Report of the Directors: Risk

Transcription

1 Report of the Directors: Risk Regulation and supervision Page Regulation and supervision Risk management Credit risk Credit risk management Credit exposure Areas of special interest Renegotiated loans Credit quality of financial instruments Impaired loans and advances Impairment allowances and charges HSBC Holdings Risk elements in the loan portfolio Liquidity and funding Policies and procedures Primary sources of funding HSBC Holdings Market risk Value at risk Impact of market turmoil Trading portfolios Non-trading portfolios Defined benefit pension schemes Sensitivity of net interest income Structural foreign exchange exposures HSBC Holdings Residual value risk Operational risk Legal risk Global security and fraud Pension risk Reputational risk Sustainability risk Risk management of insurance operations Life insurance business Non-life insurance business Insurance risk Financial risks Present value of in-force long-term insurance business Capital management and allocation Capital management Capital measurement and allocation Risk-weighted assets by principal subsidiary Unaudited. 2 Audited. 3 Audited where indicated. Regulation and supervision With listings of its ordinary shares in London, Hong Kong, New York, Paris and Bermuda, HSBC Holdings complies with the relevant requirements for listing and trading on each of these exchanges. In the UK, these are the Listing Rules of the Financial Services Authority ( FSA ); in Hong Kong, The Rules Governing the Listing of Securities on The Stock Exchange of Hong Kong Limited ( HKSE ); in the US, where the shares are traded in the form of ADSs, HSBC Holdings shares are registered with the US Securities and Exchange Commission ( SEC ). As a consequence of its US listing, HSBC Holdings is also subject to the reporting and other requirements of the US Securities Act of 1933, as amended, the Securities Exchange Act of 1934, as amended, and the New York Stock Exchange s ( NYSE ) Listed Company Manual, in each case as applied to foreign private issuers. In France and Bermuda, HSBC Holdings is subject to the listing rules of Euronext, Paris and the Bermuda Stock Exchange respectively, applicable to companies with secondary listings. A statement of HSBC s compliance with the code provisions of the Combined Code on Corporate Governance issued by the Financial Reporting Council and with the Code on Corporate Governance Practices in Appendix 14 to the Rules Governing the Listing of Securities on The Stock Exchange of Hong Kong Limited is set out in the Report of the Directors: Governance on page 281. HSBC s operations throughout the world are regulated and supervised by approximately 540 different central banks and regulatory authorities in those jurisdictions in which HSBC has offices, branches or subsidiaries. These authorities impose a variety of requirements and controls designed to improve financial stability and the transparency of financial markets and their contribution to economic growth. These regulations and controls cover, inter alia, capital adequacy, depositor protection, market liquidity, governance standards, customer protection (for example, fair lending practices, product design, and marketing and documentation standards), and social responsibility obligations (for example, antimoney laundering and anti-terrorist financing measures). In addition, a number of countries in which HSBC operates impose rules that affect, or place limitations on, foreign or foreign-owned or controlled banks and financial institutions. The rules include restrictions on the opening of local offices, branches or subsidiaries and the types of banking and non-banking activities that may be conducted by those local offices, branches or subsidiaries; 188

2 restrictions on the acquisition of local banks or regulations requiring a specified percentage of local ownership; and restrictions on investment and other financial flows entering or leaving the country. The supervisory and regulatory regimes of the countries where HSBC operates will determine to some degree HSBC s ability to expand into new markets, the services and products that HSBC will be able to offer in those markets and how HSBC structures specific operations. As a result of the recent government interventions in response to recent global economic conditions it is widely anticipated that there will be a substantial increase in government regulation and supervision of the financial services industry, including the imposition of higher capital requirements, heightened disclosure standards and restrictions on certain types of transaction structures. In June 2006, the Basel Committee on Banking Supervision introduced a new capital adequacy framework to replace the 1988 Basel Capital Accord in the form of a new Accord (commonly known as Basel II ). Details of the way in which Basel II has been implemented by the FSA, the timing of the change and the impact on HSBC are set out on page 275. The FSA supervises HSBC on a consolidated basis. In addition, each operating bank, finance company or insurance operation within HSBC is regulated by local supervisors. The primary regulatory authorities are those in the UK, Hong Kong and the US, the Group s principal areas of operation. UK regulation and supervision UK banking and financial services institutions are subject to multiple regulations. The primary UK statute is the Financial Services and Markets Act 2000 ( FSMA ). Additionally, data privacy is regulated by the Data Protection Act Other UK financial services legislation is derived from EU directives relating to banking, securities, insurance, investments and sales of personal financial services. In addition to its role as HSBC s lead regulator, the FSA is responsible for authorising and supervising all HSBC s businesses in the UK which require authorisation under FSMA. These include deposit-taking, retail banking, life and general insurance, pensions, investments, mortgages, custody and share dealing businesses, and treasury and capital markets activity. HSBC Bank plc is HSBC s principal authorised institution in the UK. FSA rules establish the minimum criteria for authorisation for banks and financial services businesses in the UK. They