Basel III: Banking Capital and Risk Framework Guide

Basel III is the comprehensive set of reform measures developed by the Basel Committee on Banking Supervision to strengthen the regulation, supervision, and risk management of banks worldwide. Born from the 2008 financial crisis, Basel III significantly raised capital requirements, introduced new liquidity standards, and established a leverage ratio to limit excessive balance sheet growth. The framework continues to evolve — the Basel III Endgame (known as Basel 3.1 in Europe) represents the final phase of post-crisis reforms, with implementation phasing in across major jurisdictions through the late 2020s.

What Basel III Is and Who Issues It

Basel III was developed by the Basel Committee on Banking Supervision (BCBS), a body of banking supervisors from major economies that operates under the auspices of the Bank for International Settlements (BIS) in Basel, Switzerland. The BCBS does not have binding legal authority — it publishes standards that member jurisdictions implement through their own national legislation and regulation.

The original Basel III framework was published in December 2010 following the 2008 financial crisis. It replaced Basel II, which had proven inadequate for preventing the buildup of systemic risk. Additional elements — including new liquidity standards and leverage ratios — were phased in through a series of BCBS publications and national implementation rules.

The Basel III Endgame, finalizing the remaining elements of post-crisis reforms, was published by BCBS in December 2017. In the United States, US regulators (OCC, Federal Reserve, FDIC) proposed US implementation rules in 2023, with significant revisions following industry feedback. In Europe, Basel 3.1 rules are being implemented through the Capital Requirements Regulation (CRR3) and Capital Requirements Directive (CRD6). Implementation timelines vary by jurisdiction.

Who Must Comply

Basel III applies to internationally active banks worldwide, though national regulators determine the precise scope:

• United States: Applies to bank holding companies, savings and loan holding companies, and state member banks, with the most stringent requirements applied to the largest institutions (global systemically important banks, or G-SIBs) and scaled requirements for smaller institutions
• European Union: Applies across EU member states through directly applicable regulations (CRR/CRR2/CRR3) and member state implementation of the CRD
• United Kingdom: Post-Brexit, the UK has implemented Basel III through the Prudential Regulation Authority's (PRA) rules for PRA-regulated firms
• Australia: APRA implements Basel III for authorized deposit-taking institutions
• Other jurisdictions: Most BCBS member countries implement comparable standards, with timelines and calibrations that may differ from the BCBS baseline

National regulators typically apply Basel III requirements in a tiered fashion, with the full framework applied to large internationally active banks and simplified approaches available for smaller domestic institutions.

The Three Pillars Explained in Depth

Pillar 1: Minimum Capital Requirements

Pillar 1 establishes minimum capital requirements across three risk categories:

Credit Risk: Capital must be held against the risk that borrowers default. Banks can use either the standardized approach (applying fixed risk weights to asset classes) or, with regulatory approval, internal ratings-based (IRB) approaches that use the bank's own risk models. The Basel III Endgame significantly constrained the use of internal models by introducing output floors — requiring that capital calculated using internal models cannot fall below 72.5% of what the standardized approach would produce.

Market Risk: Capital against trading book risk was substantially revised under the Fundamental Review of the Trading Book (FRTB), requiring more sensitive risk measurement and stronger model approval processes.

Operational Risk: The Basel III Endgame replaced complex operational risk models with a single Standardized Measurement Approach (SMA) that scales with business indicators and historical loss data, eliminating the advanced measurement approaches that had produced highly variable capital requirements.

Capital must meet quality standards as well as quantity thresholds. The hierarchy distinguishes:

• Common Equity Tier 1 (CET1): Highest quality capital — common shares, retained earnings, and other comprehensive income. Minimum ratio of 4.5% of risk-weighted assets.
• Additional Tier 1 (AT1): Instruments such as contingent convertible bonds (CoCos) that can absorb losses through write-down or conversion to equity. With AT1, total Tier 1 must meet 6%.
• Tier 2 (T2): Subordinated debt and other loss-absorbing instruments. With T2, total capital must meet 8%.

Beyond minimum requirements, banks must also maintain:

• Capital Conservation Buffer: 2.5% of risk-weighted assets in CET1, held as a buffer above the minimum to absorb losses during stress periods
• Countercyclical Capital Buffer (CCyB): 0 to 2.5% of risk-weighted assets, set by national authorities based on credit cycle conditions. Several jurisdictions have activated the CCyB in recent years as credit growth has accelerated.
• G-SIB Surcharge: Additional CET1 ranging from 1% to 3.5% for global systemically important banks, reflecting their systemic importance

Pillar 2: Supervisory Review Process

Pillar 2 requires banks to have robust internal processes for assessing their capital adequacy relative to their risk profile, and for supervisors to review those assessments. The key processes include:

Internal Capital Adequacy Assessment Process (ICAAP): Banks conduct their own assessment of capital requirements, stress testing their capital positions against scenarios defined by management and prescribed by supervisors. The ICAAP covers risks not fully captured in Pillar 1, including concentration risk, strategic risk, reputational risk, and interest rate risk in the banking book (IRRBB).

