Loan Portfolio Management: Comptroller's Handbook
Loan Portfolio Management: Comptroller's Handbook
Loan Portfolio Management: Comptroller's Handbook
Comptrollers Handbook
April 1998
AAssets
Loan Portfolio
Management Table of Contents
Overview .................................................................................................... 1
Risks Associated with Lending .................................................................... 3
Credit Culture and Risk Profile .................................................................. 11
Loan Portfolio Objectives......................................................................... 13
Strategic Planning for the Loan Portfolio.......................................... 13
Financial Goals ............................................................................... 14
Risk Tolerance ................................................................................ 15
Portfolio Risk and Reward ......................................................................... 15
The Loan Policy ........................................................................................ 17
Loan Policy Topics .......................................................................... 19
Loan Approval Process ................................................................... 20
Portfolio Management .............................................................................. 22
Oversight ........................................................................................ 22
Risk Identification .......................................................................... 22
Nonaccrual Status ........................................................................... 24
Exceptions to Policy, Procedures, and Underwriting Guidelines...... 25
Documentation Exceptions ........................................................ 25
Policy and Underwriting Exceptions........................................... 26
Aggregate Exception Tracking and Reporting .................................. 27
Portfolio Segmentation and Risk Diversification .............................. 28
Identifying Concentrations of Risk .............................................. 28
Evaluating and Managing Concentrations of Risk ............................ 30
Concentration Management Techniques .................................... 31
Stress Testing ............................................................................................ 32
Allowance for Loan and Lease Losses ........................................................ 33
Credit Management Information Systems .................................................. 34
Collections and Work-out ........................................................................ 35
Lending Control Functions ........................................................................ 37
Independence ................................................................................. 37
Credit Policy Administration ........................................................... 38
Loan Review ................................................................................... 38
Audit .............................................................................................. 39
Administrative and Documentation Controls ................................... 39
Appendixes .......................................................................................... 72
Topics of Loan Policy ..................................................................... 72
12 CFR 30 Safety and Soundness Standards ................................ 78
Portfolio Credit Risk Management Processes ................................... 80
Loan Production Offices ................................................................. 85
Loan Participations.......................................................................... 87
Loan Brokerage and Servicing Activities .......................................... 92
IRS Express Determination Letters ................................................... 93
References .......................................................................................... 97
Overview
Lending is the principal business activity for most commercial banks. The
loan portfolio is typically the largest asset and the predominate source of
revenue. As such, it is one of the greatest sources of risk to a banks safety
and soundness. Whether due to lax credit standards, poor portfolio risk
management, or weakness in the economy, loan portfolio problems have
historically been the major cause of bank losses and failures.
For decades, good loan portfolio managers have concentrated most of their
effort on prudently approving loans and carefully monitoring loan
performance. Although these activities continue to be mainstays of loan
portfolio management, analysis of past credit problems, such as those
associated with oil and gas lending, agricultural lending, and commercial real
estate lending in the 1980s, has made it clear that portfolio managers should
do more. Traditional practices rely too much on trailing indicators of credit
quality such as delinquency, nonaccrual, and risk rating trends. Banks have
found that these indicators do not provide sufficient lead time for corrective
action when there is a systemic increase in risk.
To manage their portfolios, bankers must understand not only the risk posed
by each credit but also how the risks of individual loans and portfolios are
interrelated. These interrelationships can multiply risk many times beyond
what it would be if the risks were not related. Until recently, few banks used
modern portfolio management concepts to control credit risk. Now, many
banks view the loan portfolio in its segments and as a whole and consider
the relationships among portfolio segments as well as among loans. These
practices provide management with a more complete picture of the banks
credit risk profile and with more tools to analyze and control the risk.
In 1997, the OCCs Advisory Letter 97-3 encouraged banks to view risk
management in terms of the entire loan portfolio. This letter identified nine
elements that should be part of a loan portfolio management process. These
elements complement such other fundamental credit risk management
principles as sound underwriting, comprehensive financial analysis, adequate
appraisal techniques and loan documentation practices, and sound internal
controls. The nine elements are:
All banks need to have basic loan portfolio management principles in place
in some form. However, the need to formalize the various elements
discussed in this booklet, and the sophistication of the process, will depend
on the size of the bank, the complexity of its portfolio, and the types of
credit risks it has assumed. For example, a community bank may be able to
implement these principles in a less formal, less structured manner than a
large bank and still have an effective loan portfolio management process. But
even if the process is less formal, the risks to the loan portfolio discussed in
this booklet should be addressed by all banks.
The examiner assigned LPM is responsible for determining whether the bank
has an effective loan portfolio management process. This includes
determining whether the risks associated with the banks lending activities
are accurately identified and appropriately communicated to senior
management and the board of directors, and, when necessary, whether
appropriate corrective action is taken.
Lending can expose a banks earnings and capital to all of the risks.
Therefore, it is important that the examiner assigned LPM understands all the
risks embedded in the loan portfolio and their potential impact on the
institution. How each of these categories relates to a banks lending function
is detailed in the following sections.
Credit Risk
For most banks, loans are the largest and most obvious source of credit risk.
However, there are other pockets of credit risk both on and off the balance
sheet, such as the investment portfolio, overdrafts, and letters of credit. Many
products, activities, and services, such as derivatives, foreign exchange, and
cash management services, also expose a bank to credit risk.
