A bank gives every business loan a grade, usually a number from 1 to 10, that says how likely the borrower is to fail to repay. That grade sets the price, who may approve the loan, how often anyone looks at it and how much money the bank sets aside for losses. Validating the ratings means checking that the grades are right: that like borrowers get like grades whoever the lender is, that grades move when the borrower changes, and that the worse grades do default more often.
This guide is for anyone who sets, checks, reports or pays for loan grades: chief credit officers, credit risk and portfolio analysts, regional credit officers, heads of loan review, model risk teams, commercial lenders, and the leaders deciding whether to automate the checking. No background needed.
Imagine you are a senior credit risk officer at a regional bank with $21.6 billion of assets, five commercial regions and 2,305 graded business loans. It is Monday, October 12, 2026. Your job this quarter is the calibration note for Senior Credit Committee on Tuesday, October 20. Examiners arrive on February 8, 2027.
You lay the bank's 195 freight trucking borrowers side by side by their debt service coverage and their senior debt to EBITDA. Two of them sit almost on top of each other. Brinmoor Freight Lines in Denver borrows $18.5 million. Coulter Haulage in Omaha borrows $17.2 million. Their earnings fell 18% and 15% last year.
The bank's own scorecard puts both at grade 6. Yet the lender in Denver affirmed Brinmoor at grade 4 in March, alone, with no reason code for overriding the scorecard. In August a lender and a credit officer in Omaha graded Coulter 7, special mention, after it missed a coverage covenant.
Brinmoor Freight Lines · Denver
Debt service coverage
1.14x
Senior debt / EBITDA
3.8x
Scorecard says
6
Grade given
4 · pass
Memo
"long-standing relationship"
Coulter Haulage · Omaha
Debt service coverage
1.17x
Senior debt / EBITDA
3.7x
Scorecard says
6
Grade given
7 · special mention
Memo
covenant missed, reason code given
Graded 4 in Denver7 in Omahathree notches apart for the same numbers.
One pair could be bad luck. So you look at the region. Of the bank's 38 trucking loans in the Mountain region, 14 are graded two notches better than both the scorecard and their look-alikes elsewhere, and 11 of those sit with the same lender. Loan review changed 6.1% of the Mountain grades it sampled last quarter, above the 5% line that makes examiners look for a root cause.
Validation finds the grade that leans on a relationship while the numbers point lower, and the region where it has become a habit, before the examiners pull their sample.
What a loan risk rating is, how banks build the scale, and how they prove the grades are right
Grades, scales, dual ratings, the regulators' five classes, scorecards and overrides, back-testing, the 2024 and 2025 Shared National Credit results and what failed banks teach, explained without selling anything. If you are new to commercial credit, start here.
01 · In plain words
Why every business loan carries a risk grade, and who checks that the grade is right
When a bank lends to a business, it decides more than yes or no. It also gives the loan a grade on its own scale, often 1 to 10, where 1 is a borrower the bank barely worries about and 10 is money it has already written off. The grade is the bank's short answer to one question: how likely is this borrower to stop paying? Some banks give a second grade to each loan as well, for how much they would lose if the borrower did stop.
That number does a lot of work. It decides who in the bank may approve the loan, what interest rate it carries, how often someone reviews it, and how much money the bank sets aside in its allowance for losses.
Near the bottom of the scale, the bank's grades turn into the regulators' own words: special mention for a loan with a weakness worth watching, then substandard, doubtful and loss, the classified grades the board and the examiners count. The OCC, which supervises national banks, puts the expectation in one line: "Risk ratings must be accurate and timely".1
The trouble is that people set the grades, and often the person setting it is the lender who brought in the deal and wants to keep the customer. Two lenders in two cities can look at the same kind of borrower and land two or three grades apart. A grade set at approval can sit unchanged while the borrower's earnings fall. Nobody sees the pattern until loan review, the bank's independent checkers, or the examiners pull a sample.
