ILAAP: The 7 Essential ECB Principles and 6 Building Blocks

The ILAAP — the internal liquidity adequacy assessment process — is where a bank states, in its own terms and on its own evidence, that it has enough liquidity and stable funding to survive, and the ECB’s guide to it is built on seven principles rather than a template. Article 86 of the Capital Requirements Directive requires institutions to have robust strategies, policies, processes and systems for identifying, measuring, managing and monitoring liquidity risk over appropriate time horizons; the ILAAP is the process that discharges that duty, the document that describes it, and the package supervisors read in the SREP. It is the liquidity twin of the ICAAP, and it is judged by the same standard: not whether the LCR and NSFR are above 100%, but whether management understands the funding of its own balance sheet under stress. This guide sets out the ECB’s seven ILAAP principles, the building blocks a package needs, the two perspectives it must run, the horizons the regulatory ratios do not cover, how it feeds the SREP, and where these documents lose credibility.

What the ILAAP is, and where it comes from

The ICAAP asks whether the bank’s capital covers its risks; this process asks whether its liquidity and funding do. In the EU the legal root is Article 86 of Directive 2013/36/EU, and the supervisory expectations are set out in the ECB’s Guide to the internal liquidity adequacy assessment process of November 2018 for the banks it supervises directly, alongside the EBA’s guidelines on ICAAP and ILAAP information collected for SREP purposes. Elsewhere the process goes by other names — the same acronym under the PRA in the UK, the US’s internal liquidity stress testing under Regulation YY — but the substance converges: an internal assessment, owned by the board, that goes beyond the regulatory ratios. Our guide to the ICAAP covers the capital side of the same architecture.

The seven ILAAP principles

The building blocks of the package

1. Governance: the framework document, the liquidity risk appetite, roles, and the board’s liquidity adequacy statement.
2. Risk identification: the inventory under principle 4, with the materiality assessment.
3. Quantification: the buffer and stable funding requirement under both perspectives, with the methodologies of principle 6.
4. Buffers and funding: the composition and testing of the buffer, the funding plan by source and tenor, the transfer pricing that allocates the cost.
5. Stress testing: scenarios, survival horizons, reverse stress tests, and the management actions that would be taken.
6. Use and controls: evidence of use in decisions; internal audit and validation; the link to the recovery and contingency funding plans.

Horizons the regulatory ratios do not cover

The LCR measures 30 days and the NSFR one year; the internal assessment has to cover what sits between and outside them. Intraday liquidity — the ability to meet payment and settlement obligations through the day — is a risk the ratios do not measure and the ECB guide names; the same is true of the days-to-a-week horizon in which a wholesale run actually happens, the three-to-twelve-month band in which a rating downgrade bites, and the beyond-one-year horizon where the funding plan lives. A package that reproduces the LCR and NSFR under a few sensitivities has not assessed liquidity adequacy; it has re-reported two ratios. Our guide to LCR vs NSFR covers what the ratios do measure.

How the package feeds the SREP

Supervisors read the ILAAP as evidence for their own assessment of liquidity risk and of the bank’s management of it, and the outcome can be quantitative — additional liquidity requirements, a higher survival period, a larger buffer — or qualitative, from findings about governance to model-validation demands. The EBA guidelines set out the information supervisors collect: the reader’s manual, the governance, the risk identification, the quantification and stress testing, the funding plan and the internal audit’s view. A package that a supervisor can navigate to the answer of “how much and why” in a page is worth more than one that is twice as long.

Where the documents lose credibility

• The ratios are the assessment. The economic perspective is missing or is the normative perspective with different labels.
• Deposits are stickier in the model than in the data. Behavioural assumptions for non-maturing deposits set without validation, and untested by the 2023 bank runs that showed how fast digital deposits can move.
• The buffer has never been sold. Monetisation of the buffer is asserted, not tested through repo or sale.
• Stress scenarios are generic. A scenario library that would fit any bank fits none; the bank’s own concentrations — a large depositor, a currency, a funding market — are what should break.
• No management actions. The stress test ends at the survival period with nothing about what the bank would do on day five.
• The board signed a document it did not challenge. Principle 1 fails on the minutes, not the signature.

Building a credible package

1. Start from the inventory, not from last year’s document; a new product, market or funding source is a new line.
2. Define the internal buffer and stable funding in your own terms, then reconcile them to the LCR and NSFR.
3. Run both perspectives from one projection so the normative and economic views share a balance sheet.
4. Validate the behavioural models independently and state the sensitivities in the document.
5. Tie scenarios to the funding model, add reverse stress tests, and name the management actions with owners and triggers.
6. Take it to the board as a decision, with the liquidity adequacy statement as the output, and record the challenge.

Frequently asked questions

What is the ILAAP?
The internal liquidity adequacy assessment process: the bank’s own, board-owned assessment of whether its liquidity buffers and funding are adequate for its risks over relevant horizons, required under Article 86 CRD and set out for ECB-supervised banks in the ECB’s 2018 guide with seven principles. It is the liquidity counterpart of the ICAAP and a core input to the SREP.

How does it differ from the LCR and NSFR?
The ratios are regulatory minimums over 30 days and one year; the ILAAP is the bank’s own assessment across all horizons — intraday, short-term, medium-term and structural — from a normative perspective (projected ratio compliance) and an economic perspective (the bank’s own view), with its own buffer and stable-funding definitions.

What are the seven principles?
Management body responsibility; integration into the management framework; continuity from different perspectives; identification of all material risks; clearly defined high-quality buffers and stable funding; adequate, consistent and validated methodologies; and regular stress testing.

How often is it produced?
It is a continuous process with an annual package for the supervisor, updated when the balance sheet, funding model or risk profile changes materially.

Who signs it?
The management body, through a liquidity adequacy statement, after challenge recorded in the minutes; principle 1 is judged on that record.

Where this leaves you

Build the ILAAP as the bank’s own answer to the liquidity question: a risk inventory, an internal buffer and stable-funding definition, two perspectives from one projection, validated behavioural models, stress tests tied to the funding model with named management actions, and a board that challenged it. The LCR and NSFR are inputs; the seven principles are the test.

References

• ECB Guide to the internal liquidity adequacy assessment process (ILAAP), November 2018 — The seven principles, the normative and economic perspectives, and the expectations on buffers, methodologies and stress testing.
• Basel Framework: LCR — Liquidity Coverage Ratio — The 30-day regulatory ratio the ILAAP’s normative perspective projects.

More on Basel III

• ILAAP — you are here
• ICAAP: the six building blocks
• LCR vs NSFR
• Basel III in 2026: adoption is still incomplete
• Pillar 3 disclosure
• Capital buffers: CCB, CCyB and G-SIB surcharges

The ILAAP document, the Liquidity Risk Management Policy, the Contingency Funding Plan, the Stress Testing Framework and the Pillar 2 SREP Self-Assessment are in the Basel III Prudential Risk Toolkit, or start with the free templates.