The risk of repayment, i.e., the possibility that an obligor will fail to perform
as agreed, is either lessened or increased by a banks credit risk management
practices. A banks first defense against excessive credit risk is the initial
credit-granting process sound underwriting standards, an efficient, balanced
Effective management of the loan portfolios credit risk requires that the board
and management understand and control the banks risk profile and its credit
culture. To accomplish this, they must have a thorough knowledge of the
portfolios composition and its inherent risks. They must understand the
portfolios product mix, industry and geographic concentrations, average risk
ratings, and other aggregate characteristics. They must be sure that the
policies, processes, and practices implemented to control the risks of
individual loans and portfolio segments are sound and that lending personnel
adhere to them.
The level of interest rate risk attributed to the banks lending activities
depends on the composition of its loan portfolio and the degree to which the
terms of its loans (e.g., maturity, rate structure, embedded options) expose the
banks revenue stream to changes in rates.
Banks frequently shift interest rate risk to their borrowers by structuring loans
with variable interest rates. Borrowers with marginal repayment capacity
may experience financial difficulty if the interest rates on these loans
increase. As part of the risk management process, banks should identify
borrowers whose loans have heightened sensitivity to interest rate changes
Liquidity Risk
In fact, banks are taking a more active role in managing their loan portfolios.
While these activities are often initiated to manage credit risk, they have also
improved liquidity. Banks increasingly are originating loans for sale or
securitization. Consumer loans (mortgages, instalment loans, and credit
cards) are routinely originated for immediate securitization. Many larger
banks have been expanding their underwriting for the syndicated loan
market. Additionally, banks are also expanding the packaging and sale of
distressed credits and otherwise undesirable loans.
Price Risk
Most of the developments that improve the loan portfolios liquidity have
implications for price risk. Traditionally, the lending activities of most banks
were not affected by price risk. Because loans were customarily held to
maturity, accounting doctrine required book value accounting treatment.
However, as banks develop more active portfolio management practices and
the market for loans expands and deepens, loan portfolios will become
increasingly sensitive to price risk.
Transaction Risk
Strategic Risk
Reputation risk can damage a banks business in many ways. The value of the
banks stock falls, customers and community support is lost, and business
opportunities evaporate. To protect their reputations, banks often feel that
they must do more than is legally required. For example, some banks have
repurchased loan participations when credit problems develop, even though
these problems were not apparent at the time of the underwriting.
Understanding the credit culture and the risk profile of the bank is central to
successful loan portfolio management. Because of the significance of a
banks lending activities, the influence of the credit culture frequently
extends to other bank activities. Staff members throughout the bank should
understand the banks credit culture and risk profile. The knowledge should
pass from the chief credit policy officer to account officers to administrative
support. Directors and senior management should not only publicly endorse
the credit standards that are a credit cultures backbone but should also
employ them when formulating strategic plans and overseeing portfolio
management.
A banks credit culture is the sum of its credit values, beliefs, and behaviors.
It is what is done and how it is accomplished. The credit culture exerts a
strong influence on a banks lending and credit risk management. Values and
behaviors that are rewarded become the standards and will take precedence
over written policies and procedures.
A banks risk profile is more measurable than its credit culture. A risk profile
describes the various levels and types of risk in the portfolio. The profile
evolves from the credit culture, strategic planning, and the day-to-day
activities of making and collecting loans. Developing a risk profile is no
Credit culture varies from bank to bank. Some banks approach credit very
conservatively, lending only to financially strong, well-established borrowers.
Growth-oriented banks may approach lending more aggressively, lending to
borrowers who pose a higher repayment risk. These cultural differences are
grounded in a banks objectives for asset quality, growth, and earnings.
Emphasizing one of these objectives over another does not, in and of itself,
preclude achieving satisfactory performance in all three. However, the
emphasis will influence how lending activities are conducted and may
prompt changes in credit policies and risk control systems. For example, a
bank driven to achieve aggressive growth targets may require more detailed
credit policies and more controlling administrative and monitoring systems to
manage credit risk properly. Consistently successful banks achieve a balance
between asset quality, growth, and earnings. They have cultural values,
credit policies, and processes that reinforce each other and that are clearly
communicated, well understood, and carefully followed.
The culture, risk profile, and credit practices of a bank should be linked. If
the credit practices and risk-taking activities of a bank are inconsistent with
the desired culture and policies, management should find out why and
initiate change to bring them back in balance. When practices do not
correspond to policies, lenders may not clearly understand the culture, credit
controls may not be effective, policies and systems may be inappropriate for
the credit environment, or employees may be rewarded for behaviors that are
different from those advanced by policy. If the risk profile deviates from
cultural norms, management should reassess the limits, policies, and
practices.
Senior management and the board should periodically evaluate the banks
credit culture and risk profile. Are marketing plans and financial budgets
consistent with credit risk objectives? Do lender compensation programs
For most banks, meeting these three objectives will require that senior
management and the board of directors develop medium- and long-term
strategic plans and objectives for the loan portfolio. These strategies should
be consistent with the strategic direction and risk tolerance of the institution.
They should be developed with a clear understanding of their risk/reward
consequences. They also should be reviewed periodically and modified as
appropriate. In drawing up strategic objectives, management and the board
should consider establishing:
Financial Goals
Business plans or budgets detailing the financial goals for the loan portfolio
are the next step in the strategic planning and goal setting process. Business
plans should set realistic financial goals that are consistent with strategic goals
and risk tolerance levels. Bankers and examiners should be alert to
aggressive financial goals because they generally require high growth and
increased risk-taking.