also set out reporting (and, as applicable, consent) requirements with regard to large individual exposures and large exposures to related borrowers. In its capacity as supervisor of HSBC on a consolidated basis, the FSA receives information on the capital adequacy of, and sets requirements for, HSBC as a whole. Further details on capital measurement are included in Capital management and allocation on pages 274 to 280. The FSA s approach to capital requirements for UK insurers is to require minimum capital to be calculated on two bases. First, firms must calculate their liabilities on a prudent basis and add a statutory solvency margin ( pillar 1 ). Secondly, firms must calculate their liabilities on a realistic basis then add to this their own calculation of risk-based capital. The sum of realistic reserves and risk-based capital ( pillar 2 ) is agreed with the FSA. Insurers are required to maintain capital equal to the higher of pillars 1 and 2. The FSA has the right to object, on prudential grounds, to persons who hold, or intend to hold, 10 per cent or more of the voting power of a financial institution. The regulatory framework of the UK financial services system has traditionally been based on co-operation between the FSA and authorised institutions. The FSA monitors authorised institutions through ongoing supervision and the review of routine and ad hoc reports relating to financial and prudential matters. The FSA may periodically obtain independent reports, usually from the auditors of the authorised institution, as to the adequacy of internal control procedures and systems as well as procedures and systems governing records and accounting. The FSA meets regularly with HSBC s senior executives to discuss HSBC s adherence to the FSA s prudential guidelines. They also regularly discuss fundamental matters relating to HSBC s business in the UK and internationally, including areas such as strategic and operating plans, risk control, loan portfolio composition and organisational changes, including succession planning. In light of current conditions, HSBC has experienced an increased level of ongoing interaction with the FSA. Hong Kong regulation and supervision Banking in Hong Kong is subject to the provisions of the Banking Ordinance and to the powers, functions and duties ascribed by the Banking Ordinance to the Hong Kong Monetary Authority (the HKMA ). The principal function of the HKMA is to promote the general stability and effective working of the banking system in Hong Kong. The HKMA is responsible for supervising compliance 189

3 Report of the Directors: Risk (continued) Regulation and supervision / Risk management > Introduction / Governance and ownership with the provisions of the Banking Ordinance. The Banking Ordinance gives power to the Chief Executive of Hong Kong to give directions to the HKMA and the Financial Secretary with respect to the exercise of their respective functions under the Banking Ordinance. The HKMA has responsibility for authorising banks, and has discretion to attach conditions to its authorisation. The HKMA requires that banks or their holding companies file regular prudential returns, and holds regular discussions with the management of the banks to review their operations. The HKMA may also conduct on-site examinations of banks and, in the case of banks incorporated in Hong Kong, of any local and overseas branches and subsidiaries. The HKMA requires all authorised institutions to have adequate systems of internal control and requires the institutions external auditors, upon request, to report on those systems and other matters such as the accuracy of information provided to the HKMA. In addition, the HKMA may from time to time conduct tripartite discussions with banks and their external auditors. The HKMA has the power to divest controlling interests in a bank from persons if they are no longer deemed to be fit and proper, if they may otherwise threaten the interests of depositors or potential depositors, or if they have contravened any conditions specified by the HKMA. The HKMA may revoke authorisation in the event of an institution s non-compliance with the provisions of the Banking Ordinance. These provisions require, among other things, the furnishing of accurate reports. The HKMA implemented Basel II with effect from 1 January 2007 for all Authorised Institutions incorporated in Hong Kong. The marketing of, dealing in and provision of advice and asset management services in relation to securities in Hong Kong are subject to the provisions of the Securities and Futures Ordinance of Hong Kong ( Securities and Futures Ordinance ). Entities engaging in activities regulated by the Securities and Futures Ordinance are required to be licensed. The HKMA is the primary regulator for banks involved in the securities business, while the Securities and Futures Commission is the regulator for non-banking entities. US regulation and supervision HSBC is subject to extensive federal and state supervision and regulation in the US. Banking laws and regulations of the Board of Governors of the Federal Reserve System (the Federal Reserve Board ), the Office of the Comptroller of the Currency (the OCC ) and the Federal Deposit Insurance Corporation (the FDIC ) govern many aspects of HSBC s US business. HSBC and its US operations are subject to supervision, regulation and examination by the Federal Reserve Board because HSBC is a bank holding company under the US Bank Holding Company Act of 1956 ( BHCA ), as a result of its control of HSBC Bank USA, N.A., Mclean, Virginia ( HBUS ); HSBC Trust Company (Delaware), N.A., Wilmington, Delaware ( HTCD ); and Wells Fargo Trade Bank, N.A., San Francisco, California ( WFTB ). HSBC North America Holdings Inc. ( HNAH ), formed to hold HSBC s US and Canadian operations is also a bank holding company. Both HSBC and HNAH are registered as financial holding companies ( FHC s) under the BHCA, and, accordingly, may affiliate with securities firms and insurance companies and engage in other activities that are financial in nature or incidental or complementary to activities that are financial in nature. The ability of HSBC and HNAH to engage in expanded financial activities as FHCs depends upon HSBC