Banking Regulation and Prudential Supervision

Introduction

Banks perform maturity transformation: they accept liabilities that may be withdrawn relatively quickly and invest in loans and securities that are less liquid and often longer term. This function supports economic growth, but it also creates vulnerability. Poor underwriting, fraud, excessive leverage, liquidity shortages, or loss of public confidence can cause an individual bank to fail and may transmit losses to depositors, payment systems, other banks, and the wider economy.

Banking regulation is therefore not merely administrative control. It is a framework for protecting depositors, maintaining financial stability, supporting confidence in money and payments, and ensuring that banks operate safely and fairly. Prudential supervision is the continuing process through which authorities assess whether banks identify, measure, manage, and control risks.

Regulation differs across jurisdictions, but modern frameworks commonly reflect the Basel standards, national banking laws, deposit-insurance arrangements, accounting standards, anti-money-laundering rules, and resolution legislation.

Learning Objectives

After studying this chapter, students should be able to:

1. Explain why banks require prudential regulation and supervision.
2. Describe licensing, corporate governance, and supervisory approaches.
3. Calculate and interpret risk-weighted capital ratios and leverage ratios.
4. Explain asset classification, expected credit losses, and provisioning.
5. Distinguish liquidity risk from solvency risk and describe Basel liquidity standards.
6. Explain regulatory reporting, compliance obligations, recovery, and resolution.
7. Evaluate a bank’s prudential position in an applied case.

1. Why Banks Are Regulated

1.1 Public confidence and financial stability

A bank’s business depends partly on confidence. Depositors generally cannot observe the quality of every loan or investment made by the bank. If depositors believe that others will withdraw funds, a bank run may occur even when the bank owns valuable but illiquid assets. Regulation reduces this information asymmetry through minimum standards, disclosure, supervision, and intervention.

Bank failures may generate systemic risk through:

• interbank exposures and payment-system links;
• common exposures to property, sovereign debt, or foreign currency;
• loss of confidence in similar institutions;
• interruption of credit to households and firms; and
• fiscal costs associated with deposit protection or public support.

1.2 Market failure and externalities

A bank may take risks whose benefits accrue to shareholders and managers while some costs are borne by depositors, taxpayers, or other institutions. Deposit insurance can intensify moral hazard because insured depositors have less incentive to monitor risk. Prudential rules attempt to align private incentives with social stability.

1.3 Main regulatory objectives

The principal objectives are:

Prudential regulation is not intended to eliminate all risk. Credit risk is necessary for banking. Its purpose is to ensure that risks are understood, appropriately priced, supported by capital and liquidity, and managed within a credible governance framework.

2. Licensing and the Regulatory Perimeter

2.1 Bank licensing

A banking licence normally permits an institution to accept deposits from the public and conduct specified banking activities. Licensing authorities commonly assess:

• the proposed business model and financial projections;
• minimum initial capital;
• ownership transparency and beneficial ownership;
• competence and integrity of directors and senior managers;
• risk-management, internal-control, and compliance systems;
• information technology and cybersecurity arrangements;
• funding and liquidity plans; and
• recovery, exit, and resolution feasibility.

The “fit and proper” test evaluates whether directors and senior officers possess appropriate competence, experience, integrity, and financial soundness. A licence may be refused where ownership is opaque, governance is weak, or the proposed model depends on unrealistic assumptions.

2.2 Regulatory perimeter

The regulatory perimeter identifies which entities and activities are supervised. Commercial banks are normally inside the perimeter, while some finance companies, payment firms, digital lenders, fintech platforms, and shadow-banking entities may be subject to different regimes. Regulatory arbitrage occurs when institutions move activities outside the perimeter to avoid equivalent requirements. Effective authorities therefore monitor risks across the entire financial system rather than focusing only on formally licensed banks.

2.3 Supervisory enforcement

Authorities may issue remedial directions, impose additional capital requirements, restrict dividends or new business, replace management, impose fines, or revoke a licence. Enforcement should be lawful, proportionate, timely, and consistent. Delayed intervention can allow losses to grow and may encourage “evergreening,” in which a troubled loan is repeatedly extended to avoid recognition of impairment.