Risk Tolerance
The bank should have a system in place to ensure that exposures approaching
risk limits are brought to the attention of senior management and the board.
Both on- and off-balance-sheet exposure should be included in the risk limit
measurement system. Exceeding or modifying established risk limits should
require their explicit approval. In addition, any proposed changes to the
banks underwriting standards should be evaluated to determine how the
change will affect overall portfolio risk.
The price (index rate, spread, and fees) charged for an individual credit
should cover funding costs, overhead/administrative expenses, the required
profit margin (generally expressed as a return on assets or equity), and risk.
Funding costs are relatively easy to measure and incorporate into loan
pricing. Measuring overhead and administrative costs is more complicated
because banks traditionally have not had strong cost accounting systems.
Additionally, common services with differing or ambiguous values to each
user (What, for example, is the dollar value of loan review?) can be difficult
to measure. The required profit margin is a straightforward concept and is
usually derived from the strategic plan.
This leaves risk, which is the crux of the pricing dilemma. The methods
used to incorporate risk into loan pricing decisions range from simple pro-
rata allocations of existing loan loss reserves and capital to complex
estimations of default frequency and probability, loss levels, and loss
volatility. Recent developments in credit and portfolio risk measurement and
modeling are improving banks ability to measure and price risk more
precisely and are facilitating the management of capital and the allowance for
loan and lease losses. However, these methods require accurate risk
measurement at the individual loan level and robust portfolio risk MIS.
Even with these developments, the loan pricing decision is clouded. Banks
often incorporate other revenues attributed to the lending relationship into
the loan pricing decision. The lending relationship has been, and continues
to be, used to win other business with the customer (cash management
services, F/X and derivatives sales, custody, etc.). Relationship pricing and
Portfolio risk and return concepts encompass almost all of the credit risk
measurement and management principles discussed throughout this booklet.
Ultimately, the risks in individual credits, lending relationships, portfolio
segments, and entire portfolios will be incorporated into pricing decisions
through discrete risk-based allowance and capital charges. For now, pricing
for risk continues to be a developing science. Banks are encouraged to
develop sufficient systems to measure and price risk within credits and
portfolios accordingly.
The loan policy is the primary means by which senior management and the
board guide lending activities. Although the policy primarily imposes
standards, it also is a statement of the banks basic credit philosophy. It
provides a framework for achieving asset quality and earnings objectives, sets
risk tolerance levels, and guides the banks lending activities in a manner
consistent with the banks strategic direction. Loan policy sets standards for
portfolio composition, individual credit decisions, fair lending, and
compliance management.
In all but very small community banks, the loan policy will be written. The
policy should provide a realistic description of where the bank wants to
position itself on the risk/reward spectrum. It needs to provide sufficient
latitude for a bank to respond to good business opportunities while
concurrently controlling credit risk. In normal circumstances, a bank should
be able to achieve portfolio objectives and respond to changing market
conditions without triggering a limit. Limits should not be so conservative
that insignificant changes breach them, nor should they be so liberal that they
have no practical effect.
While the form and contents of loan policies and procedures will vary from
bank to bank, there are some topics that should be covered in all cases.
These are:
Loan authorities.
Limits on aggregate loans and commitments.
Portfolio distribution by loan category and product.
Geographic limits.
Desirable types of loans.
Underwriting criteria.
Financial information and analysis requirements.
Collateral and structure requirements.
Margin requirements.
Pricing guidelines.
Documentation standards.
Collections and charge-offs.
The loan approval process is the first step towards good portfolio quality.
When individual credits are underwritten with sound credit principles, the
credit quality of the portfolio is much more likely to be sound. Although
good loans sometimes go bad, a loan that starts out bad is likely to stay that
way. The foremost means to control loan quality is a solid loan approval
process.
The OCC does not recommend any particular system of loan approval.
However, every loan approval process should introduce sufficient controls to
ensure acceptable credit quality at origination. The process should be
compatible with the banks credit culture, its risk profile, and the capabilities
of its lenders. Further, the system for loan approvals needs to establish
accountability.
Each method of loan approval has inherent strengths and weaknesses. The
committee method is advantageous because knowledge can be shared, but it
may diminish accountability and often slows a banks responsiveness. The
individual signature authority system is more timely and establishes clear
accountability, but it can create undue credit risk if a lenders knowledge and
experience are inadequate to his or her authority. Laddered or joint
authorities, variations that some banks employ, combine elements of both
systems. The involvement of an independent loan approval authority whose
The approval process for consumer loans may be more streamlined, but
should still include sufficient information to support the credit granting
decision, including, when applicable, scorecard data.
Oversight
To properly administer the loan portfolio, the bank should clearly define the
roles and responsibilities of management. Typically, one person or group is
responsible and authorized to take the steps necessary to assure that risk in
the portfolio stays within acceptable bounds. Since this goal can be
accomplished by a variety of structures, the OCC does not favor any
particular one the best system is the one that meets the banks needs.
Risk Identification
In grading loans for supervisory purposes, the OCC uses five categories: pass,
special mention, substandard, doubtful, and loss. Banks are encouraged to
use these regulatory classifications as a foundation for their own risk rating
systems. The OCC further encourages banks to expand their risk ratings for
pass credits. Using multiple ratings to differentiate the risks of pass
credits facilitates portfolio risk measurement and analysis, pricing for risk, and
early warning objectives. The number of additional ratings used will vary from
bank to bank and will depend on the banks own risk management
objectives.