and HNAH continuing to meet certain criteria set forth in the BHCA, including requirements that their US depository institution subsidiaries be well capitalised and well managed, and that such institutions have achieved at least a satisfactory record in meeting community credit needs during their most recent examinations pursuant to the Community Reinvestment Act. In general, under the BHCA, an FHC would be required, upon notice by the Federal Reserve Board, to enter into an agreement with the Federal Reserve Board to correct any failure to comply with the requirements to maintain FHC status. Until such deficiencies are corrected, the Federal Reserve Board may impose limitations on the US activities of an FHC and depository institutions under its control. If such deficiencies are not corrected, the Federal Reserve Board may require an FHC to divest its control of any subsidiary depository institution or to desist from certain financial activities in the US. The three US banks, HBUS, HTCD, and WFTB are subject to regulation and examination primarily by the OCC, secondarily by the FDIC, and by the Federal Reserve Board. Banking laws and regulations restrict many aspects of their operations and administration, including the establishment and maintenance of branch offices, capital and reserve requirements, deposits and borrowings, investment and lending activities, payment of dividends and numerous other matters. In December 2007, US regulators published a 190

4 final rule regarding Risk-Based Capital Standards: Advanced Capital Adequacy Framework Basel II. This final rule represents the US adoption of the Basel II International Capital Accord ( Basel II ). The final rule became effective on 1 April 2008, and requires large bank holding companies, including HNAH, to adopt its provisions no later than 1 April HNAH has established comprehensive Basel II implementation project teams comprised of risk management specialists representing all risk disciplines. In addition, US banking authorities have adopted leverage capital requirements that generally require US banks and bank holding companies to maintain a minimum amount of capital in relation to their balance sheet assets (measured on a non-risk-weighted basis). HBUS and HTCD are subject to risk-based assessments from the FDIC, which insures deposits generally to a maximum of US$100,000 per domestic depositor. In October 2008, the FDIC raised the maximum amount of insured deposits to US$250,000 per domestic depositor until 31 December 2009, after which the limit will return to US$100,000. The FDIC bases assessments on supervisory ratings, financial ratios and long-term debt issuer ratings, with those banks in the highest rated categories paying lower assessments. In October 2008, the FDIC announced its Temporary Liquidity Guarantee Programme ( TLGP ), under which the FDIC will guarantee (i) newly-issued senior unsecured debt issued by eligible, participating institutions, and (ii) certain non-interest bearing transaction accounts. HNAH and its subsidiary banks and bank holding companies elected to participate in both components of the TLGP, as applicable. HSBC s US consumer finance operations are subject to extensive state-by-state regulation in the US, and to laws relating to consumer protection (both in general, and in respect of sub-prime lending operations, which have been subject to enhanced regulatory scrutiny); discrimination in extending credit; use of credit reports; privacy matters; disclosure of credit terms; and correction of billing errors. They also are subject to regulations and legislation that limit operations in certain jurisdictions. Risk management Introduction All HSBC s activities involve, to varying degrees, the analysis, evaluation, acceptance and management of risks or combinations of risks. The most important categories of risk that the Group is exposed to are credit risk (including cross-border country risk), market risk, operational risks in various forms, liquidity risk, insurance risk, pension risk, residual value risk, reputational risk and sustainability (environmental and social) risks. Market risk includes foreign exchange, interest rate and equity price risks. The management of these various risk categories is discussed below. Insurance risk is managed by the Group s insurance businesses together with their own credit, liquidity and market risk functions, distinct from those covering the rest of HSBC due to the different nature of their activities. They remain under risk oversight at Group level. The risk profiles of HSBC Group and of individual operating entities change constantly under the influence of a wide range of factors. The risk management framework established by the Group fosters the continuous monitoring of the risk environment and an integrated evaluation of risks and their interdependencies. Risk governance and ownership A well-established risk governance and ownership structure ensures oversight of, and accountability for, the effective management of risk at Group, regional, customer group and operating entity levels. The Board approves the Group s risk appetite framework, plans and performance targets for the Group and its principal operating subsidiaries, the appointment of senior officers, the delegation of authorities for credit and other risks and the establishment of effective control procedures. Under authority delegated by the Board, the Group Management Board ( GMB ) through its separately convened Risk Management Meeting ( RMM ) formulates high-level Group risk management policy, exercises delegated risk authorities and oversees the implementation of risk appetite and controls. It monitors all categories of risk, receives reports on actual performance and emerging issues, determines action to be taken and reviews the efficacy of HSBC s risk management framework. Primary responsibility for managing risk at operating entity level lies with the respective boards and Chief Executive Officers, as custodians of their balance sheets. In their oversight and stewardship of risk management at Group level, GMB and RMM are supported by a dedicated Global Risk function headed by the Group Chief Risk Officer ( GCRO ), who is a member of both bodies and reports to the Group Finance Director within the integrated Finance and 191

