Statement of Guidance - Investment Securities and Derivatives Risk Management for Banks

Summary

This is a CIMA Statement of Guidance addressed to banks operating in or from the Cayman Islands, setting out sound risk-management practices for investment securities held in held-to-maturity and available-for-sale accounts, certificates of deposit held for investment purposes, and end-user derivative contracts (such as swaps, futures, and options) used for non-trading purposes. It is guidance rather than a checklist, intended to describe the practices a prudent bank manager should follow when managing investment and derivatives-related market, credit, liquidity, legal, and operational risks.

The guidance sets expectations across four main areas.

• Board and senior management oversight: Oversight of investment activities, with boards expected to approve major investment policies and risk limits.
• Risk-management process: Establishment of a risk-management process including policies, procedures, and limits.
• Risk identification, measurement, and reporting: Processes for identifying, measuring, and reporting risk.
• Internal controls: Segregation of duties and periodic independent review of the risk-management program, with management expected to maintain adequate segregation between risk-taking and back-office/settlement functions, particularly for banks with significant investment activities.

Banks are expected to tailor the specific practices to their own size, complexity, and risk profile, but should be able to demonstrate documented policies and procedures consistent with the principles described. There is no stated commencement date, transition period, or filing deadline in the document itself; it functions as ongoing supervisory expectations rather than a one-off compliance exercise.

Key obligations

• Banks must adopt prudent investment policies and procedures approved by the board of directors.
• Investment policies and procedures must be defined and commensurate with the nature and complexity of the bank's activities, including an investment management/measurement/monitoring process, adequate controls over the investment portfolio, and operating limits consistent with internal policies.
• The board of directors must approve major policies for investment activities, including risk limits, and periodically review consolidated portfolio activity reports and require management to demonstrate compliance with approved risk limits.
• Senior management must establish and enforce policies and procedures for conducting investment activities and understand the risks involved and how they fit within overall business strategy.
• Management must ensure the risk-management process is commensurate with the size, scope, and complexity of the institution's holdings and ensure proper segregation of duties, with back-office, settlement, and reconciliation functions independent of risk-taking personnel for banks with significant investment activities.
• Banks should identify and measure risks associated with individual investment transactions prior to acquisition and periodically after purchase, and aggregate risk measurements into an overall institutional risk profile.
• Banks should conduct in-house or independent third-party pre-acquisition analyses for investment transactions.
• Reports to the board and senior management must summarize investment-related risks, address compliance with policy objectives, constraints and legal requirements, and note exceptions to policies, procedures and limits; reporting frequency should be sufficient to reflect the institution's changing risk profile.
• Banks with significant investment activities should conduct periodic independent (internal/external audit) reviews of their risk-management program, covering compliance with investment policies, appropriateness of the risk-measurement system, and timeliness/usefulness of reports to the board; findings must be reported to the board with timely corrective action.
• Institutions' accounting policies must provide clear guidelines for reporting treatment of securities and derivatives holdings consistent with business objectives, GAAP, and regulatory reporting standards.
• Banks should provide regular reports to their boards on market-risk exposures of investments, including trend evaluations, compliance with board-approved limits, and identification of exceptions.
• Banks should have mechanisms to detect and adequately address exceptions to limits and guidelines, with management reports addressing potential exposures to yield curve changes and other relevant factors.

Applies to

banks