After each loan has been risk rated, the ratings of individual credits should
be reviewed, and they should be analyzed in the context of the portfolio
segment and the entire portfolio. The analysis should ensure that ratings are
consistently applied and should consider trends, migration data, and
Loan policy should designate who is accountable for the accuracy of risk
ratings. The account officer is a logical choice because he or she knows
more about the credit than anyone else and should have access to timely
financial information from the borrower. Assigning the account officer risk
rating responsibility heightens his or her accountability for credit quality and
has derivative benefits for loan approvals and account management. Some
banks assign risk rating responsibility to a credit officer, loan review officer,
or a more senior bank officer. While these officers may be more objective
and experienced, they may be less sensitive to subtle changes in the
borrowers condition, and their ratings changes may be less timely. Perhaps
most important, making someone other than the account officer accountable
may diminish his or her sense of responsibility for identifying and controlling
credit risk.
The call report instructions provide one exception to the general rule for
commercial loans: 2
1
An asset is well secured if it is secured (1) by collateral in the form of liens on or pledges of real or
personal property, including securities, that have a realizable value sufficient to discharge the debt (including
accrued interest) in full, or (2) by the guarantee of a financially responsible party. An asset is in the process
of collection if collection of the asset is proceeding in due course either (1) through legal action, including
judgment enforcement procedures, or, (2) in appropriate circumstances, through collection efforts not
involving legal action which are reasonably expected to result in repayment of the debt or in its restoration to
a current status in the near future.
2
For more information, refer to the Nonaccrual Status entry in the Glossary section of the call report
instructions. This entry describes the general rule for the accrual of interest, as well as the exception for
commercial loans. The entry also describes criteria for returning a nonaccrual loan to accrual status.
none of its principal and interest is due and unpaid and the bank expects
repayment of the remaining contractual principal and interest, or
it otherwise becomes well secured and is in the process of collection.
The OCCs Bank Accounting Advisory Series and the Rating Credit Risk
booklet provide more information for the recognition of nonaccrual loans,
including the appropriate treatment of cash payments for loans on
nonaccrual.
Documentation Exceptions
3
For more information, refer to the call report instructions Glossary section, entry Purchased Credit-Impaired
Loans and Debt Securities.
Tracking the aggregate level of exceptions helps detect shifts in the risk
characteristics of loan portfolios. In consumer lending, where such tracking
is common, it has facilitated risk evaluation, strengthened portfolio liquidity,
and helped management to identify new business opportunities. Similar
benefits can accrue from tracking underwriting exceptions in commercial and
real estate loan portfolios.
Ideally, the overall portfolio composition and the level of risk in the various
pools will be consistent with the goals and guidelines established by the
banks directors. However, it is not unusual for one or more pools to raise
concern, either because of the risks associated with the loans or because of
the sheer volume of loans with similar characteristics.
Over the past decade, banks, especially large ones, have been adopting more
active portfolio management practices. They are expanding their MIS
capabilities and strengthening their credit risk management practices. There
are a variety of techniques banks can use to manage portfolios and control
concentration risk.
A bank can change the distribution of its assets by increasing the geographic
diversification of borrowers; altering the banks product mix (for example, by
reducing commercial lending and increasing consumer lending); or changing
the risk profile of the banks target market (for example, by turning from
middle-market, non-investment-grade customers to well-capitalized,
investment-grade customers). Asset sales can also be used to manage
concentrations. Banks sell whole loans, sell a portion of a loan into
syndication, sell participations in a loan, and securitize certain types of loans.
Each of these approaches entails risk/reward trade-offs that must be evaluated
in light of the banks strategic objectives.
Recently, banks have begun using credit derivatives to reduce the risk posed
by concentrations. Although their usage is modest in all but the largest
banks, credit derivatives are gaining acceptance. If appropriately managed,
derivatives may be useful as both a risk management tool and an investment
opportunity, especially in times of weak loan demand. Banks should strive to
understand both the benefits and the risks associated with these instruments.
As more research is conducted and their behavior is analyzed in various
economic scenarios, both the risks and benefits of credit derivatives will
become clearer. Supervision of derivative products is more fully explored in
the Risk Management of Financial Derivatives booklet of the Comptrollers
Handbook.
Banks commonly employ a form of stress testing when they subject various
assets and liabilities to hypothetical rate shock scenarios to determine their
exposure to changes in interest rates. Similarly, consumer portfolios that are
securitized (e.g., mortgages, credit cards, home equity loans) are heavily
stress tested during the structuring process to better gauge their risk and to
determine the level of credit enhancements.
While many banks use complex interest rate risk and consumer credit models
that take into account the interrelationships between many variables
simultaneously, less sophisticated testing methods can also be useful. These
same principles can also be used for evaluating commercial credit risk. Stress
testing for credit risk can be conducted on individual loans and
concentrations or other portfolio segments. Key underwriting assumptions or
a critical factor common to a particular portfolio are good candidates for
stress testing.
The MIS requirements for stress testing portfolios for credit risk can be
significant (they vary depending on the individual circumstances and
objectives of the institution). But because banks can evaluate the credit risk
of individual loans using little technical support, they should do so during
their routine credit evaluations. As part of the initial or ongoing credit
analysis, the bank can alter financial variables and assess the impact. These
results can then be rolled up to the portfolio level to assess the impact on
portfolio credit quality. For example, office space rental rates can be altered,
which affects the buildings cash flow and debt service repayment capacity.
