Regulation, Supervision and International Compliance

Introduction and Context

International banking connects depositors, borrowers, payment systems, securities markets and governments across jurisdictions. This integration creates efficiency, diversification and access to capital, but it also creates systemic and legal risks. A bank may be incorporated in one country, maintain branches in several others, book a loan in a third jurisdiction, use a globally distributed technology provider, and serve customers whose funds move through many payment systems. Regulation and supervision therefore seek to preserve trust while limiting excessive risk-taking, financial crime and disorderly failure.

Banking regulation is the body of legally enforceable rules governing financial institutions and markets. Supervision is the continuing process through which public authorities assess whether institutions comply with those rules and manage risks safely. Compliance is the institution’s internal and external process of identifying obligations, implementing controls, monitoring behaviour and responding to breaches.

The international framework is not a single global banking law. It is a network of national authorities, international standards, supervisory colleges, treaties and private-sector controls. The Basel Committee on Banking Supervision develops minimum prudential standards for internationally active banks, while national regulators implement them through domestic law. The Financial Action Task Force (FATF) develops global standards for combating money laundering and terrorist financing. Other important institutions include deposit insurers, resolution authorities, tax-information networks and data-protection regulators.

A central challenge is balancing safety with innovation and competition. Excessively weak regulation can permit leverage, liquidity transformation and misconduct to accumulate. Excessively rigid or fragmented regulation can raise costs, restrict credit and encourage activity to migrate into less regulated sectors. Effective regulation is therefore risk-sensitive, proportionate, coordinated and supported by credible enforcement.

Learning Objectives

By the end of this chapter, students should be able to:

1. Explain the purpose and structure of prudential regulation and supervision.
2. Calculate and interpret risk-based capital, liquidity and leverage measures.
3. Distinguish deposit protection, recovery and resolution arrangements.
4. Apply the logic of AML/CFT, KYC, sanctions and transaction monitoring controls.
5. Explain tax transparency, data protection and cross-border compliance challenges.
6. Evaluate a bank’s regulatory response to a complex international-risk scenario.

1. Why Banks Require Special Regulation

Banks perform maturity transformation: they fund relatively illiquid, long-term assets with liabilities that may be withdrawn quickly. They also transform risk, provide payment services and create deposits through lending. These functions generate several forms of market failure.

Liquidity risk arises when a bank cannot meet obligations as they fall due without unacceptable losses. Solvency risk arises when the value of assets is insufficient to cover liabilities and capital. Systemic risk is the possibility that distress at one institution or market will impair the wider financial system. Interconnectedness, common asset holdings and payment-system dependencies can transmit shocks rapidly.

Depositors often cannot observe the quality of a bank’s loans, trading positions or risk models. This information asymmetry creates incentives for regulation, disclosure and supervision. Deposit insurance can prevent panic withdrawals, but it may also create moral hazard: depositors may monitor banks less carefully and banks may accept greater risks. Prudential rules and supervisory enforcement are intended to offset this effect.

A useful distinction is between:

• Microprudential supervision, which focuses on the safety of an individual institution.
• Macroprudential supervision, which focuses on risks across the financial system and over the economic cycle.
• Conduct supervision, which addresses fair treatment of customers, market integrity and proper business behaviour.
• Financial-crime supervision, which addresses money laundering, terrorist financing, sanctions evasion, fraud and related threats.

2. The Basel Prudential Framework

The Basel framework is commonly associated with three mutually reinforcing pillars:

1. Pillar 1: minimum capital and quantitative requirements.
2. Pillar 2: supervisory review of risks and capital adequacy.
3. Pillar 3: market discipline through disclosure.

Basel standards are minimum international standards rather than a substitute for national law. A jurisdiction may impose stricter requirements, and implementation differs according to the bank’s size, complexity and activities.

2.1 Regulatory capital

Capital is a loss-absorbing financial resource. It is not identical to cash or total assets. Basel standards distinguish capital by its quality and permanence.

