How Navigate GRC in Switzerland: Understanding Consolidated Supervision and Liquidity Requirements

Overview

Swiss banks manage assets exceeding $7.3 trillion, an amount nearly ten times the country’s GDP.

The modern Swiss banking landscape emphasizes consolidated supervision and stringent liquidity requirements, which form the cornerstone of Swiss banking regulation. These measures not only ensure financial stability but also uphold Switzerland’s reputation as a leading global financial hub while aligning with international standards.

The integration of robust risk management frameworks with the expanding role of technology in regulatory compliance further strengthens the system. Together, these elements create one of the most resilient and well-regarded financial systems globally.

This article explores the Swiss regulatory framework in detail, focusing on consolidated supervision and liquidity management requirements that have reshaped the financial landscape.

Swiss Regulatory Framework Overview

Since the 2008 crisis, Switzerland’s financial regulations have strengthened stability and transparency, reinforcing its position as a leading global financial center.

Rise of Swiss Banking Regulations

Switzerland launched extensive financial regulation reforms after the 2008/2009 financial crisis. These reforms had several goals. The main goal was to ensure financial system stability and line up with EU regulations to maintain market access. The Federal Act on Banks and Savings Banks, the Federal Act on Financial Market Supervision, and the Federal Acts on Financial Services and Financial Institutions now form the foundation of Swiss new banking regulation.

FINMA’s Role and Authority

The Swiss Financial Market Supervisory Authority (FINMA) acts as the independent financial markets regulator. FINMA has about 530 full-time staff members and runs a unique dual supervisory system. This system lets FINMA work together with external auditors who perform on-site audits while FINMA retains overall supervisory control.
FINMA takes a risk-based approach to supervision and categorizes institutions based on:

  • Their size and complexity
  • Risk profile
  • How they affect creditors
  • Their role in overall financial system stability.
 

Interoperability Solutions

Banks operating in Switzerland must meet strict regulatory requirements. The rules require a combined capital ratio of 8% of risk-weighted assets. This includes a minimum Common Equity Tier 1 capital ratio of 4.5% and a minimum Tier 1 capital ratio of 6%. 

Systemically important banks face intensive supervision in Switzerland. These banks must undergo thorough stress tests to check their strength against tough economic conditions. Basel III standards have rolled out gradually since 2013, and the final phase (Basel 3.1 or Basel IV) should take effect by January 2025.

Licensed audit firms conduct regular regulatory audits to help FINMA maintain effective supervision. This approach provides detailed oversight and optimizes resources effectively.
FINMA focuses on institutions that need more attention because of their risk profiles.

Understanding Consolidated Supervision

FINMA views combined supervision as vital, offering a comprehensive risk overview across financial groups, enhancing protection for institutions, investors, and overall market stability.

Scope and Application

The regulatory framework applies to financial groups that own a Swiss bank or operate from Switzerland. A financial group exists when one entity works as a bank or securities firm. These groups operate in the financial sector and create an economic unit. The combined supervision covers:

  • Financial groups with Swiss-licensed banks
  • Securities firms under the Financial Institutions Act
  • Financial conglomerates with major insurance operations
  • Groups run from Switzerland but incorporated abroad.
  •  

Group-Level Requirements

The group-level requirements fall into two clear categories. Qualitative requirements focus on organization, internal controls, and risk management. Quantitative aspects track capital adequacy, risk concentration limits, and liquidity needs. Two main factors determine if group companies belong in regulatory consolidation:

  • The company must focus on financial sector activities
  • An economic connection between entities exists through majority ownership or control.
 

Cross-Border Considerations

Cross-border financial services face higher legal and reputation risks over the last several years. Supervised institutions are required to immediately report any substantial legal or reputational risks arising from their international activities. International operations need a complete framework. Supervised institutions must:

  • Get the full picture of their cross-border financial services
  • Look into legal frameworks and risks in target markets
  • Take steps to reduce or remove identified risks
  • Keep proper records and reporting systems.