3. Supervisory Approaches

3.1 Rules-based and principles-based supervision

Rules-based supervision specifies measurable requirements, such as a minimum capital ratio or a large-exposure limit. It promotes comparability but may encourage compliance focused narrowly on thresholds. Principles-based supervision requires institutions to achieve outcomes such as effective risk governance and adequate internal controls. It allows flexibility but requires skilled supervisors and sound institutional judgment.

Modern systems combine both approaches.

3.2 On-site and off-site supervision

On-site supervision involves examining records, controls, loan files, governance processes, models, and information systems at the institution. Off-site supervision analyses regulatory returns, financial statements, risk indicators, stress results, and market information submitted regularly to the authority.

3.3 Risk-based supervision

Risk-based supervision allocates supervisory resources according to the significance and risk profile of each institution. A simplified supervisory cycle is:

1. identify material risks;
2. assess inherent risk and the quality of controls;
3. determine residual risk;
4. evaluate capital, liquidity, governance, and recovery capacity;
5. communicate findings and required actions; and
6. monitor remediation and escalate where necessary.

A bank with rapid growth, concentrated lending, weak controls, or dependence on unstable wholesale funding should receive more intensive supervision than a low-risk institution with strong governance.

3.4 The supervisory review process

The Basel framework commonly distinguishes three reinforcing pillars:

• Pillar 1: minimum capital requirements for credit, market, and operational risk;
• Pillar 2: supervisory review of risks not fully captured by standard formulas and assessment of internal capital adequacy; and
• Pillar 3: market discipline through disclosure.

The framework does not mean that a bank is safe merely because it satisfies Pillar 1. Supervisors must consider concentration risk, interest-rate risk in the banking book, model risk, strategic risk, climate-related financial risk, and governance weaknesses.

4. Capital and Solvency

4.1 What capital does

Bank capital is a loss-absorbing resource funded mainly by owners and retained earnings. It protects depositors by absorbing losses before deposit liabilities are affected. Capital also supports continued lending and provides confidence to counterparties.

Capital is not the same as cash. A bank may have substantial capital but insufficient liquidity, or liquid assets but inadequate capital after suffering credit losses.

4.2 Regulatory capital structure

Basel standards distinguish:

• Common Equity Tier 1 (CET1): common shares, disclosed reserves, and retained earnings, subject to regulatory deductions;
• Additional Tier 1 (AT1): qualifying perpetual instruments capable of absorbing losses; and
• Tier 2: qualifying subordinated instruments and certain general provisions, subject to limits.

The highest-quality capital is CET1 because it is permanent, fully loss-absorbing, and does not create a fixed obligation to pay investors.

4.3 Risk-weighted assets and capital ratios

Risk-weighted assets (RWA) adjust exposures according to regulatory risk weights. A simplified calculation is:

Here, Exposure_i is the amount of the i-th exposure and Risk Weight_i is its applicable regulatory weight, expressed as a decimal. This simplified formula applies when exposures are treated under a standardised approach and ignores adjustments such as eligible collateral, credit-conversion factors, and regulatory deductions.

The principal ratios are:

These ratios are dimensionless percentages because capital and RWA are measured in the same monetary units. Their interpretation depends on the applicable jurisdiction, Basel implementation, buffers, and supervisory adjustments.

Worked Example: Capital adequacy

Assume a bank has the following exposures under a simplified standardised approach:

The bank has CET1 of CU 10 million, AT1 of CU 2 million, and Tier 2 capital of CU 3 million.

The bank’s ratios must be compared with statutory minima and applicable conservation, countercyclical, systemic, or supervisory buffers. Meeting a minimum does not prove that the bank is well managed; risk weights may not capture every risk and capital can deteriorate rapidly when losses arise.

