Skip to content

FRM Exam Part II · Stress Testing Banks

Stress Testing Fundamentals and Governance for Banks

Updated 11 October 2026 · Fact-checked

Stress testing assesses a bank's resilience to exceptional but plausible events by applying severe scenarios to its exposures. Unlike VaR, it does not rely on a probability estimate from historical data. Basel guidance requires board and senior management ownership, clear policies, adequate data and infrastructure, independent review, and actual use of results in decisions.

Understand Stress Testing Fundamentals and Governance

A stress test asks one question: if something severe but plausible happens, how much do we lose and can we survive? The event might be a deep recession, a sharp rate jump, a sovereign default or a funding freeze. The test turns that event into shocks to risk factors and then into losses, capital and liquidity effects.

VaR and stress testing answer different questions. VaR gives a loss threshold at a chosen confidence level over a chosen horizon, usually estimated from recent data. It says nothing about how bad losses are beyond the threshold. Stress testing looks at the tail and at events with no history. It can be built from past crises, hypothetical scenarios, or sensitivity shocks to a single factor. The two complement each other. Stress tests also help where VaR models break down, such as when correlations change or markets become illiquid.

Banks stress test for several purposes: to give senior management and the board a view of the bank's risk profile, to identify hidden concentrations and weak points, to test risk appetite and limits, to support capital and liquidity planning, to assess the model assumptions behind other tools, and to support contingency planning. Supervisors also use results to judge capital adequacy.

Governance is what makes a stress test useful. Basel Committee principles (the 2009 stress testing principles, later revised) stress that the board and senior management must own the programme, not leave it to a technical team. The programme needs written policies, clear responsibilities, scenarios that cover all material risks and the whole bank, and sound data and systems. Models, assumptions and limits of the tests must be documented and challenged, and the programme needs independent validation and regular review.

The central idea is the use test: results must feed real decisions, such as capital planning, limit setting, risk appetite, funding and contingency plans. Management should be willing to act on results, including by reducing exposures. A test that is run but ignored fails the principle, however sophisticated the models are.

Key formulas to remember

VaR versus stress test
VaR = loss not exceeded at confidence level c over horizon h; stress loss = loss under a chosen severe scenario
VaR is probability-based. A stress loss has no stated probability and can exceed VaR by a large margin.
Stress test types
Sensitivity (one factor) | Scenario (multi-factor, historical or hypothetical) | Reverse (start from failure, find the cause)
Reverse stress testing starts from a defined outcome, such as breaching minimum capital, and works back to the scenarios that cause it.
Governance principles (summary)
Board and senior management ownership; written policies; sound data and infrastructure; independent validation; use of results
These are the themes tested. Remember that results must influence decisions.
Scenario criteria
Severe but plausible; covers material risks; forward-looking; tailored to the bank
Scenarios should not be limited to past events and should consider interactions between risks.

How to solve Stress Testing Fundamentals and Governance questions

Use this method for any question on stress testing purpose, VaR comparison or governance principles.

  1. 1Identify what the question tests: purpose, comparison with VaR, scenario design, or governance.
  2. 2If it compares with VaR, ask whether the point is about probability, history, tail severity or model dependence.
  3. 3If it is about governance, decide who owns the issue: the board, senior management, or an independent function.
  4. 4Check whether the situation involves results not used in decisions. That points to a use-test failure.
  5. 5Look for gaps in coverage: risks left out, bank-wide aggregation missing, or weak data.
  6. 6Eliminate options that make stress testing purely a regulatory exercise, a replacement for VaR, or the sole task of a technical team.
  7. 7Choose the option that matches Basel's emphasis on ownership, challenge and use in decisions.

Quickest way: Three-question filter

When to use it: Use when you have under a minute for a conceptual MCQ.

  1. Who owns it? Board and senior management, not just the risk quant team.
  2. Is it forward-looking and severe but plausible? If an option is only about past data or probabilities, be suspicious.
  3. Does it change decisions? The right answer usually links results to capital, limits or contingency plans.