• Common Equity Tier 1 (CET1) generally consists of common shares, retained earnings and qualifying reserves, subject to regulatory deductions.
• Additional Tier 1 (AT1) consists of instruments capable of absorbing losses on a going-concern basis, usually through conversion or write-down mechanisms.
• Tier 2 capital provides gone-concern loss absorption, especially when a bank is being resolved or liquidated.
• Total regulatory capital is the sum of qualifying Tier 1 and Tier 2 capital after applicable adjustments.

The risk-based capital ratio is:

Regulatory capital is measured in the relevant capital tier, and risk-weighted assets (RWA) are expressed in the same currency unit. The ratio is meaningful only when capital and RWA are measured under the applicable regulatory rules.

The CET1 ratio is:

The Tier 1 ratio is:

These formulas assume that capital components and RWA have already been adjusted according to the relevant Basel and national rules. They do not by themselves determine whether a bank is safe; asset quality, liquidity, governance and stress resilience also matter.

2.2 Risk-weighted assets

RWA attempt to reflect the credit, market and operational risks of a bank’s exposures. Under the standardized approach, exposures receive regulatory risk weights based on categories such as sovereigns, banks, residential mortgages and corporates. More advanced approaches may use internally developed risk parameters subject to supervisory approval.

For a simple exposure, risk-weighted exposure can be represented as:

The formula is a simplified representation. Actual rules may include credit-conversion factors for off-balance-sheet items, collateral recognition, netting, maturity adjustments, default status and separate market or operational-risk calculations.

Worked example. A bank has qualifying CET1 capital of $80 million and RWA of $625 million.

If the applicable minimum were 4.5% before buffers, the bank would exceed that minimum. However, a conclusion about compliance would require checking capital conservation buffers, countercyclical requirements, systemic-bank surcharges, Pillar 2 requirements and any national add-ons.

2.3 Capital buffers and supervisory expectations

Capital requirements commonly include a minimum requirement plus buffers. The capital conservation buffer is intended to provide a cushion that can be drawn down in stress. Restrictions on distributions, such as dividends and discretionary bonuses, may apply when a bank enters its buffer range. A countercyclical capital buffer may be increased during periods of excessive credit growth and reduced during stress. National authorities may also impose higher requirements on systemically important institutions.

Capital is therefore not simply a pass-or-fail number. Supervisors examine the quality, location and transferability of capital, the credibility of management forecasts and the results of stress tests. A bank that meets minimum ratios under current conditions may still be vulnerable to recession, currency depreciation, interest-rate shocks or concentrated defaults.

3. Liquidity and Leverage Standards

3.1 Liquidity Coverage Ratio

The Liquidity Coverage Ratio (LCR) is designed to ensure that a bank holds sufficient high-quality liquid assets (HQLA) to withstand a specified short-term stress scenario.

HQLA are assets that can be converted into cash quickly with limited loss of value. They are subject to eligibility, valuation and haircuts. Net cash outflows are stressed expected outflows minus permitted inflows, subject to regulatory caps and assumptions. The measure is generally intended to be at least 100% under the applicable standard, although supervisory treatment may differ in exceptional circumstances.

Worked example. A bank holds $240 million of eligible HQLA. Its stressed 30-day cash outflows are $300 million and eligible inflows are $100 million. If the regulatory calculation permits all $100 million of inflows:

The bank has a 20 percentage-point cushion above 100% on these assumptions. The result is sensitive to run-off rates, collateral calls, derivative exposures and the eligibility of assets.

3.2 Net Stable Funding Ratio

The Net Stable Funding Ratio (NSFR) addresses structural liquidity over a longer horizon, commonly one year.

Available stable funding (ASF) is weighted according to the stability of funding sources, such as equity, long-term debt and stable deposits. Required stable funding (RSF) is weighted according to the liquidity characteristics and maturity of assets and off-balance-sheet exposures. A ratio of at least 100% is generally the regulatory objective.

The NSFR does not replace cash-flow forecasting. A bank can have a strong one-year structural ratio and still experience an intraday or one-week liquidity crisis.

