Enterprise Risk Management in Practice

A Practitioner's Course

Session Four

The Regulatory Framework: Basel and Capital Adequacy

How the Basel Accords evolved into their current form, and why divergent implementation across major jurisdictions matters for internationally active institutions

Disclaimer This course is provided for general information and education only. It is not legal advice. Legislation, rules and regulatory guidance change, sometimes quickly. Readers should confirm the current position and obtain jurisdiction-specific professional advice where needed. The views and experience expressed are Russel Fielding's own and do not represent any employer or client organisation.

Session Four: The Regulatory Framework: Basel and Capital Adequacy

Banking is one of the most heavily regulated industries in the world, and the Basel framework sits close to the centre of that regulation. Produced by the Basel Committee on Banking Supervision and hosted by the Bank for International Settlements, it sets the global baseline for how banks manage and capitalise their risks. Domestic banking regulation across major financial markets is built around that baseline, even where local implementation differs. This session traces how the framework reached its current form, because today's rules only make sense when read against the problems they were designed to correct.

From Basel I to Basel III

Basel I, introduced in 1988, established the first international minimum capital requirements for banks. Its focus was credit risk, and its rule was simple: banks had to hold capital equal to at least 8% of their risk-weighted assets. It was a significant step in international regulatory coordination, but its simplicity meant it did not capture the full range of risks banks actually faced.

Basel II, introduced in 2004, expanded the framework around three pillars. Pillar 1 set minimum capital requirements for credit, market and operational risk, and introduced more sophisticated ways to measure credit risk, including internal ratings-based models for banks capable of using them. Pillar 2 introduced supervisory review. Banks had to assess their own capital adequacy, and supervisors had to test those assessments and require more capital where needed. Pillar 3 added market discipline through mandatory disclosure, on the basis that better-informed markets can provide another check on excessive risk-taking.

Basel III, introduced in response to the 2007-09 financial crisis, significantly strengthened capital and liquidity requirements. It introduced higher and better quality capital requirements, a leverage ratio as a backstop to risk-weighted measures, and two new liquidity requirements: the Liquidity Coverage Ratio and the Net Stable Funding Ratio. It also introduced macroprudential elements, including the countercyclical capital buffer, designed to require banks to build capital during periods of strong credit growth that can be released during a downturn.

The final package: Basel 3.1

The final Basel III reforms, often called Basel IV in parts of the EU and Basel 3.1 in the UK, are the most significant overhaul of the capital framework since Basel II. Their main purpose is to reduce excessive variability in how banks calculate risk-weighted assets. Before the reforms, some banks could report strong capital ratios that relied too heavily on optimistic internal model assumptions.

The centrepiece is the output floor. Banks using internal models to calculate risk-weighted assets must still hold capital based on the higher of their internal model result and 72.5% of the standardised approach result. Once fully phased in, this stops internal modelling from producing a capital requirement materially below the standardised calculation. The package also revises the standardised approaches for credit, market and operational risk, and limits where internal models can be used.

Why implementation timelines diverge, and why that matters

Implementation of the final Basel package has not moved in step across jurisdictions. For institutions operating across borders, that divergence is a risk management issue in its own right.

Most of the EU's final Basel III package has applied since January 2025. The market risk element, the Fundamental Review of the Trading Book, has been deferred and is subject to targeted transitional adjustments to address international level-playing-field concerns. The UK has deferred its own implementation of Basel 3.1 to 1 January 2027, with the market risk internal model approach due to follow a year later. In the United States, the equivalent reforms, generally referred to as the Basel III endgame, remain under development, with the eventual approach and timing still unsettled.

For an internationally active bank, this is more than an administrative inconvenience. Different capital calculations across jurisdictions can influence where business is booked, complicate group capital planning, and create competitive asymmetries between banks undertaking broadly similar activity. Cross-border institutions need to track implementation status jurisdiction by jurisdiction, rather than assume a single global effective date.

Other capital and liquidity requirements worth knowing

Beyond the headline Basel package, banks operate under related requirements that connect directly to ERM. Stress testing, covered in more depth in Session Seven, requires banks to assess resilience under adverse scenarios and increasingly drives capital planning decisions. Recovery and resolution planning requires banks to maintain credible plans for recovering from serious financial stress and for being resolved without a taxpayer bailout, reshaping how large banks structure themselves. Operational resilience frameworks require banks to identify important business services, set tolerances for disruption, and demonstrate they can remain within those tolerances under stress. That takes the discipline well beyond traditional business continuity planning.

Key takeaways from Session Four The Basel framework evolved in direct response to crises. Basel I addressed the absence of any international capital standard. Basel II added risk sophistication and supervisory review. Basel III responded directly to 2007-09. The output floor is the centrepiece of the final package. Internal models cannot produce a capital requirement below 72.5% of the standardised approach once fully phased in. Implementation timelines diverge across major jurisdictions. The UK and EU positions now differ in important respects, particularly for market risk, and the US position remains unsettled. Divergence is a risk management problem, not just an administrative one. It affects where business is booked, how group capital is planned, and the competitive position of banks operating under different rules. Basel sits alongside related requirements that matter just as much day to day. Stress testing, recovery and resolution planning, and operational resilience frameworks all connect capital adequacy to operational reality.

Coming up in Session Five

Session Five covers risk identification and assessment: the techniques banks use to surface risks before they materialise, and why the risks that cause the most damage are usually the ones that were never adequately anticipated.

Further reading and resources

Basel Committee on Banking Supervision, Basel III: Finalising post-crisis reforms. The Basel Committee's own text setting out the final package, including the output floor. Available at bis.org.

PRA Policy Statement PS1/26. The UK's final rules implementing Basel 3.1, confirming the 1 January 2027 effective date and the deferred market risk internal model approach. Available at bankofengland.co.uk.

European Commission material on the deferred application of market risk requirements. The EU has applied most of the final Basel III standards since 1 January 2025, while the market risk framework has been deferred and adjusted to address international level-playing-field concerns. Available at finance.ec.europa.eu and eur-lex.europa.eu.