SystemRisk Management & ALM

Interest Rate Risk (IRRBB) Management

Interest rate risk management that back-tests every key assumption against what members actually did, puts a number on each gap, and keeps the model unchanged until ALCO approves

Every key assumption checked against what members actually did, with proof for examiners.

See one case, screen by screen ↓
demo22.6%regular share decay members actually showed in the year to September 30, 2026, against 14.0% assumed
demo8.2%NEV ratio at +300 bp with the observed decay, down from 9.1%, against a 7.0% policy floor
target28of 28key assumptions back-tested every quarter, not once a year
target2daysfrom the back-test to a cited memo in front of the validator
In short

What is Interest Rate Risk (IRRBB) Management?

Interest rate risk management is how a credit union or bank measures and limits what a change in rates does to its net interest income and the economic value of its balance sheet, and governs the assumptions behind those measures. Interest Rate Risk (IRRBB) Management puts seven agents on that work: they back-test every key assumption against what members actually did, re-run NEV and NII with the observed value, and draft a cited memo, while the ALM Manager, Model Validation and ALCO decide.

AI use cases in banking: a buyer's guide to agentic AI for bank and credit union operations →

Updated

The problem

Why interest rate risk management runs on stale assumptions

Interest rate risk management at a credit union is only as good as the model's assumptions: how fast regular shares run off, how fast auto loans prepay, how much of a rate rise reaches certificate holders. NCUA's rule for every federally insured credit union over $50 million in assets, 12 CFR 741.3(b)(5) and Appendix B to Part 741, asks management to rely on assumptions that are reasonable and supportable, and to document any changes based on observed information. The 2010 interagency advisory adds back-testing against actual outcomes and independent review.

Today those assumptions come from a deposit study done every few years, sit in a spreadsheet, and are back-tested once a year before the exam. When members change behavior, as they did when certificate rates rose, a broken deposit decay rate or deposit beta can overstate NEV for four quarters before anyone sees it. The change that fixes it travels by email, the second line sees it after the fact, and ALCO minutes say "approved assumptions" without saying which. Interest Rate Risk (IRRBB) Management puts seven agents in front of that work, so the ALM Manager starts the quarter with the evidence and the impact on one page.

demo0.9pointsof NEV ratio overstated at +300 bp while regular share decay stayed at the old assumption
typical89%of banks use NII sensitivity as a primary IRRBB metric
typical$50millionin assets: above it, every federally insured credit union needs a written interest rate risk policy and program
Where an assumption change's business days go before ALCOestimated
By hand15 days
With the solution2 days
  • Pulling the core and loan servicing extracts and tying them to the general ledger3 → 0.2 d
  • Back-testing the assumptions in a spreadsheet and finding the causes5 → 0.3 d
  • Re-running NEV and NII with the observed value2 → 0.2 d
  • Writing the change memo and gathering its support3 → 0.5 d
  • Independent review by Model Validation2 → 0.8 d

Estimated split of the business days between a quarter's back-test and a cited memo in front of the validator, by spreadsheet and email today and with the agents; the 'after' column totals about two days, the solution's design goal. Our arithmetic, kept modest.

How it works

How one broken assumption becomes an approved change

Agents back-test, re-run NEV and NII, draft and challenge; the ALM Manager, a validator and ALCO decide.

What comes in
Every quarter28 key assumptions · core, loan servicing, general ledger, policy
Agents at work
Extract Reconcilertied to the ledger
Then
Back-test agentpromise against outcome
Then
Sensitivity agentNEV and NII re-run
Limits Watchpolicy and NCUA test
Then
Governance agentcited memo
Challenge agentsecond line
A person decides
ALM Manager, validator, ALCOpropose, challenge, approve
What comes out
Assumption set released
Limits evidenced
Examiner pack
One case, step by step

One broken assumption, through interest rate risk management to ALCO

Norrell Federal Credit Union, a $6.8 billion credit union with 520,000 members, runs assumption set AS-2026.3, approved by ALCO on October 28, 2025. The Q3 2026 back-test ran on October 19. Here is what happens to regular share decay, screen by screen, in the working solution.