3.3 The leverage ratio

Risk weights can underestimate risk or be manipulated through model assumptions. The leverage ratio provides a non-risk-based backstop:

The leverage exposure measure generally includes on-balance-sheet exposures and specified off-balance-sheet, derivative and securities-financing exposures, subject to regulatory adjustments. Because the denominator is not risk-weighted in the same manner as RWA, the ratio is intended to limit excessive balance-sheet expansion even when reported risk weights are low.

Worked example. Tier 1 capital is $50 million and the leverage exposure measure is $1,250 million.

A bank may satisfy its risk-based capital ratios but fail a leverage constraint if it has a very large balance sheet relative to capital. Conversely, a leverage ratio alone cannot distinguish a low-risk government bond from a high-risk unsecured corporate loan.

4. Prudential Supervision and Governance

Supervision is more than checking ratios. It evaluates the bank’s risk-management framework, board oversight, internal controls, business model and capacity to respond to stress.

4.1 Supervisory methods

Supervisors use several complementary methods:

• Off-site supervision: analysis of regulatory returns, financial statements, risk reports, stress tests and early-warning indicators.
• On-site inspection: examination of files, systems, controls, governance and staff practices.
• Thematic reviews: focused assessments of a risk affecting multiple institutions, such as cyber risk or correspondent banking.
• Supervisory colleges: cooperation among authorities supervising a banking group across jurisdictions.
• Prompt corrective action: escalating measures such as remediation plans, restrictions on dividends, higher capital, business limits or replacement of managers.

The board is responsible for approving strategy, risk appetite and control arrangements. Senior management implements those policies. The three-lines model is often used as a governance framework: business units own and manage risk; independent risk and compliance functions challenge and monitor it; internal audit provides independent assurance. The model is useful only when the control functions have authority, expertise, resources and access to the board.

4.2 Consolidated and host supervision

A banking group may be supervised on a consolidated basis by the home authority, while host authorities supervise local subsidiaries or branches. Consolidated supervision helps identify risks transferred within the group, but host authorities remain concerned with local depositors, liquidity and legal powers. Cooperation requires information-sharing agreements, confidentiality safeguards and clear procedures for crisis management.

Cross-border supervision can fail when authorities have conflicting priorities, limited information, incompatible reporting systems or uncertainty about who acts first in a crisis. Supervisory colleges and colleges of resolution authorities seek to reduce these weaknesses.

5. Deposit Protection, Recovery and Resolution

5.1 Deposit insurance

Deposit protection schemes reimburse eligible depositors up to a stated limit when a bank fails. Their objectives are to protect small depositors, preserve confidence and reduce incentives for destabilizing withdrawals. Coverage normally excludes or limits certain deposits, such as those of financial institutions, and may distinguish between retail and wholesale funds.

Deposit insurance creates a trade-off. It reduces depositor panic, but it can weaken market discipline and produce moral hazard. Premiums based on bank risk, effective supervision, limits on coverage and prompt payout can reduce that problem. Deposit protection does not guarantee that every creditor or investor will be fully repaid.

5.2 Recovery planning

A recovery plan sets out actions a bank could take to restore viability without public solvency support. Potential measures include raising capital, selling assets, reducing lending, changing funding, suspending distributions or restructuring business lines. Recovery indicators should be forward-looking and linked to credible management actions.

5.3 Resolution

Resolution is the managed response to a failing or likely-to-fail bank when ordinary insolvency could threaten financial stability. Resolution objectives may include continuity of critical functions, protection of insured depositors, preservation of payment services and minimization of public-sector losses.

Common resolution tools include:

• Sale of business: transfer of shares or assets to another institution.
• Bridge bank: temporary institution operated until a purchaser or longer-term solution is found.
• Bail-in: write-down or conversion of eligible liabilities to recapitalize the failing bank.
• Asset separation: transfer of selected assets to a separate vehicle in appropriate circumstances.

A credible resolution regime requires loss-absorbing capacity, operational continuity, access to information, legal authority and cross-border cooperation. The principle that shareholders and creditors should bear losses before taxpayers is important, but its application must respect creditor hierarchies, secured claims and national law.

