income and expense plus other operating income and expense; and the Financial Component (FC), covering trading book and banking book profit-or-loss items. BI = ILDC + SC + FC.

The Business Indicator Component (BIC) is then derived by applying marginal coefficients to BI across three buckets, exactly like a slab-rate income tax calculation. Bucket 1 (BI up to €1 billion) attracts a 12% coefficient; Bucket 2 (the portion of BI between €1 billion and €30 billion) attracts 15%; and Bucket 3 (the portion above €30 billion) attracts 18%. Only the portion of BI that falls in each slab is charged at that slab's rate — the higher coefficient never applies retroactively to the whole BI.

💡 Exam Tip: Treat the BIC bucket calculation exactly like slab-wise tax — compute each bucket's contribution separately and add them up. Do not apply the top bucket's coefficient to the entire BI.

🔁 Internal Loss Multiplier: Loss Data Meets the Formula

BIC alone would make operational risk capital purely size-driven, ignoring whether a bank actually has a poor or clean loss record. The Internal Loss Multiplier (ILM) fixes this by scaling BIC up or down based on a bank's own historical losses. The Loss Component (LC) is defined as 15 times the bank's average annual operational risk loss over the preceding 10 years (or a shorter window while loss-data history is being built up, subject to supervisory approval).

ILM is then computed as: ILM = ln[e − 1 + (LC ÷ BIC)^0.8], where e is Euler's number (≈2.718) and ln is the natural logarithm. When LC exactly equals BIC, the expression collapses to ln(e) = 1, so ILM = 1 and operational risk capital equals BIC unchanged. If a bank's actual losses are heavier than its size-based BIC implies, ILM rises above 1 and pushes capital up; if losses are lighter, ILM falls below 1 and eases the charge.

⚠️ Common Mistake: Candidates often forget that national supervisors can exercise discretion here — where loss-data quality across the banking system is still maturing, the supervisor may fix ILM at 1 for all banks, which means operational risk capital simply equals BIC until reliable 10-year loss datasets are in place.

🏦 Worked Illustration: BIC, ILM and the Final Capital Charge

Assume an illustrative bank reports a Business Indicator (BI) of €5 billion for the relevant period. Bucket 1 covers the first €1 billion at 12%, contributing €120 million. Bucket 2 covers the remaining €4 billion (from €1 billion to €5 billion) at 15%, contributing €600 million. Adding these gives BIC = €120 million + €600 million = €720 million.

Next, suppose the bank's 10-year average annual operational risk loss is €40 million. The Loss Component is LC = 15 × €40 million = €600 million. The ratio LC ÷ BIC works out to 600 ÷ 720 ≈ 0.833, and raising that to the power 0.8 gives approximately 0.864. Adding (e − 1) ≈ 1.718 gives 2.582, and taking the natural log gives ILM ≈ 0.95 — this bank's loss history is slightly better than its size alone would suggest, so its capital charge is trimmed a little.

Operational Risk Capital (ORC) = BIC × ILM ≈ €720 million × 0.95 ≈ €684 million. To express this as risk-weighted assets for the capital adequacy ratio, ORC is multiplied by 12.5, giving roughly €8.55 billion of risk-weighted assets for operational risk alone. Where the supervisor applies the ILM = 1 discretion instead, ORC simply equals BIC (€720 million), and RWA works out to €9 billion. This is the same slab-and-multiplier logic tested alongside topics like risk control self assessment in banks, since RCSA loss data is one of the inputs that eventually feeds a bank's Loss Component once internal loss databases mature.

It's worth contrasting this size-and-loss-driven capital charge with how banks separately manage concentration risk in banks and apply credit risk mitigation techniques — those reduce credit risk capital directly, whereas operational risk capital under SA responds only to business scale and loss history, not to collateral or guarantees. Candidates should also revise the liquidity risk management chapter and the related Liquidity Adjustment Facility framework from central banking, since a bank's overall Basel III capital and liquidity position is assessed together, not risk-type by risk-type.

📌 Remember: BIC scales with business size using slab coefficients; ILM then scales BIC up or down using the bank's own 10-year loss record — together they form the final operational risk capital charge under the standardised approach.

🧠 Practice MCQs: Standardised Approach for Operational Risk Capital

Want chapter-wise mock tests with 100+ MCQs? Start practising free →

🎯 Conclusion: Lock In the BIC and ILM Formulas

The standardised approach for operational risk capital rewards candidates who can move fluently between the concept and the arithmetic — knowing that BIC scales with business size through marginal buckets, and that ILM then adjusts that base figure using a bank's own loss experience, is usually enough to clear both conceptual and numeric questions on this topic. Revisit the risk management framework chapter to place operational risk correctly within a bank's overall Basel III capital structure, and browse more Risk Management elective articles for related CAIIB RM topics. For the latest finalised text of these reforms, the Reserve Bank of India publishes the applicable Basel III guidelines and circulars for Indian banks.

Ready to test yourself? Explore the full CAIIB course or jump straight into chapter-wise practice tests to drill BIC and ILM calculations until they're second nature.