  1. 01October 19

    Every key assumption measured against what members did

    Back-test agent

    The Back-test agent measured all 28 key assumptions on the credit union's own core and loan servicing extracts. Each is one row with two dots on one scale: a hollow dot for what the model assumed a year ago, a solid dot for what members actually did, and the tolerance as a pale band. The September loan servicing extract has not arrived, so HELOC line utilization waits, and the register says so.

    Of 28 promises, 20 held, 5 are drifting, 2 broke and 1 is waiting for an extract.

  2. 0210:12 AM

    The number opens its source

    Nadia Ferrante · ALM Manager

    Regular share decay was assumed at 14.0% a year, from the 2024 deposit study; members ran off at 22.6%. Nadia clicks the citation and the core extract opens with the lines the agents used highlighted: 498,300 accounts holding $1,420,612,400, and a runoff of $321,000,000. BSA fields were removed before any agent read it, and member identifiers are masked.

  3. 03The evidence

    The promise, the cohort and the months

    Back-test agent

    Twelve monthly dots sit against a promise line of 1.17 points a month. March to June stand out, at 2.9, 3.1, 2.6 and 2.4 points: the months of the 13-month certificate special. The Extract Reconciler tied the extract to the general ledger within $291,700, or 0.02%.

  4. 04Why the gap

    Three causes, each with its amount and source

    Back-test agent

    41,800 accounts closed or drained under $5 account for 9.8 points; $105.1 million moved into share certificates, $88.0 million of it in the special, for 7.4 points; other withdrawals by members who stayed add 5.4 points. Sample accounts sit behind the number with names hidden and numbers masked.

    Why the gap, confidence 0.94.

  5. 05Run RUN-26Q3-0419

    The gap gets a number before anyone argues

    Sensitivity agent

    The Sensitivity agent re-ran the ALM model in a what-if set, never the live one. At +300 bp the NEV ratio falls from 9.1% to 8.2%, still above the 7.0% floor, and NII year one moves from −6.4% to −8.1% against a −15% limit. Limits Watch reads NEV sensitivity at 33.3% against a 40% limit, and the NCUA NEV Supervisory Test stays Low.

  6. 06One toggle

    Two open changes together, before anyone votes

    Limits Watch

    A second change is open: certificate dividend beta from 55% to 71%. With both, the +300 bp NEV ratio would be 7.6% and NEV sensitivity 37.7%. Limits Watch flags it before ALCO meets.

    With both changes the +300 bp NEV ratio keeps only 0.6 points above the floor, under the 1.0-point line of FIN-04 §4.4: ALCO should discuss strategy before it votes.

  7. 0710:14 AM

    A cited change memo, submitted by a named maker

    Governance agent

    The Governance agent drafted memo P-2026-15 in five sections with 11 citations: what the model assumes, what members did, why, the impact, and a recommendation to adopt 22.6% in AS-2026.4 and re-test on January 19, 2027. Nadia proposes the value, picks reason code SB-1, observed behavior and a three-quarter trend, and submits it to the validator at 10:21 AM.

  8. 08Second line

    Model Validation's own agent recomputes the number

    Challenge agent

    The Challenge agent reads the raw extract, never the first-line memo, and recomputes 22.58%, a difference of 0.02 points. It then tries to explain the gap away. Without March to June, runoff would still be 17.4%, 3.4 points over the assumption, and the 2027 budget plans two certificate specials, so the effect recurs.

  9. 0910:40 AM

    Accepted, with a condition on the record

    Samuel Ostrander · Model Validation Analyst

    Samuel accepts with reason code MV-AC, accept with a condition. The ALCO Packet agent queues the change as item 2 for the October 27 ALCO, with his condition attached.

    Re-test in the Q4 2026 back-test on January 19, 2027. If runoff without certificate specials is under 17%, bring a revised value to ALCO.