5 Report of the Directors: Risk (continued) Risk management > Appetite / Control culture // Credit risk > Management Risk function, which the Group Finance Director represents on the Board. Global Risk has functional responsibility for the principal financial risk types, namely retail and wholesale credit, market, operational, security and fraud risks. For these it establishes Group policy, exercises Group-wide oversight and provides reporting and analysis of portfolio composition on a global and a regional basis to senior management. Accountability and consistent control across the Global Risk function is provided through the Global Risk Management Board, chaired by the GCRO, the membership of which includes the Chief Risk Officers of HSBC s regions and the heads of risk disciplines within GMO. Global Risk also co-ordinates the continued development of the Group s risk appetite, economic capital and stress testing frameworks. In addition, the GCRO is a member of the Group Portfolio Oversight Committee, chaired by the Group Treasurer, which governs the Group s portfolio management activities for the wholesale business sector. Risk appetite HSBC s risk appetite framework describes the quantum and types of risk that HSBC is prepared to take in executing its strategy. It is central to an integrated approach to risk, capital and business management and supports the Group in achieving its return on equity objectives, as well as being a key element in meeting the Group s obligations under pillar 2 of Basel II. The formulation of risk appetite considers HSBC s risk capacity, its financial position, the strength of its core earnings and the resilience of its reputation and brand. It is expressed both qualitatively, describing which risks are taken and why, and quantitatively. HSBC senior management attaches quantitative metrics to individual risk types to ensure that: underlying business activity may be guided and controlled, so that it continues to be aligned to the risk appetite framework; key assumptions underpinning risk appetite can be monitored and, as necessary, adjusted through subsequent business planning cycles; and business decisions anticipated to be necessary to mitigate risk are flagged and acted upon promptly. The risk appetite framework, governed by the Board and overseen in its implementation on an ongoing basis by GMB and RMM, is also maintained at regional and customer group levels. It operates through two key mechanisms: the framework itself defines the governance bodies, processes, metrics and other features of how HSBC addresses risk appetite as part of its ongoing business; periodic risk appetite statements define, at various levels in the business, the desired level of risk commensurate with return and growth targets and in line with the corporate strategy and stakeholder objectives. The risk appetite framework covers both the beneficial and adverse aspects of risk. Within it, economic capital is the common currency through which risk is measured and used as the basis for risk evaluation, capital allocation and performance measurement across regions and customer groups. Risk appetite is executed through the operational limits that control the levels of risk run by the Group, regions and customer groups and is measured using risk-adjusted performance metrics. Risk control culture HSBC s risk management policies are encapsulated in the Group Standards Manual and cascaded in a hierarchy of policy manuals throughout the Group and communicate standards, instructions and guidance to employees. They support the formulation of risk appetite and establish procedures for monitoring and controlling risks, with timely and reliable reporting to management. HSBC regularly reviews and updates its risk management policies, systems and methodologies to reflect changes in law, regulation, markets, products and emerging best practice. It is the responsibility of all Group officers to identify, assess and manage risk within the scope of their assigned responsibilities. Personal accountability, reinforced by the Group s governance structure and instilled by training and experience, helps to foster throughout the Group a disciplined and constructive culture of risk management and control. Credit risk Credit risk management Credit risk is the risk of financial loss if a customer or counterparty fails to meet an obligation under a contract. It arises principally from direct lending, trade finance and leasing business, but also from certain off-balance sheet products such as guarantees and credit derivatives, and from the Group s holdings of assets in the form of debt securities. HSBC has standards, policies and procedures 192

6 dedicated to monitoring and managing risk from such activities. The credit risk governance structures and control frameworks implemented by the Group are designed for all stages of economic and financial cycles, including the current economic environment. No material changes were initiated to HSBC s risk management objectives, policies or procedures as a direct result of market turmoil. Certain measures already undertaken, however, are helping the Group to manage the effects of that turmoil. Such measures, for example the reinforcement of central credit risk oversight and independent review activities, continue to be implemented within a common operating model for the responsibilities and interaction of GMO Risk, regionally integrated risk functions and country-based management. In addition, certain operational processes have been invoked and applied in order to manage risks more intensively. Credit Risk is part of the Global Risk function, and the heads of its Retail and Wholesale risk disciplines within GMO, as well as regional Chief Risk Officers, certain country Chief Credit Officers and the Head of Risk Strategy, report to the GCRO. The regional governance bodies for key risk matters reflect those in place at the centre. Functional units at the entity and regional levels report to GMO Risk. GMO helps build the Group s credit risk management capacity through staff selection, training, development, performance assessment and remuneration the GCRO is jointly responsible with business