Validating the ratings is the work of checking the grades as a whole, on four counts: each grade matches the bank's definitions and scorecard; like borrowers get like grades whoever the lender is; grades move when risk moves; and, as the years pass, the worse grades default more often than the better ones. The OCC asks for all four: a rating process "independently validated (in addition to regulatory examinations)", and back-testing to see "whether the assumptions implicit in the rating definitions are valid".1
The life of one loan grade, in five steps
The lender proposes a grade at approvalBrinmoor Freight Lines is graded on the bank's 1-to-10 scale using its scorecard: coverage, leverage, liquidity, management, industry, guarantor.
A credit officer agrees, or the lender sets it aloneIn the example bank's Mountain region, loans under $20 million are graded by the lender alone. Elsewhere a credit officer co-signs every grade.
The grade is refreshed each year, or when news arrivesBrinmoor's annual review in March 2026 affirmed grade 4, two notches better than its scorecard, with no reason code.
The grades are checked across the bookAgainst the scorecard, against look-alike borrowers graded by other lenders, against rating changes and against defaults. This is where Brinmoor's 4 and Coulter's 7 meet.
Loan review and examiners sample, and judge the systemAbove 5% of loans or 3% of dollars graded wrong, examiners look for the root cause and decide whether to widen their sample.1
Step 4 is the subject of this guide. The bank, borrowers, people and figures in this example are fictional.
The agencies define special mention, substandard, doubtful and loss. Everything above them is "pass", and how a bank splits pass into four, five or six grades is its own business. "Regulatory ratings do not distinguish among pass credits."1
The supervisor expects lenders to lean optimistic
The OCC writes that a loan officer's "objectivity can be compromised" and that lenders' incentives "are frequently geared more toward producing loans than rating them accurately". It adds: "it can be relatively easy for loan officers and line managers to rate credits a step, or more, above what they deserve."1
Examiners have a number for "too many wrong"
When examiners re-grade a sample and find inaccuracies above 5% of the loans or 3% of the dollars, they "must investigate to determine the root causes and decide whether to expand their loan review sample".1
Defaults are too rare to prove a grade right quickly
A back-test needs defaults, and a good commercial book has few. The Basel Committee's validation study says statistical back-testing "is severely limited by data constraints".2 Comparing like borrowers answers sooner.
Grade, dual rating, classified, override defined
Risk rating, or grade
The number a bank gives a loan on its own scale for how likely the borrower is to default. "Notch" means one step on that scale.
Dual risk rating
Two grades: one for the borrower's chance of default, one for each loan's expected loss given its collateral and structure.
Special mention and classified
The regulators' words for loans with a weakness: special mention to watch, then substandard, doubtful and loss, which are "classified".
Override
A grade set differently from what the bank's scorecard gives. Good policy asks for a reason code and a second signature.
What a commercial loan risk rating measures, and the jobs one number is asked to do
In shortA grade measures the borrower's expected ability to repay over at least the next year, mostly from its cash flow. Banks grade the borrower as it is today, while the rating agencies grade through the cycle, so a bank grade should move faster. The same number then drives approval authority, pricing, review frequency, the allowance and the reports the board reads, which is why one wrong grade travels so far.
The OCC asks banks to rate "based on the borrower's expected performance, i.e., the likelihood that the borrower will be able to service its obligations in accordance with the terms", evaluated "over the foreseeable future", which it sets at "not less than one year". Examiners look at "at least the upcoming 12 months". The primary question is the strength of the main source of repayment, "a sustainable source of cash"; collateral and guarantors matter more as that source weakens.1
A grade measures the risk ahead. The booklet's own example: a borrower three years into a seven-year term loan has always paid on time, but its prospects are weakening and next year's cash flow will not cover the payments. "The risk rating should be changed now when the borrower's risk of default increases rather than later when cash flow coverage becomes negative or when default occurs."1
The jobs a grade does
Before the loan
Approval and structure
Ratings "should be used to determine or influence who is authorized to approve a credit, how much credit will be extended or held, and the structure of the credit facility".1
The price
Pricing
"Risk ratings should guide price setting." A loan priced on a grade that is too good pays the bank too little for the risk it carries.1
During the loan
Administration
"Higher risk credits should be reviewed and analyzed more frequently." A flattering grade buys a borrower less attention.1
The books
Allowance and capital
"Risk ratings of individual credits underpin the" allowance. A grade one notch too good understates the reserve on that loan.1
The picture
Board and examiner reports
The OCC's 2026 lending booklet lists "Risk-rating reports, such as special mention and classified loans" and "rating migration" among the reports management should see.3
The people
Performance
"Credit staff should be evaluated on, among other things, the accuracy and timeliness of their risk ratings."1
Today's condition, or condition under stress?
