HKMA Stress-Testing Framework: Capital Adequacy Requirements for Hong Kong Authorised Institutions

The Hong Kong Monetary Authority (HKMA) has signalled a material escalation in its supervisory expectations for stress testing and capital adequacy. In its 2024 Supervisory Policy Manual (SPM) updates and the December 2024 industry consultation on the revised “Interest Rate Risk in the Banking Book” (IRRBB) guidelines, the HKMA explicitly requires Authorised Institutions (AIs) to embed reverse stress testing as a standard risk management tool. This shift is not theoretical. It follows a period where several mid-sized global banks failed to model the speed of deposit flight during the 2023 liquidity crises. For Hong Kong AIs, particularly those licensed as virtual banks or with significant China-linked exposures, the window to upgrade internal capital adequacy assessment processes (ICAAP) is closing. The HKMA’s 2025 examination cycle will focus on the quality of scenario design and the granularity of assumptions, not just the final capital ratio. This article outlines the current framework, the specific requirements for capital planning under the Banking Ordinance (Cap. 155), and the procedural steps for compliance.

The Regulatory Foundation: Banking Ordinance and the HKMA’s Supervisory Policy Manual

The statutory basis for capital adequacy in Hong Kong is the Banking Ordinance (Cap. 155). Section 101(1) of the Ordinance empowers the HKMA to impose capital adequacy requirements on AIs. The HKMA implements these requirements through its Supervisory Policy Manual (SPM), a suite of modules that detail supervisory expectations.

The Capital Adequacy Ratio (CAR) Floor

The HKMA requires all AIs to maintain a Capital Adequacy Ratio (CAR) of no less than 8% of risk-weighted assets. This is the minimum under the Basel III framework as adopted in Hong Kong. However, the HKMA frequently imposes higher institution-specific ratios through its Supervisory Review and Evaluation Process (SREP). An AI that fails to meet its prescribed CAR triggers mandatory reporting under Section 101(2) of the Banking Ordinance and may face restrictions on dividend distributions or new business expansion.

The Pillar 2 Add-on and ICAAP

The SPM module CA-G-5 on “Supervisory Review Process” requires every AI to conduct an Internal Capital Adequacy Assessment Process (ICAAP). This is the institution’s own assessment of its risk profile and capital needs, covering risks not fully captured under Pillar 1 (credit, market, operational risk). The Pillar 2 add-on is determined by the HKMA based on the ICAAP submission and the SREP findings. For 2025, the HKMA has indicated a sharper focus on concentration risk and interest rate risk in the banking book (IRRBB) for institutions with large property loan portfolios.

Step 1: Building the Stress-Testing Framework

The HKMA’s SPM module IC-1 on “Stress Testing” defines the minimum expectations. The framework must be comprehensive, forward-looking, and integrated into the institution’s risk appetite and capital planning.

Scenario Design and Severity

The HKMA requires AIs to run both idiosyncratic and systemic scenarios. Idiosyncratic scenarios must reflect the AI’s specific vulnerabilities, such as a sudden withdrawal of wholesale funding or a default by a single large counterparty. Systemic scenarios must include a severe Hong Kong property market downturn and a sharp rise in interest rates. The HKMA’s 2024 IRRBB consultation paper specifically mandates that scenarios include parallel rate shocks of +200 and -200 basis points, as well as a steepening of the yield curve. The scenarios must be “severe but plausible”, a standard the HKMA defines as an event that has a probability of occurrence between 0.5% and 1% over a one-year horizon.

Reverse Stress Testing

The 2024 SPM updates introduced a more prescriptive requirement for reverse stress testing. This process starts with a predefined failure outcome — such as a CAR falling below 4% or a liquidity coverage ratio (LCR) dropping below 50% — and works backwards to identify the combination of events that would cause that failure. The HKMA expects AIs to run reverse stress tests at least annually and to document the identified vulnerabilities in the ICAAP report. For a virtual bank with a narrow deposit base, a reverse stress test might reveal that a 15% deposit outflow over two days would breach its internal trigger. The board must then approve a contingency plan for that scenario.

Step 2: Capital Planning and the ICAAP Submission

The ICAAP is not a one-off document. It is a continuous process that feeds into the AI’s business strategy and risk appetite. The HKMA requires a formal ICAAP report to be submitted at least annually, or more frequently if the AI’s risk profile changes materially.

The Capital Buffer Hierarchy

Hong Kong AIs must maintain several capital buffers on top of the 8% minimum. The Capital Conservation Buffer (CCoB) is 2.5% of risk-weighted assets. The Countercyclical Capital Buffer (CCyB) is set by the HKMA quarterly; as of Q1 2025, it stands at 1.0% for Hong Kong exposures. For Domestic Systemically Important Banks (D-SIBs), an additional buffer of 1.0% to 2.5% applies. The total Common Equity Tier 1 (CET1) requirement for a D-SIB can therefore exceed 13%. The ICAAP must demonstrate how the AI will maintain these buffers through a severe downturn.

Projections and Management Actions

The ICAAP must include a three-year capital projection under the base case and the adverse stress scenario. The projections must incorporate expected profit, dividend policy, and any planned capital issuances. The HKMA requires the AI to specify management actions that would be taken if the capital ratio falls below a defined trigger level. These actions might include reducing discretionary bonuses, suspending share buybacks, or selling non-core assets. The trigger levels must be approved by the board and documented in the AI’s Capital Contingency Plan (CCP).

