ILAAP (Internal Liquidity Adequacy Assessment Process) and ICAAP (Internal Capital Adequacy Assessment Process) are two separate but closely related regulatory frameworks that banks must maintain under Basel requirements. ILAAP focuses on whether a bank holds enough liquidity to survive stress periods, while ICAAP focuses on whether it holds enough capital to absorb losses. Both processes feed into the supervisory review and evaluation process (SREP), but they address fundamentally different risk dimensions. This article walks through how each process works, what they cover, and how banks can strengthen their approach to both.

How does ILAAP work in practice?

ILAAP works by requiring a bank to identify, measure, and manage its liquidity risks through internal assessment rather than relying solely on regulatory minimums. The bank documents its liquidity risk appetite, runs stress scenarios, models its funding needs across different time horizons, and demonstrates to supervisors that it can survive a range of adverse conditions. The output is a formal ILAAP report submitted to the regulator as part of the SREP cycle. In day-to-day terms, ILAAP connects several internal processes. Treasury teams monitor intraday and daily liquidity positions. Risk functions model behavioral assumptions around deposit outflows, loan drawdowns, and collateral requirements. Senior management reviews the results against the bank’s stated risk appetite and adjusts the funding strategy accordingly. The assessment covers both short-term survival (typically a 30-day stress horizon aligned with the Liquidity Coverage Ratio) and longer-term structural funding stability (aligned with the Net Stable Funding Ratio). Banks are expected to go beyond these regulatory minimums and show that their internal view of liquidity adequacy is robust, forward-looking, and genuinely integrated into business decisions.

What is the difference between ILAAP and ICAAP?

The core difference between ILAAP and ICAAP is what they protect against. ICAAP asks: “Do we have enough capital to absorb unexpected losses?” ILAAP asks: “Do we have enough liquidity to meet our obligations even under stress?” Capital and liquidity are related but distinct buffers, and regulators require banks to assess each independently.

What ICAAP covers

ICAAP focuses on capital adequacy across credit risk, operational risk, interest rate risk in the banking book (IRRBB), and other material risks. It includes an assessment of the bank’s internal capital target, stress-tested capital requirements, and the adequacy of the capital planning process. The goal is to ensure the bank can remain solvent under adverse scenarios.

What ILAAP covers

ILAAP focuses on funding risk, liquidity buffers, intraday liquidity management, and the bank’s ability to generate or access cash when needed. It covers behavioral assumptions around retail and wholesale funding, contingency funding plans, and survival horizons under different stress scenarios. The goal is to ensure the bank can remain liquid, not just solvent. In practice, ILAAP and ICAAP interact closely. A capital event, such as a large unexpected loss, can trigger a liquidity event if it damages market confidence. Supervisors increasingly expect banks to model these interdependencies explicitly rather than treating the two assessments in isolation.

What are the main regulatory requirements for ILAAP?

ILAAP requirements are set by the Basel framework and implemented by national regulators through their own supervisory guidelines. Under Basel III and the updated Basel IV standards, banks are required to maintain quantitative liquidity ratios (LCR and NSFR) and to support these with an internal liquidity adequacy assessment that goes beyond the minimum ratios. Supervisors use the ILAAP submission to judge whether a bank’s internal processes are sound and proportionate to its risk profile. Key regulatory requirements typically include:

• Liquidity Coverage Ratio (LCR): Banks must hold enough high-quality liquid assets (HQLA) to cover net cash outflows over a 30-day stress period.
• Net Stable Funding Ratio (NSFR): Banks must maintain a stable funding structure over a one-year horizon, with available stable funding exceeding required stable funding.
• Intraday liquidity monitoring: Banks must track and manage intraday liquidity positions to meet payment and settlement obligations in real time.
• Internal liquidity risk appetite: Banks must define and document their own liquidity risk tolerance, separate from regulatory minimums.
• Stress testing: Banks must run liquidity stress scenarios covering institution-specific, market-wide, and combined stress events.
• Contingency Funding Plan (CFP): Banks must maintain a credible plan for accessing liquidity in a crisis, including early warning indicators and escalation procedures.

In jurisdictions such as Australia, APRA’s APS 117 sets out specific requirements for interest rate risk in the banking book alongside liquidity management expectations, reinforcing the connection between IRRBB compliance and ILAAP. The Basel 3.1 updates have also sharpened supervisory expectations around the quality of internal models and scenario design.

What liquidity risks does ILAAP need to cover?