The rating agencies grade "through the cycle": they try to look past a downturn. Banks do the opposite. In a Federal Reserve study of the fifty largest US bank holding companies, "almost all banks have chosen to grade to current condition". Asked over what period they judge risk, the banks interviewed split three ways, and half had no fixed answer.4
Half of the large banks interviewed had no fixed time horizon for their grades
Time period raters have in mind, banks interviewed by the Federal Reserve (published November 1998)
50%no set period
No specific period in mind50%
One year25%
Life of the loan25%
Source4 · The study's figures are approximate ('about 25 percent'). The OCC's booklet now asks for not less than one year.
Show the numbers
Part
Value
No specific period in mind
50%
One year
25%
Life of the loan
25%
The difference matters when a bank compares itself with public ratings. A bank grade 4 is a statement about this borrower today; an agency BBB is meant to survive a recession. The OCC says banks that use public ratings "must ensure that their internal credit risk ratings change when risk changes, even if there has been no change in the public rating".1
How many grades a scale needs
Most of the work happens in the pass grades, which regulators leave undefined. The OCC: "most rating systems require several pass grades", and a community bank may manage with a few, for example one for loans secured by cash-like collateral, a "watch" grade and one or two others.1 Among the fifty largest banks the Federal Reserve studied, pass grades ranged "from two to the low twenties"; the median was five, six among the ten largest, plus "three or four regulatory problem-asset grades".4
The example bank uses ten: grades 1 to 6 are pass, with 6 as pass/watch, then 7 special mention, 8 substandard, 9 doubtful and 10 loss.
03 · The rules and their dates
Which supervisory texts govern loan risk ratings, from the 2001 OCC booklet to the 2026 exam rules
Status as of October 2026
In shortThere is no federal rule that sets a bank's rating scale. Supervisors expect accurate and timely grades, a written scale that translates into their five classes, independent review, and evidence that worse grades default more. The OCC's 2001 booklet on rating credit risk is still the core text. In 2026 the model risk guidance was replaced, the OCC issued a new lending booklet, the 18-month exam cycle widened to banks under $6 billion, and a new rule, effective November 2, 2026, raises the bar for formal exam findings at OCC and FDIC banks.
The rating rulebook rests on texts from 1991 to 2020, with five changes in 2025 and 2026
1991 and 1993Classes defined
Substandard, doubtful and loss (Banking Circular 127, April 1991); special mention (Banking Bulletin 93-35, June 1993).
April 2001Rating Credit Risk
The OCC booklet on rating systems; updated 2017, reputation-risk references struck March 20, 2025.
October 29, 2013Uniform Agreement
The agencies' shared classification definitions (SR 13-18, OCC 2013-28, FIL-51-2013).
June 1, 2020Credit risk review guidance
Independent review validates grades; banks with their own scale document how it maps to the agencies' classes.
April 17, 2026Model risk guidance replaced
SR 26-2, OCC 2026-13 and FIL-15-2026 supersede SR 11-7.
June 25, 2026New OCC lending booklet
Lending and Loan Portfolio Risk Management, Version 1.0, July 2026.
September 14, 202618-month exam cycle widened
Qualifying banks under $6 billion, up from $3 billion.
November 2, 2026Matters requiring attention
OCC and FDIC rule takes effect: findings tied to material financial harm or a violation of law.