6. AML/CFT, KYC and Sanctions Compliance

Money laundering is the process of disguising the criminal origin of proceeds. Terrorist financing involves collecting or providing funds for terrorist purposes; the funds may originate from legal or illegal sources. Proliferation financing concerns support for the development or transfer of weapons of mass destruction and related capabilities.

A risk-based AML/CFT framework generally includes:

1. Customer identification and verification. The bank establishes who the customer is and verifies identity using reliable, independent information.
2. Beneficial ownership. The bank identifies the natural person who ultimately owns or controls a legal entity or arrangement.
3. Customer risk assessment. Risk factors include products, delivery channels, geography, customer type, occupation, transaction behaviour and source of wealth.
4. Enhanced due diligence. Higher-risk relationships receive additional information gathering, senior approval, closer monitoring and more frequent review.
5. Ongoing monitoring. Transactions and account activity are assessed against the customer profile and expected behaviour.
6. Suspicious transaction reporting. Where legal thresholds are met, the institution reports suspicions to the appropriate financial intelligence unit without tipping off the customer.
7. Record keeping and training. Records must be retained for the legally required period and staff must understand escalation duties.

KYC is not a one-time form-filling exercise. A customer’s ownership, business activity, geography and expected transaction profile can change. Poor data quality, opaque corporate structures, correspondent banking and rapidly moving digital funds create particular challenges.

Sanctions compliance is distinct from AML. Sanctions may prohibit dealings with designated persons, entities, countries, sectors or activities. Screening should cover customers, beneficial owners, counterparties, payment messages, vessels or other relevant data, depending on the applicable regime. A bank must determine which sanctions regimes apply through its place of incorporation, branches, currency, payment systems, ownership, employees and contractual relationships. Over-reliance on automated name matching can create both false positives and false negatives; governance, list management, investigation and documented decisions remain necessary.

7. Tax Transparency and Data Protection

International banks face obligations designed to prevent tax evasion and concealment of offshore assets. The Common Reporting Standard (CRS) requires participating financial institutions to identify reportable account holders and provide specified information through tax authorities. The United States Foreign Account Tax Compliance Act (FATCA) imposes separate reporting and withholding-related obligations concerning certain U.S. taxpayers and entities.

Tax transparency controls commonly require classification of customers, tax residence self-certification, reasonableness checks, controlling-person analysis for entities and periodic remediation of incomplete records. Tax reporting is not the same as deciding whether a customer has committed tax evasion. Banks report information under the applicable rules; tax authorities assess tax liability.

Data protection imposes a related but sometimes competing set of requirements. Banks must have a lawful basis for processing personal data, collect it for specified purposes, limit access, maintain accuracy, protect it against unauthorized use and retain it no longer than necessary, subject to legal obligations. Cross-border transfers may require approved safeguards or local arrangements. A bank may need to share information with a foreign regulator or financial intelligence unit while still applying confidentiality, proportionality and data-security controls.

The principle of purpose limitation means that data collected for KYC should not automatically be reused for unrelated commercial purposes. Data minimization means collecting information that is adequate and relevant rather than gathering everything potentially useful. These principles can conflict with indefinite retention practices and poorly governed artificial-intelligence systems.

8. Cross-Border Compliance Operating Model

International compliance is most effective when responsibilities are clearly allocated across group, regional and local levels. A group policy may establish minimum standards, while local entities add requirements imposed by host law. The stricter rule should not automatically be applied without legal analysis: some countries restrict the export of customer data, prohibit foreign instructions or impose blocking laws.

A practical compliance architecture includes:

• a regulatory inventory mapping obligations to legal entities and products;
• documented risk assessments at enterprise, country, product and customer levels;
• policies translated into operational procedures and system rules;
• independent testing and internal audit;
• issue management with owners, deadlines and escalation;
• training tailored to role and risk;
• reliable management information for the board and regulators;
• an incident-response process for breaches, sanctions alerts and cyber events.

Technology supports but does not replace judgment. Transaction-monitoring systems use rules, scenarios and increasingly machine-learning techniques to identify unusual activity. Artificial intelligence can improve prioritization and detect patterns across large datasets, but it may generate opaque decisions, discriminatory outcomes, unstable alerts or privacy risks. Institutions should validate models, document data provenance, monitor false-positive and false-negative rates, maintain human review and preserve explainability appropriate to the decision.

