Supervisory Review and Evaluation Process Under Basel Pillar 2 (IIBF RM)

The supervisory review and evaluation process is the engine room of Basel Pillar 2. It is how the Reserve Bank checks whether a bank's capital truly matches its risk profile, not just its Pillar 1 formula output. For JAIIB and CAIIB Risk Management candidates, this topic sits at the intersection of capital adequacy, governance, and on-site supervision. Examiners love it because it links ICAAP, risk-based supervision, and the Prompt Corrective Action framework in one clean story. This article walks through both halves of Pillar 2, what supervisors actually evaluate, the four guiding principles, and how a bank's board should prepare.

📊 The Two Halves of Pillar 2: ICAAP and Supervisory Review

Basel II built three pillars. Pillar 1 sets minimum capital for credit, market, and operational risk using standard formulas. Pillar 3 forces public disclosure. Pillar 2 sits between them and has two distinct halves.

The first half is the bank's own job. Every bank must run an Internal Capital Adequacy Assessment Process, commonly called ICAAP. The bank identifies its material risks, tests them under stress, and decides how much capital it actually needs. This figure is usually higher than the bare Pillar 1 minimum.

The second half is the supervisor's job. This is SREP itself. The Reserve Bank examines the bank's ICAAP, challenges its assumptions, and forms an independent view of capital adequacy. It is not a rubber stamp. Supervisors can, and often do, disagree with a bank's own numbers.

Together, ICAAP and the supervisory review complete the Pillar 2 loop. The bank proposes; the supervisor disposes. A weak ICAAP invites a harder supervisory review, and a strong one builds supervisory confidence over time.

💡 Exam Tip: Remember the pairing — ICAAP is the bank's self-assessment, SREP is the regulator's independent check. Exam questions often test whether you can tell the two apart.

🔍 What the Supervisor Actually Evaluates

The supervisory review and evaluation process is not narrowly about capital ratios. It covers four broad zones that decide a bank's overall risk rating.

First, business model viability. Supervisors ask whether the bank's strategy and earnings are sustainable over a multi-year horizon, not just profitable this quarter.

Second, governance and internal control. This includes board oversight, the independence of the risk function, and whether policies are actually followed on the ground, not just written down.

Third, risks to capital. Supervisors look at credit, market, and operational risk exposures, but they also probe risks Pillar 1 formulas miss entirely. Interest rate risk in the banking book is the classic example, alongside concentration risk, strategic risk, and reputational risk.

Fourth, risks to liquidity and funding. A bank can be well capitalised and still fail from a funding mismatch, so liquidity gets its own dedicated evaluation lane.

These four zones feed a single supervisory judgment. That judgment can trigger extra capital, closer monitoring, or a formal escalation. For deeper background on the individual assessment, review the chapter on regulatory capital and capital adequacy, which sets up the numbers this evaluation tests.

⚖️ Four Principles and the Pillar 2 Capital Add-on

The Basel Committee laid down four core principles that shape how any supervisory review and evaluation process should work in practice.

Principle one: banks must have a process for assessing their capital adequacy relative to their risk profile, plus a strategy for maintaining capital levels. That is the ICAAP obligation restated from the supervisor's side.

Principle two: supervisors should review and evaluate each bank's internal assessment and strategy, and must be able to require action if they are not satisfied.

Principle three: supervisors should expect banks to operate above the regulatory minimum, and should have the power to require capital in excess of that minimum. This is where the Pillar 2 add-on comes from — an institution-specific top-up layered on top of the Pillar 1 number.

Principle four: supervisors should intervene early to prevent capital from falling below the minimum levels a bank's risk profile needs. They should demand rapid remedial action if capital is not maintained.

Alongside the formal add-on, supervisors may issue capital guidance — a softer, forward-looking buffer expectation that sits above the binding requirement. Banks that ignore capital guidance for too long tend to find it converts into a hard requirement at the next review cycle.

⚠️ Common Mistake: Candidates often confuse the Pillar 2 add-on with the Capital Conservation Buffer. The add-on is bank-specific and supervisor-determined; the buffer is a system-wide Basel III requirement.

🚨 Risk-Based Supervision, PCA Linkage, and Board Readiness

The Reserve Bank runs its version of the supervisory review and evaluation process through a risk-based supervision model. Instead of checking every rule at every bank equally, examiners score each institution on risk profile, governance quality, and the strength of internal controls. Banks with weaker scores get more intensive, more frequent supervisory attention.

When this evaluation flags serious weakness, the outcome links directly to the Prompt Corrective Action framework. If key financial ratios — capital, asset quality, or leverage — breach defined thresholds, the bank moves into PCA. Restrictions follow: limits on branch expansion, dividend payouts, and lending growth, until the bank rebuilds its position.

Boards should not treat a supervisory review as an annual paperwork exercise. The risk committee needs to own the ICAAP document, stress-test its assumptions honestly, and defend every material judgement call to examiners. Weak documentation on operational risk data or technology exposure is a common reason for supervisory pushback. The chapters on collection of loss data and technology risk are worth revisiting before any mock exam question on this.

Good preparation also means clean corporate governance records. See the chapter on corporate governance for the board-level controls examiners expect to see documented and evidenced.

📌 How This Connects to the Rest of Your Risk Management Syllabus

This evaluation does not sit in isolation. It draws on stress testing outputs, economic capital numbers, and the bank's operational risk framework. Treat it as a capstone topic rather than a standalone one.

If your ICAAP understates a risk that examiners flag under Pillar 2, expect a capital add-on and closer monitoring. If your governance is weak, expect intervention even when the capital ratio still looks fine on paper. Both paths can eventually lead toward PCA if left unaddressed.

📌 Remember: Pillar 1 is a formula. Pillar 2, delivered through the supervisory review and evaluation process, is a judgement — and judgement calls are exactly what supervisors probe hardest in on-site inspections.

Per the Reserve Bank of India's supervisory guidance, banks are expected to maintain capital comfortably above the regulatory minimum precisely because of this add-on mechanism. Treat that expectation as a working rule for both the exam and real bank practice.

🧠 Practice MCQs: Basel Pillar 2 and SREP

Want chapter-wise mock tests with 100+ MCQs? Start practising free →

❓ Frequently Asked Questions

✅ Conclusion: Make Pillar 2 Your Exam Strength

The supervisory review and evaluation process rewards candidates who understand the story, not just the terms. Know the ICAAP-SREP pairing, the four risks Pillar 1 misses, and the four principles. Add the PCA linkage, and this becomes one of the easiest topics on the Risk Management paper.

Keep building your Pillar 2 foundation with related topics: economic capital allocation in banks, stress testing in banks, and market risk limits in banks. All three feed directly into the ICAAP a supervisor will review. If you also cover insurance regulation, compare this with solvency margin for insurers. It shows how a different regulator handles a similar capital-adequacy question.

Browse more Risk Management articles on the tag hub, then test your grasp with a full CAIIB mock covering this chapter and the linked topics above.