heads for setting the performance goals of senior Global Risk officers. Across the Group, Credit Risk fulfils the role of an independent credit control unit, while engaging in dialogue with business teams to set priorities, refine risk appetite, and monitor and report higherrisk exposures. Credit risk and risk capital management policies and methodologies, including analytical model development/review and management information, are enhanced in the light of experience gained, for instance through the rollout of the Group s advanced internal ratings-based ( IRB ) approach to Basel II. See also Capital Management on page 274. The Credit Risk function within GMO provides high-level oversight and management of credit risk for HSBC worldwide. Its responsibilities include: Formulating Group credit policy. Compliance, subject to approved dispensations, is mandatory for all HSBC s operating companies, which must develop and record in local instruction manuals their detailed credit policies and procedures, consistent with Group policy. Guiding HSBC s operating companies on the Group s appetite for credit risk exposure to specified market sectors, activities and banking products. GMO Risk controls exposures to certain higher-risk sectors and closely monitors exposure to others, including real estate, the automotive sector, certain non-bank financial institutions, structured products and leveraged finance transactions. When necessary, restrictions are imposed on new business or exposures, which may be capped at Group and/or entity level. Undertaking independent review and objective assessment of risk. GMO Risk assesses all commercial non-bank credit facilities and exposures including those embedded in derivatives that are originated or renewed by HSBC s operating companies over designated limits, prior to the facilities being committed to customers or transactions being undertaken. Operating companies may not confirm credit approval without this concurrence. Monitoring the performance and management of retail portfolios across the Group. GMO Risk tracks emerging trends and conducts in-depth portfolio reviews, overseeing the effective management of any adverse characteristics. Controlling centrally exposures to sovereign entities, banks and other financial institutions. HSBC s credit and settlement risk limits to counterparties in these sectors are approved and managed by GMO Risk to optimise the use of credit availability and avoid excessive risk concentration. Controlling exposure for all debt securities held; where a security is not held solely for the purpose of trading, a formal issuer risk limit is established. Establishing and maintaining HSBC s policy on large credit exposures, ensuring that concentrations of exposure by counterparty, sector or geography do not become excessive in relation to the Group s capital base and remain within internal and regulatory limits. The approach is designed to be more conservative than internationally accepted regulatory standards. GMO Risk also monitors HSBC s intra-group exposures to ensure they are maintained within regulatory limits. Plans are being developed to adopt the FSA s new Integrated Groups regime in accordance with the published transition timetable. 193

7 Report of the Directors: Risk (continued) Credit risk > Management > Credit quality / Impairment assessment Controlling cross-border exposures, through the imposition of country limits with sub-limits by maturity and type of business. Country limits are determined by taking into account economic and political factors, and applying local business knowledge. Transactions with countries deemed to be higher risk are considered on a case by case basis. Maintaining and developing HSBC s risk rating framework and systems, to classify exposures meaningfully and enable focused management of the risks involved. The GCRO chairs the Credit Risk Analytics Oversight Committee, which reports to the RMM and oversees risk rating model governance for both wholesale and retail business. Rating methodologies, based upon a wide range of analytics and market databased tools, are core inputs to the assessment of customer risk. For larger facilities, while full use is made of automated risk-rating processes, the ultimate responsibility for setting risk ratings rests with the final approving executive. Assisting the Risk Strategy unit in the development of stress-testing scenarios, economic capital measurement and the refinement of key risk indicators and their reporting, the tools for this being increasingly embedded within the Group s business planning processes. Reporting on aspects of the HSBC credit risk portfolio to the RMM, the Group Audit Committee and the Board of Directors of HSBC Holdings by way of a variety of regular and ad hoc reports covering: risk concentrations; retail portfolio performance at Group entity, regional and overall Group levels; specific higher-risk portfolio segments; a Risk Map of the status of key risk topics, with associated preventive and mitigating actions; individual large impaired accounts, and impairment allowances/charges for all customer segments; country limits, cross-border exposures and related impairment allowances; portfolio and analytical model performance data; and stress-testing results and recommendations. Managing and directing credit risk management systems initiatives. HSBC has constructed a centralised database covering substantially all the Group s direct lending exposures, to deliver an increasingly granular level of management reporting. A uniform credit application process for banks is operational throughout the Group and a similar corporate credit application system covers almost all Group corporate business by value. Providing advice and guidance to HSBC s operating companies, to promote best practice throughout the Group on credit-related matters such as sustainability risk, new products and training. Acting on behalf of HSBC Holdings as the primary interface, for credit-related issues, with external parties including the Bank of England, the FSA, rating agencies, corporate analysts, trade associations and counterparts in the world s major banks and non-bank financial institutions. Each HSBC operating company is required to