Note 6 - Risk factors

Risk Management

SpareBank 1 SMN aims to maintain a moderate risk profile and to apply risk monitoring of such high quality that no single event will seriously impair the Bank’s financial position. The Bank’s risk profile is quantified through targets for rating, concentration, risk-adjusted return, loss ratios, expected loss, necessary economic capital and regulatory capital adequacy.

The principles underlying SpareBank 1 SMN’s Risk Management are laid down in the Bank’s risk management policy. The Bank gives much emphasis to identifying, measuring, managing and monitoring central risks in such a way that the Group progresses in line with its adopted risk profile and strategies.

Risk management within the Group is intended to support the Group’s strategic development and target attainment. The risk management regime is also designed to ensure financial stability and prudent asset management. This will be achieved through:

• A strong organisation culture featuring high risk-management awareness
• A sound understanding of the risks that drive earnings and risk costs, thereby creating a better basis for decision-making
• Striving for an optimal use of capital within the adopted business strategy
• Avoiding unexpected negative events which could be detrimental to the Group’s operations and reputation in the market

The Group’s risk is quantified by calculating expected loss and the need for risk-adjusted capital (economic capital) needed to meet unexpected losses.

Expected loss is the amount which statistically can be expected to be lost in a 12-month period. Risk-adjusted capital is the volume of capital the Group considers it needs to meet the actual risk incurred by the Group. The board has decided that the risk-adjusted capital should cover 99.9 per cent of all possible unexpected losses. Statistical methods are employed to compute expected loss and risk-adjusted capital, but the calculation requires expert assessments in some cases. In the case of risk types where no recognised methods of calculating capital needs are available, the Bank defines risk management limits to ensure that the likelihood of an event occurring is extremely low. For further details see the Bank’s Pillar III reporting which is available on the Bank’s website.

The Group’s overall risk exposure and risk trend are followed up through periodic risk reports to the administration and the board of directors. Overall risk monitoring and reporting are carried out by the Risk Management Division which is independent of the Group’s business areas.

Credit risk

Credit risk is the risk of loss resulting from the inability or unwillingness of customers or counterparties to honour their commitments to the Group. The Group is exposed to credit risk through all customer and counterparty receivables. The main exposure is through ordinary lending and leasing activities, but the Group’s credit risk also has a bearing on the liquidity reserve portfolio through counterparty risk arising from interest rate and foreign exchange derivatives.

Credit risk associated with the Group’s lending activity is the largest area of risk facing the Group. Through its annual review of the Bank’s credit strategy, the Board of Directors concretises the Bank’s risk appetite by establishing objectives and limits for the Bank’s credit portfolio. The Bank’s credit strategy and credit policy are derived from the Bank’s main strategy, and contain guidelines for the risk profile, including maximum expected loss (EL) for the retail market and corporate market divisions respectively, maximum portfolio default probability (PD) and maximum economic capital (UL) allocated to the credit business.

Concentration risk is managed by distribution between the retail market and corporate market, limits on the size of loans and loss given default on individual exposures, limits on maximum exposure and application of economic capital within lines of business, limits on regulatory risk weighted assets for the retail market and the corporate market and special requirements as to maximum exposure, credit quality and number of exposures above 10 per cent of own funds.

Compliance with credit strategy and limits adopted by the Board of Directors is monitored on a continual basis by the Risk Management Division and reported quarterly to the Board of Directors.

The bank has approval to use internal models in its risk management and capital calculation (IRB), and has applied to Finanstilsynet for permission to use the advanced approach for its loans to corporates. A reply from Finanstilsynet is expected in mid-2014.

The Bank’s risk classification system is designed to enable the Bank’s loan portfolio to be managed in conformity with the Bank’s credit strategy and to secure the risk-adjusted return. The Board of Directors delegates lending authorisation to the Group CEO and the executive directors. The Group CEO can further delegate authorisations to levels below executive director level. Lending authorisations are graded by size of commitment and risk profile.

The Bank has a division dedicated to credit support which takes over dealings with customers who are clearly unable, or are highly likely to become unable, to service their debts unless action is taken beyond ordinary follow-up.

The Bank uses credit models for risk classification, risk pricing and portfolio management. The risk classification system builds on the following main components:

1. Probability of Default (PD)

The Bank’s credit models are based on statistical computations of probability of default. The calculations are based on scoring models that take into account financial position and behavioural data. The models are partly point-in-time oriented, and reflect the probability of default in the course of the next 12 months under current economic conditions. Customers are assigned to one of nine risk classes based on PD, in addition to two risk classes for exposures in default and/or subject to individual impairment write down.