Stress testing would allow bank management to determine at what rental rate
Even if the bank cannot attach probabilities to the scenarios, stress tests can
reveal the kinds of events that might present problems. Banks should test the
debt service coverage of credits whose coverage is thin. Credits in significant
loan pool concentrations should also be stress tested as indicators of the
strength of those pools. Based on the results of stress testing, management
can develop contingency plans for the credits or pools that stress testing
indicates are vulnerable. These plans might include increasing supervision,
limiting further advances, restricting portfolio growth, devising exit
strategies, or hedging portfolio segments.
Credit portfolio stress testing is a relatively new analytical tool and the OCC
does not currently require banks to conduct stress tests or to develop or
purchase computer models to perform such tests. Bankers are encouraged,
however, to expand their capabilities. Banks of all sizes will benefit by
supplementing stress testing of individual loans with portfolio stress testing.
They may also want to consider credit modeling software as it becomes
more refined and readily available for stress testing.
Banks must have a program to establish and regularly review the adequacy
of their allowance for loan and lease losses (ALLL). The ALLL exists to cover
The effectiveness of the banks LPM process heavily depends on the quality
of management information systems (MIS). Indeed, many of the
advancements of contemporary portfolio management are the direct result of
the more robust MIS that is available today. At the same time, many banks
are frustrated in their efforts to expand portfolio risk management by the
limitations of their MIS. Loan portfolio managers and examiners should be
active proponents of the continued improvement of credit-related MIS.
While a banks systems or technology often impedes MIS improvement, lack
of understanding or poor communications between credit management and
systems personnel can also do so.
Credit-related MIS helps management and the board to fulfill their respective
oversight roles. Therefore, when assessing MIS-produced credit reports, the
examiner should determine whether the users are receiving the right kind of
information at the right time. Reports to senior management and the board
must be more than a presentation of numbers; they must be analytical in
nature and allow the users to draw independent conclusions. For example, a
report presenting the level of classified assets has limited value; however, if
the report contains historical information and shows the classified asset
position relative to capital, it becomes more useful. Similarly, reports on
numbers of exceptions to policy are not very useful, but reports on aggregate
exceptions as a percentage of industry or specialized lending portfolios may
signal a change in risk assumption. Summary data presented in a concise
format generally satisfies managements needs. A report should not give
The best technology can be next to worthless if the data are not accurate.
Only if data are updated periodically and out-of-date loan information purged
can MIS reports remain accurate and useful. Preserving the reliability of MIS
can be especially difficult in banks that are expanding rapidly. Common data
integrity problems include incorrect industry codes, failure to report
delinquency, incomplete or outdated information on loan participations,
failure to archive note origination dates and amounts at renewal or
modification, inaccurate underwriting exception capture, lack of clear reports
and reporting lines, incorrect risk ratings or failure to archive risk ratings
when a change occurs, and omission of off-balance-sheet exposure. Loan
review, credit administration, and audit play a vital role in ensuring that data
are accurate. When MIS deficiencies or inaccuracies jeopardize or restrict
credit risk management practices, examiners will need to identify the root
cause and initiate corrective action.
Banks differ on the methods and organization they use to manage problem
loans. The responsibilities for such loans may lie with the originating line
unit or a specialized work-out division, depending on the loan size or type.
Work-out units are usually staffed with specialized work-out lenders. It is not
uncommon for the work-out department to be independent from the line
lending unit, but the organization should be dictated by the needs of the
bank. Credit policy should articulate how a bank will manage problem
credits. A separate policy on problem loans often supplements corporate
loan policy.
Besides the loan policy, the primary controls over a banks lending activities
are its credit administration, loan review, and audit functions. Independent
credit administration, loan review, and audit functions are necessary to
ensure that the banks risk management process, MIS, and internal and
accounting controls are reliable and effective. The banks control functions
can also provide senior management and the board with a periodic
assessment of how the banks employees understand its credit culture and
whether their behaviors conform to the banks standards and values.
Independence
Loan Review
The LPM examiner should focus on the role and effectiveness of loan review
as part of a comprehensive loan portfolio management process. Weaknesses
in loan review hamper the entire portfolio management process and may
signal the need for more extensive testing during an examination.
Assessment of the loan review function should also include evaluation of its
role in assuring the effectiveness of the loan portfolio management process.
The loan review function should go beyond transactional testing to include
evaluation of how well individual departments perform.
Audit
12 CFR 30, Standards for Safety and Soundness (see appendix B), provides
that a bank should establish a system of independent, ongoing credit review
and the results of the credit reviews should be communicated to management
and the board of directors.
Administrative and functional reporting lines for the audit function should be
similar to those for the loan review function. A full discussion of the OCCs
expectations with respect to the banks audit function can be found in the
booklet Internal and External Audit.
Both senior management and the board of directors should receive clear,
concise, timely information about the loan portfolio and its attendant risks.
Examiners should determine that management has clearly communicated
strategic objectives and risk limits to the board and that the board has
approved them. Examiners should also ensure that risk measurement and
analysis is adequately reported to both senior management and the board.
In asset quality reviews, examiners test individual loans for quality. Using a
sample of loans, they draw conclusions about the quality of loan supervision,
the adequacy of the loan infrastructure, and the level of risk in the portfolio.