ILAAP must cover all material sources of liquidity risk that could affect a bank’s ability to meet its obligations. This includes funding liquidity risk, market liquidity risk, intraday liquidity risk, and off-balance-sheet liquidity risk. Regulators expect banks to identify which of these risks are material to their specific business model and to demonstrate that their internal assessment reflects that profile. The main liquidity risk categories banks address in ILAAP include:

• Funding liquidity risk: The risk that the bank cannot roll over or replace maturing funding at an acceptable cost. This is the most common ILAAP focus area.
• Intraday liquidity risk: The risk of failing to meet payment obligations during the business day, which can trigger systemic disruption even if end-of-day positions are fine.
• Behavioral liquidity risk: The risk that customer behavior deviates from contractual terms, such as retail deposits being withdrawn faster than assumed or credit lines being drawn down unexpectedly.
• Contingent liquidity risk: Off-balance-sheet exposures such as committed credit facilities, guarantees, and derivative margin calls that can generate sudden liquidity demands.
• Currency liquidity risk: The risk that a bank faces liquidity shortfalls in specific currencies that cannot easily be offset through FX swaps.

Maturity gap and repricing gap reports play a useful role here, helping banks visualize where funding mismatches concentrate across time buckets and under different behavioral assumptions.

How do ILAAP stress tests differ from ICAAP stress tests?

ILAAP stress tests focus on cash flow survival, modeling how long a bank can remain liquid under adverse conditions. ICAAP stress tests focus on capital depletion, modeling how much capital a bank would lose under adverse economic or credit scenarios. The scenarios, time horizons, and output metrics are different, even when the same macroeconomic starting point is used. In ILAAP stress testing, banks typically run three scenario types:

1. Institution-specific stress: A scenario where the bank itself faces a confidence crisis, triggering deposit outflows and loss of wholesale funding access.
2. Market-wide stress: A scenario where the broader financial system is under pressure, reducing market liquidity and increasing collateral haircuts.
3. Combined stress: A simultaneous institution-specific and market-wide shock, generally considered the most severe scenario.

In ICAAP stress testing, the focus shifts to economic scenarios that drive credit losses, earnings deterioration, and risk-weighted asset inflation. The output is a capital shortfall or surplus, not a liquidity survival horizon. Where the two processes genuinely overlap is in dynamic balance sheet modeling. A severe ICAAP scenario can affect funding costs and investor confidence in ways that create liquidity pressure, and a severe ILAAP scenario can force asset sales that crystallize losses and erode capital. Banks that model these interdependencies produce more credible assessments than those that treat the two stress tests as completely separate exercises.

Who is responsible for ILAAP within a bank?

Responsibility for ILAAP sits with the bank’s board of directors and senior management. The board is accountable for approving the ILAAP framework, the liquidity risk appetite, and the final ILAAP document submitted to the regulator. Day-to-day ownership typically sits with the Chief Financial Officer or Chief Risk Officer, supported by treasury and risk management teams. In practice, ILAAP is a cross-functional process. Treasury manages the actual liquidity position and funding strategy. Risk management designs and runs the stress scenarios. Finance provides balance sheet projections and funding cost assumptions. Internal audit reviews the process for completeness and integrity. Regulators expect the board to genuinely understand and challenge the ILAAP output, not simply sign off on a document prepared entirely by the risk function. This means ILAAP needs to be presented in a way that is accessible to non-technical board members while remaining rigorous enough to satisfy supervisory scrutiny.

How can banks improve their ILAAP process?

Banks can improve their ILAAP process by moving away from static, spreadsheet-driven assessments toward dynamic, scenario-based frameworks that connect liquidity risk to real-time balance sheet data. The most common weaknesses regulators identify in ILAAP submissions are poor behavioral modeling assumptions, insufficient scenario severity, and a lack of integration between the ILAAP and the bank’s actual business planning. Practical improvements include:

• Strengthening behavioral modeling: Replace contractual maturity assumptions with data-driven behavioral models that reflect actual customer behavior under stress.
• Expanding scenario coverage: Move beyond the three standard scenarios to include bank-specific tail risks, such as concentration in a single funding market or a large single counterparty exposure.
• Integrating ILAAP and ICAAP: Model the feedback loops between capital and liquidity stress explicitly, rather than running the two assessments in parallel without connection.
• Improving data quality: Ensure that the underlying contract-level data feeding the ILAAP models is accurate, complete, and traceable back to source systems.
• Shortening the production cycle: Many banks still take weeks to produce ILAAP results. Faster calculation cycles allow more scenario iterations and more time for management review.

Technology plays a meaningful role here. Platforms that support real-time liquidity calculations, user-driven scenario design, and integrated stress testing across risk types allow risk teams to spend more time on analysis and less time on data preparation. At ElysianNxt, our Basel.NXT module treats ILAAP and ICAAP as the decision-support layer of a broader risk framework, supporting macroeconomic scenario selection, dynamic balance sheet modeling, and interdependency management across risk types in a single environment. If you want to see how that works in practice, take a closer look at our ICAAP and ILAAP solution.

Related Articles

• How does Basel 3.1 affect UK and European banks differently?
• How long does regulatory reporting typically take?
• How do you measure spillover effects between risk types?
• How do banks use stress testing results for strategic planning?
• How do climate risks factor into credit stress testing?

This content was generated with the help of AI and it may contain mistakes