Skip to content

Risk Management in Banking and Insurance · Liquidity Risk Management

Liquidity Risk Management Framework and Governance in Banks

Updated 11 October 2026 · Fact-checked

A liquidity risk management framework is the set of board-approved strategy, policies, limits, systems and oversight that keeps a bank able to meet payments on time at reasonable cost. The board sets risk tolerance, senior management and ALCO run it day to day, and limits, stress tests and a contingency plan keep it working.

Understand Liquidity Risk Management Framework and Governance

Liquidity risk is the risk that a bank cannot meet its obligations as they fall due without unacceptable losses. A bank borrows short (deposits) and lends long (loans). So it always carries some mismatch. Governance exists to keep that mismatch within a level the bank can survive.

The framework works in layers. The board of directors sets the liquidity risk tolerance and approves the strategy and key policies. Senior management turns these into procedures, limits and systems. The Asset Liability Committee (ALCO) is the working body. It reviews the liquidity position, gaps, funding sources and market conditions, and decides on actions. A risk or treasury function monitors limits independently of the people who take positions.

The Basel Committee's Principles for Sound Liquidity Risk Management and Supervision (2008) give the global benchmark. They cover: a clear risk tolerance, a funding strategy with diversified sources, proper measurement and monitoring, pricing of liquidity costs and risks into products (through internal transfer pricing), management of intraday and collateral positions, stress testing, a contingency funding plan, and public disclosure. They also set expectations for supervisors. The RBI's liquidity risk guidelines follow the same approach, and the RBI also requires Basel III liquidity standards (LCR and NSFR) to be met.

A good policy is specific. It states the risk tolerance, the roles of the board, ALCO and the treasury, the limits (for example on cumulative mismatches in time buckets, concentration of funding, and reliance on volatile sources), the reporting frequency, and the escalation steps when a limit is breached. Limits are reviewed regularly and tied to stress results.

Think of it as: tolerance (board) → policy and limits (management) → monitoring and decisions (ALCO, risk function) → stress testing and contingency plan → reporting back to the board.

Key rules to remember

Framework chain
Board tolerance → Strategy and policy → Limits → Monitoring by ALCO and risk function → Stress tests and CFP → Board reporting
Use this as the skeleton for any descriptive answer on governance.
Mismatch in a time bucket
Gap = Rate or volume of inflows − outflows in the bucket; Cumulative gap = sum of gaps up to that bucket
Limits are usually set on mismatches, often as a percentage of cash outflows in the bucket. Take the exact limit from the question or the bank's policy; do not assume one.
Limit utilisation
Utilisation % = Actual exposure ÷ Limit × 100
A value above 100% is a breach and triggers escalation under the policy.
Core BCBS themes
Tolerance, funding strategy, measurement, intraday and collateral, stress testing, CFP, disclosure, supervision
Group the principles under these themes instead of memorising numbers.

How to solve Liquidity Risk Management Framework and Governance questions

Most questions ask you to describe, assess or apply the governance structure to a bank situation. Use one structure every time.

  1. 1Read the question and mark what is asked: roles, policy content, limits, sound practices or a case judgement.
  2. 2State the key term in one line, for example liquidity risk or ALCO.
  3. 3Assign responsibilities level by level: board, senior management, ALCO, independent risk or treasury function.
  4. 4Name the policy elements and limits that apply: tolerance, funding diversification, mismatch limits, concentration limits, reporting and escalation.
  5. 5Link to sound practices: stress testing, contingency funding plan, internal pricing of liquidity, disclosure.
  6. 6For a case, compute any utilisation or gap, compare with the limit, and say what the committee should do.
  7. 7Close with a clear recommendation or conclusion, and mention reporting to the board.

Quickest way: Four-level checklist

When to use it: For MCQs and short descriptive answers when time is tight.

  1. Ask: who sets it, who runs it, who monitors it, who is told?
  2. Board sets tolerance and approves policy; ALCO and management implement; independent risk function monitors; board gets reports.
  3. If the option says the ALCO or treasury sets the bank's overall risk tolerance by itself, treat it as suspect.
  4. For a numerical case, compare actual with limit first and decide on escalation.

Common mistakes in Liquidity Risk Management Framework and Governance

  • Saying ALCO approves the liquidity strategy instead of the board.

    ALCO is active daily, so students assume it holds final authority.

    Fix: Remember that the board approves strategy, policy and tolerance. ALCO implements, monitors and recommends within that.