The models are validated on an ongoing basis and at least once per year both with respect to their ability to rank customers and to estimate PD levels. The validation results confirm that the models’ accuracy meets internal criteria and international recommendations.

2. Exposure at Default (EAD)

EAD is an estimation of the size of an exposure in the event of, and at the time of, a counterparty’s default. For drawing rights, a conversion factor (CF) is used to estimate how much of the present unutilised credit ceiling will have been utilised at a future default date. For guarantees, CF is used to estimate what portion of issued guarantees will be brought to bear upon default. CF is validated monthly for drawing rights in the retail market and corporate market. The Bank’s EAD model takes account of differences both between products and customer types.

3. Loss Given Default (LGD)

The Bank estimates the loss ratio for each loan based on expected recovery rate, realisable value of the underlying collateral, recovery rate on unsecured debt, as well as direct costs of recovery. Values are determined using standard models, and actual realised values are validated to test the models’ reliability.

The three above-mentioned parameters (PD, EAD and LGD) underlie the Group’s portfolio classification and statistical calculation of expected loss (EL) and need for economic capital/risk-adjusted capital (UL).

Counterparty risk

Counterparty risk in derivatives trading is managed through ISDA and CSA contracts set up with financial institutions that are the most used counterparties. ISDA contracts regulate settlements between financial counterparties. The CSA contracts limit maximum exposure through market evaluation of the portfolio and margin calls when the change in portfolio value exceeds the maximum agreed limit or threshold amount. The Bank will continue to enter CSA contracts with financial counterparties to manage counterparty risk.

SpareBank 1 SMN is working actively to put in place further measures to reduce counterparty risk by entering an agreement with one or more counterparties. In the future this will be regulated by law, the forthcoming EMIR Directive. As a result SpareBank 1 SMN will clear its derivatives with financial counterparties and large customer trades though a central counterparty (CCP) and will have counterparty risk against this CCP instead of the respective counterparty. Settlement with the CCP will be on a daily basis.

Counterparty risk for customers is hedged through use of cash depots or other collateral which, at all times, have to exceed the market value of the customer’s portfolio. Specific procedures have been established for calling for further collateral or to close positions if market values exceed 80 per cent of the collateral.

Market risk

Market risk is a generic term for the risk of loss arising as a result of changes in rates or prices on financial instruments. Market risk also includes the risk of loss due to changes in the price of financial derivatives such as futures, options, and financial instruments based on items other than securities, for example commodities.

Market risk arises at SpareBank 1 SMN primarily in connection with the Bank’s investments in bonds, short-term money market paper and shares, and as a result of activities designed to underpin banking operations such as funding, fixed income and currency trading. Customer activity generated through the Bank’s Markets division and SpareBank 1 Markets' use of the Bank’s balance sheet also affects the Bank’s market risk.

Market risk is managed through limits for investments in shares, bonds and positions in the fixed income and currency markets. The Bank’s strategy for market risk lays the basis for management reporting, control and follow-up of compliance with limits and guidelines.

The Group defines limits on exposure to equity instruments with a basis in stress tests employed in Finanstilsynet's (Financial Supervisory Authority of Norway) scenarios. Limits are reviewed at least once a year and adopted yearly by the Bank’s Board of Directors. Compliance with the limits is monitored by the Risk Management Division, and exposures relative to the adopted limits are reported monthly.

Interest rate risk is the risk of loss due to changes in interest rates in financial markets. The risk on all interest rate positions can be viewed in terms of the change in value of interest rate instruments resulting from a rate change of 1 basis point (0.01 percentage point). The Group utilises analyses showing the effect of this change for various maturity bands, with separate limits applying to interest rate exposure within each maturity band and across all maturity bands as a whole. Interest rate lock-ins on the Group’s instruments are essentially short, and the Group’s interest rate risk is low to moderate.

Spread risk is the risk of loss as a result of changes in market value/realistic value of bonds due to general changes in credit spreads. Bond risk is managed based on an evaluation of the individual issuers. In addition, the Bank has a separate limit for overall spread risk for all bonds. The Bank calculates spread risk based on Finanstilsynet’s module for market and credit risk. The loss potential for the individual credit exposure is calculated with a basis in rating and duration.