Risk Liquidity Management

Switzerland’s liquidity management strengthened post-Basel III and Credit Suisse crisis, reflecting regulatory shifts and lessons from recent market events and significant fund outflows.

Basel III Implementation in Switzerland

We recognise that building internal capacity is crucial for ESG risk management Switzerland started implementing Basel III’s liquidity standards in 2015. They introduced internationally coordinated requirements to make their banking sector more resilient. The implementation follows a careful timeline. The final Basel III standards will take effect on January 1, 2025. Banks must keep enough high-quality liquid assets as reserves. This is vital for systemically important institutions.

Liquidity Coverage Ratio Requirements

Swiss strict Liquidity Coverage Ratio (LCR) requirements make banks maintain a ratio of 100% or more at all times. The LCR uses this formula:

  • High-quality liquid assets (HQLA) / Net cash outflows over 30 days = LCR
  • Systemically important banks (SIBs) face extra requirements since January 1, 2024. These include:
    – Risk profile-based surcharges for each institutio
    – Higher liquidity requirements than foreign counterparts
    – Extra risk-based requirements beyond standard regulations.

 

Stress Testing and Reporting

FINMA’s stress testing framework helps assess how banks handle severe economic scenarios. Banks must follow these reporting rules:

  • Monthly LCR reporting within 20 days
  • Systemically important banks must report within 15 days

 

Recent events prompted a strengthened approach. The Credit Suisse crisis highlighted the potential speed and scale of cash outflows, resulting in increased liquidity requirements. Was created a complete three-pillar defence strategy:

  • More bank-held liquidity reserves
  • More options for Swiss National Bank liquidity
  • A public liquidity backstop for worst cases.

 

The new Public Liquidity Backstop (PLB) mechanism requires systemically important banks to pay a yearly risk-adjusted lump sum. This covers potential default risks.
This step matches international best practices and makes Swiss banking sector more stable.

Risk Management Framework

Swiss financial sector experience shows resilient risk management boosts stability, with detailed methods developed to identify, assess, and mitigate risks across the banking system.

Enterprise Risk Assessment

The risk assessment methodology puts banks into different risk categories based on their size, complexity, and how they affect the financial system. Were identified nine most important principal risks for 2024, which include both financial and non-financial factors. These principal risks cover:

  • Credit risks in real estate and mortgages
  • Liquidity and funding risks
  • Cyber security threats
  • Outsourcing arrangements
  • Money laundering risks
  • Cross-border market access challenges.

 

Internal Control Systems

A three lines of defense model serves as the cornerstone of the internal control system. Operational management makes up the first line. Compliance and legal departments support as the second line. Internal audit works as the third line of defense. Swiss financial institutions score 5.23 out of 8 in their awareness of internal control systems (ICS). About 71.2% of institutions think over digitalization and standardization of their internal control systems as future challenges.

Risk Monitoring and Reporting

Strict reporting requirements help ensure detailed risk oversight. FINMA asks risk control functions to report to executive boards twice yearly and boards of directors annually about their institution’s risk profile and activities.
The monitoring system has:

  • Daily compliance monitoring of guidelines and limits
  • Quarterly risk reports to governing bodies
  • Annual risk management reports to the Bank Council
  • Special reporting protocols for major risk events.

Technology and Digital Compliance

Technology has transformed Swiss financial regulation, with RegTech and SupTech emerging as key tools to enhance compliance, supervision, and efficiency in a complex environment.

RegTech Solutions

RegTech solutions have gained widespread adoption throughout the financial world. These technologies help bridge compliance gaps while cutting costs. The RegTech solutions have delivered several valuable benefits:

  • Automated workflow management
  • Better risk detection capabilities
  • Quicker regulatory reporting
  • Stronger anti-money laundering measures
  • Live compliance monitoring.

 

Digital Reporting Requirements

The reporting framework now embraces digital transformation. Supervised institutions benefit from extensive automation capabilities that include status monitoring dashboards and powerful analysis tools. FINMA’s guidance ensures high standards in digital reporting while reducing administrative work. Blockchain-based services must follow specific reporting requirements. Institutions verify customer identities and process transactions only with external wallets that belong to their verified customers. This protocol makes the digital reporting requirements some of the most stringent worldwide.

