Uncategorized

By: Tom Hannagan For the last 16 months or so, the financial services industry has been indicted, tried, found guilty, sentenced and duly executed for ignoring accepted enterprise risk management practices.  Banks, albeit along with goofy risk ratings agencies, lax regulators, and greedy leveraged investors, have been blamed for abandoning normal and proper credit risk behavior and lending to many who did not meet basic debt servicing capability. After things went terribly wrong in capital and liquidity markets, followed by a now-official recession in the “real” economy, banks have tightened lending standards.  (See my blog posted November 13th for more about tightened lending.)   Now, following the TARP capital infusion, the press and Congress seem very upset that banks aren’t rapidly expanding their lending, or even moderating their credit risk regimen.  This dismay, with the lack of an immediate expansion of credit granting, occurs in the face of what the same press and most politicians refer to as the greatest economic meltdown since the Great Depression.   Granted, banks are historically easy whipping boys, but they now seem damned for what they did and damned if they don’t do some more of it. Although suffering in many ways, most banks are still for-profit organizations. Contrary to popular belief, they also actually have credit policies and processes that are aimed at responsible credit risk management – at least for the loans they intend to keep on their own books. Average management intelligence would dictate being cautious in the middle of an economic downturn.   The TARP capital infusion is a sudden large windfall of new equity, like a 20 percent increase for the receiving banks. It begs the question of what to do with it. To grow assets proportionately to the TARP infusion would mean a very rapid (circa plus 30 percent) growth in lending in a very short timeframe. Given the prevalence of banks, it would be very difficult for all of them to grow their loan portfolios this fast even in a good economy.   Most banks do not need TARP funds to survive in the short term. And the weakest banks are not supposed to be granted TARP funds. This is like a steroid shot into the natural process of bank consolidation. It’s obvious that the stronger banks, now infused with hot capital, are using TARP funds to acquire other banks. In many cases the acquired banks have weaknesses that they could not likely overcome on their own. So, the TARP funds are addressing the over-banked state of the financial industry and probably offsetting what would otherwise have been a drain on the Deposit Insurance Fund. I maintain that this is a good, if unintended, outcome for both the industry and the taxpayers.   I’ve heard and read comments (by people who should know better) that the hoarding of TARP funds is aiding bank earnings. Some say that those earnings are protected by TARP because it offsets credit losses. This is an accounting absurdity. The TARP will only help bank earnings if and when it is deployed successfully. This, in turn, requires two things to take place: 1) leveraging up the new capital with other sources of funds; and 2) successfully investing the proceeds in assets that provide a decent risk-adjusted return. In any event, whenever a new amount of risk-based capital comes into the equity account, the ROE will suffer for a while.   Another kind of issue with TARP, even if it isn’t needed or desired by a healthy bank, is the stigma associated with not getting it. The few banks in this category have had to go out of their way to explain why they didn’t go for it. There is a concern that, even if it really isn’t needed, a bank will be at a cash and balance sheet disadvantage in the big fish eating the little fish game.   Finally, who asked for TARP to be created? Bear and Lehman went down. Merrill was rescued. Countrywide went down early and WAMU went later. Citi is now on both a heart-lung machine and dialysis. A bunch of the big boys got killed or were in serious trouble. But not all of them. And, several of them reportedly had to be coerced into taking their share of the first $125 billion. Everyone else pretty much observed the circus on Wall Street and Capital Hill.   So, policy makers, make up your mind.  Do you want banks exercising sound credit risk management practices or not?  Do you want industry consolidation or don’t you?  Do you want sounder banks to acquire relatively weaker ones or would you rather see the FDIC pick up the pieces later?  Do you want to dictate how and when private organizations allocate risk-based capital or not?  A little clarity would be appreciated.  After all, TARP was your idea.  It wasn’t requested by the industry at large. And the flow through to businesses and consumers will take a while. Sorry. It’s in everybody’s best interest that good risk management processes prevail at this time (and always) -- in granting and pricing credit, and in managing available capital. The lack of same helped get us all to this point.