implement credit policies, procedures and lending guidelines that meet local requirements while conforming to Group standards. Credit approval authorities are delegated by the Board of Directors of HSBC Holdings to the most senior Chief Executive Officers, who receive commensurate delegations from their own boards. In each major subsidiary, a Chief Risk Officer or Chief Credit Officer reports to the local Chief Executive Officer or Chief Operating Officer on credit-related issues, while maintaining a direct functional reporting line to the GCRO. Each operating company is responsible for the quality and performance of its credit portfolios and for monitoring and controlling all credit risks in them, including those subject to central approval by Group Risk. This includes managing its own risk concentrations by market sector, geography and product. Local systems are in place throughout the Group to enable operating companies to control and monitor exposures by customer and retail product segments. Special attention is paid to problem exposures, which are subject to more frequent and intensive review and reporting, in order to accelerate remedial action. Where appropriate, HSBC s local operating companies maintain or establish specialist units to provide customers with support in order to help them avoid default wherever possible. Periodic risk-based audits of operating companies credit processes and portfolios are 194

8 undertaken by HSBC s Internal Audit function. Audits include consideration of the adequacy and clarity of credit policy/procedure manuals; an in-depth analysis of a representative sample of accounts; an overview of homogeneous portfolios of similar assets to assess the quality of the loan book and other exposures; consideration of any oversight or review work performed by credit risk management functions and the adequacy of impairment calculations; a review of analytical model governance and implementation; a review of management objectives and a check that Group and local standards and policies are adhered to in the approval and management of credit facilities. Individually significant accounts are reviewed on a sample basis to ensure that risk ratings are appropriate, that credit and collection procedures have been properly followed and that, when an account or portfolio evidences deterioration, impairment allowances are raised in accordance with the Group s established procedures. Internal Audit discusses with management any risk ratings it considers to be inappropriate; after discussion, its final recommendations for revised ratings must then be adopted. Credit quality HSBC s credit risk rating systems and processes differentiate exposures in order to highlight those with greater risk factors and higher potential severity of loss. In the case of individually significant accounts, risk ratings are reviewed regularly and any amendments are implemented promptly. Within the Group s retail businesses, risk is assessed and managed using a wide range of risk and pricing models to generate portfolio data. HSBC s historical, seven-grade risk rating system based on a judgemental assessment of the likelihood and impact of delinquency was superseded in 2008 for financial reporting purposes, as for those of all significant risk management decisions employing credit risk ratings, by a more risk-sensitive and granular methodology. This facilitates the IRB approach under Basel II adopted by the Group to support calculation of its minimum credit regulatory capital requirement. The integration of this methodology into HSBC s risk processes and structures is well advanced and supports reporting on the new basis to senior management in line with the Group s IRB obligations. For further details, please see Credit quality of financial instruments on page 217. Impairment assessment When impairment losses occur, HSBC reduces the carrying amount of loans and advances through the use of an allowance account. When impairment of available-for-sale financial assets and held-tomaturity financial investments occurs, the carrying amount of the asset is reduced directly. For further details on the accounting policy for impairment of available-for-sale debt and equity securities, see Accounting policies on page 350. Impairment allowances may be assessed and created either for individually significant accounts or, on a collective basis, for groups of individually significant accounts for which no evidence of impairment has been individually identified or for high-volume groups of homogeneous loans that are not considered individually significant. It is HSBC s policy that each operating company creates allowances for impaired loans promptly and consistently. Management regularly evaluates the adequacy of the established allowances for impaired loans by conducting a detailed review of the loan portfolio, comparing performance and delinquency statistics with historical trends and assessing the impact of current economic conditions. Individually assessed impairment allowances These are determined by evaluating exposure to loss, case by case, on all individually significant accounts and all other accounts that do not qualify for the collective assessment approach outlined below. Loans are treated as impaired as soon as there is objective evidence that an impairment loss has been incurred. The criteria used by HSBC to determine that there is such objective evidence include: known cash flow difficulties experienced by the borrower; past due contractual payments of either principal or interest; breach of loan covenants or conditions; the probability that the borrower will enter bankruptcy or other financial realisation; and a significant downgrading in credit rating by an external credit rating agency. In determining the level of allowances on such accounts, the following factors are typically considered: HSBC s aggregate exposure to the customer; 195