9. Illustrative Case: Meridian Bank’s Cross-Border Expansion

This is a fictional illustrative case.

Background

Meridian Bank, headquartered in Country A, acquires a digital-bank subsidiary in Country B. The group offers instant payment accounts to small exporters. Customers include companies incorporated through online portals, payment intermediaries and several customers operating in jurisdictions identified as high risk by the bank’s enterprise assessment. The subsidiary grows rapidly. Its CET1 capital is $96 million and RWA are $800 million. It holds $210 million of HQLA. Its stressed 30-day outflows are $280 million and eligible inflows are $90 million. Tier 1 capital is $120 million and the leverage exposure measure is $2.4 billion.

Problem

The board discovers that the subsidiary’s beneficial-ownership records are incomplete, sanctions alerts are being closed without consistent evidence, and the group’s transaction-monitoring model does not include payment patterns specific to exporters. The subsidiary reports a high LCR, but the board is uncertain whether the calculation properly reflects concentrated corporate deposits and potential payment outflows.

Analysis

The prudential ratios, before considering buffers or local adjustments, are:

These figures appear strong in isolation. However, the LCR may be overstated if inflows are not eligible, if HQLA are subject to additional haircuts, or if corporate deposits are more volatile than the assumed run-off rate. The capital ratios do not address money-laundering exposure or governance weaknesses.

Approach and solution

The group should first establish the legal perimeter: which entity owns the customer relationship, which sanctions and data rules apply, and which authority receives suspicious-transaction reports. It should then freeze onboarding for customer types that cannot meet minimum beneficial-ownership standards, remediate existing files according to risk, and require senior approval for high-risk relationships.

The bank should conduct a targeted review of exporter transactions, including invoice fraud, round-dollar transfers, rapid movement through multiple accounts and payments involving high-risk intermediaries. It should recalibrate monitoring scenarios, test the model using known cases, and require documented investigation of sanctions alerts. The local board and group compliance committee should receive independent assurance reports.

Treasury should recalculate liquidity using verified HQLA, realistic inflow eligibility and deposit concentration assumptions. Stress tests should include a rapid withdrawal by corporate customers, loss of market access, collateral calls and a simultaneous reputational event. The resolution plan should identify critical payment services and ensure that customer and transaction data can be accessed by the relevant authorities during a crisis.

Outcome

After remediation, Meridian retains profitable exporter services but narrows its customer base, improves ownership verification, introduces enhanced due diligence for high-risk intermediaries and establishes a joint home-host supervisory reporting process. Its compliance costs increase, but the bank gains clearer risk information and reduces the probability of enforcement action, financial loss and reputational damage.

Learning points

1. A bank can meet numerical prudential ratios while failing important compliance controls.
2. Liquidity calculations depend on regulatory definitions and behavioural assumptions, not merely accounting balances.
3. Cross-border responsibility must be allocated explicitly between group and local entities.
4. Risk-based controls should focus resources on material threats without abandoning minimum standards for lower-risk customers.
5. Technology requires validation, governance and human accountability.

10. Challenges, Ethics and Contemporary Developments

Regulatory fragmentation remains a major challenge. Different definitions of beneficial ownership, data transfer, sanctions exposure and bank secrecy can create contradictory duties. Regulatory arbitrage may occur when institutions move activities to jurisdictions or entities with weaker requirements. Supervisors increasingly respond through equivalence assessments, consolidated supervision and international information-sharing arrangements.

Another challenge is proportionality. Small banks may struggle to implement sophisticated systems, while large banks may produce excessive alerts that overwhelm investigators. A risk-based approach should be demonstrably connected to identified risks, documented, tested and periodically revised.

Ethically, compliance involves more than avoiding fines. Banks decide whether customers can access payment services, credit and international markets. Poorly designed de-risking can exclude entire regions, charities, migrants or legitimate small businesses. Conversely, weak controls can enable corruption, trafficking, terrorism or sanctions evasion. Fair treatment, consistent escalation and the possibility of human review are therefore important.

