The Three Main Risk Categories Every Bank Manages

Risk management is central to banking, since a bank's core business — taking deposits and extending credit — inherently involves uncertainty. Most frameworks organise bank risk into three broad categories.

Credit risk. The risk that a borrower fails to repay as agreed, the largest risk category for most banks, managed through credit appraisal, collateral, diversification across borrowers and sectors, and provisioning for expected losses.

Market risk. The risk of losses from movements in interest rates, exchange rates, equity prices, or commodity prices affecting a bank's trading and investment portfolio, managed through position limits, hedging, and stress testing.

Operational risk. The risk of loss from failed internal processes, people, systems, or external events — including fraud, technology outages, and cyber incidents — managed through internal controls, business continuity planning, and audit.

Basel III capital framework. The international Basel III standards require banks to hold minimum capital against these risk categories, calibrated to the riskiness of their assets, so that banks have a buffer to absorb losses without threatening depositors or the wider financial system.