9 Report of the Directors: Risk (continued) Credit risk > Management > Impairment assessment // Credit exposure > Maximum exposure the viability of the customer s business model and their capacity to trade successfully out of financial difficulties, generating sufficient cash flow to service debt obligations; the ability of the borrower to obtain, and make payments in, the currency of the loan if not denominated in local currency; the amount and timing of expected receipts and recoveries; the extent of other creditors commitments ranking ahead of, or pari passu with, HSBC and the likelihood of other creditors continuing to support the company; the complexity of determining the aggregate amount and ranking of all creditor claims and the extent to which legal and insurance uncertainties are evident; the value of security and likelihood of successfully realising it; the existence of other credit mitigants and the ability of the providers of such credit mitigants to deliver as contractually committed; and when available, the secondary market price of the debt. The level of impairment allowances on individually significant accounts that are above defined materiality thresholds is reviewed at least semi-annually, and more regularly when circumstances require. This normally encompasses re-assessment of the enforceability of any collateral held and of actual and anticipated receipts. For significant commercial and corporate debts, specialised loan work-out teams with experience in insolvency and specific market sectors are used to manage the lending and assess likely losses. Individually assessed impairment allowances are only released when there is reasonable and objective evidence of a reduction in the established loss estimate. Collectively assessed impairment allowances Impairment is assessed on a collective basis in two circumstances: to cover losses that have been incurred but have not yet been identified on loans subject to individual assessment; and for homogeneous groups of loans that are not considered individually significant. Incurred but not yet identified impairment Individually assessed loans for which no evidence of impairment has been specifically identified on an individual basis are grouped together according to their credit risk characteristics. A collective impairment allowance is calculated to reflect impairment losses incurred at the balance sheet date which will only be individually identified in the future. The collective impairment allowance is determined having taken into account: historical loss experience in portfolios of similar credit risk characteristics (for example, by industry sector, risk rating or product segment); the estimated period between impairment occurring and the loss being identified and evidenced by the establishment of an appropriate allowance against the individual loan; and management s experienced judgement as to whether current economic and credit conditions are such that the actual level of inherent losses is likely to be greater or less than that suggested by historical experience. The period between a loss occurring and its identification is estimated by local management for each relevant portfolio. In general, the periods used vary between four and twelve months although, in exceptional cases, longer periods are warranted. The basis on which impairment allowances for incurred but not yet identified losses is established in each reporting entity is documented and reviewed by senior Finance and Credit Risk management to ensure conformity with Group policy. Homogeneous groups of loans Two methodologies are used to calculate impairment allowances where large numbers of relatively lowvalue assets are managed using a portfolio approach, typically: low-value, homogeneous small business accounts in certain countries or territories; residential mortgages that have not been individually assessed; credit cards and other unsecured consumer lending products; and motor vehicle financing. When appropriate empirical information is available, the Group uses roll rate methodology. This employs a statistical analysis of historical trends of 196

10 default and the amount of consequential loss, based on the delinquency of accounts within a portfolio of homogeneous accounts. Other historical data and current economic conditions are also evaluated when calculating the appropriate level of impairment allowance required to cover inherent loss. In certain highly developed markets, models also take into account behavioural and account management trends revealed in, for example, bankruptcy and rescheduling statistics. When the portfolio size is small, or when information is insufficient or not reliable enough to adopt a roll rate methodology, a formulaic approach is used that allocates progressively higher percentage loss rates the longer a customer s loan is overdue. Loss rates reflect the discounted expected future cash flows for a portfolio. Generally, historical experience is the most objective and relevant information from which to begin to assess inherent loss within each portfolio. In circumstances where historical loss experience provides less relevant information about the inherent loss in a given portfolio at the balance sheet date for example, where there have been changes in economic conditions or regulations management considers the more recent trends in the portfolio risk factors which may not be adequately reflected in its statistical models and, subject to guidance from Group Finance and GMO Risk, adjusts impairment allowances accordingly. Roll rates, loss rates and the expected timing of future recoveries are regularly benchmarked against actual outcomes to ensure they remain appropriate. Write-off of loans and advances Loans are normally written off, either partially or in full, when there is no realistic prospect of further recovery. Where loans are secured, this is generally after receipt of any proceeds from the realisation of security. In the case of residential mortgages and second lien loans in HSBC Finance, loan carrying amounts in excess of net realisable value are written off at or before the time foreclosure is completed or when settlement is reached with the borrower. If there is no reasonable expectation of recovery, and foreclosure is pursued, unconstrained by delays required by law or regulation, the loan is normally written off no later than the end of the month in which the loan becomes 240 days contractually past due. Unsecured personal facilities, including credit cards, are generally written off at between 150 and 210 days past