General risk management and control model

Identifying and managing risks is at the core of the board of directors’ remit. The BBVA board monitors on a regular basis a set of financial and non-financial risks which may affect the success of Group BBVA’s business activities.

The BBVA Group has a general risk management and control model that is appropriate for its business model, its organization, the countries where it operates and its corporate governance system. This model allows the Group to carry out its activity within the management and risk control strategy and policy defined by the corporate bodies of BBVA (considering sustainability specifically) and to adapt itself to a changing economic and regulatory environment, facing this management at a global level and aligned to the circumstances at all times.

The Model, for which the Group’s Chief Risk Officer (CRO) is responsible and that must be updated or reviewed at least annually, is fully applied in the Group and it comprises the following basic elements:

• Governance and organization
• Risk Appetite Framework
• Assessment, monitoring and reporting
• Infrastructure

More information

The Group promotes the development of a risk culture that ensures a consistent application of the Model in the Group, and that guarantees that the risks function is understood and internalized at all levels of the organization.

Risk integration

The economic capital required to cover losses is calculated by integrating the various risks managed by the Group. Through risk diversification, BBVA’s needs of total economic capital are lower than the sum of the economic capital needs of its individual activities.  Measurement is a two-stage process: first, risks (credit, market and other) are defined individually according to their specific features; then, they are aggregated using a model that takes risk inter-dependency into account.

Credit risk

In addition to the significant macroeconomic challenges posed by the COVID-19 pandemic, the global economy is currently facing a number of exceptional challenges. Russia’s invasion of Ukraine has caused significant disruption, instability and volatility in the world markets, as well as increased inflation (including contributing to further increases in oil, gas and other commodity prices and further affecting supply chains), and lower economic growth, which has additionally led to aggressive interest rate hikes by central banks that could affect the most leveraged companies, as well as strain the ability of individuals to pay.

In relation to the relief measures for customers affected by the pandemic, and in the second instance, affected by the economic effects derived from the war in Ukraine, in Spain and Peru, the possibility of carrying out extensions both in the maturity period as well as in the grace period in financing with public guarantees are still in force. In Spain, they can be requested by companies and self-employed from June 30, 2022, after the expiration of the Temporary State Aid Framework approved by the European Commission, and in Peru, the Decree was approved in May, with eligibility in this measure in place until June 30, 2023 after the extension of the initial period that ended on December 31, 2022. In addition, on November 23, 2022, Royal Decree-Law 19/2022, of November 22, was published. It amends the Code of Good Practices, establishes a new Code of Good Practices easing the interest rates hike on mortgage loans agreements related to primary residences, and provides for other structural measures aiming to improve the loan market. BBVA has adhered to the new Code of Good Practices with effect from January 1, 2023.

Regarding the direct exposure of the Group to Russia and Ukraine, this is limited for BBVA, although the Group has taken different measures aimed at reducing its impact, among which are the initial lowering of limits followed by the suspension of operations with Russia, the lowering of internal ratings and the inclusion of the country and its borrowers as impaired for subjective reasons.

However, the indirect risk is greater due to the activity of customers in the affected area or sectors. The economic effects are mainly shown through higher commodity prices, but also through financial and confidence channels, as well as a further deterioration of global supply chain issues.

More information

Structural risks

Liquidity and funding
Liquidity and funding management at BBVA aims to finance the recurring growth of the banking business at suitable maturities and costs, using a wide range of instruments that provide access to a large number of alternative sources of financing. In this context, it is important to notice that, given the nature of BBVA’s business, the funding of lending activity is fundamentally carried out through the use of stable customer funds.

Due to its subsidiary-based management model, BBVA is one of the few major European banks that follows the Multiple Point of Entry (MPE) resolution strategy: the parent company sets the liquidity policies, but the subsidiaries are self-sufficient and responsible for managing their own liquidity and funding (taking deposits or accessing the market with their own rating), without fund transfers or financing occurring between either the parent company and the subsidiaries or between the different subsidiaries. This strategy limits the spread of a liquidity crisis among the Group’s different areas and ensures that the cost of liquidity and financing is correctly reflected in the price formation process.

Foreign exchange

Foreign exchange risk management aims to reduce both the sensitivity of the capital ratios and the net attributable profit variability to currency fluctuations.