We get the following question quite a bit: Would the regulators expect to see a log of detected activity and resulting mitigation? Short answer: The Red Flags Rule does not specifically require you to maintain a log, nor do the guidelines suggest that a log should be maintained. However, covered institutions are required to prepare regular reports around the effectiveness of their program.  Additionally, there exists the requirement to incorporate an institution’s own experiences with identity theft when reviewing and updating their program. Long answer: Think now about the value of incorporating robust (and, optimally, transaction level) reporting into your program for a few key reasons: 1. Reporting allows you to more easily and comprehensively create and disseminate board-level reports related to program effectiveness.  These aren’t a bad thing to show a regulator either. 2. Detailed reporting provides you an opportunity to more accurately monitor your program’s performance with respect to decisioning strategies, false positives, false negatives, fraud detection and prevention rates, resultant losses and legitimate costs. 3. The more historic detail you have compiled, the easier it will be to make educated, analytically based, and quantifiable updates to your program over time.  Without this, you may be living and dying with anecdotal decision making….never good. 4. Finally, maintaining program performance data will afford you the ability to work with other service providers in validating their capabilities against known transactional or account level outcomes.  We, at Experian, certainly find this useful in working with our clients to deliver optimal strategies. Thanks as always.

It is the time of year during which budgets are either in the works or have been completed.  Typically, when preparing budgets, we project overall growth in our loan portfolios…maybe.  Recently we conducted an informal survey, the results of which indicate that loan portfolio growth is still a major target for 2009.  But when asked what specific areas in the loan portfolio -- or how loan pricing and profitability -- will drive that growth, there was little in the way of specifics available.  This lack of direction (better put, vision) is a big problem in credit risk management today.   We have to remember that our loan portfolio is the biggest investment vehicle that we have as a financial institution.  Yes; it is an investment.  We choose not to invest in treasuries or fed funds -- and to invest in loan balances instead -- because loan balances provide a better return.  We have to appropriately assess the risk in each individual credit relationship; but, when it comes down to the basics, when we choose to make a loan, it is our way of investing our depositors’ money and our capital in order to make a profit.   When you compare lending practices of the past to that of well-tested investment techniques, we can see that we have done a poor job with our investment management.  Remember the basics of investing, namely: diversification; management of risk; and review of performance.  Your loan portfolio should be managed using these same basics.  Your loan officers are pitching various investments based on your overall investment goals (credit policy, pricing structure, etc.).  Your approval authority is the final review of these investment options.  Ongoing monitoring is management of the ongoing risk involved with the loan itself.   What is your vision for your portfolio?  What type of diversification model do you have?  What type of return is required to appropriately cover risk?  Once you have determined your overall vision for the portfolio, you can begin to refine your lending strategy.  I’ll comment on that in my next blog entry.

