CRB common mistakes
CRB · Understand the traps and how to avoid them.
Treating the Basel capital ratios as if they were calculated on total assets rather than risk-weighted assets, and therefore mis-stating the denominator when asked to compute a ratio or judge whether a bank meets a minimum.
Candidates memorize the headline percentages (4.5% CET1, 6% Tier 1, 8% total) but practice them against balance-sheet totals, because most everyday finance problems use total assets. The risk-weighting step is where the exam actually tests understanding, and it is easy to skip under time pressure.
What to do instead
Before any ratio question, write out the three-line formula: capital measure divided by risk-weighted assets. Then list the exposure categories and their weights (sovereigns, banks, corporates, retail, residential mortgages, past-due, equity, off-balance-sheet with credit conversion factors). Practice converting a simple balance sheet into RWA line by line until the weighting step is automatic, and always check whether the question asks for a ratio, a capital shortfall in currency, or a minimum plus buffer.
Confusing the capital conservation buffer, the countercyclical buffer, and the G-SIB/D-SIB surcharge, and adding all of them to every bank when computing the total CET1 requirement.
All three are expressed as percentages of RWA and all sit on top of the 4.5% minimum, so they blur together. Candidates also forget that the countercyclical buffer is jurisdiction-set and can be zero, and that the systemic surcharge applies only to identified institutions.
What to do instead
Build a small table with columns for instrument, who sets it, which banks it applies to, and whether it can be met with additional Tier 1 or must be CET1. Remember the buffers are all CET1 and sit above the minimum, and that breaching them triggers distribution restrictions rather than a hard failure. Work through two or three scenarios with different bank types (small domestic, internationally active, G-SIB) and compute the total requirement for each.
Answering AML questions by naming the control (CDD, EDD, SAR filing) without specifying the trigger, timing, and escalation path, so the answer sounds right but misses the tested element.
Candidates learn the vocabulary of the AML program but not the operational sequence. Exam items often hinge on a detail such as when enhanced due diligence must be completed, what happens when a customer refuses to provide beneficial ownership information, or whether a suspicious activity report requires the customer to be told.
What to do instead
For each core control, memorize a four-part script: trigger, action, timing, and recordkeeping. For example, for a politically exposed person: trigger is onboarding or a change in status; action is senior management approval plus source-of-funds and source-of-wealth review; timing is before establishing the relationship; recordkeeping is retention of the evidence. Drill the specific prohibitions (no tipping off, no informing the customer of a report) until they are reflex.
Treating fair lending as a single equal-treatment rule and missing disparate impact, redlining, steering, and the distinction between overt discrimination and facially neutral policies with a disproportionate effect.
Candidates equate fairness with not asking about race or gender on an application. The exam tests the harder concepts: policies that are neutral on their face but exclude a protected group, and the business-necessity defense that must be documented.
What to do instead
Learn the three-lens framework: disparate treatment (intent or different terms for similarly situated applicants), disparate impact (neutral policy, disproportionate exclusion), and overt violations such as redlining or discouraging applicants. For each, know the evidence examiners look for (application and denial logs, pricing exceptions, geographic distribution, underwriting overlays) and the elements of a business-necessity justification. Practice classifying short fact patterns into the correct lens before choosing an answer.
Applying the liquidity coverage ratio and net stable funding ratio to the wrong time horizon, or using the wrong runoff assumptions for retail versus wholesale deposits.
Both ratios are built from the same balance sheet and both are expressed as percentages, so candidates swap the 30-day stress horizon of the LCR with the one-year structural horizon of the NSFR. Deposit runoff assumptions are also easy to guess at rather than recall.
What to do instead
Anchor each ratio to one sentence: LCR is high-quality liquid assets divided by 30-day net cash outflows under stress; NSFR is available stable funding divided by required stable funding over one year. Then memorize the runoff tiers by deposit type (insured retail, stable small-business, operational wholesale, non-operational wholesale, secured funding) and the stable funding factors for asset classes. Recompute a small example for each ratio from the same balance sheet so the different horizons and factors become concrete.
Reading an interest rate risk question as a simple duration problem and ignoring the repricing gap, basis risk, yield curve risk, and the effect of embedded options.
Duration is the one tool candidates remember from earlier finance study, so they apply it to every IRRBB question. Many exam items instead test whether the candidate can identify which component of interest rate risk a scenario represents, or how non-maturity deposits and prepayment options change the exposure.
What to do instead
Learn the four IRRBB components with a one-line definition and example each: repricing gap, basis risk, yield curve risk, and option risk. Then practice classifying scenarios into these categories before doing any arithmetic. When a calculation is required, check whether the question specifies a parallel shock or a non-parallel one, and whether cash flows are contractual or behavioral.
Confusing the roles of the board, senior management, and the three lines of defense when answering governance and internal control questions, and assigning operational responsibility to the board.
The words oversight and responsibility are used loosely in study material. Candidates default to the board for every control question because it sounds safest, but exam items often test that the board approves and oversees while management executes, and that internal audit provides independent assurance rather than owning controls.
What to do instead
Write a one-page role map: board sets strategy, risk appetite, and approves policies and key appointments; senior management implements within that appetite; the first line owns and manages risk; the second line sets frameworks and challenges; the third line provides independent assurance and reports to the board or its audit committee. For each practice question, ask which line or body the stem describes before selecting, and note that independence is the distinguishing feature of the third line.
Assuming that a report filed on time is a compliant report, and ignoring data governance, reconciliation, and sign-off requirements in regulatory reporting questions.
Candidates treat reporting as a submission task rather than a control process. Exam items test whether the candidate knows that accuracy, completeness, and traceability to source systems are separate obligations from timeliness, and that a senior officer must attest to the figures.
What to do instead
Study reporting as a four-stage control chain: data sourcing and lineage, validation and reconciliation, review and sign-off, and submission with retention. For each major report type, know the frequency, the reference date, the correction and resubmission process, and who attests. When a question describes a late but accurate report or a timely but unreconciled one, treat both as deficiencies and identify which control failed.
Answering enforcement questions by describing the violation instead of the supervisory consequence, and missing the escalation ladder from findings to formal action.
Candidates focus on what the bank did wrong because that is the memorable part of a case. The exam often asks what the regulator can do next, what due process applies, or which tool fits a given severity, and candidates pick the most dramatic sanction rather than the proportionate step.
What to do instead
Memorize the escalation ladder with the trigger for each rung: supervisory findings and a remediation plan, then a formal agreement or commitment, then restrictions on activities or growth, then civil money penalties, then removal or prohibition of individuals, then license revocation. For each rung, know the typical evidence threshold and the bank's right to respond. Practice matching short fact patterns to the least severe adequate tool, since proportionality is frequently the tested point.
Skipping the calculation of risk-weighted assets for off-balance-sheet items and derivatives, and treating notional amounts as if they were exposures.
Off-balance-sheet exposures require a credit conversion factor and, for derivatives, a current exposure plus an add-on for potential future exposure. Candidates either forget the conversion step or use the notional as the exposure, which produces wildly inflated and incorrect capital numbers.
What to do instead
Learn the two-step method for off-balance-sheet items: apply the credit conversion factor to the notional to get the credit equivalent, then apply the risk weight to that equivalent. For derivatives, use current exposure plus the potential future exposure add-on, and know that collateral and netting reduce the exposure under the applicable framework. Work through a commitment, a letter of credit, and an interest rate swap side by side so the different treatments are visible.