Personal Website of R.Kannan |
Home | Table of Contents | Feedback |
|
RBI has introduced Risk-based Supervision as a system of random and more frequent inspections based on the risk profile of individual banks, replacing the regular annual inspection. The proposal to "Move towards Risk Based Supervision of Banks" was first mentioned by the Governor of RBI Dr.Bimal Jalan, during May 2000, while delivering the statement on 'Monetary and Credit Policy for the year 2000-2001'. Vide paragrah 76 of the report, the Governor spelt out the policy of RBS in the following words.
Accordingly, PricewaterhouseCoopers (PwC), a firm of consultants based in London, were engaged to undertake a review of the current regulatory and supervisory regime and prepare the blue print for the transition to a more sophisticated system of RBS, a risk based regulation and supervision incorporating international best practices. A discussion paper on the 'Move towards Risk-based Supervision of banks' has been prepared summarizing the recommendations of the consultants and placed on the Websitge of RBI on 13.08.2001. It was also forwarded to all commercial banks under cover of RBI circular No.DBS.CO/ RBS/58/36.01.002/2001-02 dated 13th August 2001. It may be observed from the discussion paper that the Reserve Bank would focus its supervisory attention on the banks in accordance with the risk each bank poses to itself as well as to the system. The risk profile of each bank would determine the supervisory programme comprising off-site surveillance, targeted on-site inspections, structured meetings with banks, commissioned external audits, specific supervisory directions and new policy notices in conjunction with close monitoring through a Monitorable Action Plan (MAP) followed by enforcement action, as warranted. The discussion paper further pointed out that The introduction of RBS would require the banks to reorient their organisational set up towards RBS and put in place an efficient risk management architecture, adopt risk focused internal audit, strengthen the management information system, and set up compliance units . The banks would also be required to address HRD issues like manpower planning, selection and deployment of staff and their training in risk management and risk based audit. It is evident that change management is a key element in RBS and the banks should have clearly defined standards of corporate governance, well documented policies and efficient practices in place so as to clearly demarcate the lines of responsibility and accountability so that they align themselves to meet the requirements of RBS. The international banking scene has in recent years witnessed strong trends towards globalization and consolidation of the financial system. Stability of the financial system has become the central challenge to bank regulators and supervisors throughout the world. The multi-lateral initiatives leading to evolution of international standards and codes and evaluation of adherence thereto represent resolute attempts to address this challenge. The Indian banking scene has witnessed progressive deregulation, institution of prudential norm and an emulation of international supervisory best practices. The supervisory processes have also concomitantly evolved and have acquired a certain level of robustness and sophistication with the adoption of the CAMELS1/CALCS2 approach to supervisory risk assessments and rating. The tightening of exposure and prudential norms and enhancement in disclosure standards in phases over a period of time have more closely aligned the Indian banking system to international best practices. Reserve Bank of India (RBI) has been constantly endeavouring to enhance the sophistication and efficiency levels of its supervisory processes. Considering the growing diversities and complexities of banking business, the spate of product innovation with complex risk phenomena, the contagion effects that a crisis can spread and the consequential pressures on supervisory resources, the RBS approach, the foundation of which would be based on the CAMELS based approach, would be more appropriate. By optimizing the synergies from the different activities, including the regulatory and supervisory functions, the overall efficiency and effectiveness of the supervisory process can be substantially enhanced. The RBS will be a regime in which RBI's resources will be directed towards the areas of greater risk to its supervisory objectives. There are two legs to implementing effective risk-based processes: first, explicit supervisory objectives must be set and secondly, the risks posed to these objectives by the activities of commercial banks must be assessed and addressed. The current review represents further stage in the overall development of RBI's approach to regulating and supervising banks in the light of the earlier Padmanabhan Committee and Narasimham Committee reports. Based on the work of the international consultants, RBI intends to move towards a RBS system in stages. The current supervisory process adopted by the Department of Banking Supervision (DBS) is applied uniformly to all supervised institutions. Though scrutiny of systems and procedures prevailing in supervised institution is an integral part of on-site inspection, there is scope for more focus on the risk profile of the institutions. The current approach is largely on-site inspection driven supplemented by off-site monitoring and the supervisory follow-up commences with the detailed findings of annual financial inspection. The process is based on CAMELS/CALCS approach where capital adequacy, asset quality, management aspects, earnings, liquidity and systems and control are examined keeping in view the requirements of Section 22 of the Banking Regulation Act, 1949. The on-site inspections are conducted, to a large extent with reference to the audited balance sheet dates. The off-site and market intelligence play a