4.4 Capital buffers

Capital buffers are held above minimum requirements so that banks can absorb stress while continuing essential services. A conservation buffer is intended for normal resilience. A countercyclical buffer may be increased when system-wide credit growth creates vulnerability and reduced during stress. Additional buffers may apply to systemically important institutions.

If buffers are breached, restrictions may apply to dividends, share buybacks, and discretionary bonuses. The purpose is to conserve capital rather than immediately close the institution.

4.5 Leverage ratio

Risk-weighted measures can understate risk if risk weights are too low or models are optimistic. The leverage ratio provides a non-risk-weighted backstop:

The exposure measure generally includes on-balance-sheet exposures and specified off-balance-sheet items, subject to regulatory rules. A high leverage ratio indicates more Tier 1 capital relative to broad exposures, but the ratio does not distinguish between safe and risky assets. It therefore complements rather than replaces risk-based capital ratios.

5. Asset Quality, Classification, and Provisioning

5.1 Credit risk and asset classification

Credit risk is the possibility that a borrower or counterparty will fail to meet contractual obligations. Banks classify exposures according to repayment performance and credit quality. Common categories include performing, special mention, substandard, doubtful, and loss, although terminology differs by jurisdiction.

Indicators of deterioration include:

• overdue principal or interest;
• declining borrower cash flow;
• covenant breaches;
• repeated restructuring;
• adverse sector or collateral conditions; and
• evidence that repayment depends on selling collateral rather than normal operating cash flow.

Classification should reflect economic substance, not merely the existence of collateral or formal rescheduling.

5.2 Non-performing exposures

A non-performing exposure generally exists when the borrower is unlikely to pay without realisation of collateral or when an exposure is materially past due under applicable rules. Non-performing loans reduce income quality, consume management resources, and may require provisions that reduce capital.

5.3 Provisioning and expected credit loss

Under an expected-credit-loss framework, a bank recognises expected losses before a loan has definitively defaulted. A conceptual probability-weighted model is:

where PD_t is probability of default in period t, LGD_t is loss given default, EAD_t is exposure at default, and DF_t is the discount factor for period t. T is the relevant forecast horizon. The terms must be estimated consistently, include reasonable forward-looking information, and comply with the applicable accounting standard. This is a conceptual representation; actual models may incorporate marginal default probabilities, amortisation, recoveries, credit conversion factors, and scenario weights.

For example, if a one-year exposure has EAD of CU 1,000, PD of 4%, LGD of 40%, and a discount factor of 0.95:

The calculation assumes the probability, loss severity, exposure, and discount factor are applicable to the same one-year horizon. It is not a universal provisioning rate; regulatory rules and accounting requirements must be followed.

5.4 Restructuring and recovery

Restructuring may provide a viable borrower with temporary relief, but it should not conceal impairment. Recovery tools include negotiated repayment, collateral realisation, legal action, sale of distressed assets, and specialised workout units. Ethical recovery requires lawful notice, accurate records, fair treatment, and protection of customer information.

6. Liquidity and Funding Regulation

6.1 Liquidity risk

Liquidity risk is the risk that a bank cannot meet obligations when due without unacceptable losses. It differs from solvency risk: a solvent bank may fail because its assets cannot be converted into cash quickly enough.

Liquidity management considers deposit concentration, maturity mismatches, collateral availability, wholesale funding, intraday payment needs, and contingent obligations.

6.2 Liquidity Coverage Ratio

The Basel Liquidity Coverage Ratio (LCR) is designed to ensure that a bank holds sufficient high-quality liquid assets (HQLA) to cover net cash outflows over a 30-calendar-day stress scenario:

HQLA are assets that can be converted into cash quickly with limited loss under stress. Net cash outflows are stressed expected outflows minus eligible inflows, subject to regulatory caps and prescribed run-off and inflow rates. The ratio’s commonly stated minimum is 100% under the fully implemented Basel standard, but local rules and transitional arrangements must be checked.

