Regulatory Environment and Enterprise Risk Management
What the exam tests
This domain tests how regulation and ERM fit together: Basel III capital, SBP and SECP requirements, ICAAP, supervisory review, disclosure, and AML/CFT. Expect questions on capital ratios, the three pillars, and the difference between regulatory and economic capital.
Core rules and concepts
- Basel III has three pillars: minimum capital requirements, supervisory review, and market discipline through disclosure.
- Common Equity Tier 1, Tier 1, and total capital are measured against risk-weighted assets. The capital conservation buffer sits above the minimum.
- ICAAP requires a bank to assess material risks, hold adequate capital, and set a capital plan under stress.
- SBP issues Basel-aligned capital, liquidity, and risk management regulations for Pakistani banks; SECP regulates listed companies and securities market participants.
- AML/CFT obligations arise from the AML Act 2010 and SBP/SECP regulations, including customer due diligence and suspicious transaction reporting.
- ERM integrates risk types across the enterprise and links risk to strategy and capital.
Worked example
A bank has Tier 1 capital of PKR 9 billion and Tier 2 capital of PKR 2 billion, with PKR 1 billion of deductions. Eligible capital = 9 + 2 - 1 = PKR 10 billion. Risk-weighted assets are PKR 80 billion, so the capital adequacy ratio is 10/80 = 12.5%. If the minimum including the capital conservation buffer is 11.5%, the bank has a 1.0 percentage point surplus, equal to PKR 0.8 billion of capital. The reasoning: deductions reduce eligible capital, and the buffer is part of the requirement, not free capital.
Traps that cost marks
Do not confuse regulatory capital with economic capital. Do not ignore deductions from capital. Do not treat Pillar 2 as a disclosure requirement; Pillar 3 is disclosure. Do not assume Basel standards apply identically in Pakistan without local SBP add-ons. Do not treat AML as only a compliance formality; it is a supervisory risk issue.