supplemental role. While in several external jurisdictions, the supervisory process extensively leverages on the work done by others, such as the internal and external auditors, the use made of these resources in India is rather limited. No legal framework exists for the external auditors to report to the supervisor their adverse findings on issues having supervisory implications. The RBS approach essentially entails the allocation of supervisory resources and paying supervisory attention in accordance with the risk profile of each institution. The approach is expected to optimize utilisation of supervisory resources and minimize the impact of crisis situation in the financial system. The RBS process essentially involves continuous monitoring and evaluation of the risk profiles of the supervised institutions in relation to their business strategy and exposures. This assessment will be facilitated by the construction of a Risk matrix for each institution. The instruments of RBS will be by way of enhancement as well as refining of the supervisory tools over those traditionally employed under the CAMELS approach viz. on-site examination and off-site monitoring. The RBS processes and the outcome will be forward looking beyond focusing attention on the rectification of deficiencies with reference to the on-site inspection date. The extent of on-site inspection would be largely determined by the quality and reliability of off-site data, and the reliability of the risk profile built up by banks. The effectiveness of the RBS would clearly depend on banks' preparedness in certain critical areas, such as quality and reliability of data, soundness of systems and technology, appropriateness of risk control mechanism, supporting human resources and organisational back-up.
As stated earlier, supervisory resources would be focused on the areas of higher risks to a bank. The risk profile would highlight both the strengths and vulnerabilities of a bank and would provide a foundation from which to determine the procedures to be conducted during an on-site examination. Under a risk-focused on-site examination approach, the degree of transaction testing would be reduced when internal risk management processes are determined to be adequate or risks are considered minimal. When, however, risk management processes or internal controls are considered inappropriate, additional transaction testing sufficient to fully assess the degree of risk exposure in a function or activity would be performed. It would be necessary for banks to carry out a fresh review of their current status of risk management architecture by an expert team and initiate measures to bridge the gaps. Adoption of Risk focused Internal Audit:
Over the years, the evolvement of financial instruments and markets have enabled banks to reposition their portfolio risk exposure. It has become clear that periodic assessment based on transaction testing alone cannot keep pace with the rapid changes occurring in financial risk profiles. In this context the widening of the scope of internal auditing assumes significance. The internal audit would have to capture in a larger way the application and effectiveness of risk management procedures and risk assessment methodology and critical evaluation of the adequacy and effectiveness of the internal control systems. The internal audit department should pay special attention to auditing the banking activity in all the places through which the activity is undertaken. The precise scope of work of internal auditing must be determined by each bank but as a minimum, must review and report upon the control environment as a whole, the process by which risks are identified, analysed and managed, the line of controls over key processes, the reliability and integrity of corporate management function, safeguarding of assets and compliance with rules and regulations. To achieve these objectives, banks would have to gradually move towards risk focused auditing, in addition to the system of selective transaction based auditing. The implementation of risk based auditing would mean that greater emphasis is placed on the internal auditor's role of mitigating risks. By focussing on effective risk management the internal auditor would not only offer remedies for current trouble areas but also anticipate problems and play an important role in protecting the bank from risk hazards. The risk based auditing would not only cover assessment of risks at the branch level but would also cover, as an independent assessing authority, assessment of risks at the corporate level and the overall process in place to identify, measure, monitor and control the risks. In order to focus attention on areas of greater risk to the bank, a location-wise and activity-wise risk assessment should be performed in advance of on-site risk based auditing. This would allow identification of high risk areas which would enable prioritising the activities and locations for risk based audit. If initial inquiries into the risk management system raise material doubt as to the system's effectiveness, no significant reliance should be placed on the system and a more extensive series of tests need to be undertaken to ensure that the bank's exposure to risk from a given function or activity is accurately captured and monitored. The high-risk areas need to be looked into more frequently than the low risk areas. Risk based audit would be an aid to the ongoing risk management by banks, as it would provide checks and balances in the system. The banks could form a small Committee of executives and entrust them with the responsibility to chalk out an action plan, implement and monitor the progress in adoption of risk management systems and risk focused audit and report to the Top Management and Board of Directors periodically. Strengthening of Management Information System and Information Technology Addressing HRD issues Setting up of Compliance Unit | ||
|