If you manage a loan book with thousands of borrowers, assessing one exposure at a time isn’t enough. A portfolio’s risk profile depends on how exposures move together. It isn’t just about how risky each one looks alone. So how do you measure portfolio credit risk? Single-exposure analysis stops at PD, LGD, and EAD for one borrower. Portfolio-level measurement goes further. It has to account for correlation, concentration, and systemic shocks that hit many borrowers at once.
This matters because two portfolios can share identical average credit quality and still carry very different risk. One might spread across hundreds of unrelated borrowers in different sectors. The other might concentrate in a handful of large names in one industry. The first absorbs individual defaults with little disruption. The second can suffer outsized losses if that one sector turns down. Measuring portfolio credit risk is how you tell these two situations apart.
You measure portfolio credit risk by combining three elements. The first is expected loss: PD × LGD × EAD, summed across exposures. The second is unexpected loss, captured through credit Value-at-Risk or economic capital. The third is concentration risk, which comes from correlated exposures in the same sector, geography, or borrower group. Together, these three show how much a portfolio could lose beyond its average expected loss — and under what conditions.
Measuring portfolio credit risk happens in layers. Each layer captures a different piece of the loss picture.
Portfolio expected loss (EL) is the baseline. For every exposure, multiply probability of default (PD) by loss given default (LGD) by exposure at default (EAD), then sum across the portfolio. This is the average loss a lender should expect to absorb over the horizon. Lenders typically cover it through pricing and provisioning rather than capital — it isn’t a worst-case figure.
Unexpected loss (UL) and economic capital go a step further. Actual losses in any given year will deviate from the expected average, sometimes sharply. So lenders hold capital against that unexpected portion. The regulatory basis for this is the asymptotic single risk factor (ASRF) model, which underpins the Basel II Internal Ratings-Based approach. The ASRF model builds on Oldrich Vasicek’s work on portfolio default-rate distributions. It treats each borrower’s credit quality as driven by one common systematic factor, plus its own idiosyncratic risk. That structure lets modelers capture losses across a large, diversified portfolio in closed form, instead of simulating each exposure individually.
Credit Value-at-Risk (Credit VaR) puts a specific number on this. It’s the maximum loss a portfolio should face over a defined horizon, at a chosen confidence level — commonly 99% or 99.9% for regulatory capital purposes. Market-risk VaR draws on daily traded prices. Credit VaR instead relies on simulated or analytically modeled default and correlation behavior, because most loan exposures don’t have a liquid daily price. Broadly, the gap between credit VaR and expected loss is the unexpected loss the portfolio must hold capital against.
Consider a simplified illustration. A portfolio of retail loans has a blended PD of 2%, average LGD of 45%, and total EAD of ₹500 crore. That gives an expected loss of roughly ₹4.5 crore a year — the number that flows into pricing and provisioning. But if a recession pushes correlated defaults higher across the whole book at once, actual losses in a bad year could run several multiples of that figure. Credit VaR quantifies exactly how much higher, at a given confidence level. That tells the lender how much capital to hold against the tail scenario, not just the average one.
A portfolio with hundreds of borrowers can still carry more risk than a simple diversification assumption suggests. That’s because losses cluster under stress rather than defaulting independently.
Basel Committee research on credit risk concentration points to concentration as one of the most significant drivers of large losses in bank portfolios historically (Basel Committee on Banking Supervision, Working Paper No. 15, 2006). It typically comes from two sources.
Name concentration happens when a small number of large exposures dominate the portfolio. One or two defaults can then move the needle materially. The Herfindahl-Hirschman Index (HHI) is the standard tool for measuring this. It sums the squared share of each exposure relative to the total portfolio. A handful of large loans produces a much higher score than the same total spread across many smaller ones.
Sector and geographic concentration happens when exposures cluster in industries or regions that move together. A downturn in one sector — real estate, an export-heavy industry, a single state’s economy — then hits many borrowers at once, instead of one at a time.
Both forms of concentration break an assumption behind the ASRF model: that a portfolio is large and granular enough for individual defaults to average out. Where that assumption doesn’t hold, risk teams apply a granularity adjustment on top of the base capital calculation. This captures the extra risk concentration introduces, alongside portfolio-level limits by sector, geography, and single-name exposure.
Correlation compounds this. Even without outright concentration, exposures that share the same systematic risk factor will tend to default together in a downturn. Think of the same macroeconomic cycle, or the same interest rate sensitivity. The single-factor structure in credit portfolio models captures exactly this. That’s why you can’t estimate portfolio risk by simply averaging individual borrower PDs.
Take two loan books of the same size, each with a 3% average PD. One diversifies evenly across manufacturing, IT services, retail, and agriculture. The other concentrates entirely in commercial real estate. On paper, their expected loss looks identical. In a real estate downturn, the second portfolio’s actual defaults will cluster far above that average. The first portfolio’s losses stay closer to it, because a shock in any single sector only affects part of the book. That gap between the two outcomes is exactly what concentration and correlation measurement aims to surface, before it shows up in actual losses.
In practice, risk teams work through this in a fairly consistent sequence:
Risk teams do most of this modeling work in Python or R, for the statistical and simulation-heavy pieces like correlation modeling and Monte Carlo simulation of portfolio loss distributions. SAS remains common in larger banks for production-grade credit risk systems. Excel stays the everyday tool for smaller portfolios, limit monitoring, and presenting results to non-technical stakeholders. The choice of tool matters less than understanding what each step is actually doing. Whether you calculate HHI in Excel or Python, it measures the same thing.
One India-specific point is worth flagging. The Reserve Bank of India currently requires banks to use the Standardised Approach for regulatory credit risk capital. This differs from the Internal Ratings-Based approach that more advanced banks use in other jurisdictions. That changes how banks calculate capital, but it doesn’t remove the need for portfolio-level measurement. Concentration limits, stress testing, and collective provisioning under Ind AS 109 still depend on understanding how a portfolio behaves as a whole — not just its individual exposures.
Measuring portfolio credit risk isn’t a single calculation. It’s expected loss, unexpected loss and credit VaR, and concentration risk, considered together. A portfolio can look healthy on expected loss alone and still carry dangerous concentration in one sector or a handful of large borrowers. Getting all three pieces in view is what separates a portfolio that can absorb a downturn from one that a shock catches unprepared.
For risk teams building this capability, the technical skill sits in three places. First, estimating reliable PD, LGD, and EAD inputs at the exposure level. Second, correctly modeling how those exposures correlate under stress, rather than assuming independence. Third, translating the output into limits, capital, and provisioning decisions that hold up under regulatory and audit scrutiny. None of these are one-time exercises. Portfolios shift, and correlations change in a downturn. Risk teams need to revisit measurement as the book evolves, not just calculate it once and file it away.
Explore Dexlab Analytics’ Credit Risk Modeling certification program to build PD, LGD, and EAD models from scratch, work through IFRS 9 ECL frameworks, and learn model validation techniques used by practicing risk teams.
.
Credit and Market Risk, Credit Risk, credit risk analysis, Credit Risk Analytics And Modeling, credit risk analytics training, Credit risk certification India, Credit risk modeling course India, Credit Risk Modelling, Credit Risk Modelling Using SAS, Credit scorecard modeling, Expected credit loss ECL, IFRS 9 modeling course India, Logistic regression scorecard, PD LGD EAD modeling, Python credit risk modeling
Comments are closed here.