6.3 Net Stable Funding Ratio

The Net Stable Funding Ratio (NSFR) promotes more stable funding over a longer horizon:

Available stable funding includes sources such as stable deposits and longer-term capital. Required stable funding reflects the liquidity characteristics of assets and off-balance-sheet commitments. The commonly stated Basel minimum is 100%.

6.4 Liquidity stress testing and contingency planning

A bank should model institution-specific, market-wide, and combined stress scenarios. A contingency funding plan should identify early-warning indicators, available collateral, emergency funding sources, communication responsibilities, and escalation triggers. Central-bank lender-of-last-resort facilities may support liquidity, but normally do not rescue an institution that is fundamentally insolvent.

7. Governance, Compliance, and Regulatory Reporting

The board is responsible for approving risk appetite, overseeing management, and ensuring that the institution has effective controls. Senior management implements strategy and maintains risk systems. Independent risk, compliance, and internal-audit functions should have sufficient authority and access to the board.

Important compliance obligations include:

• anti-money-laundering and counter-terrorist-financing controls;
• customer identification and beneficial-owner verification;
• sanctions screening and suspicious-transaction reporting;
• consumer protection and responsible lending;
• related-party and large-exposure limits;
• data protection and cybersecurity;
• market-conduct and conflicts-of-interest controls; and
• accurate financial and prudential reporting.

Regulatory reports may include capital returns, liquidity returns, asset-quality schedules, large exposures, connected lending, foreign-exchange positions, related parties, operational incidents, and stress-test results. Reports must be complete, timely, traceable to source systems, and subject to controls and independent review. Deliberately misreporting a ratio is a serious governance and legal failure.

Technology can improve supervision through automated data validation, continuous monitoring, anomaly detection, and supervisory dashboards. However, artificial intelligence introduces model risk, data bias, explainability problems, privacy concerns, and cybersecurity exposure. Human accountability, model validation, access controls, and audit trails remain essential.

8. Recovery and Resolution

8.1 Recovery planning

A recovery plan describes how a bank would restore financial strength after severe stress while remaining a going concern. Options may include raising capital, selling assets, reducing lending, obtaining secured funding, changing pricing, or restructuring liabilities. Recovery indicators should be linked to credible actions, decision rights, and realistic execution times.

8.2 Resolution

Resolution applies when a bank is failing or likely to fail and ordinary recovery is no longer sufficient. Its objectives are to preserve critical economic functions, protect insured depositors, limit taxpayer exposure, and reduce contagion.

Possible tools include:

• sale of business to another institution;
• transfer of deposits and selected assets to a bridge bank;
• separation and sale of viable operations;
• statutory bail-in of eligible liabilities; and
• orderly liquidation where continuity is not essential.

Resolution planning must consider operational continuity, access to payment systems, legal structure, data, valuation, creditor hierarchy, and cross-border cooperation. Shareholders and appropriately ranked creditors should generally bear losses before public funds are used, subject to applicable law.

Applied Case: Meridian Commercial Bank (Illustrative)

Background

Meridian Commercial Bank expanded its property and unsecured-consumer portfolios rapidly. It reports CU 120 million of RWA, CET1 capital of CU 9 million, Tier 1 capital of CU 11 million, and total capital of CU 14 million. Its 30-day HQLA are CU 18 million and stressed net cash outflows are CU 20 million. Ten percent of its loan book is classified as non-performing, while management has repeatedly restructured delinquent loans.

Problem

The bank appears profitable, but its risk indicators show possible capital and liquidity weakness. Its board also receives delayed reports from the risk function, and internal audit has identified incomplete borrower information.

Analysis

The LCR is below the commonly stated 100% Basel minimum. Capital compliance cannot be determined without the jurisdiction’s minimums and buffers, but the CET1 position is evidently narrow. If additional impairment recognition reduces CET1 by CU 2 million while RWA remain unchanged:

This demonstrates how weak asset quality can rapidly affect capital adequacy.