Traditionally, the analysis of individual loans has been used to determine
whether risk ratings are accurate and to build conclusions about loan
portfolio management. A more dynamic and efficient approach is to
simultaneously use the testing to verify risk ratings and test the lending
function itself. For example, a review of newly underwritten credits should
be structured to assess the risk in the new transactions as well as to test the
effectiveness of loan approval and other policies and processes that govern
credit quality. While this approach requires careful planning and design, the
results provide more comprehensive information.
Asset quality reviews for community banks incorporate many of the same
objectives as those in larger banks; however, the analysis is focused more on
the results of operations than the methods used to achieve them. These
reviews may need to be expanded when management is not effective or the
loan portfolio has a high risk profile or worrisome trends.
Targeted Reviews
Process Reviews
Compliance Reviews
Ongoing Supervision
General Procedures
Assessing a banks LPM program involves assessing a variety of credit
functions and processes (e.g., underwriting, origination, MIS, administration,
loan review) rather than evaluating a single process or function as in other
examination programs. Therefore, LPM examination procedures are
presented in a cross-functional, as opposed to a drill down, format. The
overall LPM evaluation relies on examiner judgment to assign appropriate
weights and ratings to the interrelated functions and processes that
constitute the banks LPM system.
Objective: Develop a preliminary assessment about the quantity of risk and the
quality of risk management within the loan portfolio, the direction of risk, and
how the risk in the loan portfolio affects the aggregate level of risk of the
institution. This assessment will be used to set the scope for the loan
portfolio management examination.
5. Based on the findings and analysis resulting from the previous steps
and in consultation with the EIC and other appropriate supervisors,
determine the scope of the examination. The scope should focus on
areas with emerging risk and on those areas of risk of greatest concern.
Determine how much testing is necessary. Sample criteria on size and
selection, if needed, are discussed in the statistical sampling appendix
to the Comptrollers Handbook for National Bank Examiners.
Objective: To determine the quantity of risk in the loan portfolio, help determine
the direction the risk is moving, and aid in the assessment of the aggregate
risk within the institution.
Loan Policy
Purpose of loan,
Loan structure,
Borrowers repayment capacity,
Collateral requirements,
Portfolio goals and limits.
Outstandings.
Risk rating stratification.
Exceptions (underwriting, policy, documentation).
Management expertise
Economic factors.
4. Determine whether new products have been introduced since the last
examination. Analyze their growth and potential effect on credit risk.
1. Review recent loan review and loan-related audit reports. If there are
any adverse trends in quantitative measures of risk or control
weaknesses reported, comment on whether and how much they may
increase risk.
External Factors
1. Review the local, regional, and national economic trends and assess
their impact on loan portfolio risk levels.
Objective: To determine the quality of risk management for the loan portfolio and
its impact on the direction of risk and the aggregate level of risk within the
institution.
6. Review the banks strategic plan for loan portfolio. The following
factors should be addressed:
Approval process.
Risk rating process.
Exception and over-limit process.
Loan closing procedures.
Nonaccrual and charge-off process.
Allocation process.
13. Are risk limits well-defined and reasonable? Consider the way these
limits are measured (Are capital and earnings at risk used to define the
risk limit?) and the impact on the bank if the risk limit is reached.
16. Assess the level of review for credit exposures nearing their risk limits.
Is there sufficient reporting to senior managers and is supervision
heightened?
17. Evaluate the policy review process to ensure that the policy will
change with changes in practices or the external environment, such as
increases in risk for a particular product or industry.
18. Determine whether the board of directors has approved the loan policy
and whether the policy articulates the desired credit culture.
Processes
Underwriting
4. Assess the criteria for loans managed by the centralized problem credit
(work-out) unit.
Collection rate.
Cost per dollar collected.
Collection success by portfolio segment.
Collection strategies.
Use of technology.
Collection MIS, including the following information:
- collection rate reporting.
- restructured loan levels and performance.
- charge-off volumes.
- quality of assets in collection.
Productivity reports.
Compliance with laws and regulations.
13. Assess the policy for re-aging past-due credits. Evaluate the
accounting practices used to report re-aged past due credits.
15. Confer with the examiner analyzing the allowance for loan and lease
losses (ALLL).
Portfolio Composition
4. Evaluate the policy to limit credit exposures. Confirm that the process
used to limit credit exposures includes the following characteristics:
7. Assess the integration of the banks asset distribution targets into its
overall risk management program or philosophy.
10. If the bank has an ongoing program to purchase loans, evaluate the
credit risk in this program. Consider:
11. Can credit MIS identify and segregate assets purchased and
underwritten outside the bank?
13. Evaluate the loan portfolio management process for interest rate risk
and liquidity factors. Consider:
Personnel
1. Compare overall staffing levels in the lending and loan control areas
with the size, complexity, and level of risk of the loan portfolio.
Determine whether staffing levels will support planned or unplanned
increases in any of these characteristics. Evaluate current management
depth to determine its adequacy to support future growth objectives.
7. Evaluate the level of staff turnover and its impact on credit risk
management.
10. Determine whether the stated credit culture is reflected in the banks
goals, objectives, philosophy, and in the portfolios composition. If
not:
Describe the actual culture and evaluate the impact on risk in the
portfolio.
Determine whether the difference between the stated credit culture
and the actual credit culture results from lack of communication,
managements indifference towards the stated culture, or a
performance management system that rewards behaviors that are
inconsistent with the stated credit culture.