  10. 10Until ALCO votes

    The model waits for the committee

    Carla Benning · CFO, ALCO chair

    The October 27 agenda holds only changes Model Validation has reviewed, each with its NEV and NII impact, its maker and its validator decision. The deferred certificate dividend beta change goes to November 24. Until ALCO approves and Nadia releases the new set, the model keeps using 14.0%.

    The ALM model is using assumption set AS-2026.3. Nothing on this agenda reaches the model until ALCO approves it and the ALM Manager releases it.

Who it’s for

Built for everyone who answers for an assumption.

The same change, seen by the people who propose it, check it, vote on it and oversee it: what their day looked like, and what it looks like now.

NF
Nadia FerranteALM Manager, Finance · owns the 28 key assumptions
ALM Manager
Before
Knows regular shares ran off faster, but rebuilds the evidence and the impact from spreadsheets and email every time she takes a change to ALCO.
Now
Opens the quarter with every assumption against what members did, the impact re-run and a cited memo to edit, not write.
SO
Samuel OstranderModel Validation Analyst, Enterprise Risk · the independent checker
Model Validation Analyst
Before
Sees assumption changes after the fact, with the first line's numbers and no record of what else was ruled out.
Now
Has his own agent recompute the number from the raw extract and test other explanations, then decides with a reason code.
CB
Carla BenningCFO, ALCO chair · signs the interest rate risk report to the board
Chief Financial Officer
Before
Asks whether the credit union is inside policy, by how much, and what changed, and gets the answer the week of ALCO.
Now
Sees every board limit against the latest run, and an early warning when two open changes together come within a point of the floor.
GL
Gwen LockhartSupervisory Committee Chair · reads everything, changes nothing
Supervisory Committee Chair
Before
When the examiner asks who approved what and why, assembles the answer from minutes, memos and email threads.
Now
Builds one signed export pack for NCUA examiners, with every action by a person or an agent on the record.
Built on the engine

7 agents. Each with one job, and hard limits.

Agents back-test, re-run NEV and NII, draft and challenge; the ALM Manager, a validator and ALCO decide.

Extract Reconciler

Pulls the quarter's share, certificate and loan extracts, ties balances to the general ledger within 0.10%, strips BSA fields and masks member data.

  • Never changes source data
  • A missing or unreconciled extract stops the back-test for that assumption
Back-test agent

Measures each of the 28 assumptions on the cohort, compares it with the promise, and attributes the gap to causes with citations.

  • Never changes an assumption
  • Attribution confidence under 0.85 goes to the ALM Manager
Sensitivity agent

Asks the ALM model to re-run NEV and NII in a what-if set with the observed value, alone and together with every other open change.

  • Never runs against the live assumption set
  • A failed run is reported, never estimated
Limits Watch

Reads every run against the board's interest rate risk policy and the NCUA NEV Supervisory Test, and flags headroom under 1.0 point.

  • Never changes a limit
  • A breach goes to the CFO the same day
Governance agent

Drafts change and re-affirmation memos from the back-test, the re-run, the policy and prior memos, with every figure cited.

  • Never submits; the ALM Manager does
Challenge agent

Works for Model Validation: recomputes the observed value from the raw extract and tests other explanations, such as one-time events, data errors and cohort choice.

  • Never sees the first-line memo before its own recompute
  • Never decides
ALCO Packet agent

Builds the ALCO item and the board-portal packet, records each member's vote, and stages the next assumption set.

  • Never releases a set without the recorded ALCO approval and the ALM Manager's release
ALM Manager, Model Validation and ALCO

Maker proposes, a second line checks, the committee approves. The agents propose; a named person decides.

Ask in plain words

Ask about any assumption, run or limit

The assistant answers with the source behind every figure, and can open the screen it is talking about.

Why did regular shares run off faster than we assumed?

