Regulatory and Compliance Risk: Capital, Conduct, and Change
Core concepts
Regulatory risk is the risk of loss from failing to comply with laws, rules, and standards. Candidates must understand the Basel framework: Pillar 1 (minimum capital for credit, market, and operational risk), Pillar 2 (supervisory review and ICAAP), and Pillar 3 (market discipline and disclosure). Know the capital stack: Common Equity Tier 1, Additional Tier 1, and Tier 2, plus buffers such as the capital conservation and countercyclical buffers. Understand liquidity standards (LCR and NSFR), leverage ratio, and stress testing regimes. Be familiar with conduct risk, anti-money laundering (AML) and know-your-customer (KYC) obligations, data privacy, and reporting obligations. Understand the compliance operating model: policies, monitoring, surveillance, training, and escalation.
Traps to watch
A frequent trap is confusing Pillar 2 (supervisory review) with Pillar 3 (disclosure). Another is assuming capital requirements alone ensure safety-liquidity standards address a different failure mode. Watch for questions that treat regulatory capital as identical to accounting capital; they differ in adjustments and eligibility. Also note that buffers sit above minimums and constrain distributions when breached. Be careful with extraterritorial reach: a firm may face multiple regulators for the same activity.
Worked rule of thumb
For a capital adequacy question, build the ratio: CET1 capital ÷ risk-weighted assets. If CET1 is $400 million and RWA is $5 billion, the ratio is 8%. Compare against the minimum plus buffers, not the minimum alone. If the answer only checks the 4.5% minimum, it likely misses the conservation and countercyclical buffers that raise the effective requirement.