By: Tom Hannagan In several posts we’ve discussed financial risk management, the role of risk-based capital, measuring profitability based on risk characteristics and the need for risk-based loan pricing (credit risk modeling). I thought it might be worthwhile to take one step back and explain what we mean by the term “risk.”   “Risk” means unpredictable variability. Reliable predictions of an outcome tend to reduce the risk associated with that outcome. Similarly, low levels of variability also tend to reduce risk. People who are “set in their ways” tend to lead less risky lives than the more adventuresome types. Insurance companies love the former and charge additional premiums to the latter. This is a terrific example of risk-based pricing.   Risk goes to both extremes. It is equally impossible to predict who will win a record amount in the lottery (a good outcome) and who will be struck by a meteor (a very bad outcome for the strikee). Both occurrences represent significant outcomes (very high variability from the norm). However, the probability of either event happening to any one of us is infinitesimally small. Therefore, the actual risk is small – not even enough to bother planning for or mitigating. That is why most of us don’t buy meteor strike insurance. It is also why most of us don’t have a private jet on order.   Most of us do purchase auto insurance, even in states that do not require it. Auto accidents (outcomes) happen often enough that actuaries can and do make a lot of good predictions as to both the number of such events and their cost impact. In fact, so many companies are good at this that they can and do compete on their prices for taking on our risk. The result is that we can economically mitigate our individual inability to predict a collision by buying car insurance.   Financial services involve risk. Banks have many of the same operational risks as other non-financial businesses. They additionally have a lot of credit risk associated with lending money to individuals and businesses. Further, banks are highly leveraged, borrowing funds from depositors and other sources to support their lending activities. Because banks are both collecting interest income and incurring interest expense, they are subject to market, or interest rate, risk.   Banks create credit policies and processes to help them manage credit risk. They try to limit the level of risk and predict how much they are incurring so they can reserve some funds to offset losses. To the extent that banks don’t do this well, they are acting like insurance companies without good actuarial support. It results in a practice called “adverse selection” – incorrectly pricing risk and gathering many of the worst (riskiest) customers.   Sufficiently good credit risk management practices control and predict most of the bad outcomes most of the time, at least at portfolio levels. Bad outcomes (losses) that are not well-predicted, and therefore mitigated with sufficient loan-loss reserves, will negatively impact the bank’s earnings and capital position. If the losses are large enough, they can wipe out capital and result in the bank’s failure.   Market risk is different than credit risk. The bank’s assets are mostly invested in loans and securities (about 90% of average assets). These loans and securities have differing interest rate structures – some are fixed and some are floating. They also have differing maturities. Meanwhile, the bank’s liabilities, deposits and borrowings also have differing maturities and interest rate characteristics. If the bank’s (asset-based) interest income structure is not properly aligned with the (liability-based) interest expense structure, the result is interest rate risk. As market rates change (up or down), the bank’s earning are impacted (positively or negatively) based on the mismatch in its balance sheet structure.   The bank can offset market risk by purchasing interest rate swaps or other interest rate derivatives. The impact of insufficient attention to interest rate risk can damage earnings and may, again, negatively affect the bank’s capital position.   So, ultimately, the bank’s risk-based capital acts as the last line of defense against the negative impact from, you guessed it, unpredictable variability – or “risk.” That is why equity is considered risk-based capital. Good management, predicting and pricing for all risks leads to safer earnings performance and equity position.

The pendulum has definitely swung back in favor of the credit discipline within financial institutions. The free wheeling credit standards of the past have proven once again to be problematic. So, things like cost of credit, credit risk modeling, and scoring models are back in fashion. The trouble that we have created is that, in an effort to promote greater emphasis on the sales role, we centralized the underwriting function. This centralization allowed the sales team to focus on business development and underwriting, on credit. The unintended result, however, is that we removed the urgent need to develop credit professionals. Instead, we pushed for greater efficiencies and productivity in underwriting -- further stalling any consideration for the development of the credit professional.   Now we find ourselves with more problem credits than we have seen in the past 20 years and the pool of true credit professionals is nearly gone.   Once this current environment is corrected, let's be sure to keep balance in mind. Again, soundness, profitability and growth -- in that order of priority.

Just as with diet recommendations, moderation needs to be the new motto for credit risk management.  Diets provide for the occasional bag of chips or dessert after dinner, but these same food items become problems if the small quantity or occasional indulgence suddenly becomes the norm.   Similarly, we, in our risk management efforts, put forth guidelines that establish limitations on certain loan types or categories that have been deemed risky should the numbers or quantity become too large a part of the overall portfolio.  Unfortunately, we have a tendency to allow earnings or portfolio growth to cloud our judgment and take an attitude of “just one more.”   In the past several years, we have experienced excesses in commercial real estate, residential development and subprime mortgages.  It is now these excesses that are creating the problems that we are dealing with today.   Bringing back these limitations – in other words, reestablishing the discipline in our portfolio risk management – will go a long way in avoiding these same problems in the future.   As I learned early in my banking career:  “…soundness, profitability and growth…in that order.”