Supervisory approach and solution

The supervisor should intensify off-site monitoring and conduct an on-site asset-quality review. Meridian should stop concealing deterioration through repeated restructuring, validate borrower data, update expected-credit-loss estimates, and present a credible capital restoration plan. It should also increase HQLA, diversify funding, establish liquidity triggers, and test its contingency funding plan. The board should strengthen the independence of risk management and internal audit.

If recovery measures fail, the authority should prepare resolution options while maintaining depositor and payment-system continuity.

Outcome and learning points

The case illustrates that profitability is not equivalent to safety. A bank may report accounting profit while facing inadequate liquidity, understated credit losses, weak governance, and insufficient capital buffers. Prudential supervision must therefore integrate quantitative ratios with qualitative judgment and forward-looking stress analysis.

Challenges and Limitations of Prudential Regulation

First, regulation can create procyclicality. When the economy weakens, defaults rise, provisions increase, collateral values fall, and capital ratios decline, potentially causing banks to restrict lending precisely when credit is needed. Second, complex rules may encourage regulatory arbitrage. Third, models depend on historical data that may not represent unprecedented events. Fourth, identical ratios may conceal different risk concentrations. Fifth, excessive compliance cost can reduce competition and exclude smaller institutions, although proportionate supervision can mitigate this problem.

Regulators must also balance safety with innovation. Digital banks, open banking, crypto-related activities, cloud outsourcing, and artificial intelligence create benefits but introduce operational, cyber, conduct, and concentration risks. The appropriate response is not to prohibit innovation automatically, but to apply risk-based controls, accountability, resilience testing, and transparent customer protection.

Best-Practice Principles

A sound bank should:

1. maintain capital above minimum requirements with a credible buffer;
2. use independent, forward-looking credit assessment;
3. recognise problem assets and expected losses promptly;
4. diversify borrowers, sectors, funding sources, and collateral;
5. maintain robust liquidity stress tests and contingency funding plans;
6. ensure board-level risk accountability;
7. protect the independence of compliance, risk, and internal audit;
8. maintain accurate, reconciled, and timely regulatory data;
9. test recovery and resolution options; and
10. treat customers fairly and protect confidential information.

Chapter Summary

Banking regulation exists because banks are highly leveraged, perform maturity transformation, and create risks that can affect depositors and the wider economy. Licensing establishes whether an institution has adequate capital, competent leadership, transparent ownership, and credible systems. Prudential supervision combines rules-based requirements with risk-based judgment through on-site examinations, off-site analysis, supervisory review, and disclosure.

Capital ratios compare loss-absorbing capital with risk-weighted assets, while the leverage ratio provides a non-risk-weighted backstop. Asset classification and expected-credit-loss provisioning promote timely recognition of credit deterioration. Liquidity standards, especially the LCR and NSFR, address short-term survival and stable funding. Governance, AML/CFT, consumer protection, cybersecurity, and accurate regulatory reporting are integral to safe banking.

Recovery planning aims to restore a troubled bank, whereas resolution manages failure while preserving critical functions and limiting systemic and taxpayer costs. No single ratio proves that a bank is safe. Effective prudential assessment combines quantitative measures, stress testing, asset-quality review, governance analysis, and professional judgment.

Key Terms

Asset classification: Categorisation of exposures according to credit quality and repayment performance.

Bail-in: Resolution tool that imposes losses or conversion on eligible creditors.

Capital adequacy: The extent to which a bank’s capital supports its risk exposures.

CET1 capital: Highest-quality common equity capital available to absorb losses.

Countercyclical buffer: Additional capital requirement that may vary with system-wide credit conditions.

Expected credit loss: Forward-looking estimate of credit losses over a specified horizon.

Fit and proper: Standard assessing the competence, integrity, and suitability of owners and managers.

HQLA: High-quality liquid assets that can be converted into cash quickly under stress.

Leverage ratio: Tier 1 capital divided by a broad exposure measure.

Liquidity risk: Risk of failing to meet obligations when due.

LCR: Ratio of HQLA to stressed 30-day net cash outflows.

Non-performing exposure: Exposure where repayment is unlikely or materially overdue under applicable rules.

