Strategy, Risk and Capital Management - An ICAAP Framework August 2009

1. Strategy, Risk and Capital Management- An ICAAP Framework August 2009 Hasan Kazmi Director – Enterprise Risk European Capital Markets Royal Bank of Canada

2. Objectives Following are some of the issues I look to address in this presentation: • Relationship between risk & capital; • Process for determining capital requirements in the context of risk; • Identify factors impacting level of capitalisation; • Relationship between risk, treasury and business management functions; • ICAAP requirements; • Lessons learnt and pitfalls to avoid; Please note that this presentation is based on my personal experience and opinions and does not necessarily reflect on the management views or process of my employer.

3. What an ICAAP should not be!

4. Executive Management Health Check Put yourself in the CEO’s position and ask yourself the following questions: 5/5 = Exceptional executive engagement 4/5 = Executive function is diligent in value creation 3/5 = Fair engagement but some concerns 2/5 = Executive function leaving a lot to chance 1/5 = Executive function is ineffective 0/5 = Time to move to a safer bank!

5. Relationship Between Risk & Capital and Capital Adequacy Framework

6. Risk & Financial Services Sector Primary sources of competitive advantage Financial Institutions are vital economic agents as they perform the following vital functions: • Price risk • Warehouse risk, • Transform and transfer risks. But there is a paradox; financial institutions have traditionally lagged behind other sectors in assessing and communicating the nature of the risks they are assuming. Investors Discount Bank Stocks: Complexity and Lack of Transparency Source: Stradea Consulting

7. What do we mean by risk? Risk is defined as any unexpected event or development, either internal or external to the organisation, which may have a disproportionate impact (positive or negative) on the performance of the organisation. Risk is quantified in terms of both the likelihood (probability) and impact of a risk event. The relationship between probability and size of impact is represented by a risk distribution curve. Loss Distribution 3.0% 99.96% Confidence level Expected Loss 2.5% Unexpected Loss 2.0% Note - 99.96% CI equates to a 1 in 2500 event. 1.5% Probability of Loss 1.0% σ 0.5% 0.0% 0 20 40 60 80 100 120 140 160 Potential Loss ($mm)

8. Capital & Risk Three Potential Uses of Capital: • Fund business operations • Act as buffer against risk (unexpected losses) • Strategic acquisition buffer However, given the cost of equity capital and the availability of other funding sources (deposit taking, money markets, debt markets), equity capital is primarily maintained as buffer against risk and for strategic acquisitions.

9. Types Capital ActualCapital Shareholder Equity Reserves Tier 1 Tier 2 InternalCapital RegulatoryCapital Strategy & Risk Regulatory Rules Portfolio Actual capital is the book value of permanently invested shareholder capital which represents the residual claim on the bank’s net earnings. Equity capital is supplemented by debt Internal capitalrepresents risk based capital requirements covering unexpected losses arising from credit, market and operational risks which is calibrated to maintain a level of solvency appropriate for bank’s rating. Regulatory capital represents the level of capital which the supervisory authority deem necessary to maintain the solvency of the banking sector. Regulatory capital is now better aligned to bank’s economic capital. Economic & Regulatory Capital = Demand Actual Capital = Supply

10. Internal & Regulatory Capital Internal and Regulatory Capital are two independent measures of capital requirements. Economic Capital Management Buffer Business Growth Stress Capital Pillar 1 Requirements Supervisory Add-ons

11. Internal Perspective Regulatory Perspective Surplus Surplus Tier 2 Tier 2 Individual Capital Add-ons Mgt Buffer Guidance < < Total Capital Total Capital Stress Buffer Internal Capital Total Regulatory Capital Total Regulatory Capital Tier 1 Pillar 1 Pillar 1 Tier 1 Regulatory Regulatory Capital Capital Economic Capital Capital Adequacy Assessment Internal and Regulatory Capital requirements are compared with actual balance sheet capital. Surplus capital over both Internal and Regulatory Capital requirements arises owing to inefficiency from complex legal corporate structure (with multiple balance sheets) and general capital management inefficiencies. Tier 1 (Core) Capital = Common stock and disclosed reserves (or retained earnings) Tier 2 (Supplementary) Capital = Undisclosed reserves, revaluation reserves, general provisions, hybrid instruments and subordinated term debt

12. Measuring Internal Capital • Economic Capital • Stress Testing • Strategic and Management Buffers

13. Economic Capital Economic Capital - a measure of capital requirements based on the underlying risks faced by the bank. Economic capital is a measure of risk calibrated to reflect the desired level of solvency (external credit rating) and risk horizon (period for which risk is measured – 1 yr in most cases). Economic Capital forms a critical component of the bank’s Internal Capital Requirements, along with the Stress Test Buffer and the Strategic Buffer.