Exchange rate risk is the risk of loss resulting from exchange rate movements. The Group measures exchange rate risk on the basis of net positions in the various currencies. Limits on exchange rate risk are expressed in limits for the maximum aggregate foreign exchange position in individual currencies.

Equity risk is the risk of loss on positions as a result of changes in share prices. This risk is linked to positions in equity instruments as the underlying. Investments in equity funds and combination funds are included in the equity risk assessment. Shares in subsidiaries and shares forming part of a consolidated or strategic assessment are not included.

Liquidity risk

Liquidity risk is the risk that the Group will be unable to refinance its debt or unable to finance increases in its assets.

The Bank’s most important source of finance is customer deposits. At end-2013 the Bank’s ratio of deposits to loans was 48 per cent, compared with 50 per cent at end-2012 (Group).

The Bank reduces its liquidity risk by diversifying funding across a variety of markets, funding sources, maturities and instruments, and by employing long-term funding. Excessive concentration of maturities heightens vulnerability with regard to refinancing. The Bank seeks to mitigate such risk by applying defined limits.

The Bank’s finance division is responsible for the Group’s financing and liquidity management. Compliance with limits is monitored by the Risk Management Division which reports monthly to the Board of Directors. The Group manages it liquidity on an overall basis by assigning responsibility for funding both the Bank and the subsidiaries to the finance division.

Governance is based in the Group’s overall liquidity strategy which is reviewed and adopted by the board at least once each year. The liquidity strategy reflects the Group’s moderate risk profile. As a part of the strategy, emergency plans have been drawn up both for the Group and the SpareBank 1 Alliance to handle the liquidity situation in periods of turbulent capital markets. These take into account periods of both bank-specific and system-related crisis scenarios as well as a combination of the two. An aim of the Bank is to survive for 12 months of ordinary operation without fresh external funding. It also intends to succeed in surviving for 30 days under the most extreme crisis scenario. In such a scenario only the Bank’s holding of highly liquid assets may be utilised.

A consultation document for national systemically important banks was published in November 2013, and SpareBank 1 SMN is defined in this document as a national systemically important bank. The consultation document plans for early introduction of the quantitative Liquidity Coverage Ratio (NSFR) and higher requirements on long-term funding. SpareBank 1 SMN has taken this into account in its liquidity strategy and is adjusting to these requirements. Monitoring and reporting is done by Risk Management.

Access to captial has been satisfactory throughout 2013.

The Group’s liquidity situation as of 31 December 2013 is considered satisfactory.

Operational risk

Operational risk can be defined as the risk of loss resulting from:

• People: Breaches of routines/guidelines, inadequate competence, unclear policy, strategy or routines, internal irregularities
• Systems: Failure of ICT or other systems
• External causes: Criminality, natural disaster, other external causes

Operational risk is a risk category that captures the great majority of costs associated with quality lapses in the Bank’s current activity.

Management of operational risk has acquired increased importance in the financial industry in recent years. Contributory factors are internationalisation, strong technological development and steadily growing demands from customers, public authorities and other interest groups. Many substantial loss events in the international financial industry have originated in failures in this risk area.

Identification, management and control of operational risk are an integral part of managerial responsibility at all levels of SpareBank 1 SMN. Managers’ most important aids in this work are professional insight and leadership skills along with action plans, control routines and good follow-up systems. A systematic programme of risk assessments also contributes to increased knowledge and awareness of current needs for improvement in one’s own unit. Any weaknesses and improvements are reported to higher levels in the organisation.

SpareBank 1 SMN attaches importance to authorisation structures, good descriptions of procedures and clear definition of responsibilities in supply contracts between the respective divisions as elements in a framework for handling operational risk.

The Bank has put to use a registration and monitoring tool (Risk Information System) for better structure and follow up of risk, events and areas for improvement in the Group.

Operational losses are reported to the board of directors.

Each year, The Board of Directors receives an independent assessment of Group risk from the Internal Audit and the statutory auditor. The assessment also evaluates whether the internal control system functions in an appropriate and satisfactory manner.

For further information see Risk management and capital allocation and notes:

Note 13: Maximum credit risk exposure, disregadring collateral

Note 14: Financial instruments and offsetting

Note 16: Market risk related to interest rate risk

Note 17: Market risk related to foreign exchange risk