Supervisory Review and Evaluation Process (SREP): Supervisors review the ICAAP and other information to form their own view of the bank's capital adequacy. They may impose Pillar 2 requirements (P2R) and Pillar 2 guidance (P2G) on top of Pillar 1 requirements, resulting in institution-specific capital requirements that exceed the public minima.

Pillar 3: Market Discipline

Pillar 3 mandates enhanced public disclosure requirements, enabling market participants and counterparties to assess a bank's risk profile and capital adequacy. Disclosures cover capital composition, risk exposures, risk management processes, and remuneration practices.

BCBS has developed standardized Pillar 3 templates to promote comparability across banks and jurisdictions. Disclosures must be made at least semi-annually for quantitative information and annually for qualitative information.

Liquidity Requirements

Basel III introduced two new liquidity standards that did not exist under Basel II:

Liquidity Coverage Ratio (LCR): Requires banks to hold a stock of high-quality liquid assets (HQLA) sufficient to cover net cash outflows over a 30-day stressed scenario. The ratio must be at least 100%. HQLA are divided into Level 1 assets (cash, central bank reserves, sovereign bonds) and Level 2 assets (certain corporate bonds and covered bonds) with haircuts applied.

Net Stable Funding Ratio (NSFR): Promotes funding stability over a one-year horizon by requiring that the amount of stable funding available (weighted liabilities and equity) exceeds the amount of stable funding required (weighted by asset liquidity and maturity). The ratio must be at least 100%.

Audit and Assessment Process

Basel III compliance is not assessed through a single annual audit but through continuous regulatory supervision:

G-SIBs are subject to additional supervisory intensity, including more frequent model reviews and resolution planning requirements.

Costs and Timeline

Capital holding costs — the cost of maintaining equity capital at required levels rather than deploying it — represent the largest "hidden" economic cost of Basel III and can amount to tens of billions of dollars for G-SIBs.

Comparison with Related Frameworks

• SOX: About 25% overlap, primarily in internal controls over financial reporting and risk management governance. Public banks in the US subject to both frameworks have complementary audit and governance requirements.
• GLBA: Approximately 20% overlap around customer data protection and information security. See the GLBA guide.
• MiFID II: Significant interaction for investment banks and trading firms subject to both capital requirements and conduct regulations. See the MiFID II guide.
• FATF: AML risk management under FATF intersects with operational risk assessment under Basel III. See the FATF guide.

How Automation Helps

Basel III's data-intensive capital calculation, stress testing, and regulatory reporting processes have driven significant investment in risk technology. While core capital modeling requires specialized platforms, compliance automation plays a supporting role:

• Policy management tools maintain capital management policies, ICAAP documentation, and board-approved risk appetite frameworks
• Control testing automation supports the internal controls environment required by ICAAP governance
• Reporting workflows track regulatory submission deadlines across multiple jurisdictions

LowerPlane supports financial institutions' governance and control documentation requirements relevant to Basel III's Pillar 2 and Pillar 3 obligations. With 50-plus frameworks covered, a $4,000 per year starting price, and a 9.4/10 AuditXYZ rating, LowerPlane integrates Basel III policy management with broader financial services compliance needs. See /compare/best-compliance-automation-platforms for a detailed platform comparison.

Frequently Asked Questions

What is the Basel III Endgame and when does it take effect?

The Basel III Endgame (BCBS December 2017 finalization, sometimes called Basel 3.1) completes the post-2008 reform agenda by introducing output floors, revising the standardized credit risk approach, finalizing the FRTB for market risk, and replacing operational risk models with the SMA. In the US, implementation rules have faced significant revision after industry pushback on the 2023 proposal, with a re-proposal process underway. In the EU, Basel 3.1 implementation through CRR3 is scheduled to begin applying from January 2025. Timelines continue to shift.

What is a G-SIB and what additional requirements do they face?

A global systemically important bank (G-SIB) is a bank designated by the Financial Stability Board based on its systemic importance across five categories: size, interconnectedness, lack of substitutability, complexity, and global cross-jurisdictional activity. G-SIBs face additional capital surcharges (from 1% to 3.5% CET1), enhanced supervisory scrutiny, and resolution planning requirements (living wills). In 2026, eight US banks are classified as G-SIBs.

How does Basel III affect smaller banks?

Smaller banks in most jurisdictions face a simplified version of Basel III. US regulators have long applied the standardized approach to banks below certain size thresholds and provide capital simplification for community banks. European regulators apply the SME supporting factor to reduce capital requirements for small and medium enterprise loans. The trend across jurisdictions is toward maintaining proportionality, though the Basel III Endgame's output floors will affect some regional banks using IRB models.

What is the leverage ratio and why was it introduced?

The leverage ratio is a non-risk-based backstop that limits total exposure (on and off balance sheet) relative to Tier 1 capital. Basel III requires a minimum leverage ratio of 3%. The leverage ratio was introduced because risk-based capital requirements, while theoretically sound, can produce very low capital requirements when internal models underestimate risk — as occurred with structured finance positions in 2007–2008. The leverage ratio provides a simple, manipulation-resistant floor that complements risk-weighted requirements.