Climate risk, cyber risk and operational resilience are increasingly integrated into supervisory expectations. Climate-related transition and physical risks can affect credit quality, collateral values, insurance and market prices. Cyber incidents can create simultaneous liquidity, conduct, data-protection and operational risks. The growth of digital assets, instant payments, cloud outsourcing and artificial intelligence requires regulators and banks to assess third-party dependency, concentration, algorithmic risk and recovery capability.

Best-Practice Checklist

An internationally active bank should:

• maintain capital above regulatory minima with credible stress capacity;
• reconcile risk-based capital with leverage and liquidity measures;
• perform independent validation of risk models and regulatory calculations;
• maintain current recovery and resolution plans;
• identify beneficial owners and understand source of wealth and funds;
• apply ongoing, risk-sensitive monitoring rather than one-time KYC;
• screen sanctions across relevant customers, payments and counterparties;
• maintain accurate tax-residence and controlling-person records;
• protect personal data while fulfilling lawful reporting duties;
• document home-host supervisory responsibilities;
• test controls, investigate breaches and report material weaknesses promptly;
• ensure that senior management and the board receive clear, not merely voluminous, risk information.

Chapter Summary

International banking regulation addresses the special risks created by maturity transformation, leverage, information asymmetry, interconnectedness and cross-border activity. Basel standards use risk-based capital, liquidity and leverage measures to strengthen loss absorption and resilience. CET1, Tier 1 and total capital ratios compare qualifying capital with risk-weighted assets, while the LCR and NSFR address short-term and structural liquidity. The leverage ratio provides a non-risk-based backstop.

Prudential supervision combines off-site analysis, on-site inspection, thematic reviews, stress testing and governance assessment. Deposit insurance protects eligible depositors but must be supported by risk-sensitive premiums and effective supervision. Recovery planning prepares a bank to restore viability; resolution manages failure while seeking to preserve critical functions and limit public losses.

AML/CFT and KYC frameworks require customer identification, beneficial-ownership analysis, risk assessment, enhanced due diligence, monitoring, reporting and record keeping. Sanctions compliance is related but distinct, requiring screening and legally informed escalation. Tax transparency regimes such as CRS and FATCA require classification and reporting, while data-protection rules govern lawful, secure and proportionate processing and cross-border transfer of personal information.

The central professional lesson is that numerical compliance is necessary but insufficient. Effective international compliance combines sound capital and liquidity, strong governance, reliable data, proportionate controls, supervisory cooperation, ethical judgment and accountable technology.

Key Terms

AML: Anti-money laundering controls designed to prevent and detect the use of financial institutions for laundering criminal proceeds.

Bail-in: Resolution technique that writes down or converts eligible liabilities to recapitalize a failing institution.

Basel framework: International prudential standards developed by the Basel Committee for banking supervision.

Beneficial owner: Natural person who ultimately owns or controls a customer, entity or arrangement.

CET1 capital: Highest-quality bank capital, principally common equity and retained earnings after regulatory adjustments.

Conduct supervision: Oversight of fair customer treatment, market integrity and proper business behaviour.

CRS: Common Reporting Standard for automatic exchange of financial-account information for tax purposes.

Deposit insurance: Scheme that protects eligible depositors up to a specified limit when a bank fails.

FATCA: U.S. legislation requiring specified foreign financial-account reporting concerning U.S. taxpayers.

HQLA: High-quality liquid assets that can be converted into cash quickly with limited loss of value.

KYC: Know-your-customer processes for identifying, verifying and understanding customers.

LCR: Liquidity Coverage Ratio, comparing HQLA with stressed 30-day net cash outflows.

Leverage ratio: Tier 1 capital divided by a non-risk-based leverage exposure measure.

NSFR: Net Stable Funding Ratio, comparing available stable funding with required stable funding.

Pillar 1: Basel requirements for minimum quantitative capital and related standards.

Pillar 2: Supervisory review of risks, governance and capital adequacy beyond minimum rules.

