How to Structure a Pillar 2 Liquidity ILAAP That Evidences Robust Risk Management

The PRA reads ILAAPs to form a judgement about whether your firm understands its own liquidity risks well enough to manage them without supervisory intervention. Pillar 2 add-ons are the consequence of a weak evidence base, not the purpose of the exercise. The firms that fare best treat the ILAAP as the authoritative internal articulation of liquidity risk management, written first for the Board and ALCO, and only then packaged for the regulator.

Start with risk identification, not with the LCR

The most common structural error is anchoring the ILAAP on LCR compliance and treating Pillar 2 risks as a residual. The PRA expects the reverse. Begin with a bottom-up inventory of liquidity risks specific to your business model: intraday, retail outflow behaviour under stress, non-margined derivatives, franchise-viability outflows, FX convertibility, concentration in funding sources, and intragroup dependencies. For each, state whether it is captured in LCR, partially captured, or outside LCR entirely. This mapping is what justifies your Pillar 2 quantification and, crucially, what shows the PRA you have thought independently about your own balance sheet.

Calibrate assumptions with visible evidence

Supervisors look hardest at behavioural assumptions: deposit stickiness by segment, pipeline drawdown rates, collateral calls under rating downgrades, and non-contractual outflows tied to reputation. Every material assumption should be traceable to one of three sources: your own historical data, peer or market stress experience, or expert judgement with a documented rationale. Where you rely on expert judgement, say so plainly and show the challenge it received at ALCO. Firms get into trouble when assumptions appear in the model without an audit trail, or when the same number has migrated unchanged across three ILAAP cycles despite a changed business mix.

Make the stress testing suite answer specific questions

A strong ILAAP runs idiosyncratic, market-wide, and combined scenarios that are calibrated to the actual vulnerabilities identified earlier in the document. Generic scenarios invite generic challenge. If your funding profile has concentration in a specific channel, run a scenario that stresses it specifically. Reverse stress testing should identify the point at which the business model becomes unviable on liquidity grounds and name the drivers, not simply report a survival horizon. The PRA will look for coherence between the scenarios, the contingency funding plan, and the early warning indicators.

Connect the CFP and EWIs to actual decisions

Contingency Funding Plans frequently fail credibility tests because the actions listed are not quantified, not sequenced, and not tied to specific triggers. For each management action, state the liquidity benefit, the execution time, the operational preconditions, and who has authority to invoke it. EWIs should map to CFP triggers with clear amber and red thresholds, and the ILAAP should show at least one example of EWIs having been breached or nearly breached, what happened, and what the firm learned.

Governance evidence that carries weight

The PRA wants to see that the Board and ALCO have genuinely owned the judgements. Minutes should show substantive challenge on assumptions, risk appetite calibration, and scenario severity, not approval of a pre-baked document. The SMF responsible should be visible throughout, and the ILAAP attestation should reference specific areas of judgement the signatory personally interrogated.

What good looks like

A strong submission reads as if the firm would produce it even without a regulatory requirement. Weak submissions read as compliance artefacts, with a detached executive summary, modelled numbers that no one on the management team could defend in detail, and a CFP that has not been tested. If your ILAAP cannot be used by Treasury to run the business, it will not persuade the PRA that you are running it well.

The decision point

Before submission, ask whether the Board could defend every material assumption and every management action under direct supervisory questioning. If the answer is no, the fix is not more drafting. It is another round of ALCO challenge on the substance.

Frequently Asked Questions

How much weight should we put on peer benchmarking?

Use it to sense-check calibrations and to identify where you are an outlier, but never as the primary justification. The PRA expects assumptions grounded in your own data and business model. Peer data supports judgement; it does not replace it.

How should we handle areas where our data history is short?

Say so explicitly, explain the proxies or expert judgement used, and show the conservatism applied. Transparent acknowledgement of data limitations is treated more favourably than confident numbers with thin foundations.

What triggers a Pillar 2 add-on most often?

Gaps between the risks the PRA can see on your balance sheet and the risks your ILAAP addresses, assumptions that cannot be reconciled with observed behaviour, and CFPs whose actions are not executable in the time claimed.

Should the ILAAP reference the ICAAP?

Yes, particularly where liquidity stress interacts with capital, for example through forced asset sales or franchise damage. Cross-referencing shows integrated risk thinking and is increasingly expected.

How often should assumptions be refreshed?

At least annually, with a documented review even where no change is made. Material business change, market events, or breached EWIs should trigger an off-cycle review.