14. Stress Testing and Scenario Analysis Stress Testing and Scenario Analysis are important risk measurement techniques for assessing the impact of extreme but plausible risks. The primary objectives underlying such analysis are: • Potential volatility in business performance • Adequacy of contingency plans • Capacity and capability of management function • Adequacy of financial resources Key Deliverables of Stress Test and Scenario Analysis • Management understanding and engagement • Identifying of business model improvements • Identifying adequacy of capital and liquidity resources Stress Testing and Scenario Analysis have assumed critical importance in the current turbulent financial markets and are seen as being a key defining feature of a bank’s internal risk based capital assessment process.

15. Strategic and Management Buffer In addition to the risk based capital requirements (Economic Capital and Stress Test Buffer) most bank’s determine capital for growth and strategic acquisitions. Organic Business Growth – as part of the annual budgeting and planning process balance sheet should be projected from a number of years and in anticipation of this growth certain level of capital should be held. Inorganic Growth – bank’s which use acquisition as a strategic tool need to set aside a certain level of capital for potential acquisitions.

16. Use of Internal Capital - Risk Adjusted Returns & Shareholder Value

17. Shareholder Value Creation Shareholder value is created when actual returns exceed minimum expected returns on invested capital. Minimum expected returns reflect the systemic risk of the organisation. Measuring Value Created Economic Profit = Risk Ad. Returns – Cost of Capital

18. Economic Profit – Prospective & Delivered Net Capital Charge Prospective EP Working Profit Expected Loss Tax Charge = - - - (Working Profit – Expected Loss – Net Capital Charge) × Tax rate% Internal Capital × cost of capital% Total Income – Total Cost (Working Profit – Net Bad Debt – Net Capital Charge) × Tax rate% Delivered EP = Working Profit - Net Bad Debt - Net Capital Charge - Tax Charge

19. Internal Capital Allocation • Internal Capital need to be allocated or attributed to the individual business functions in proportion to their contribution to the overall risk profile. • Some components of Internal Capital are directly attributable to individual business functions (credit, market, operational), while other components (stress buffer) are allocated based on arbitrary rules. • Where internal capital is not allocated it is assumed that the group function pays for this. Typically Strategic Management Buffer is paid for by the group function. • Group function is also expected to cover the cost of surplus.

20. Cost of Capital – Hurdle Rate • Capital Asset Pricing Model (CAPM) is based on the neoclassic portfolio theory which assumes firm specific risk of individual firms does should not concern executive management as investors (shareholders) will diversify away company specific risk through active portfolio management. Under CAPM hurdle rates (cost of capital) are intended to compensate investors for systemic risk (companies beta) of the firm. However, Internal Capital is a firm specific measure of risk; therefore applying CAPM based hurdle rates to EC is mixing two very difference concepts. • Most bank’s use a Weighted Average Cost of Capital (WACC) based on an informed view of cost of equity and the cost of debt based on credit rating of the bank. • Application of single hurdle rates across all business functions encourages discriminatory behaviour against low-risk business and in favour of high risk ones. Ideally hurdle rates should be set for individual business functions.

21. Individual Capital Adequacy Assessment Process

22. Basel II Framework

23. Pillar 2 ICAAP

24. Supervisory Review – FSA (UK)

25. Concluding Comments

26. Lessons Learnt • Executive management need to understand and optimise the risk return of the bank • Risk cuts across the organisation and needs to be managed at a holistic level • Capital is the last resort risk management tool, management need to be focused on risk governance, monitoring and controls. CEO and his/her direct reports are meant to set the tone from the top with respect to risk culture. • Responsibility for ICAAP needs to be equally owned by risk, finance and treasury functions, with appropriate input from the business functions • CEO is the owner of the ICAAP • An ICAAP is NOT a compliance exercise.