Pillar 3: Public disclosure intended to support market discipline.

Resolution: Managed process for dealing with a failing bank while preserving critical functions.

Sanctions: Legal restrictions on dealings with designated persons, entities, countries, sectors or activities.

Systemic risk: Risk that distress in one institution or market disrupts the wider financial system.

Review Questions

Short Answer Questions

1. What is the difference between prudential regulation and supervision?
2. Why is CET1 considered higher-quality capital than many other instruments?
3. What is the purpose of the LCR?
4. Why must a bank identify beneficial owners?
5. How does deposit insurance create both stability and moral-hazard concerns?

Long Answer Questions

1. Explain the three Basel pillars and discuss how they complement one another.
2. Compare risk-based capital ratios with the leverage ratio, including the strengths and limitations of each.
3. Explain how recovery planning and resolution planning differ.
4. Describe the principal components of a risk-based AML/CFT programme.
5. Discuss the tension between cross-border information sharing, tax transparency and data protection.

Analytical / Application Questions

1. A bank has CET1 capital of $72 million and RWA of $600 million. Calculate its CET1 ratio and explain why the result alone cannot establish full regulatory compliance.
2. A bank reports $150 million of HQLA, $220 million of stressed outflows and $70 million of eligible inflows. Calculate its LCR and identify two assumptions that should be tested.
3. Design a compliance response for a digital bank whose customer base includes opaque companies, high-risk jurisdictions and rapidly moving international payments. Explain how prudential, AML/CFT, sanctions, tax and data-protection controls should interact.

Multiple Choice Questions with Answers

Question 1

Which Basel pillar primarily concerns minimum quantitative capital requirements?

A. Pillar 1

B. Pillar 2

C. Pillar 3

D. Deposit insurance

Correct Answer: A. Pillar 1

Question 2

A bank has CET1 capital of $50 million and RWA of $400 million. What is its CET1 ratio?

A. 8%

B. 12.5%

C. 20%

D. 80%

Correct Answer: B. 12.5%

Question 3

Which measure compares HQLA with stressed net cash outflows over approximately 30 days?

A. NSFR

B. Leverage ratio

C. LCR

D. Tier 1 ratio

Correct Answer: C. LCR

Question 4

What is the main purpose of the leverage ratio?

A. To measure customer satisfaction

B. To provide a non-risk-based constraint on balance-sheet expansion

C. To calculate tax residence

D. To identify beneficial owners

Correct Answer: B. To provide a non-risk-based constraint on balance-sheet expansion

Question 5

Which person should a bank seek to identify when determining beneficial ownership?

A. Only the company’s external auditor

B. The natural person who ultimately owns or controls the entity

C. Any employee who submits a payment

D. The bank’s relationship manager

Correct Answer: B. The natural person who ultimately owns or controls the entity

Question 6

Which statement best distinguishes sanctions compliance from AML compliance?

A. Sanctions apply only to cash transactions

B. AML concerns liquidity, while sanctions concern capital

C. Sanctions may prohibit dealings with designated persons or jurisdictions

D. There is no meaningful distinction

Correct Answer: C. Sanctions may prohibit dealings with designated persons or jurisdictions

Question 7

A bank has $180 million of HQLA, $250 million of stressed outflows and $100 million of eligible inflows. What is its LCR?

A. 72%

B. 100%

C. 120%

D. 180%

Correct Answer: C. 120%

Question 8

What is the principal purpose of a recovery plan?

A. To prepare actions that may restore a bank’s viability before failure

B. To guarantee all investor returns

C. To replace customer identification

D. To set international tax rates

Correct Answer: A. To prepare actions that may restore a bank’s viability before failure

Question 9

Which principle requires personal data to be collected for specified and legitimate purposes?

A. Purpose limitation

B. Bail-in

C. Risk weighting

D. Market discipline

Correct Answer: A. Purpose limitation

Question 10

Which resolution tool involves writing down or converting eligible liabilities into equity or another loss-absorbing form?

A. Sale of business

B. Bail-in

C. Deposit classification

D. Enhanced due diligence

Correct Answer: B. Bail-in