  • Listing BCBS principles from memory with wrong counts or numbers.

    Students try to memorise a numbered list.

    Fix: Learn the themes (tolerance, funding, measurement, stress tests, CFP, disclosure, supervision) and describe them in your own words.

  • Treating the framework as only a ratio calculation (LCR/NSFR).

    Ratios are numerical and easier to revise.

    Fix: Explain governance, policy, limits and processes first. Ratios are one tool inside the framework.

  • Writing limits without any escalation or reporting step.

    Students stop at setting the limit.

    Fix: Always add what happens on a breach: report to ALCO, senior management and board, and take corrective action.

  • Ignoring independence of the monitoring function.

    Students merge treasury and risk roles.

    Fix: State that the function that takes positions should not be the one that checks the limits.

Worked examples

Example 1

Explain the role of the board and ALCO in a bank's liquidity risk management framework. (6 marks style)

Show the solution
  1. Define: liquidity risk is the risk of being unable to meet obligations when due without unacceptable cost.
  2. Board: sets the liquidity risk tolerance, approves the strategy and policies, reviews reports regularly and ensures senior management has the resources and skills.
  3. Senior management: develops procedures, limits and systems that fit the board's tolerance and reports on compliance.
  4. ALCO: reviews the liquidity position and gaps, funding sources and costs, market conditions and stress results; decides on actions and pricing; monitors limits.
  5. Independent risk function: measures and reports against limits and flags breaches.
  6. Link: breaches and stress results go back to the board, which can revise tolerance or policy.

Answer: The board owns tolerance, strategy and policy. Senior management and ALCO implement and monitor them daily. An independent risk function checks limits, and results are reported to the board.

Example 2

A bank's policy sets a limit on the 1–14 day cumulative outflow mismatch at 20% of cumulative outflows in that bucket. Outflows in the bucket are ₹5,000 crore and inflows are ₹3,600 crore. Is the limit breached, and what should ALCO do?

Show the solution
  1. Mismatch = outflows − inflows = ₹5,000 crore − ₹3,600 crore = ₹1,400 crore.
  2. Mismatch % = 1,400 ÷ 5,000 × 100 = 28%.
  3. Limit = 20% of ₹5,000 crore = ₹1,000 crore.
  4. Actual ₹1,400 crore exceeds ₹1,000 crore, so utilisation = 1,400 ÷ 1,000 × 100 = 140%. The limit is breached by 8 percentage points.
  5. ALCO should record the breach, report it as the policy requires, find the cause, and act: raise short-term funding in a diversified way, liquidate or repo liquid assets, or slow short-dated lending.
  6. ALCO should also run a stress test on the new position and report to the board.

Answer: The mismatch is ₹1,400 crore (28%) against a limit of ₹1,000 crore (20%). The limit is breached at 140% utilisation. ALCO must escalate and take corrective funding or asset action.

Exam tips

  • Structure answers by level: board, management, ALCO, risk function, reporting. Examiners reward clear role separation.
  • In case-based MCQs, look for who is acting beyond their role, or a missing limit, stress test or escalation.
  • For policy questions, list tolerance, limits, roles, reporting and escalation. Add one line on stress testing and the contingency plan.
  • Use RBI and BCBS wording at the level of ideas. Do not quote section or paragraph numbers unless you are sure.
  • In numerical cases, show the limit comparison and end with an action recommendation.

Practice questions from Liquidity Risk Management

Liquidity Risk Management Framework and Governance in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Liquidity Risk Management Framework and Governance: frequently asked questions

What are the BCBS principles for sound liquidity risk management?

They are the Basel Committee's 2008 principles on governance, measurement, funding, stress testing, contingency planning, disclosure and supervision of liquidity risk. Learn them by theme instead of by number. They are the basis for the RBI's expectations.

What does ALCO do in liquidity risk management?

ALCO reviews the bank's liquidity position, mismatches, funding costs and market conditions. It decides on actions to keep the bank within board-approved limits and recommends changes to policy. It reports to the board.

Who is responsible for liquidity risk in a bank?

The board is ultimately responsible and sets the tolerance. Senior management and ALCO manage it daily. An independent risk function monitors limits and reports.

What should a liquidity risk policy contain?

It should state the risk tolerance, roles and responsibilities, funding strategy, limits and their review, reporting lines, escalation on breaches, stress testing and the contingency funding plan.