Risk management EC

Organization of risk management

For FMO, acting in its role as program manager, it is essential to have an adequate risk management system in place to identify, measure, monitor and mitigate financial and non- financial risks. The Program’s activities expose it to various risks in relation to financial instruments, after taking into account the buffer from the subsidy provided by the Ministry: currency risk, credit risk and liquidity risk. The Program’s overall risk management activities focus on the unpredictability of financial markets and seeks to minimize potential adverse effects on the Program's financial performance.

Risk management is carried out by a central risk management department under policies approved by management. Risk management identifies, evaluates and manages financial risks in close co-operation with the entity’s operating units. It focuses on actively securing the program's short to medium-term performance by minimizing the exposure to financial markets. Long-term financial investments are managed to generate lasting returns.

Financial Risk

Credit risk

Definition

Credit risk is defined as the risk that the bank will suffer an economic loss because a customer fails to meet its obligations in accordance with agreed terms.

Risk appetite and governance

Adverse changes in credit quality can develop within FMO’s emerging market loan portfolio due to specific customer and product risk, or risks relating to the country in which the customer conducts its business. The main source of credit risk arises from investments in emerging markets and off-balance instruments such as loan commitments and guarantees.

Credit risk management is important when selecting and monitoring projects. In this process, a set of investment criteria per sector and product is used that reflects minimum standards for the required financial strength of FMO’s customers. This is further supported by credit risk models that are used for risk quantification, calculations of expected credit loss allowance, and the determination of economic capital use per transaction. Funding decisions depend on the risk profile of the customer and financing instrument. As part of regular credit monitoring, FMO customers are subject to annual reviews at a minimum. Customers that are identified as having financial difficulties fall under an intensified monitoring regime to proactively manage loans before they become non-performing, including quarterly portfolio monitoring meetings. For distressed assets, the Special Operations department actively manages workout and restructuring.

FMO has set internal appetite levels for non-performing exposures and specific impairments on loans. If any of the metrics exceed the appetite levels, Credit will assess the underlying movements and analyze trends per sector, geography, and any other parameter. Credit will also consider market developments and peer group benchmarks. Based on the analysis, Credit will propose mitigating measures to the FRC. If any of the indicators deteriorate further, the Risk department will be involved to assess to what extent the trend is threatening FMO’s capital and liquidity ratios.

Exposures

The following table shows DFCD AYA's total gross exposure to credit risk at year-end.  The maximum exposure to credit risk increased during the year to €105.0 million at year-end 2024.

The rating grade distribution of the credit risk exposure is as follows:

Concentration risk

Definition

Concentration risk is the risk that the program's exposures are too concentrated within or across different risk categories. Concentration risk may trigger losses large enough to threaten the fund’s health or ability to maintain its core operations or trigger a material change in our risk profile.

Risk appetite and governance

To ensure diversification within the emerging market portfolio across regions, a country limit framework is in place to minimize concentration risk from the perspective of the portfolio as a whole. The Program is only eligible to invest in low- and middle-income countries as defined in the EFSD+ Agreement.

Liquidity risk

Definition

Liquidity risk is defined as the risk for program not being able to fulfill its financial obligations due to insufficient availability of liquid means.

Risk appetite and governance

The Program manages its liquidity needs by monitoring for long-term financial liabilities as well as forecast cash inflows and outflows.

The table below analyses the Program's financial assets and liabilities into relevant maturity groupings based on the remaining period at the reporting date to the contractual maturity date for EC's exposure.

Market Risk

Market Risk is the risk that the value and/or the earnings of the bank decline because of unfavorable market movements. This includes interest rate risk and currency risk.

EC's exposure in the Program is denominated in EUR and is not exposed to foreign exchange risk or interest rate risks. However EC's exposure is measured at fair value, there is no active trading market for this instrument. The underlying investments are not held for trading on financial markets, but are invested from a long term strategic perspective and are impacted mainly by macro - economic events. 

Strategic Risk

Environmental, social and governance risk

Definition

ESG risk is defined as the risk that our investments realize adverse impacts on people and the environment, and/or contribute to corporate governance practices, that are inconsistent with FMO policy commitments. FMO is exposed to ESG risk via our investment selection (the risks associated with our investments, which include the investments of our clients/investees) and the effectiveness of clients’/investees’ ESG risk management, including the effectiveness of FMO’s engagement thereon. In addition to potential adverse impacts to people and the environment, ESG risk can for example result in financial (remediation, legal) costs to FMO or client, jeopardized access to capital for FMO (external investors), jeopardized license to operate/shareholder relations or reputation damage.

Risk appetite and governance

The program has an appetite for managed risk in portfolio, accepting ESG performance below standards when starting to work with a customer, with the goal that performance is brought in line with our ESG risk mitigation requirements within a credible and reasonable period. ESG risks are mitigated through environmental and social action plans and monitoring. The risk appetite for deviations from the exclusion list and human rights violations is zero.

As part of the investment process, all customers are screened on ESG risk and categorizes them according to the ESG risk that their activities represent. FMO assesses in detail customers with a high ESG risk category to identify ESG impact and risks and to assess the quality of existing risk management and mitigation measures. Due diligence also includes an analysis of contextual and human rights risk. In case of gaps in ESG risk management, FMO works with customers to develop and implement an Action Plan to avoid adverse ESG impacts and/or to improve ESG risk management over time. Key ESG risk items are tracked during the tenor of the engagement. FMO’s ESG risk management support to customers is an important part of development impact ambitions.

In addition, for customers with a high ESG category, FMO monitors customer performance on key ESG risk themes (against the IFC Performance Standards) using the ESG Performance Tracker (ESG-PT). The ESG-PT keeps track of key ESG risks and customer performance level, enabling FMO to have a portfolio-wide view of its ESG risks.

