Banking and Insurance - Laws and Practice · Risk Management in Banks and Basel Accords

Market, Liquidity and Operational Risk Management in Banks

Updated 11 October 2026 · Fact-checked

Market risk is loss from changes in interest rates, exchange rates or prices. Liquidity risk is inability to meet payments when due. Operational risk is loss from failed processes, people, systems or events. Banks manage them through asset liability management, value at risk limits, liquidity ratios such as LCR, and internal controls with loss data.

Understand Market, Liquidity and Operational Risk Management

A bank borrows short and lends long. This one fact creates most of its non-credit risks. You should study the three risks as separate questions: what can go wrong, how it is measured, and what control limits it.

Market risk is the risk of loss on on-balance-sheet and off-balance-sheet positions because market prices move. The main types are interest rate risk, foreign exchange risk, equity price risk and commodity risk. A bank holding government bonds loses value when yields rise. Banks measure this with tools such as duration, gap analysis and value at risk (VaR).

Liquidity risk is the risk that the bank cannot meet its obligations as they fall due without unacceptable cost. A bank can be solvent and still fail if depositors withdraw faster than it can sell or fund assets. Asset liability management (ALM) is the process of managing the balance sheet so that the timing of cash inflows and outflows, and the interest rate sensitivity of assets and liabilities, stay within limits set by the board. In practice an Asset Liability Committee (ALCO) of senior management oversees this, and the bank places its assets and liabilities into time buckets to see the gaps.

Operational risk is the risk of loss from inadequate or failed internal processes, people and systems, or from external events. It includes legal risk but excludes strategic and reputational risk in the Basel definition. Examples are fraud, system failure, wrong data entry and cyber attacks. Banks control it through internal controls, segregation of duties, loss data collection, risk and control self-assessment, key risk indicators and business continuity plans.

RBI expects the board to approve policies for each risk and senior management to implement them. In an exam answer, link the risk to its measure and then to its control. Detailed numeric limits and parameters change by RBI circular, so state the principle and refer to the current RBI directions rather than quoting figures from memory.

Key rules to remember

Liquidity Coverage Ratio (LCR): LCR = Stock of high quality liquid assets (HQLA) ÷ Total net cash outflows over the next 30 calendar days × 100; Basel III requires LCR to be at least 100%. It covers a 30-day stress scenario. Check the current RBI minimum and any relaxation before quoting.
Net Stable Funding Ratio (NSFR): NSFR = Available stable funding ÷ Required stable funding × 100; Basel III requires at least 100%. It looks at a one-year horizon and limits reliance on short-term funding for long-term assets.
Net cash outflows: Net cash outflows = Total expected cash outflows − Minimum of (total expected cash inflows, 75% of total expected cash outflows); Under Basel III, inflows are capped at 75% of outflows, so net outflows are never below 25% of gross outflows.
Liquidity gap: Gap in a time bucket = Rate or cash inflows (assets) − outflows (liabilities) in that bucket; A negative gap means outflows exceed inflows in that bucket. Compare the gap with the limit set by the board.
Rate sensitivity gap: Gap = Rate sensitive assets (RSA) − Rate sensitive liabilities (RSL); A positive gap means net interest income rises when rates rise. A negative gap means it falls.
Change in net interest income: Change in NII ≈ Gap × Change in interest rate; Applies to a given bucket over a given period. For a one-year view use the cumulative one-year gap.
Scaling VaR to a longer horizon: VaR for N days = 1-day VaR × √N; Holds under the assumption of independent, identically distributed daily returns. Basel's market risk approach used a 10-day horizon.
Parametric VaR: VaR = Position value × z × σ (for the chosen horizon); z is about 1.65 at 95% and 2.33 at 99% confidence for a one-tailed normal distribution. σ is the standard deviation of returns.

How to solve Market, Liquidity and Operational Risk Management questions

Use this method for any theory or case question on market, liquidity or operational risk in banks.

1Identify which risk the facts describe: price or rate movement is market risk, inability to pay is liquidity risk, failure of process, people, system or event is operational risk.
2State the definition in one or two lines, using the regulatory wording where you know it.
3Name the measurement tool that fits: gap analysis, duration or VaR for market risk; LCR, NSFR and structural liquidity statement for liquidity risk; loss data and risk indicators for operational risk.
4If numbers are given, write the formula, substitute, and compute in clear lines. Check units and the time horizon.
5Compare the result with the limit or minimum, and say whether the bank complies.
6Recommend controls and governance: board policy, ALCO, limits, stress testing, internal controls, reporting.
7Conclude with a one-line answer that responds to the exact question asked.

Quickest way: Risk, measure, control in three lines

When to use it: Use this when a short-note question asks you to explain a risk or an ALM concept in limited time.