11. Assess how senior management and the board of directors periodically
evaluate bank personnels understanding of and conformance with the
banks stated credit culture and loan policy. If there is no process,
determine the impact on the management of credit risk.
6. If the bank conducts stress testing for credit risk, assess the following:
8. Review the banks risk rating definitions for consistency with regulatory
definitions. If the definitions differ, determine whether the banks
ratings are adequate.
Ensure that, when combining bank ratings with examiner ratings (to
calculate the total risk rating stratification), definitions are similar
enough to make the combination valid.
Independence.
Technical knowledge.
Resources.
Rating disagreement resolution process.
10. How often are relationships analyzed for risk rating purposes? Are
there well-defined events that would require a risk rating analysis?
13. Assess the adequacy of loan review and loan-related audit reports.
Consider:
16. Determine whether any audit or loan reviews have been postponed or
canceled. If so, determine why. Verify that reviews were not delayed
to avoid criticism. Determine whether the distribution of any audit or
loan review reports has been delayed. If so, determine why.
17. Ensure that loan review is meeting its schedule and determine whether
loan-related audits have been conducted as planned. If either are
materially behind schedule determine the cause.
Reporting lines.
Budget oversight.
Performance evaluation.
Compensation plans.
Access to the board.
19. Review the structure, charter, and mission of board and management
credit committees.
21. Is the banks internal control system appropriate for the type and level
of risks undertaken within the loan portfolio?
Types of Loans: The lending policy may identify specific types of loans
that the bank views as desirable or undesirable. For example, many banks
do not finance business start-ups, and others avoid loans to gambling
concerns. These guidelines should be based on the expertise of the
lending staff, anticipated credit demands of the community, and the
deposit structure of the bank. Real estate and other types of term lending,
for example, might be limited to a given percentage of the banks stable
funds.
The policy should outline requirements for external credit checks. When
external credit reporting agencies are used to determine the
creditworthiness of borrowers, the information should be updated
periodically. This is especially important for revolving consumer credit.
If sufficient loan demand exists, direct lending within the banks trade area
is generally safer and more profitable than purchasing loans. Direct
lending promotes customer relationships, fosters the local economy, and
helps to develop additional business for the bank. At the same time,
purchasing loans can benefit risk management. Purchased loans can be a
source of portfolio diversification, help balance interest rate gaps, be a
source of liquidity if such loans can be easily resold, and help achieve
strategic goals for particular loan products if a certain amount of such loans
are necessary to meet economies of scale thresholds. For smaller banks,
participations are an effective way to meet the credit needs of their
customers while complying with the legal lending limit. Loan sales afford
banks many of the benefits of loan participations.
The lending policy may establish limits on the amount of loans that can be
purchased from a single outside source and establish an aggregate limit for
all purchased loans. The administration of purchased loans should be
governed by the same credit principles and procedures that govern bank-
originated loans. Supervisory standards and related regulatory
requirements for loan participations are discussed in detail in appendix E.
Other Matters: A bank can supplement its general lending policy with
guidelines and procedures for specific lending departments. Other
lending-related booklets of the Comptrollers Handbook focus on loan
policy for specific types of lending.
Enable the bank to make an informed lending decision and to assess risk, as
necessary, on an ongoing basis.
Identify the purpose of a loan and the source of repayment, and assess the
ability of the borrower to repay the indebtedness in a timely manner.
Appendix A( II,D) to part 30 also provides that a bank should establish and
maintain prudent credit underwriting practices that:
Are commensurate with the types of loans the bank will make and consider
the terms and conditions under which they will be made.
Are appropriate to the size of the bank and the nature and scope of its
activities.
A banks credit culture, which is the sum of its values, beliefs, and behaviors,
should reflect the standards and values of the board of directors and senior
management. Every bank has a credit culture, whether articulated or implied.
Banks that perform well consistently have a credit culture that is clearly
understood throughout the organization. Senior management and the board
should periodically assess whether employees understanding of the banks
credit culture, and their resulting behavior, conform with the desired
standards and values for the bank. Independent audit and internal loan
review functions can help in this assessment.
Because the credit culture influences every aspect of the credit process,
including credit risk selection and underwriting, a banks sales strategies must
be coordinated with its credit risk management objectives. In addition,
compensation systems for the lending area should reward the kind of
behavior that is consistent with long-term credit quality objectives.
The OCC encourages banks to consider the credit risks associated with
syndicated credits and participations from the perspective of overall portfolio
management. Before participating in a syndication or participation, a bank
should evaluate the risk of the proposed credit to determine whether the loan
is consistent with its portfolio strategy and risk tolerance. Because these
decisions often have a short deadline, an effective portfolio management
process is essential. Bankers should not invest in such credits without a
thorough understanding of their banks risk acceptance criteria and the
portfolio risk consequences.
The same portfolio risk concepts apply to the purchase of entire portfolios. A
bank must conduct sufficient due diligence to understand fully the credit risks
that it would assume in the purchase of a portfolio. The portfolio should be
appropriately segmented, and the credit risk should be properly evaluated.
Any decision to purchase, including the price at which to purchase, should
Banking Circular No. 181 (Revised), dated August 2, 1984, provides further
guidance regarding the purchase of loans and highlights actions required to
document, analyze, and control credit risk on such loans.
Every bank should have a process to identify and approve loan policy and
underwriting exceptions and to document any mitigating factors. Most banks
do have effective systems for approving and monitoring exceptions for
individual transactions. However, just as the best way for a bank to
understand the full extent of its credit risk is to analyze aggregate loan data,
an important part of analyzing exceptions is to track and analyze policy and
underwriting exceptions in the aggregate.