All exposures rated; several pass grades; accurate and timely; clear criteria; "dynamic"; "independently validated"; back-tested; well supported in the file. MIS by loan officer and location. The 5% / 3% examiner lines.1
April 2001, current
OCC, Lending and Loan Portfolio Risk Management
"Accurate and timely credit risk ratings"; rating migration in management reports; examiners sample loans "to determine whether a bank's risk-rating system is reliable".3
Independent review that "appropriately validates and, if necessary, adjusts risk ratings"; "the lower classification or risk rating typically prevails"; a written map from the bank's scale to the agencies' classes.6
June 1, 2020, in force
Uniform Agreement, Attachment 1
The agencies' shared definitions of the classified grades, which the 2020 guidance points to for the mapping.5
October 29, 2013
SR 26-2 / OCC 2026-13 / FIL-15-2026
Model risk management. A statistical scorecard can be a model; simple arithmetic and fixed rules are not; generative AI is out of scope.7
April 17, 2026
Expanded exam cycle, 91 FR 58009
Full-scope exams every 12 months; every 18 months for qualifying banks under $6 billion of assets.9
Interim final rule, September 14, 2026
Unsafe or unsound practices and MRAs, 91 FR 56004
OCC and FDIC formal findings for practices that "could reasonably be expected to … materially harm the financial condition of the institution", or a violation of law.10
Effective November 2, 2026
What the November 2026 rule does and does not change. A rating system whose errors understate the allowance or hide problem loans can still meet the new bar for a matter requiring attention, because that is financial harm. Smaller weaknesses become supervisory observations. The 5% and 3% lines in the OCC booklet are untouched, and the Federal Reserve is not a party to the rule.10,1
04 · Dual risk rating
Dual risk rating: a borrower grade for the chance of default, a facility grade for the loss
In shortA single grade has to mix two questions: will this borrower default, and how much would the bank lose on this loan if it did? A dual system answers them separately, with a borrower grade tied to a probability of default (PD) and a facility grade for each loan tied to loss given default (LGD) or expected loss. The OCC accepts either design, as long as both questions are answered. The common failure is a borrower grade that quietly absorbs the collateral.
The OCC describes the design in one sentence: "Dual rating systems typically assign a rating to the general creditworthiness of the obligor and a rating to each facility outstanding." The facility rating "considers the loss protection afforded by assigned collateral and other elements of the loan structure in addition to the obligor's creditworthiness". Banks adopted it "because a single rating may not support all of the functions that require credit risk ratings": borrower grades serve structuring and administration, facility grades serve the allowance and capital.1
The OCC "does not advocate any particular rating system" and accepts "a single rating or dual ratings".1
Four in ten large banks graded on two scales in the Federal Reserve's study
40 in 100
of the large bank holding companies interviewed used two-dimensional systems; the other 60 graded each facility on one scale
of the large bank holding companies interviewed used two-dimensional systems; the other 60 graded each facility on one scale
40 of 100
Default risk climbs steeply in the last grades of a typical scale
Borrower probability of default by grade, percent a year, in the Federal Reserve's example of a two-scale system
0%1
0.1%2
0.3%3
1%4
3%5
6%6
20%7
60%8
Source4 · The example's grade 9, doubtful, carries a 100% default probability. Its facility scale multiplies each PD by an average loss of 30%.
Show the numbers
Period
Value
1
0%
2
0.1%
3
0.3%
4
1%
5
3%
6
6%
7
20%
8
60%
The three numbers behind a dual grade
Expected loss = probability of default × loss given default × exposure at default
The borrower grade carries the probability of default. The facility grade carries the loss given default, the share of the loan the bank would not recover. Their product with the amount owed at default is the expected loss. The regulators' classes do not use these words, but the OCC notes that the concepts sit inside them: substandard loans have "a high probability of payment default", and a doubtful loan "a high probability of total or substantial loss".1
Brinmoor's two loans (fictional)
Borrower grade
Facility view
Expected loss, illustrative
$12.0 million term loan, secured by tractors and trailers
Same grade for both loans
Assumed loss given default 30%; amortizing, so exposure shrinks
3.0% × 30% × $12.0M ≈ $108,000
$6.5 million revolver, secured by receivables
Same grade for both loans
Assumed loss given default 45%; assume fully drawn at default
3.0% × 45% × $6.5M ≈ $88,000
Illustrative arithmetic with assumed rates: a 3.0% one-year default probability is the Federal Reserve example's grade 5, and the loss rates are assumptions to replace with your own. The point is the shape: the two loans share one borrower grade, and the revolver's higher loss and its tendency to be drawn as the borrower weakens belong in the facility grade.