By: Tom Hannagan The problem in the 2005 to 2007 home lending frenzy was not just granting credit to anyone who applied. It was giving loans to everyone at essentially the same price range regardless of normal credit risk scrutiny.   While “selling” financial services may be largely an art form, appropriate risk-based pricing is more of a science.   Although the financial press seemed to have discovered sub-prime lending in the last year or so, such high-risk lending isn’t new at all. It has been (and is still being) done since finance and money were invented. And, importantly, sub-prime lending has been done profitably by many lenders all along.  The secret to their success, not surprisingly, has always been risk-based pricing -- even if they didn’t call it that until recent times.   Sub-prime funding has been available in many forms and from many sources. Providers range from venture capitalists to pawn shops. It includes pay-day lenders, micro loans, tax refund loans, consumer finance companies, and even dates to Shakespeare’s merchant of Venice.   We often hear complaints that the effective rates (prices) on loans from such sources are unfairly high and predatory. The cost of that credit is high, but so is the risk of that credit. Without these kinds of sources, and their high rates, there would not be any credit granted from for-profit sources to high-risk borrowers.   Listed firms that regularly provide pay-day loans or cash advances to sub-prime borrowers have very high gross margins and very high credit charge-offs, compared to banks. They also have much higher risk-based capital (or equity) positions that range from 40 percent to 60 percent of their average assets. This risk-based capital burden is much higher than the 8 to 10 percent found at commercial banks. So the sub-prime lenders have a significantly larger capital cushion than banks. Most of these financial results and ratios are examples of successful risk management where the credit risks are identified, managed, priced and backed by sufficient capital.   Then…along came the rose-colored greed of the housing bubble that resulted in aggressive building and selling of homes, loan originations to all (no-down, no-income, no-assets, no-problem mortgages), securities packaging and attractive ratings, and global leveraged investing -- all by prime-oriented entities and all at prime-oriented prices. Well, obviously, it didn’t work.   Risk-based pricing of mortgages would have dissuaded many home buyers to begin with… but what would we have done with all of those shiny new homes? Realistic credit models (that took into account a full credit cycle and a huge proportion of sub-prime credits) would not have rated mortgage-backed securities as AAA. Regulators that were still focused on earnings correctness (the last major snafu) should have been looking into realistic net asset values. And highly compensated investment bankers, with 30-to-1 leverage ratios, would not have gone overboard with intuitively dodgy investments. Few of these players took risk management seriously.   The new danger is that banks are doing the whole thing in reverse. They are tightening lending standards -- which is, of course, a euphemism for shutting off credit. The danger has nothing to do with so-called credit standards. It’s the general over-reaction of shutting off credit to all borrowers, again, without regard to relative risk. The latest Federal Reserve Board survey of senior loan officers paints a picture of rapid tightening to record levels.   We feel that credit standards should always improve AND that loan pricing should always proportionately reflect risk-adjusted rates and terms. Opening the flood gates and then slamming them shut is a very pro-cyclical behavior pattern on the part of bankers that doesn’t reflect a measured approach, borrower-by-borrower, using reasonable risk management at the client relationship level.