Non-Financial Risk

Operational Risk

Definition

Operational risk is defined as the risk of loss resulting from inadequate or failed internal processes, people and systems, or from external events, including legal risks, excluding strategic risks. This is the Basel definition of operational risk, which covers a wide range of non-financial risks.

FMO adopted the Operational Risk Data Exchange Association (ORX) risk taxonomy to structure all non-financial risk types, such as people, data, model, technology, third party, information and cyber security, business continuity, statutory reporting, transaction execution, et cetera. FMO uses the terms operational risk and non-financial risk interchangeably.

Risk appetite and governance

FMO is cautious about non-financial risks. We do not seek them as they have no direct material reward in terms of return/income generation, but they are inherent to our business. We prefer safe options, with low inherent risk, even if they limit rewards or lead to higher costs. There is no appetite for high residual risk.

First and second line functions work closely together to understand the full and varied spectrum of non-financial risks, and to focus their risk and control efforts on meaningful and material risks. Risk identification and assessment draws on multiple sources of data, such as topic-specific risk-assessments, results of half-yearly control monitoring and testing rounds, internal loss data and root cause analysis, audit results, supervisory findings, and key risk indicators. Policies and operating procedures clarify control standards, accountabilities, and mandate training on key risks.

Management of the first line is responsible for understanding risks and implementing and operating internal controls in the day-to-day business processes. Key controls are monitored and tested twice a year. The first line performs these responsibilities in line with the risk management framework, using the methods and tools provided by the second-line Operational Risk function. The Operational Risk function challenges and advises the first line, performs oversight and maintains the Integrated Control Framework.

Risk events will occur, despite the implementation of internal controls. Risk events can result in losses, non-compliance, misstatements in the financial reports, and reputational damage. Risk events are centrally registered and reviewed and classified by the Operational Risk team. Root cause analyses of high-concern risk events require approval by the Non-financial Risk Committee and follow-up of remediating actions is tracked and reported.

Non-financial Risk metrics are reported on a quarterly basis. These metrics cover operational risks, such as the amount of loss per quarter, timely follow-up of remediating actions by management, and specific metrics for all non-financial risk subtypes. All departmental directors evaluate the operational risks in their area of responsibility and sign a departmental in control statement at year end.

Financial economic crime risk

Definition

Financial economic crime risk is the risk that FMO, its subsidiaries, investments, customers and/or employees are involved or used for any crime that has a financial component, even though at times such transactions may be hidden or not socially perceived as criminal. This includes (but is not limited to): money laundering, terrorism financing, bribery and corruption, sanction breaches or any other predicate offence as defined by the Dutch Penal Code or any other rules or regulations related to financial crime that are applicable to FMO.

Risk appetite and governance

FMO acknowledges that as a financial institution it has been entrusted with a gatekeeper role. FMO attaches great value to this role and will always strive for full and timely adherence to financial economic crime regulations. We are aware that in line with FMO’s mandate, the operational working environment (countries with high(er) financial crime risks) as well as the risk maturity level of its clients, risks are present and incidents within customer complexes (i.e. the customer and any associated and/or third parties) may happen.

Financial economic crime framework

FMO’s financial economic crime (FEC) procedures include, amongst others, screening of customers on compliance with applicable anti-money laundering, counter financing of terrorism and international sanctions laws and regulations. Due diligence is performed on customers, which includes checks such as verifying the ultimate beneficial owners of the customer we finance, identifying politically exposed persons and screening against mandatory international sanction lists. These checks are also performed regularly during the relationship with existing customers.

In our continued efforts to implement learnings, FMO’s Compliance department reviews its FEC framework in cooperation with the KYC (Know Your Customer) department on an ongoing basis, taking into account any monitoring results, risk analysis, incidents and updates in regulations and industry best practices. In addition, continuous risk-based quality monitoring takes place both in first- and second-line including sample-based and thematic monitoring. In 2024, the sample-based monitoring consisted of at least 10 percent of all finalized KYC files in every quarter. FMO also conducts ongoing training programs for its employees to raise awareness on topics related to FEC. Further, FMO continues to remind its customers of the importance of integrity in the business operations, including sanctions compliance.

FMO continues to work on strengthening the risk culture and creating awareness on FEC, potential unusual transactions and anti-bribery and corruption practices. In 2024, all FMO employees were required to complete the Compliance ‘Annual Integrity refresher e-learning that addresses customer and personal integrity topics, such as bribery and corruption.

There is always a risk that a customer is involved or alleged to be involved in illicit acts (e.g., money laundering, fraud, or corruption). When FMO is of the opinion that there is a breach of law that cannot be remedied, that no improvement by the customer will be achieved (e.g., awareness, implementing controls) or that the risk to FMO's reputation is unacceptably high, FMO may exercise certain remedies under the contract, such as the right to cancel a loan or suspend upcoming disbursements. FMO will report to the regulatory authorities when necessary.

Regulatory compliance risk

Definition

Regulatory compliance risk is the risk that FMO does not operate in accordance with applicable rules and regulations, either by not or not timely identifying applicable regulations or not adequately implementing and adhering to applicable regulations and related internal policies and procedures.

Risk appetite and governance

FMO has a minimal appetite for regulatory compliance risk. FMO closely monitors and assesses future regulations that apply to FMO and strives for full and timely implementation of regulations.

To ensure compliance with the EU Banking Supervisory Regulations as implemented by the DNB and the ECB and other laws and regulations applicable to FMO, FMO closely monitors the regulatory developments including the supervisory authority’s guidance.

FMO has a risk committee structure, accompanied by a Regulatory Monitoring Policy that defines the internal requirements, processes, roles, and responsibilities to identify, assess and implement regulatory changes.