Four rules that keep two scales honest
Rule 1
One borrower, one borrower grade
A borrower graded 4 on its term loan and 5 on its revolver has no borrower grade at all. The grade belongs to the company.
Rule 2
Collateral moves the facility grade only
When a lender nudges the borrower grade up "because the loan is well secured", the borrower grade stops being comparable with any other borrower's.
Rule 3
The facility grade must sometimes differ
Treacy and Carey found banks set the facility grade "equal to the borrower grade unless the structure" is substantially better or worse. A second scale that never moves carries no information.4
Rule 4
Write down what the second scale means
Loss given default alone, or expected loss? In the Fed's study, two-scale banks mostly used PD for one and expected loss for the other; a few planned to move to LGD.4
Split ratings grade two slices of one loan. A split rating gives two parts of one loan different grades, "usually assigned when collateral or other structural protection supports only part of the credit": for example the cash-secured part as pass and the rest as substandard.1 A dual system grades two questions about the whole loan. A bank can use both.
05 · Mapping to the five classes
Mapping a 1-to-10 scale to pass, special mention, substandard, doubtful and loss
In shortEvery bank grades on its own scale, and every bank reports in the regulators' five words. The 2020 interagency guidance asks a bank with its own scale to keep documentation that translates it into the agencies' classes, so examiners can reconcile the totals. The map is easy to draw and easy to blur: the risk sits at the line between the last pass grade and special mention, where a watch grade can become a place to park loans.
The interagency guidance on credit risk review says a bank whose framework "differs from the framework for loan classifications used by the Federal banking agencies" should "maintain documentation that translates their risk ratings into the regulatory classification framework". The documentation lets examiners "reconcile the totals for the various loan classifications or risk ratings under the institution's system to the Federal banking agencies' categories".6 The agencies' definitions are the same for every bank and every kind of credit.1,5
Example bank's grade
Regulatory class
The agencies' definition, in their words
What it usually looks like
1 to 5
Pass
No formal definition: "Credits that are not covered by these definitions are 'pass' credits".1 The SNC program: "A loan that is in good standing and is not rated special mention or classified".11
Coverage and leverage inside policy; current statements; the bank's own grades split them by strength
6 · pass/watch
Pass
A bank's own "watch" category among pass grades; the OCC lists it as one a community bank might use.1
A weakness to follow, short of the potential weakness that defines special mention
7
Special mention
"Potential weaknesses that deserve management's close attention. If left uncorrected, these potential weaknesses may result in deterioration of the repayment prospects".1
Falling revenue or margins, high leverage, tight liquidity, a new competitor, management problems, a weak loan agreement1
8
Substandard (classified)
"Inadequately protected by the current sound worth and paying capacity of the obligor or of the collateral pledged"; "a well-defined weakness"; "the distinct possibility that the bank will sustain some loss".1
Unprofitable operations, inadequate debt service coverage or liquidity, repayment depending on collateral1
9
Doubtful (classified)
All the weaknesses of substandard, plus "collection or liquidation in full … highly questionable and improbable".1
Usually in default; a pending event decides the loss; nonaccrual required1
10
Loss (classified)
"Considered uncollectible and of such little value that their continuance as bankable assets is not warranted".1
Charged off in the period it becomes uncollectible1
Classified means substandard, doubtful or loss. "Non-pass" or "criticized" usually adds special mention. Special mention comes from an interagency statement of June 1993; the classified definitions from April 1991.1
Where mapping goes wrong
Special mention used as a waiting room. The OCC is direct: "Special mention is not a compromise between pass and substandard and should not be used to avoid exercising such judgment."1 A grade 7 that stays for years with no plan is a substandard loan under another name, or a pass loan the bank is nervous about.