Pillar 1: Basel minimum capital requirements.

Pillar 2: Supervisory review of risks and capital adequacy.

Pillar 3: Market discipline through disclosure.

Prudential supervision: Ongoing assessment of a bank’s safety, soundness, and risk management.

Resolution: Structured process for dealing with a failing bank while preserving critical functions.

Risk-weighted assets: Exposures adjusted using regulatory risk weights.

NSFR: Ratio of available stable funding to required stable funding.

Review Questions

Short Answer Questions

1. Why can the failure of one bank create systemic risk?
2. Distinguish solvency risk from liquidity risk.
3. What is the purpose of the leverage ratio?
4. Identify three matters considered during bank licensing.
5. What is the difference between recovery and resolution?

Long Answer Questions

1. Explain the rationale for prudential regulation, including market failure and moral hazard.
2. Describe the three Basel supervisory pillars and their relationship.
3. Explain how asset classification and expected-credit-loss provisioning affect bank capital.
4. Discuss the role of governance, compliance, and regulatory reporting in safe banking.
5. Compare the LCR, NSFR, capital adequacy ratio, and leverage ratio.

Analytical / Application Questions

1. A bank has RWA of CU 200 million and CET1 capital of CU 14 million. Calculate its CET1 ratio and explain what additional information is needed before concluding that it complies with regulation.
2. A bank’s HQLA are CU 30 million and its stressed net cash outflows are CU 40 million. Calculate its LCR and recommend two management actions.
3. A bank reports low non-performing loans but has restructured many overdue accounts. Analyse the governance and supervisory concerns and propose an examination plan.

Multiple Choice Questions with Answers

Question 1

What is the primary purpose of bank capital?

A. To eliminate all credit risk

B. To absorb losses and protect depositors

C. To guarantee shareholder dividends

D. To replace liquidity management

Correct Answer: B. To absorb losses and protect depositors

Question 2

A bank has CET1 capital of CU 8 million and RWA of CU 80 million. Its CET1 ratio is:

A. 1%

B. 8%

C. 10%

D. 16%

Correct Answer: C. 10%

Question 3

Which Basel pillar concerns supervisory review?

A. Pillar 1

B. Pillar 2

C. Pillar 3

D. The leverage pillar

Correct Answer: B. Pillar 2

Question 4

Under the simplified formula, RWA are calculated by:

A. Exposure ÷ risk weight

B. Exposure × risk weight

C. Capital × exposure

D. Liquidity ÷ capital

Correct Answer: B. Exposure × risk weight

Question 5

The LCR primarily addresses a bank’s ability to:

A. Meet stressed short-term cash outflows

B. Maximise long-term profitability

C. Eliminate market risk

D. Increase dividend payments

Correct Answer: A. Meet stressed short-term cash outflows

Question 6

If HQLA are CU 25 million and 30-day net cash outflows are CU 20 million, the LCR is:

A. 80%

B. 100%

C. 125%

D. 145%

Correct Answer: C. 125%

Question 7

Which item is generally the highest-quality regulatory capital?

A. Common Equity Tier 1

B. Short-term wholesale funding

C. Trade payable

D. Unsecured deposit

Correct Answer: A. Common Equity Tier 1

Question 8

Expected credit loss estimation commonly incorporates:

A. PD, LGD, and EAD

B. Only the bank’s share price

C. Only cash balances

D. Only tax expense

Correct Answer: A. PD, LGD, and EAD

Question 9

Risk-based supervision means that supervisors:

A. Apply identical intensity to every institution

B. Allocate attention according to material risks

C. Ignore qualitative governance issues

D. Inspect only profitable banks

Correct Answer: B. Allocate attention according to material risks

Question 10

The main objective of resolution is to:

A. Guarantee returns to shareholders

B. Preserve critical functions and limit disorderly failure

C. Prevent all bank competition

D. Replace every bank manager automatically

Correct Answer: B. Preserve critical functions and limit disorderly failure