RBI Master Direction on Management of Risks and Code of Conduct for NBFCs

The RBI Master Direction on Management of Risks and Code of Conduct for NBFCs, issued in 2016 and periodically updated, prescribes comprehensive risk management frameworks for deposit-taking and systemically important non-deposit taking NBFCs. It mandates constitution of Risk Management Committees, Asset-Liability Management Committees, and adoption of policies covering credit, market, liquidity, and operational risks. The Direction also establishes a Code of Conduct governing board member and senior management behavior, conflict of interest management, insider trading prevention, and customer protection measures. NBFCs must implement Board-approved risk management policies with specific triggers, early warning signals, and escalation mechanisms for various risk categories.

• Institutionalizes structured risk governance through mandatory Risk Management and ALM Committees, ensuring senior oversight of credit concentration, interest rate, and liquidity risks across portfolios
• Establishes clear conduct standards preventing conflicts of interest, related party transactions abuse, and insider trading, thereby protecting stakeholder interests and market integrity
• Provides regulatory clarity on acceptable risk limits including single borrower exposure caps, group exposure limits, and concentration norms reducing systemic contagion risks
• Mandates stress testing and scenario analysis frameworks enabling NBFCs to proactively identify vulnerabilities in housing finance, gold loan, and microfinance portfolios
• Strengthens customer protection through disclosure requirements, fair practices code integration, and grievance redressal mechanisms enhancing sectoral credibility

• Many mid-sized NBFCs maintain Risk Management Committees as tick-box compliance exercises without meaningful deliberation, relying on inadequate management information systems that lack granular portfolio analytics
• Asset-Liability Management practices remain weak in smaller NBFCs with limited sophistication in duration gap analysis, behavioral pattern modeling, and dynamic liquidity stress testing
• Code of Conduct implementation often lacks teeth with minimal consequences for violations, inadequate whistle-blower protection, and unclear escalation mechanisms for ethical breaches
• Related party transaction monitoring remains superficial with NBFCs failing to identify ultimate beneficial ownership chains, especially in politically exposed person lending and promoter group financing
• Operational risk frameworks focus disproportionately on technology risks while ignoring fraud risks in collection practices, vendor management, and employee misconduct in semi-urban branches

• IL&FS Financial Services faced severe asset-liability mismatches in 2018 with ₹91,000 crore debt, having borrowed short-term through commercial papers to fund long-gestation infrastructure projects, highlighting catastrophic ALM failures despite RBI norms.
• DHFL (Dewan Housing Finance Corporation) collapsed in 2019 amid allegations of siphoning ₹31,000 crore through related party transactions with 79 shell companies controlled by promoter Kapil Wadhawan, demonstrating Code of Conduct enforcement gaps.
• Religare Finvest witnessed promoter Malvinder and Shivinder Singh diverting ₹2,397 crore in loans to their own entities between 2016-2018, violating conflict of interest norms and related party exposure limits stipulated under the Master Direction.

• NBFCs should implement real-time portfolio monitoring dashboards with AI-driven early warning systems that flag emerging concentration risks, delinquency trends, and ALM gaps before quarterly committee reviews
• Establish independent ethics officers reporting directly to Audit Committees with authority to investigate Code of Conduct violations, supported by anonymous digital whistle-blower platforms and defined timelines for inquiry closure
• Adopt advanced ALM modeling techniques including behavioral maturity profiling for prepayment risks in vehicle and housing loans, Monte Carlo simulations for interest rate scenarios, and contingent liquidity planning
• Strengthen related party transaction frameworks through blockchain-based beneficial ownership registries, mandatory cooling-off periods for transactions with entities where directors hold indirect interests, and quarterly third-party audits of RPT compliance