Risk Management

In order for SMBC Group to realize and maintain a sustainable growth in corporate value as a “Top Tier Global Financial Group,” each one of our colleagues should think and judge on their own if their actions meet the expectations and requirements of customers, markets, and other stakeholders, not just if they are compliant with laws and regulations. SMBC Group has established “Principles of Action on Compliance and Risk” for every colleague to hold onto as a “keystone” of their daily business. The principles include “Business based on the Risk Appetite Framework” and “We will conduct business operations with risk ownership of the risks, such as credit risk, market risk, liquidity risk, operational risk, and conduct risk, that arise in our own business.” Concrete measures include internal surveys for monitoring the compliance awareness and risk sensitivity of our colleagues as well as internal training for fostering a sound risk culture.

SMBC Group has introduced a Risk Appetite Framework for controlling group-wide risks that clarifies the types and levels of risk that we are willing to take on or are prepared to tolerate in order to grow profits (risk appetite).

The Risk Appetite Framework is one of two pivots of our business management alongside business strategies. It functions as a management framework for sharing information on the operating environment and risks facing SMBC Group among management and for facilitating appropriate risk taking based thereon.

SMBC Group identifies risks that threaten to significantly impact management as Top Risks.

The selection of Top Risks involves comprehensive screening of risk factors, evaluation of each risk scenario’s possibility of occurrence and potential impact on management, and discussion by the Risk Management Committee and the Management Committee. Top Risks are utilized to enhance risk management by being incorporated into discussions of the Risk Appetite Framework and the formulation of business strategies and into the creation of risk scenarios for stress testing.

Please see Appendix for Top Risks.

At SMBC Group, we use stress testing to analyze and comprehend the impact on SMBC Group's businesses of changes in economic or market conditions, in order to plan and execute forward-looking business strategies.

In our stress testing, we prepare multiple risk scenarios including macroeconomic variables such as GDP, stock prices, interest rates, and foreign exchange rates based on the aforementioned Top Risks, discussions with experts and related departments.

When developing business strategies, we set out scenarios assuming stressed business environments such as serious economic recessions and market disruption for the sake of assessing risk-taking capabilities at SMBC Group and verifying whether adequate soundness can be maintained under stress. For example, we are conducting stress testing assuming prolonged monetary tightening in the U.S. and Europe, a global credit crunch, and economic stagnation in Japan to verify the soundness of SMBC Group’s capital and confirm the appropriate actions to be taken.

During a fiscal year, we will conduct stress testing in a timely manner to assess the potential impact on our business and to take the appropriate actions in case a serious risk event occurs.

In addition, we conduct detailed stress testing for individual risks such as credit risk, market risk, and liquidity risk, so as to decide and review risk-taking strategies.

We are also conducting scenario analyses on physical and transition risks related to climate change.

A risk register is formulated by each business unit for the purpose of realizing more sophisticated risk governance and enhancing business units’ risk ownership. In formulating these registers, business units communicate with risk management departments to identify the risks present in their business, and these risks are reflected in business strategies after they have been evaluated and the adequacy of measures for controlling them has been verified.

Key Risk Events (KRE), external events that indicate the increased threat of risks, have been identified to ascertain the symptoms of the potential risks. KRE are utilized to analyze and assess how likely similar cases will occur in SMBC Group and what effects such similar cases will have on SMBC Group, and to enhance our risk management system.

Based on the recognition of the importance of risk management, top management is actively involved in the risk management process, and systems are in place for verifying and monitoring the effectiveness and appropriateness of this process. Specifically, the group-wide basic policies for risk management and the Risk Appetites for entire SMBC Group are determined by the Management Committee and authorized by the Board of Directors. After that, the status of risk management based on these policies and risk appetites is reported to the Board of Directors by the Group CRO four times per year.

If the outlooks for the operating environment and risks change drastically from the assumption in the beginning of the fiscal year, we will review the Risk Appetite for entire group in a timely and appropriate manner with approval by the Board of Directors.

Also, we have defined three lines of defense and clarified related roles and responsibilities of relevant divisions. With these provisions in place, risk management systems have been established based on the characteristics of particular businesses, and measures are being put in place to strengthen and improve the effectiveness of these systems in accordance with these basic policies for risk management.

Furthermore, SMBC Group is strengthening group-wide risk management systems through the Group CRO Committee and the Global CRO Committee.

The Basel Committee on Banking Supervision's “Corporate governance principles for banks” recommends “three lines of defense” as a framework for risk management and governance. Based on this framework, we have clarified the roles and responsibilities of each unit as indicated below and we are taking steps to achieve more effective and stronger risk management and compliance systems.