Upgrades on a plan. For a classified loan, examiners "normally will await correction of the weaknesses and a period of sustained performance". "The mere existence of a plan for improvement, by itself, does not warrant an upgrade."1
The watch grade is the line most worth testing. In the example, Brinmoor's scorecard grade is 6, pass/watch, and its assigned grade is 4. Three of its Mountain neighbors with coverage near or below 1.0x carry pass grades of 5 while matched peers elsewhere sit at 7, special mention. Those three loans, $31.4 million together, are on the wrong side of the line the board and the examiners count.
06 · Drivers and overrides
Scorecards, rating drivers and overrides: where a grade comes from and how it bends
In shortMost commercial grades start from a scorecard: a handful of factors such as coverage, leverage, liquidity, earnings trend, industry, management and guarantor support, each with a weight. Then a person may override the result. Overrides are legitimate, because a scorecard cannot see everything, but each one needs a reason that someone else can check. An override with no reason code, set by the lender alone, is the pattern validation looks for first.
The OCC asks for criteria "clear and precisely defined using objective (e.g., cash flow coverage, debt-to-worth, etc.) and subjective (e.g., the quality of management, willingness to repay, etc.) factors", and for ratings that reflect "both the borrower's expected performance and the transaction's structure".1 A scorecard writes those criteria down with weights, so two people scoring the same borrower land on the same number.
Brinmoor's scorecard lands on grade 6; only management scores better than a 5
Factor grade on the example bank's 1-to-10 scale, with each factor's weight; weighted score 5.6, which rounds to grade 6
Debt service coverage (25%)1.14x; the grade 4 guide is 1.25x or better6
Senior debt to EBITDA (20%)3.8x; the grade 4 guide is 3.0x or less6
Liquidity (10%)current ratio 1.215
Earnings trend (10%)EBITDA down 18% on the year7
Industry and market (10%)truckload, exposed to spot rates6
Management and ownership (10%)24 years, second generation3
Customer concentration (5%)top customer 31%6
Guarantor support (10%)statement from June 2024, not verified5
Fictional example from this guide · Weighted: (25×6 + 20×6 + 10×5 + 10×7 + 10×6 + 10×3 + 5×6 + 10×5) ÷ 100 = 5.6. The lender's grade was 4.
Show the numbers
Factor (weight)
Factor grade
Debt service coverage (25%)
6
Senior debt to EBITDA (20%)
6
Liquidity (10%)
5
Earnings trend (10%)
7
Industry and market (10%)
6
Management and ownership (10%)
3
Customer concentration (5%)
6
Guarantor support (10%)
5
Why overrides happen, and when they are right
A good override
Coulter Haulage, one notch stricter
Scorecard 6, graded 7 by a lender and a credit officer, reason code CV-2: fixed charge coverage of 1.08x at the June 30 test, below a 1.10x covenant. The memo names the ratios, the weakness and what would move the grade back. Fictional.
A weak override
Brinmoor Freight Lines, two notches better
Scorecard 6, affirmed at 4 by the lender alone, reason code: none. The memo cites a "long-standing relationship since 2014", a sponsor with "substantial outside liquidity" on a June 2024 statement, and a recovery expected "in 2026". It never mentions the 18% fall in earnings. Fictional.
Supervisors and researchers name the same reasons lenders lean toward better grades. The Federal Reserve's study of large banks found that "at banks that use ratings in computing profitability measures, establishing pricing guidelines, or setting loan size limits, the staff may be tempted to assign ratings that are more favorable than warranted".4 The OCC lists compensation that rewards production, relationship structures that encourage lenders to "hide" problems "for fear of losing control over a customer relationship", and "unfounded optimism" as impediments examiners should look for.1 Its 2026 lending booklet warns against pay that ignores "risk-rating recognition".3
What a sound override policy says
Who may override, and by how much. For example, a lender may move one notch with a credit officer's agreement; two notches needs the regional credit officer; never the lender alone.