Three causes, from the core extract: 41,800 accounts closed or drained (9.8 points), $105.1 million moved into certificates (7.4 points, $88.0 million in the 13-month special), and $76.7 million of other withdrawals (5.4 points). The 2024 study assumed 14.0% on low-rate years.

What happens at +300 if ALCO accepts both open changes?

The NEV ratio at +300 bp would be 7.6%, 0.6 points above the 7.0% floor. That is under the 1.0-point early-warning line, so FIN-04 §4.4 asks ALCO for a strategy discussion. Sensitivity would be 37.7%, still under 40%.

Which assumptions drifted two quarters in a row?

Four: regular share decay and certificate dividend beta drifted in Q1 and Q2 and broke in Q3, so both were escalated to Carla Benning on October 19. Certificate renewal rate and reinvestment spread have drifted for two quarters and need a comment by November 2.

Build the NCUA examiner pack for Q3

Ready for item 14 of the exam request list: the register, every back-test with its extract and tie-out, the what-if runs, memos P-2026-14 and P-2026-15, the Challenge agent's work and the validator's decisions, ALCO minutes and the limits report, with Appendix B mapped section by section.

Every screen

The working solution, as it ships.

13 screens from the working solution, on its sample data. Pick one to see it large.

The assumption register: what the model promised against what members didEach of the 28 key interest rate risk assumptions is one row with two dots on one scale: a hollow dot for what the model assumed a year ago and a solid dot for what members actually did, with the tolerance as a pale band. Regular share decay is selected: 14.0% assumed, 22.6% observed, and with the observed value the NEV ratio at +300 bp goes from 9.1% to 8.2% against a 7.0% floor.
Every number opens its source passageThe citation beside the regular share decay evidence opens the core extract itself, with the lines the agents used highlighted: 41,800 accounts closed or drained, and a runoff of $321,000,000 of $1,420,612,400. BSA fields were removed before reading, and member identifiers are masked.
The back-test of a deposit decay rate: the promise, the cohort and the monthsThe cohort is 498,300 regular share accounts holding $1,420.6 million on September 30, 2025, tied to the general ledger. Twelve monthly dots sit against the promise of 14.0% a year, and March to June stand out, the months of a 13-month certificate special.
Why the gap, with causes attributed and citedAccounts closed or drained, 9.8 points; money moved into share certificates, 7.4 points; other withdrawals by members who stayed, 5.4 points. Sample accounts behind the number show member names hidden and numbers masked.
NEV and NII re-run at every shock with the observed valueThe ALM model is re-run in a what-if set, never the live set. From −300 to +400 bp, the live net economic value ratio sits beside the what-if with the policy floor, and NII year one beside its limit. The NCUA NEV Supervisory Test reads Low before and after.
Two changes together: the early warning before ALCO votesWith the open certificate dividend beta change at 71% as well, the +300 bp NEV ratio would be 7.6%, 0.6 points above the floor. Limits Watch flags it under the 1.0-point early-warning line of the interest rate risk policy.
The assumption change memo, drafted with every figure citedMemo P-2026-15, regular share decay from 14.0% to 22.6%, in five sections with 11 citations to the extract, the ledger, the deposit study, the re-run and Appendix B. The ALM Manager proposes the value, picks a reason code and submits it as maker.
ALM model validation: the second line's own agent recomputes the numberModel Validation's Challenge agent reads the raw extract, never the first-line memo, and recomputes 22.58% against the first line's 22.6%. It tests a one-time event, a data error and the cohort choice, each with its result and citation.
The validator accepts, with a condition on the recordSamuel Ostrander records MV-AC, accept with a condition, at 10:40 AM: re-test in the Q4 2026 back-test on January 19, 2027. The change is queued for the October 27 ALCO as item 2.
ALCO votes on validated changes, and the model waitsThe October 27, 2026 agenda holds only changes Model Validation has reviewed, with the NEV and NII impact, the maker and the validator's decision. The ALM model keeps assumption set AS-2026.3 until ALCO approves and the ALM Manager releases the new one.
Interest rate risk policy limits and the NCUA NEV Supervisory Test, in one viewEvery limit in board-approved IRR Policy FIN-04 is read against the latest run, with headroom: the NEV ratio at +300 bp is 9.1% against a 7.0% floor, and NII year one −6.4% against −15%. The NCUA NEV Supervisory Test reads Low.
Every assumption, every quarter, with escalationsThe back-test calendar shows the 28 assumptions quarter by quarter and the next test on January 19, 2027. Regular share decay and certificate dividend beta drifted for two quarters and broke in the third, so both were escalated to the CFO and the Supervisory Committee was notified.
The audit trail and an export pack for NCUA examinersEvery action by a person or an agent is on the record with who, what, when, why and the evidence. One click builds a signed pack for the NCUA examination, with Appendix B mapped section by section; member data is masked and BSA information is never in a pack.
Governance