Step 3: Liquidity Stress Testing and the LCR

Capital adequacy and liquidity are inseparable in the HKMA’s framework. An AI can be solvent but fail due to a liquidity run. The HKMA’s SPM module LM-1 on “Liquidity Risk Management” requires AIs to maintain a Liquidity Coverage Ratio (LCR) of at least 100% and a Net Stable Funding Ratio (NSFR) of at least 100%.

The LCR Stress Scenario

The LCR stress test assumes a combined idiosyncratic and market-wide shock lasting 30 days. The HKMA’s scenario includes a 3-notch downgrade in the AI’s credit rating, a 10% deposit outflow, and a loss of unsecured wholesale funding. For the 2025 examination cycle, the HKMA has specifically flagged the treatment of retail deposits held by virtual banks. The HKMA expects virtual banks to apply higher run-off rates on uninsured deposits, reflecting the lack of a physical branch network. An AI that applies a standard 5% run-off rate on all retail deposits may receive a supervisory challenge.

Intraday Liquidity Monitoring

The HKMA has increased its focus on intraday liquidity risk, particularly for AIs that act as settlement agents. SPM module LM-2 requires AIs to monitor their largest intraday liquidity usage and to maintain a buffer of high-quality liquid assets (HQLA) sufficient to cover peak intraday flows. The HKMA’s 2024 thematic review on payment system risks found that several AIs lacked real-time monitoring systems for intraday liquidity. The regulator now expects AIs to implement automated dashboards that track intraday liquidity usage against a pre-set limit.

Step 4: Reporting and Documentation Requirements

The HKMA requires formal reporting of stress test results and capital positions. The frequency and format are specified in the Banking (Capital) Rules (Cap. 155L) and the Banking (Liquidity) Rules (Cap. 155Q).

Quarterly Returns and Ad Hoc Notifications

Every AI must submit a quarterly capital adequacy return (Form MA(BS)1E) within one month of the quarter end. The return must include the CAR, CET1 ratio, and leverage ratio. If the AI’s CAR falls below 120% of its prescribed minimum, the AI must notify the HKMA in writing within three business days. The notification must include the cause of the decline and the proposed remedial actions.

The ICAAP Report Structure

The HKMA’s SPM module CA-G-5 provides a template for the ICAAP report. The report must contain:

• A risk profile summary, including a heat map of key risks.
• The stress test results for the base case and adverse scenario.
• The capital projections and buffer usage.
• The results of the reverse stress test and the identified vulnerabilities.
• The Capital Contingency Plan with trigger levels and management actions.
• A board attestation that the ICAAP is adequate and integrated into the AI’s strategy.

The HKMA expects the ICAAP report to be submitted at least 60 days before the end of the AI’s financial year. The HKMA then reviews the report and issues a SREP letter, which may include a Pillar 2 add-on or a specific supervisory requirement.

Common Compliance Gaps and Supervisory Focus Areas for 2025-2026

The HKMA’s 2024 annual report on supervisory priorities identified several recurring weaknesses in AIs’ stress-testing frameworks.

Inadequate Scenario Severity

The HKMA found that many AIs used scenarios that were too mild. A common error was applying a GDP decline of only 2% in a severe scenario, when the HKMA’s own benchmark for a Hong Kong-specific stress event is a GDP contraction of 5% to 7%. The HKMA expects AIs to calibrate their scenarios against historical Hong Kong downturns, such as the 1998 Asian Financial Crisis or the 2008 Global Financial Crisis, and to adjust for current risk factors like the China property market correction.

Weak Reverse Stress Testing

Several AIs submitted reverse stress tests that merely reversed a single risk factor, such as a 50% increase in non-performing loans. The HKMA requires a multi-factor reverse stress test that combines credit, market, and liquidity shocks. An AI that fails to identify a plausible combination of events leading to failure will be required to re-submit its ICAAP.

Data Granularity and Model Validation

The HKMA has increased scrutiny on the data used to estimate run-off rates and probability of default. For 2025, the HKMA expects AIs to use institution-specific data, not industry benchmarks, for material portfolios. An AI that relies on generic industry averages for its property loan portfolio will face a supervisory challenge. The HKMA also requires independent validation of all stress-testing models at least every two years, in line with SPM module IC-2 on “Model Risk Management”.

Actionable Takeaways for Compliance Officers and AIs

1. Update your reverse stress testing framework by Q2 2025 to include multi-factor scenarios that combine credit, market, and liquidity shocks, and document the identified vulnerabilities in your ICAAP report.
2. Review your scenario severity assumptions against the HKMA’s benchmark of a 5-7% GDP decline for a Hong Kong-specific stress event, and adjust your capital projections accordingly.
3. Audit your LCR run-off rates for retail deposits, particularly if you operate as a virtual bank or have a high proportion of uninsured deposits, and apply rates that reflect your funding structure.
4. Submit your ICAAP report at least 60 days before your financial year-end to allow sufficient time for the HKMA’s SREP review and to address any requests for additional information.
5. Ensure your intraday liquidity monitoring system is automated and tracks peak usage against a pre-set limit, as the HKMA’s 2025 thematic review will focus on payment system risks.

本文不構成法律建議。涉及個人案件請諮詢持牌律師。