Common mistakes in Stress Testing Fundamentals and Governance

  • Treating stress testing as a replacement for VaR

    Both measure potential loss, so they look like substitutes.

    Fix: Remember they complement each other. VaR gives a probability-based threshold; stress tests explore severe events and the tail.

  • Saying a stress loss has a stated probability

    Candidates carry over the confidence-level idea from VaR.

    Fix: Scenarios are chosen by plausibility and severity, not by a confidence level.

  • Assigning ownership solely to the risk or quant team

    Stress testing looks technical.

    Fix: Basel guidance puts the board and senior management in charge of the programme, scenarios and use of results.

  • Limiting scenarios to historical crises

    Past events are easier to calibrate.

    Fix: Include hypothetical, forward-looking scenarios and reverse stress tests, since the next crisis may differ from past ones.

  • Ignoring the use test

    Candidates focus on methodology and models.

    Fix: A programme fails if results do not influence capital, limits, funding or strategy, even when the models are sound.

  • Confusing reverse stress testing with a worst-case scenario

    Both sound extreme.

    Fix: Reverse testing begins from a failure outcome and identifies the scenarios that could cause it.

Worked examples

Example 1

A bank's 99% 1-day VaR is USD 12 million. A hypothetical scenario of a sharp equity fall and credit spread widening shows a USD 85 million loss. Which statement is most appropriate? (A) The VaR model is wrong because the loss exceeds VaR. (B) The stress loss shows what VaR does not: potential loss in a severe event, and it should be reviewed by senior management. (C) The stress loss has a 1% probability. (D) The stress test should be discarded since it is not probability-based.

Show the solution
  1. VaR is a threshold at a confidence level and says nothing about loss beyond it.
  2. A stress loss is by design a severe scenario. Exceeding VaR does not prove the VaR model is wrong. So A is wrong.
  3. A stress scenario has no stated probability, so C is wrong.
  4. Stress tests are valued precisely because they are not probability-based, so D is wrong.
  5. B matches the complementary role and the governance expectation that senior management reviews results.

Answer: B

Example 2

A bank runs an extensive quarterly stress testing programme, but results are filed in the risk department and have never changed limits, capital plans or funding. Which Basel principle is most clearly breached? (A) Scenario severity (B) Use of results in decision-making (C) Model back-testing (D) Data granularity

Show the solution
  1. The problem is not scenario design or models; the programme is extensive.
  2. The problem is that results never influence limits, capital or funding.
  3. This is the use test: stress results must be integrated into decisions and overseen by the board and senior management.
  4. So the breach is failure to use results in decision-making.

Answer: B

Exam tips

  • Expect conceptual, case-style questions. Match the described failure to a governance principle such as ownership, challenge or use of results.
  • When comparing with VaR, think complementary, not substitute. Options saying one replaces the other are usually wrong.
  • Know the three test types: sensitivity, scenario and reverse. Reverse starts from the failure outcome.
  • Watch for options that confine responsibility to the technical team. Board and senior management oversight is the favoured answer.

Practice questions from Stress Testing Banks

Stress Testing Fundamentals and Governance in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Stress Testing Fundamentals and Governance: frequently asked questions

What is the main difference between stress testing and VaR?

VaR estimates a loss threshold at a set confidence level, usually from historical data. Stress testing applies severe scenarios, including ones with no history, and does not assign a probability. They complement each other.

Why do banks conduct stress tests?

They give management and the board a view of vulnerabilities, test risk appetite and limits, support capital and liquidity planning and contingency plans, and help supervisors judge resilience. They also expose weaknesses in other models.

What does the use test mean in stress testing?

It means stress test results must actually influence decisions, such as capital planning, limits, funding and strategy. A programme that produces results nobody acts on does not meet the principle.

Who is responsible for stress testing governance in a bank?

The board and senior management are responsible for the programme. Technical teams run the tests, but leadership must set objectives, review results, challenge assumptions and act on findings.