Management should have control systems to ensure that credit extensions are
consistent with strategic portfolio and risk objectives. Reliable identification,
measurement, and monitoring of portfolio credit risk is possible only if
control systems ensure the accuracy of information. There are many control
functions throughout the lending process; in most banks, the key control
functions are loan review and audit.
The board of directors and senior management should ensure that these
important control functions are independent of the lending function and are
staffed adequately to perform their assigned duties. As bank systems and
composition of the portfolio become more sophisticated, the bank should
ensure that the expertise and experience of staff in the loan review and audit
functions keep pace. A bank should not attempt to achieve its operating
objectives at the expense of these necessary control functions.
Portfolio credit risk management is not sufficient if it does not take into
account the banks range of acceptable risk/reward relationships. The OCC
encourages banks to research and experiment with risk pricing models. The
models should consider individual transactions; relationship management,
including risks and revenues from all sources; and portfolio segment
risk/reward.
Examiners should be alert for two practices that the interpretive ruling does
not allow. The first practice is originating and approving loans at a loan
production office, while disbursing funds from a main office or a branch.
Disbursing funds from the main office or a branch does not satisfy the
interpretive ruling since the loans are approved at the loan production office.
The second practice is making lending decisions at the LPO and forwarding
loans from the LPO to the main office or a branch for perfunctory approval
and disbursement. The interpretive ruling requires that bank employees at
the main office or a branch approve loans in accordance with safe and sound
banking practices by reviewing the credit quality of the loans and
Loan Participations
A participation, as distinguished from a multi-bank loan transaction
(syndicated loan), is an arrangement in which a bank makes a loan to a
borrower and then sells all or a portion of that loan to another bank. All
documentation is drafted in the name of the selling bank. Generally, the
purchasing banks share of the participated loan is evidenced by a certificate
that assigns an interest in the loan and any related collateral.
The purchase and sale of loans and participations in loans are established
banking practices. Such transactions serve legitimate needs of the buying and
selling banks and the public interest. However, the absence of satisfactory
controls over risk may constitute an unsafe or unsound banking practice.
The indirect relationship between the obligor and the purchaser makes it
difficult for the purchaser to assess the quality of the loan without the
cooperation of the selling or servicing bank. The purchaser ordinarily should
obtain full credit information on the obligor from the selling or servicing bank
at the outset and during the life of the participation. With such information at
hand, the purchaser should perform a continuing independent assessment of
the credit. Thus, the purchase or participation document should include an
agreement by the selling or servicing bank to continually provide any
available credit information on the obligor to the purchasing bank.
This is not intended to suggest that existing loan and participation agreements
need to be renegotiated when full credit information is not being furnished.
Nonetheless, the examiner should recommend appropriate action in any case
when less than full credit information is obtained.
Accrual status.
The selling bank should not release information if doing so would violate the
law. In particular, loan classification information and other examiner
opinions in confidential reports of examination and related documents may
not be disclosed without the express written approval of the Comptroller of
the Currency pursuant to 12 CFR 4.18(c). Unauthorized disclosures may
incur criminal penalties under 18 USC 641. The facts underlying examiners
loan criticisms can generally be furnished. A knowing misrepresentation of
credit quality may violate 18 USC 1014.
Recourse Arrangements
Examiners should review loan sale and purchase activities for government-
guaranteed loans. Lax or improper management of a selling banks servicing
responsibilities should be criticized. Lending out of the trade area for the
purpose of reselling any portion of U.S. government-guaranteed loans should
be carefully reviewed to ensure that the practice is conducted in a safe and
sound manner.
If loan sale proceeds are continually reinvested in new loan originations, the
volume of servicing assets may pose a risk. While loan servicing operations
usually benefit from economies of scale, the bank must recognize the
increased level of operational risk and take steps to ensure that it does not
become responsible for servicing more loans than it can effectively manage.
Failure to administer the loans properly may lead to legal or financial liabil-
ities that could severely affect bank capital. Examiners should review the
extent and nature of servicing activities to ensure that they are conducted in a
safe and sound manner. They should also ensure that servicing fees and
premiums charged in lieu of fees are amortized over the life of the loan.
Improper practices should be criticized.
Background
Election Requirements
Procedures
When a bank that has made or intends to make the election under IRS
Regulation 1.166-2(d)(3) requests such a letter, the examiner may issue one
similar to the sample letter following this appendix, provided the bank
maintains and applies loan loss classification standards that are consistent
with regulatory requirements.
The letter should be issued only when an examination covering the banks
loan review process is completed and when the examiner has concluded that
it is appropriate to issue it. Examiners should not alter the scope or frequency
of examinations merely to permit a bank to use this regulation.
The letter should be signed and dated by the examiner-in-charge and given to
the bank for its files. The letter is not part of the examination report. The
examiners conclusions on the banks loan loss classification standards should
appear in examination workpapers.
OCC standards for loan charge-offs and classification standards are set forth in
this booklets sections on instalment loans, credit card loans, and classification
of credits.
The examination indicates that the bank maintains and applies loan loss
classification standards that are consistent with OCC standards regarding
the identification of losses and the charge-off of loans.
Minor criticisms of the banks loan review process or immaterial deviations from
regulatory standards should not preclude issuance of the letter.
Date
Sincerely yours,