Line one: define the risk in plain words with one bank example.
Line two: give the measure with its formula, for example LCR or VaR.
Line three: list two or three controls and who is responsible, such as the board, ALCO and the risk management department.
For numerical parts, compute gap or ratio first and then comment on it.

Common mistakes in Market, Liquidity and Operational Risk Management

Treating liquidity risk and solvency risk as the same thing.
Both lead to bank failure, so they seem alike.
Fix: Say that liquidity is about timing of cash, solvency is about assets versus liabilities. A solvent bank can still face a liquidity crisis.
Using total inflows in LCR net outflows without the cap.
Students subtract inflows from outflows directly.
Fix: Cap inflows at 75% of outflows. Net outflows cannot fall below 25% of gross outflows.
Reading the sign of the rate sensitivity gap the wrong way.
Students memorise the sign without thinking about direction.
Fix: Ask who reprices faster. Positive gap: assets reprice more, so income rises when rates rise and falls when they fall.
Saying VaR gives the maximum possible loss.
The word 'value at risk' sounds like a worst case.
Fix: State that VaR is the loss not expected to be exceeded at a given confidence level over a given horizon. Losses beyond it can occur, so stress testing is also used.
Including reputational and strategic risk in the Basel definition of operational risk.
Operational risk is loosely understood as any non-financial risk.
Fix: Remember the definition includes legal risk but excludes strategic and reputational risk.
Writing only definitions and skipping controls and governance.
Students stop once the concept is explained.
Fix: Always add the board's role, ALCO, limits, reporting and internal controls. Case-based questions reward the recommendation.

Worked examples

Example 1

A bank has high quality liquid assets of ₹1,200 crore. Its expected cash outflows over the next 30 days under stress are ₹1,500 crore and expected cash inflows are ₹900 crore. Compute the LCR and state whether it meets a minimum of 100%.

Show the solution

Cap on inflows = 75% of ₹1,500 crore = ₹1,125 crore.
Inflows are ₹900 crore, which is below the cap, so the full ₹900 crore is counted.
Net cash outflows = ₹1,500 crore − ₹900 crore = ₹600 crore.
LCR = 1,200 ÷ 600 × 100 = 200%.
200% is above the 100% minimum.

Answer: LCR is 200%. The bank meets the minimum of 100%.

Example 2

A bank's one-year bucket shows rate sensitive assets of ₹5,000 crore and rate sensitive liabilities of ₹6,500 crore. Interest rates are expected to rise by 1 percentage point. Find the gap and the approximate change in net interest income, and suggest one action.

Show the solution

Gap = RSA − RSL = 5,000 − 6,500 = −₹1,500 crore (negative gap).
Change in NII ≈ Gap × change in rate = −1,500 × 1% = −₹15 crore.
A negative gap means more liabilities than assets reprice within the year, so funding costs rise faster than income.
Action: shorten asset maturities or move to floating rate assets, lengthen liability maturities, or use interest rate derivatives within board-approved limits.

Answer: The gap is −₹1,500 crore. Net interest income falls by about ₹15 crore if rates rise by 1 percentage point. The ALCO should reduce the negative gap.

Exam tips

Write definitions in regulatory wording, then add one example. Examiners look for the right term and its use.
Present numbers in a small set of clear lines: formula, substitution, result, comment. Method marks are available even if arithmetic slips.
In case questions, separate the three risks. A single event, like a cyber attack that stops payments, can raise operational and liquidity issues; name both.
Mention governance: board approved policy, ALCO, risk management committee. This is an easy addition that lifts an answer.
Do not quote RBI limits from memory unless sure. Say 'as prescribed by RBI from time to time'.

Practice questions from Risk Management in Banks and Basel Accords

Market, Liquidity and Operational Risk Management in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Market, Liquidity and Operational Risk Management: frequently asked questions

What is asset liability management in banks?

It is the process of managing the maturity and interest rate profile of a bank's assets and liabilities. The aim is to manage liquidity and interest rate risk within board-approved limits. An Asset Liability Committee usually monitors the structural liquidity and rate sensitivity statements.

What does value at risk mean for market risk?

VaR estimates the loss a portfolio is not expected to exceed over a set period at a chosen confidence level. For example, a 1-day 99% VaR of ₹10 crore means a loss above ₹10 crore is expected on only about 1 day in 100. It does not show how large losses beyond that level can be.

How is the liquidity coverage ratio calculated?

Divide the stock of high quality liquid assets by total net cash outflows over the next 30 days, then multiply by 100. Net outflows count inflows only up to 75% of outflows. The ratio must be at least 100% under Basel III.

What are the main operational risk controls in banks?

They include internal controls, segregation of duties, loss data collection, risk and control self-assessment, key risk indicators, audit and business continuity plans. The board and senior management are responsible for setting and enforcing them.