Credit Risk Management: From Initial Assessment to Ongoing Monitoring

Credit risk management is often understood as the process of assessing whether a prospective borrower is eligible for financing. In fact, the approve or reject decision is only one stage.

Credit risk can change after a facility is granted. A borrower's financial condition may deteriorate, leverage may rise, payments may start to arrive late, the value of collateral may shift, or the industry in which the borrower operates may come under pressure.

For this reason, credit risk management covers a broader process: determining the risk that is acceptable, assessing prospective borrowers, setting the financing structure, monitoring exposure, detecting declines in credit quality, and deciding on mitigating action when the risk profile changes.

The Basel Committee on Banking Supervision divides credit risk management principles into four main areas: an appropriate credit risk environment, sound credit-granting processes, adequate administration and monitoring, and control over credit risk.

The goal is not to eliminate all risk. Financing activity always involves uncertainty. The goal of risk management is to keep exposure consistent with the institution's risk appetite and its ability to absorb potential losses.

Credit Risk Begins Before the Borrower Applies

Before assessing a single credit application, an institution needs to define the kinds of risk it is willing to take.

This can be translated into:

The first question is therefore not just "Is this borrower eligible?" but also "Does this exposure fit the institution's strategy and risk profile?"

In the context of Indonesian banking, OJK requires the implementation of risk management that includes policies and procedures, limit setting, processes for identifying, measuring, monitoring, and controlling risk, and an internal control system.

A framework like this helps ensure that individual credit decisions do not stand alone, but remain within the risk limits the organization has set.

Underwriting Turns Borrower Information into a Credit Decision

Once an application comes in, the institution needs to assess the borrower's ability and willingness to meet its obligations.

The information used can include credit history, financial statements, bank statements, debt structure, the intended use of funds, cash flow projections, and collateral where relevant.

A credit score only summarizes the level of risk, while the factors that shape the number still need to be analyzed to understand changes in the borrower's profile.

Payment history needs to be read together with the company's liquidity, leverage, and cash flow so that lenders do not assess repayment capacity from credit history alone.

Basel emphasizes that the credit-granting process should consider the purpose of the facility, the source of repayment, the borrower's condition and repayment capacity, historical financial trends, and projected cash flows.

The risk assessed at onboarding can change while the facility is running. Monitoring therefore needs to answer whether the assumptions used when the credit was granted still hold.

Some changes that may warrant attention include:

Basel states that a credit monitoring system should help a bank understand the borrower's current financial condition, monitor covenants, assess the adequacy of collateral where relevant, detect payment delinquencies, and route problem exposures for further handling.

In other words, monitoring is not simply waiting for a credit to go bad. The aim is to recognize early warning signals while there is still room to take action.

Score changes can also be one such signal, especially when viewed as a trend rather than a snapshot.

Individual Borrower Risk and Portfolio Risk Are Two Different Things

An institution can have many borrowers that each look sound on their own, yet still face major risk if all of its exposure is concentrated in the same source of risk.

For example, when most financing is extended to:

When the same economic conditions affect many borrowers at once, losses can emerge simultaneously.

Basel treats concentrations in a single counterparty, groups of related parties, an industry, an economic sector, a geographic region, or the same activity as forms of concentration risk that need to be identified and monitored.

This is why credit risk management cannot be carried out application by application. Institutions also need to understand how each exposure changes the risk profile of the portfolio as a whole.

Risk Mitigation Doesn't Always Mean Rejecting the Credit

A higher-risk borrower does not automatically have to be rejected. In some circumstances, risk can be managed through a different facility structure, for example by adjusting the limit, tenor, terms, or covenants, or by requiring additional forms of protection.

Collateral and guarantees are two examples of credit risk mitigation mechanisms formally recognized in the Basel Framework. However, the presence of collateral does not remove the need to understand the borrower's underlying risk and the exposure being granted.

Risk management is therefore not only a mechanism for separating "good" borrowers from "bad" ones. Its function is also to help determine a financing structure commensurate with the risk profile.

Information that emerges after credit is granted should not stop at a single borrower.

If certain patterns repeat, such as a particular segment producing more late payments, a particular indicator becoming a predictor of declining quality, or a particular facility structure generating higher risk, that information can be used to improve:

In this way, credit risk management forms a cycle:

set risk appetite → assess borrower → structure facility → monitor exposure → detect changes → mitigate → update policy.

The benefit is not only a lower chance of loss on a single credit, but also helping the organization make more consistent financing decisions and maintain portfolio quality over the long term.

Credit risk management does not end when a prospective borrower passes screening or a facility receives approval.

Risk needs to be managed throughout the credit lifecycle, from setting risk appetite and policy, through underwriting, facility structuring, and monitoring borrower condition, to identifying early warning signals and handling mitigation and concentration risk at the portfolio level.

This approach turns credit risk management from an up-front selection process into a system for managing exposure on an ongoing basis.

For that reason, the question in credit risk management is not only "Should this credit be granted?" but also "How will the risk of this exposure be monitored and controlled while the facility is running?"