Interest rate risk management built for the examiner: cited, challenged, on the record.

Seven roles, separated by dutyThe ALM Manager proposes and releases; the Model Validation Analyst accepts or challenges; the CFO records ALCO votes; ALCO members vote; the Supervisory Committee and Internal Audit read and export; the administrator runs settings. No one approves their own work, and the screens lock every action a role may not take.
Maker, independent checker, committeeEvery assumption change goes from the ALM Manager as maker to Model Validation, with a reason code at each step, and then to ALCO. Bulk re-affirmations, agent changes and settings changes each need a second person too.
The model cannot use an unapproved changeProposals live in a what-if set. The live assumption set changes only after ALCO approves and the ALM Manager releases the new one, and the memo, the challenge, the vote and the release are one trail.
Every figure cites its sourceEach value and agent statement opens its source passage: the core extract, the general ledger tie-out, the deposit study, the model run or the policy section.
Agents governed like modelsEach agent has a version, a prompt, a model, a confidence threshold and an owner. Any change is approved by Model Validation, and people override with reason codes OV-1 to OV-4, counted on the record.
Member data masked, BSA information never shownMember names and account numbers are masked except for the ALM Manager and Model Validation, and every unmasked view is logged. BSA fields are removed from every extract before an agent reads it. Memos, decisions, votes and the audit trail are kept seven years; member-level extracts five, then purged.
Configuration

Your interest rate risk policy, not ours

Tolerances, limits, clocks and data access are settings. Every change is a change request that a second administrator approves before it applies, and the limits mirror the board-approved policy.

SettingDefaultChoose from
Tolerance, regular share decay±3.0 pointsDividend betas ±10 points; drifting at two thirds of the tolerance
Back-test calendarQuarterly, the third Monday after quarter endEscalate to the CFO after two quarters outside tolerance
NEV ratio floor (IRR Policy FIN-04 §4.2)At least 7.0% at +300 bpAt least 5.0% at +400 bp; changes only by a board vote
NII year-one changeNo worse than −15% at ±300 bpNo worse than −20% at +400 bp
Early warningUnder 1.0 point of headroom, to ALCOA breach goes to the CFO the same day
Outside toleranceMemo or documented re-affirmation within 15 business daysAnd before the next ALCO; drifting: comment in 10; missing extract: 2
Back-test attribution confidence0.85Below it, the ALM Manager decides
Member dataMasked; every unmasked view loggedAggregate only for ALCO members and the board; no member-level export
Connections

Works with the systems your ALM team already runs on

ALM modelruns NEV and NII; what-if sets for the agents, and the live set changes only on a release
Core banking systemshare, certificate and money market extracts, read only
Loan servicing systemloan, card and HELOC extracts, read only
General ledgerbalances for the tie-out of every extract
Document management systemthe deposit study, the policy, memos and minutes
Board portalALCO and board packets, written once approved
What it changes

The difference, in numbers.

Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.

target
28of 28
key assumptions back-tested every quarter against what members actually did
Every quarter
shares, loans, investments, balance sheet
target
2days
from back-test to a cited memo in front of the validator, instead of weeks of spreadsheets
Todayabout 3 weeks
With agents2 days
target
100%
of assumption changes independently challenged and ALCO-approved before the model uses them

Sources: 12 CFR 741.3(b)(5) and Appendix B to Part 741, interest rate risk policy and program for credit unions over $50 million (ecfr.gov) · NCUA Supervisory Letter 22-01, NEV Supervisory Test (ncua.gov) · Interagency Advisory on Interest Rate Risk Management, SR 10-1 (federalreserve.gov) · Risk.net IRRBB benchmarking, NII sensitivity as a primary metric. “demo” = seen in the working solution, on its sample data · “target” = the design goal, measured in the live solution · “estimated” = our arithmetic (the business-day split) · “typical” = published figures and regulatory thresholds. Norrell Federal Credit Union, its members and the people named on this page are fictional: characters and sample data in the working solution.

Questions

What ALM teams and ALCOs ask us.

What is interest rate risk management?

Interest rate risk management is how a credit union or bank measures and limits what a change in rates does to its net interest income and the economic value of its balance sheet, and governs the assumptions behind those measures. Interest Rate Risk (IRRBB) Management puts seven agents on that work: they back-test every key assumption against what members actually did, re-run NEV and NII with the observed value, and draft a cited memo, while the ALM Manager, Model Validation and ALCO decide.

What is IRRBB?

IRRBB is interest rate risk in the banking book: the risk to earnings and capital from rate changes on loans, deposits and investments a bank or credit union holds rather than trades. It is usually measured two ways, net interest income over the next year and the economic value of equity, which credit unions call net economic value (NEV).

What is the difference between EVE and NII?

NII sensitivity shows how net interest income over the next year changes under a rate shock; EVE, or NEV at a credit union, shows how the value of assets less liabilities changes. The solution re-runs both at every shock from −300 to +400 bp, and reads each against its board limit, for example an NEV ratio of at least 7.0% and an NII change no worse than −15% at +300 bp in the demo policy.

How is a deposit decay rate back-tested?

The Back-test agent takes the accounts open at the start of the year, ties their balance to the general ledger, and measures how much of it ran off. In the demo, 498,300 regular share accounts held $1,420.6 million and $321.0 million ran off, 22.6% against 14.0% assumed, with the gap split into cited causes. It is measured by balances, as the 2024 deposit study was; counted by accounts, runoff would read 8.4%.

What does NCUA require for interest rate risk?

12 CFR 741.3(b)(5) requires every federally insured credit union with more than $50 million in assets to have a written interest rate risk policy and an effective program, and Appendix B to Part 741 asks for reasonable, supportable assumptions and documented changes based on observed information. NCUA Supervisory Letter 22-01 reads a post-shock NEV ratio above 7% with sensitivity below 40% as Low risk, and below 4% or above 65% as High.

Does it work for interest rate risk management in banks?

Yes. The working solution shows a credit union, where the measure is called NEV and the owner is the ALM Manager; at a bank the same measure is EVE and the work usually sits with the Corporate Treasurer. The 2010 interagency advisory on interest rate risk management sets the same expectations for both: documented assumptions, back-testing against actual outcomes and independent review.

Can the agents change an assumption or the model?

No. The agents measure, re-run in what-if sets, draft and challenge; they never change an assumption, a limit or the live model, and never submit, vote or release. The ALM Manager proposes with a reason code, Model Validation accepts or challenges with its own, and the model uses a change only after ALCO approves and the ALM Manager releases the new set.

How long does it take to go live?

The Agentic Solution Engine builds and deploys it from your requirements and documents: your assumption set, your interest rate risk policy, your last deposit study and a quarter of extracts. It goes live once every quality gate has passed, and we walk you through it on your own assumptions first.

See it on
your assumptions.

We'll run Interest Rate Risk (IRRBB) Management on your own assumption set, a quarter of extracts and your interest rate risk policy.