A reason code from a fixed list, plus the memo passage that supports it, so a reviewer can test the reason.
Joint grades. The OCC: "Many banks, therefore, find risk rating accuracy improves by requiring ratings to be a joint decision of lenders and credit officers (at least one person from each function)."1
Override reporting by lender and region, with the share that carry no reason. The OCC's MIS list includes "Rating changes by line of business, loan officer, and location".1
A review of the scorecard itself when overrides cluster on one factor. In the example, trucking overrides cluster on spot-rate exposure, which the bank's scorecard does not score.
07 · Consistency between lenders
Do two lenders give the same borrower the same grade? What the evidence shows
In shortNot reliably. Federal Reserve researchers who compared the risk estimates different banks reported for the same syndicated loans found wide dispersion, and found that banks short of capital reported lower default risk. Nobody publishes the same test inside one bank, but the causes are the same: incentives, local habits and stale inputs. Comparing look-alike borrowers graded by different lenders is the fastest way to see it, because it needs no defaults.
100 bp
at most: the difference in borrower default probability, at the portfolio level, between banks reporting on the same syndicated loans, linked to how much capital the bank had. It "can improve the typical loan portfolio's Tier 1 capital ratio by as much as 33 percent".12
Plosser and Santos, Federal Reserve Bank of New York, 2014
2×
minimum capital at the bank setting the highest loss-given-default estimates, against the bank setting the lowest, "for an identical loan portfolio", among nine large US banks.13
Firestone and Rezende, Federal Reserve Board, 2013
0
public studies we found that measure how often lenders inside one bank grade like borrowers apart. Measure yours with matched pairs (below).
As of October 2026
Both studies use loans shared by several banks in a syndicate, which is the cleanest test there is: the same borrower, the same loan, the same date, different graders. Plosser and Santos found the link to capital stronger "for larger, riskier, and more opaque credits".12 Firestone and Rezende found "Banks differ substantially in PDs, but only a few set PDs systematically higher or lower than the median bank", while loss estimates differed systematically.13
The same test inside one bank: matched pairs
A bank cannot put one borrower in front of two of its lenders, but it can find two borrowers that look the same on paper and were graded by different people. The method is simple to state:
Define "alike". Same industry at a fine level, revenue within a band, coverage and leverage within a tolerance. The example uses the same three-digit NAICS industry, revenue within 25%, coverage within 0.10x and leverage within 0.5x.
Take peers from other lenders. A lender's own loans never serve as each other's peers; most peers come from other regions.
Compare the grades given and the grade the scorecard gives, and flag pairs two notches or more apart.
Read the memos behind both grades. A gap with a good reason is an override doing its job.
Add the gaps up by lender, region and industry. One pair is an anecdote; a cell of 38 loans leaning the same way is a pattern.
Four look-alike trucking borrowers, four different grades
Grade given (higher is riskier), with debt service coverage and senior debt to EBITDA; the scorecard puts Brinmoor at 6
Coulter Haulage, Omaha1.17x · 3.7x · lender and credit officer7
Fictional example from this guide · Peer median 6. Revenue $79.5M to $88.9M; EBITDA down 11% to 19% on the year.
Show the numbers
Borrower
Grade given
Coulter Haulage, Omaha
7
Thorne Freight Systems, Milwaukee
6
Brazos Line Carriers, Waco
5
Brinmoor Freight Lines, Denver
4
In the example, the bank's 2,305 rated loans fall into 45 cells of nine industries by five regions. Four cells lean more than half a notch from their matched peers. The widest is freight trucking in the Mountain region: 38 loans, $286.4 million, graded on average 1.2 notches better than trucking borrowers elsewhere, where the gaps stay within 0.2. Inside that cell, one lender's 17 loans lean 1.6 notches, a second's 1.0 and a third's 0.7.