By: Tom Hannagan Much of the blame for the credit disaster of 2007 and 2008 has been laid at the risk management desks of the largest banks. A silver lining in the historic financial disaster of today may be the new level of interest in management of risk -- particularly, of the relationship between capital and risk. Financial institutions of all sizes must measure and monitor their risk-based capital for three critical reasons. Ownership interest First, equity capital represents the ownership interest in a bank. Although a relatively small portion of the balance sheet, equity capital is the part that actually belongs to a bank’s owners. Everything else on the liability side is owed to depositors or lenders. All of the bank’s activities and assets are levered against the funds contributed by the equity investors. This leverage is roughly 10-to-1 for most commercial banks in the United States. For the five major investment banks, this risk-based leverage reached 30-to-1. Their capital base, even with new infusions, could not cover their losses.  It is necessary and just good business sense to regularly let the owners know what’s going on as it relates to their piece of the pie—their invested funds. Owners want to know the bank is doing things well with their at-risk funds. Banks have a duty to tell them. Funding expenses Second, equity capital is by far the most expensive source of all funding. Transaction deposit funds are usually paid an effective rate of interest that is lower than short-to-intermediate-term market rates. Time depositors are competitively paid as little as possible based on the term and size of their commitment of funds. Most banks are able to borrow overnight funds at short-term market rates and longer-term funds at relatively economical AA or A ratings. Equity holders, however, have historically received (and typically expect) substantially more in the way of return on investment. Their total returns, including dividends, buybacks and enhanced market value, are usually double to triple the cost of other intermediate-to-long-term sources of funds. From a cost perspective, equity capital is the dearest funding the bank will ever obtain. Risk factor This brings us to the third reason for measuring and monitoring capital: the risk factor. A very large portion of banking regulation focuses on capital sufficiency because it directly affects a bank’s (and the banking industry’s) continued solvency. Equity capital is the last element of cushion that protects the bank from insolvency. Although it is relatively expensive, sufficient equity capital is absolutely required to start a bank and necessary to keep the bank in good stead with regulators, customers and others. Equity holders are usually conscious of the fact that they are last in line in the event of liquidation. There is no Federal Deposit Insurance Corporation (FDIC) for them, no specific assets earmarked to back their funding and no seniority associated with their invested money. We all know what “last in line” means for most shareholders if a failure occurs -- 100 percent loss.   There is a clear and direct relationship between equity risk and cost—and between equity risk and expected return.  It is now more important for bank executives to monitor and measure their organization’s activities based on the relative risk of those activities and based on the equity capital required to support those risks. This means using return on equity (ROE) a lot more and return on assets (ROA) a lot less. Because of the critical need and high cost of risk-based equity and the various risks associated with the business of banking, decisions about the effective deployment of capital always have been the primary responsibility of bank leaders. Now, the rest of the world is focusing more on how well, or poorly, management of risk has been done. I’ll comment on using ROE more in later posts.    

We know that financial institutions are tightening their credit standards for lending.  But we don’t necessarily know exactly how financial institutions are addressing portfolio risk management -- how they are going about tightening those standards. As a commercial lender, when the economy was performing well, I found it much easier to get a loan request approved even if it did not meet typical standards.  I just needed to provide an explanation as to why a company’s financial performance was sub-par and what changes the company had made to address that performance -- and my deal was approved. When the economy started to decline, standards were suddenly elevated and it became much more difficult to get deals approved.  For example, in good times, credits with a 1.1:1 debt service coverage could be approved; when times got tough – and that 1.1:1 was no longer acceptable – the coverage had to be 1.25:1 or higher. Let’s consider this logic.  When times are good, we loosen our standards and allow poorer performing businesses’ loan requests to be approved…and when times are bad we require our clients perform at much higher standards.  Does this make sense?  Obviously not.  The reality is that when the economy is performing well, we should hold our borrowers to higher standards.  When times are worse, more leniency in standards may be appropriate, keeping in mind, of course, appropriate risk management measures. As we tighten our credit belts, let’s not choke out our potentially good customers.  In the same respect, once times are good, let’s not get so loose regarding our standards that we let in weak credits that we know will be a problem when the economy goes south.

Experian Experian® is a global leader in providing information, analytical and marketing services to organizations and consumers to help manage the risk and reward of commercial and financial decisions. Combining its unique information tools and deep understanding of individuals, markets and economies, Experian partners with organizations around the world to establish and strengthen customer relationships and provide their businesses with competitive advantage. Experian Decision Analytics assists high-performing organizations all over the world by leveraging information to find, target and acquire new customers and to build, nurture and maximize lasting profitable customer relationships. We provide scoring, analytics, fraud detection, decision support software and consulting at every stage of the Customer Life Cycle to markets such as: Traditional and nontraditional lenders - including banks (from de novo to money center banks), finance companies, credit unions, first-party collections, retail credit, third-party processors and auto finance - from consumer and small-business lending to commercial lendingTelecommunicationsUtilitiesCable and satellite companies