Data Management Standards

The detailed data management standards focus on three vital dimensions: confidentiality, integrity, and availability of critical data.
Data governance follows these crucial steps:

  • Development of institution-specific data strategies
  • Implementation of clear governance structures
  • Structured methodology for data categorization
  • Appropriate controls throughout the data lifecycle

 

Banks must maintain resilient technical and organizational measures (TOMs). The framework emphasizes privacy by design and privacy by default principles to ensure data protection compliance.

 

Elisa Sicari

Partner – Digital & GRC, FORFIRM
+41 783356397
e.sicari@www.forfirm.com

Share the Post:
Translate »
We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners. View more
Cookies settings
Accept
Privacy & Cookie policy
Privacy & Cookies policy
Cookie name Active

PRIVACY POLICY

At FORFIRM, accessible from www.forfirm.com, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collected and recorded by FORFIRM and how we use it.

If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us.

This Privacy Policy applies only to our online activities and is valid for visitors to our website with regards to the information that they shared and/or collect in FORFIRM. This policy is not applicable to any information collected offline or via channels other than this website.

CONSENT

By using our website, you hereby consent to our Privacy Policy and agree to its terms.

INFORMATION WE COLLECT

The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.

If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.

When you register for an Account, we may ask for your contact information, including items such as name, company name, address, email address, and telephone number.

HOW WE USE YOUR INFORMATION

We use the information we collect in various ways, including to:

  • Provide, operate, and maintain our website
  • Improve, personalise, and expand our website
  • Understand and analyse how you use our website
  • Develop new products, services, features, and functionality
  • Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the website, and for marketing and promotional purposes
  • Send you emails
  • Find and prevent fraud

LOG FILES

FORFIRM follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this and a part of hosting services' analytics. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analysing trends, administering the site, tracking users' movement on the website, and gathering demographic information.

COOKIES AND WEB BEACONS

Like any other website, FORFIRM uses 'cookies'. These cookies are used to store information including visitors' preferences, and the pages on the website that the visitor accessed or visited. The information is used to optimize the users' experience by customizing our web page content based on visitors' browser type and/or other information.

For more general information on cookies, please read"What Are Cookies".

ADVERTISING PARTNERS PRIVACY POLICIES

You may consult this list to find the Privacy Policy for each of the advertising partners of FORFIRM.

Third-party ad servers or ad networks uses technologies like cookies, JavaScript, or Web Beacons that are used in their respective advertisements and links that appear on FORFIRM, which are sent directly to users' browser. They automatically receive your IP address when this occurs. These technologies are used to measure the effectiveness of their advertising campaigns and/or to personalize the advertising content that you see on websites that you visit.

Note that FORFIRM has no access to or control over these cookies that are used by third-party advertisers.

THIRD PARTY PRIVACY POLICIES

FORFIRM's Privacy Policy does not apply to other advertisers or websites. Thus, we are advising you to consult the respective Privacy Policies of these third-party ad servers for more detailed information. It may include their practices and instructions about how to opt-out of certain options.

You can choose to disable cookies through your individual browser options. To know more detailed information about cookie management with specific web browsers, it can be found at the browsers' respective websites.

CCPA PRIVACY RIGHTS (DO NOT SELL MY PERSONAL INFORMATION)

Under the CCPA, among other rights, California consumers have the right to:

Request that a business that collects a consumer's personal data disclose the categories and specific pieces of personal data that a business has collected about consumers.

Request that a business delete any personal data about the consumer that a business has collected.

Request that a business that sells a consumer's personal data, not sell the consumer's personal data.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

GDPR DATA PROTECTION RIGHTS

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service.

The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.

The right to erasure – You have the right to request that we erase your personal data, under certain conditions.

The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.

The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.

The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

Save settings
Cookies settings