Risk-Based Supervision

The regulator scores each supervised firm, usually on two axes: how likely it is to run into trouble, and how much damage it would cause if it did. Size, complexity, business model, control quality and past conduct all feed the score. High-scoring firms get frequent visits, deeper testing and senior management attention, while low-scoring ones get lighter, less frequent contact. Scores are revisited as new data and events arrive. The approach contrasts with a fixed cycle where every firm is inspected on the same schedule, or with checking rule by rule regardless of importance. Supervised firms meet it in the form of different inspection frequency and intensity. Without such triage, a corner lender would get the same inspection hours as a bank whose failure could freeze a market.

Supervising 400 small lenders and a handful of large banks, a regulator rates every firm each year on impact and likelihood of failure. A large bank with weak controls over liquidity is placed in the top tier and reviewed several times a year. A small, simple lender with a clean record is visited once every three years, unless its complaint data or reporting begins to deteriorate.