What Is the Supervisory Review Process (Pillar 2)?

The Supervisory Review Process, commonly referred to as Pillar 2 under the Basel regulatory framework, is a central component of modern banking supervision. It complements the minimum capital requirements set out under Pillar 1 and aims to ensure that banks not only meet regulatory minimums but also hold capital commensurate with their specific risk profiles. Pillar 2 emphasizes the importance of sound risk management, internal controls, and governance systems within institutions, while empowering supervisors to intervene when necessary.

Context within the Basel Framework

Pillar 2 was introduced as part of the Basel II Accord and retained under Basel III with enhanced expectations. While Pillar 1 provides standardized formulas for calculating capital for credit, market, and operational risks, Pillar 2 addresses the limitations of these standardized models by requiring a more holistic view of a bank’s overall risk exposure.

The underlying premise of Pillar 2 is that banks are responsible for developing their own risk assessment processes and for maintaining adequate capital above regulatory minimums based on their specific risk environment. Supervisors, in turn, are tasked with evaluating these internal processes, intervening where weaknesses are found, and requiring remedial actions or additional capital buffers where appropriate.

Key Components

The Supervisory Review Process consists of two main elements: the Internal Capital Adequacy Assessment Process (ICAAP) and the Supervisory Review and Evaluation Process (SREP).

Internal Capital Adequacy Assessment Process (ICAAP):
Each bank must assess the adequacy of its capital in relation to its risk profile. This self-assessment process includes identifying, measuring, aggregating, and monitoring all material risks, both those covered and not covered under Pillar 1 (e.g., interest rate risk in the banking book, concentration risk, liquidity risk, and strategic risk). The institution must ensure it holds sufficient capital to support these risks and maintain solvency under stressed conditions.

Supervisory Review and Evaluation Process (SREP):
Supervisors conduct their own evaluation of a bank’s ICAAP and broader risk management practices. This review assesses governance structures, risk culture, capital planning, stress testing methodologies, and internal controls. Based on the findings, supervisors may require banks to improve risk management practices, enhance governance frameworks, or hold additional capital beyond the regulatory minimum—commonly referred to as Pillar 2 capital add-ons.

Scope of Risks Addressed

Pillar 2 allows for a more comprehensive assessment of risk beyond the Pillar 1 metrics. This includes:

• Interest rate risk in the banking book (IRRBB), which is not explicitly captured under Pillar 1.
• Credit concentration risk, which arises from overexposure to single counterparties, sectors, or geographic regions.
• Liquidity risk and funding mismatches, especially under adverse scenarios.
• Strategic and reputational risks that could threaten a bank’s long-term viability.
• Residual risk from credit mitigation techniques and model risk related to internal model use.

Supervisors use these broader risk considerations to assess whether a bank’s capital is adequate under both baseline and stressed scenarios.

Pillar 2 and Proportionality

One of the defining features of the Supervisory Review Process is the principle of proportionality. Supervisors are expected to tailor their approach based on the size, complexity, and systemic relevance of the institution. Smaller banks with less complex risk profiles are subject to less intensive scrutiny, while larger or systemically important banks face more rigorous review processes.

This principle helps avoid imposing excessive regulatory burdens on smaller institutions while maintaining robust oversight of those whose failure could have broader financial stability implications.

Supervisory Powers and Corrective Measures

Through the Pillar 2 process, regulators have the authority to take a range of actions when deficiencies are identified. These actions include requiring capital increases, restricting dividend payments, imposing limits on business activities, or mandating improvements to internal controls and governance. These powers help supervisors intervene early to prevent the deterioration of a bank’s financial condition and to preserve financial stability.

The flexibility afforded to supervisors under Pillar 2 is essential for addressing risks that may not be immediately visible through standardized models. This discretion enhances the resilience of the banking system by encouraging proactive risk management and supervisory judgment.

Integration with Other Regulatory Pillars

Pillar 2 does not function in isolation. It is integrated with Pillar 1 (Minimum Capital Requirements) and Pillar 3 (Market Discipline). While Pillar 1 establishes the quantitative capital requirements and Pillar 3 promotes transparency through public disclosures, Pillar 2 provides the supervisory mechanism that ensures banks’ internal assessments align with their actual risk exposures. Together, these three pillars form a comprehensive supervisory framework designed to protect the integrity of the financial system.

The Bottom Line

The Supervisory Review Process (Pillar 2) is a critical part of bank regulation that ensures institutions not only meet regulatory minimums but also maintain capital levels aligned with their unique risk profiles. It reinforces internal risk management through ICAAP and enables supervisory authorities to act decisively when weaknesses are found. By introducing discretion, proportionality, and a broader risk focus, Pillar 2 plays a central role in building a resilient, forward-looking banking system.