due, the standard period being the end of the month in which the account becomes 180 days contractually delinquent. This period may be extended, generally to 300 days past due but in no event exceeding 360 days past due, in the case of HSBC Finance s unsecured personal facilities other than credit cards. Cases of write-off periods exceeding 360 days past due are few but arise, for example, in a few countries where local regulation or legislation constrain earlier write-off, or where the realisation of collateral for secured real estate lending extends beyond this time. In the event of bankruptcy or analogous proceedings, write-off may occur earlier than at the periods stated above. Collections procedures may continue after write-off. Cross-border exposures Management assesses the vulnerability of countries to foreign currency payment restrictions when considering impairment allowances on cross-border exposures. This assessment includes an analysis of the economic and political factors existing at the time. Economic factors include the level of external indebtedness, the debt service burden and access to external sources of funds to meet the debtor country s financing requirements. Political factors taken into account include the stability of the country and its government, threats to security, and the quality and independence of the legal system. Impairment allowances are assessed in respect of all qualifying exposures within these countries unless these exposures and the inherent risks are: performing, trade-related and of less than one year s maturity; mitigated by acceptable security cover which is, other than in exceptional cases, held outside the country concerned; in the form of securities held for trading purposes for which a liquid and active market exists, and which are measured at fair value daily; performing facilities with a principal (excluding security) of US$1 million or below; or performing facilities with maturity dates shorter than three months. Credit exposure Maximum exposure to credit risk HSBC s exposure to credit risk is spread over several asset classes, including derivatives, trading 197

11 Report of the Directors: Risk (continued) Credit risk > Credit exposure > Maximum exposure / Collateral assets, loans and advances to customers, loans and advances to banks, and financial investments. The balance of exposure at 31 December 2008 represented a change in risk profile compared with a year ago as HSBC repositioned its balance sheet in the face of unprecedented turmoil in financial markets. The following commentary is on a constant currency basis. Derivative asset balances rose significantly as the financial turmoil of 2008 led to heightened levels of volatility in the underlying markets to which the derivatives are referenced. The rise in asset balances was primarily driven by interest rate derivatives as the global fall in interest reference rates created significant gaps between the fixed and floating components of interest rate swaps, which in turn led to substantial mark-to-market increases in the value of interest rate swap positions. The widening credit spreads and significant volatility in credit and foreign exchange markets created the environment in which credit derivative positions and foreign exchange derivative assets increased. HSBC reduced exposure to banks as it tightened lending limits in response to declining credit quality. Much of this lending was instead placed into government issued or guaranteed debt, which contributed to an increase in financial investments. Loans and advances to customers in the commercial sector grew while personal lending declined, primarily due to the continued run-off of parts of the portfolio in North America. Amounts due from non-bank financial institutions increased due to the expansion of reverse repo lending with the London Clearing House in the UK and a reclassification of cash collateral in the US. Within trading assets, debt securities and treasury and other bills increased, primarily due to the consolidation on 30 September 2008 of five Constant Net Asset Value funds containing assets upon consolidation of around US$40 billion held for trading. For further details see pages 180 to 181. As a consequence of the significant increase in derivative balances, there was a decline in the proportion of total assets represented by most other asset classes. On a reported basis, the proportion of total assets represented by derivative assets increased by 12 percentage points while that deployed in loans and advances to customers declined by 5 percentage points and the proportion of trading assets declined by 2 percentage points. Loans and advances to banks as a proportion of total assets declined by 4 percentage points. The most significant factor affecting HSBC s exposure to credit risk during 2008 was the continuing deterioration in credit conditions in the US mortgage market. HSBC also experienced deterioration in credit quality in the commercial real estate sector. Loss experience remained concentrated in the personal lending portfolios, primarily in the US with 85 per cent of loan impairment charges and other credit risk provisions arising in Personal Financial Services in 2008 compared with 94 per cent in In 2008, 9 per cent of loan impairment charges and other credit risk provisions arose in Commercial Banking, compared with 6 per cent in In the UK, despite significant declines in house prices and activity in the housing market as a whole, the credit quality of HSBC s mortgage business remained materially stable in The following table presents the maximum exposure to credit risk from balance sheet and offbalance sheet financial instruments, before taking account of any collateral held or other credit enhancements (unless such credit enhancements meet offsetting requirements). For financial assets recognised on the balance sheet, the maximum exposure to credit risk equals their carrying amount; for financial guarantees granted, it is the maximum amount that HSBC would have to pay if the guarantees were called upon. For loan commitments and other credit-related commitments that are irrevocable over the life of the respective facilities, it is the full amount of the committed facilities. 198