What it means
Banks must hold a certain amount of capital as a safety buffer to absorb potential losses from loans that go bad. Under the standard approach, regulators dictate the exact percentage of capital the bank must hold for every type of loan.
However, the Internal Ratings Based Approach allows sophisticated banks to use their own statistical models to estimate the risk of their specific customers. This matters because risk varies significantly between borrowers.
A well-established manufacturing business with steady cash flow poses a very different risk profile than a volatile startup. By using their internal data on customer defaults, banks can tailor their capital reserves more accurately.
If a bank proves its models are reliable, it can often hold less capital for safe borrowers, freeing up funds to issue more loans. In practice, this approach comes in two forms.
The foundation version allows banks to estimate the likelihood that a borrower will default, while regulators provide the other risk variables. The advanced version allows banks to estimate all key risk components themselves, including potential losses if a default actually happens.
Implementing this system requires approval from financial regulators, extensive historical data, and rigorous testing. Banks that qualify often gain a competitive advantage because their capital requirements align more closely with actual risk, lowering their overall cost of doing business.
Imagine car insurance. A standard pricing model charges every driver of a certain age the exact same rate.
An internal ratings approach is like a telematics box fitted in your car, tracking your actual driving habits to set a personalized price based on your real risk.
In practice
Real-world examples
Example 1
A commercial bank uses its internal models to assess a large retail chain seeking a $5 million loan. The retail chain has a strong payment history, so the bank's model produces a low probability of default and a modest capital reserve. The bank documents the model inputs so that regulators can review the result.
Example 2
A regional bank evaluates a local manufacturing firm applying for a credit facility. It uses its own proprietary default probability metrics instead of a generic regulatory bracket to set loan terms. Because the firm has steady cash flow and valuable machinery as security, the bank offers a lower interest rate.
Example 3
A specialised lender assesses a commercial property portfolio worth $20 million. It applies advanced internal risk metrics, including its own estimates of losses after default, to calculate precise capital cushions rather than relying on standard rules. The result shows that loans on well-let offices need less capital than loans on speculative developments.
Think of it
Imagine car insurance. A standard pricing model charges every driver of a certain age the exact same rate. An internal ratings approach is like a telematics box fitted in your car, tracking your actual driving habits to set a personalized price based on your real risk.
Formula
Calculation
Expected Loss = Probability of Default (PD) x Loss Given Default (LGD) x Exposure at Default (EAD)
For example, if a small business loan has a 2% chance of default in the next year (PD = 0.02), the bank expects to lose 40% of the loan amount if the borrower does default (LGD = 0.40), and the outstanding loan balance is $100,000 (EAD = $100,000), the expected loss is 0.02 x 0.40 x 100,000 = $800.
Portfolio example: a bank holds three loans. Loan A is $200,000 with PD 1% and LGD 45%, giving 200,000 x 0.01 x 0.45 = $900. Loan B is $500,000 with PD 3% and LGD 40%, giving 500,000 x 0.03 x 0.40 = $6,000. Loan C is $300,000 with PD 5% and LGD 50%, giving 300,000 x 0.05 x 0.50 = $7,500. The total expected loss is 900 + 6,000 + 7,500 = $14,400 on $1,000,000 of lending, or 1.44%. Regulatory capital under the approach also covers unexpected losses on top of this expected figure.Case study
Seen in the real world
This is a fictional, illustrative scenario. Meridian Bank, a mid-sized lender, wanted to improve how it used its capital reserves for a growing portfolio of medium-sized enterprise loans. Previously, the bank used standard regulatory risk weights, which forced it to hold a blanket 8% capital buffer against all business loans, regardless of customer credit history. Meridian applied for regulatory approval to use the Internal Ratings Based Approach.
Over two years, it upgraded its data collection, tracking five years of historical default rates and recovery values across four hundred business borrowers. Once approved, Meridian analysed its portfolio and found that its core business customers were significantly safer than the broad regulatory average suggested. For its safest tier of manufacturing clients, the internal model indicated a required capital buffer of only 4%. Across $300 million of loans to that tier, the difference of four percentage points freed up 300,000,000 x 0.04 = $12 million of regulatory capital.
Meridian redeployed this capital to issue new loans to local enterprises. At the original 8% buffer, $12 million of capital supports about $150 million of lending, and at an assumed net interest margin of 1% that adds roughly $1.5 million of annual income. The bank did all this while maintaining a safe, regulator-approved risk profile, and it kept investing in its data quality because the approval depends on it.
Watch out
Common mistakes
- Assuming any bank can use this method without strict regulatory approval and intense oversight.
- Believing that internal models always result in lower capital requirements and less safety.
- Failing to maintain high quality historical data, which invalidates the statistical risk models.
Questions
People also ask
Why would a bank want to use this approach?
It allows banks to align their capital reserves with actual risk. Safe borrowers require less capital, which can lower borrowing costs and free up funds for new loans.
Is this approach available to all lenders?
No. It is primarily used by large, sophisticated banks because it requires years of historical loss data, complex computer models, and formal regulatory approval.
What is the difference between foundation and advanced versions?
In the foundation version, the bank estimates the probability of default, while regulators supply other risk factors. In the advanced version, the bank estimates all risk factors itself.