In relation to the hedging of the capital ratios, BBVA covers, in aggregate, 70% of its subsidiaries capital excess. The sensitivity of the Group’s CET1 fully-loaded ratio to 10% depreciations in major currencies is estimated at: +19 basis points for the U.S. dollar, -5 basis points for the Mexican peso and -5 basis points for the Turkish lira. With regard to the hedging of results, BBVA hedges between 40% and 50% of the aggregate net attributable profit it expects to generate in the next 12 months. For each currency, the final amount hedged depends on its expected future evolution, the costs and the relevance of the incomes related to the Group’s results as a whole.

Interest rate
Interest rate risk management seeks to limit the impact that BBVA may suffer, both in terms of net interest income (short-term) and economic value (long-term), from adverse movements in the interest rate curves in the various currencies in which the Group operates. BBVA carries out this work through an internal procedure, pursuant to the guidelines established by the European Banking Authority (EBA), in order to analyze the potential impact that could derive from a range of scenarios on the Group’s different balance sheets.

More information

Risks associated with climate change

The risks related to climate change are considered as an additional factor which affects the risk categories already identified and defined in the BBVA Group and are therefore managed through the Groups risk management frameworks (credit, market, liquidity, operational and other non-financial risks).

As a consequence, the BBVA Group’s climate change risk-related is based on their incorporation into the currently processes and governance established, considering the regulation and supervisory trends.

More information

Operational Risk

BBVA defines operational risk (“OR”) as any risk that could result in losses caused by human error; inadequate or flawed internal processes; undue conduct with respect to customers, markets or the institution; antimoney laundering and financing of terrorist activities; failures, interruptions or flaws in systems or communications; theft, loss or wrong use of information, as well as deterioration of its quality, internal or external fraud, including in any case those derived from cyberattacks; theft or harm to assets or persons; legal risks; risks derived from staff management and labor health; and defective service provided by suppliers; as well as damages from extreme climate events, pandemics and other natural disasters.

Operational risk management is oriented towards the identification of the root causes to avoid their occurrence and mitigate possible consequences. This is carried out through the establishment of control framework and monitoring and the development of mitigation plans aimed at minimizing resulting economic and reputational losses and their impact on the recurrent generation of results, and contributing the increase the quality, safety and availability of the provided service. Operational risk management is integrated into the global risk management structure of the BBVA Group.

More information

Reputational risk

Since 2016, BBVA disposes of a reputational risk assessment methodology. Through this methodology, the Bank defines and reviews regularly a map in which it prioritizes the reputational risks which have to be faced and the set of action plans to mitigate them. The prioritization is done based on two variables: the impact on the perception of the stakeholders and the strength of BBVA facing the risk.

This exercise is performed annually in all countries where the Group has bank entities. As a result of the assessment carried out in 2021, in 2022, 29 mitigation action plans were identified. The 17 plans identified in 2021 as a result of the evaluation of the 2021 financial year have already been concluded.

The Reputation teams collaborate, together with the rest of the members of BBVA’s second defense line, in the different Committees of Admission of the Operational Risk, both at Group and the different geographical areas level. Those Committees perform the initial identification of potential reputational risks and mitigation controls are proposed.

The results of the annual assessment of the Reputational Risk are reported in each geographical area at the appropriate governance level. At Group level, these results are reported to the Global Corporate Assurance Committee and, since 2020, to the Board’s Executive Committee.

More information

Risk factors

BBVA Group has processes in place for identifying risks and analyzing scenarios in order to enable the Group to manage risks in a dynamic and proactive way.The risk identification processes are forward looking to seek the identification of emerging risks and take into account the concerns of both the business areas, which are close to the reality of the different geographical areas, and the corporate areas and senior management.

Risks are identified and measured consistently using the methodologies deemed appropriate in each case. Their measurement includes the design and application of scenario analyzes and stress testing and considers the controls to which the risks are subjected.

As part of this process, a forward projection of the Risk Appetite Framework (RAF) variables in stress scenarios is conducted in order to identify possible deviations from the established thresholds. If any such deviations are detected, appropriate measures are taken to keep the variables within the target risk profile.

In this context, there are a number of emerging risks that could affect the evolution of the Group’s business. These risks are included in the following blocks:

• Macroeconomic and geopolitical risks
• Risks relating to the political, economic and social conditions in Turkey
• Risks associated with pandemics such as the COVID-19
• Regulatory and reputational risks
• Business, operational and legal risks
• Climate change risks

More information