Why this answers sooner than defaults. A matched-pair test needs only enough look-alikes, and every quarter produces new grades to compare. A default back-test needs years and enough defaults, as the next section shows. The Basel Committee's validation study calls comparison with other references "a complement to formal statistical backtesting".2
08 · Back-testing and migration
Back-testing grades against defaults, and reading a migration matrix
In shortBack-testing asks whether the grades came true: did the worse grades default more, and did each grade default about as often as the bank assumed? Migration asks how grades moved: how many stayed put, how many fell one grade and how many fell two at once. A test across the whole bank can pass while one region fails it, so read both by region and lender. Expect few defaults, and treat a small cohort's surprise as a reason to look closer and gather more evidence.
The OCC sets two standards. Systems that state default probabilities or expected loss rates "should be back-tested", and back-tests "should show that the definitions' default probabilities and expected loss rates are largely confirmed by experience". Systems with no stated probabilities should still "rank-order risk": "banks should be able to show that credits with more severe ratings exhibit higher defaults and losses".1 The Basel Committee's study separates the same two questions: "discriminatory power", meaning ranking, and "calibration", meaning the level.2
Average default rates rise about fivefold from BB to B, and almost fourfold again to CCC
Standard & Poor's average one-year default rate by rating, 1981–94, as printed in the Federal Reserve Bulletin
AAA0%
AA0%
A0.07%
BBB0.25%
BB1.17%
B5.39%
CCC20%
Source4 · Agency ratings are through the cycle and cover large bond issuers. Use them for the shape of a scale; a bank grade needs its own default history.
Show the numbers
Rating
Average default rate per year
AAA
0%
AA
0%
A
0.07%
BBB
0.25%
BB
1.17%
B
5.39%
CCC
20%
The shape matters more than the levels. Default risk grows slowly at the top of a scale and very fast at the bottom, so a one-notch error among the strong grades costs little, while the same error near special mention can hide a loan that will default.
A back-test that passes for the bank and fails for one region
In one region, grade 4 loans defaulted more often than grade 5 loans
Three-year default rate of loans graded in October 2023, by grade: the scorecard's expectation, the whole bank and the Mountain region
Scorecard expectationWhole bankMountain region
0%2.5%5%7.5%10%
Grade 3Grade 4Grade 5Grade 6Grade 7
Fictional example from this guide · Fictional example bank. A small cohort: a few defaults move a regional rate a long way.
Show the numbers
Scorecard expectation
Whole bank
Mountain region
Grade 3
0.4%
0.3%
0.5%
Grade 4
0.8%
0.9%
1.9%
Grade 5
1.5%
1.4%
1.8%
Grade 6
3.2%
3.6%
3.1%
Grade 7
8%
8.7%
7.9%
Across the example bank, each grade defaults close to its expectation and the order holds. In the Mountain region, grade 4 loans defaulted at 1.9% over three years, against 0.8% expected and above the region's own grade 5. That is a rank-order break: the region's 4s behave like 5s, which is exactly what a habit of grading one notch better would produce. Averaged into a book of 2,305 loans, it disappears.
How sure can a back-test be? Not very, with commercial default counts. Suppose a regional grade 4 cohort has 100 loans and 0.8% are expected to default in three years: you expect 0.8 defaults, and seeing two or more happens about one time in five by chance alone. The Basel Committee adds that defaults arrive together, so tests that assume independence will fail sound scales in bad years.2 Pool grades into bands, pool years, and use the back-test to confirm what matched pairs and loan review already suggest.
The one-in-five figure is our arithmetic (Poisson, mean 0.8): chance of two or more defaults = 1 − e−0.8(1 + 0.8) ≈ 19%.
The migration matrix
A migration matrix sets each loan's grade at the start of a year against its grade at the end. Each row adds to 100%. The diagonal is loans that stayed put; right of it, loans that got worse; two or more columns right, the "double downgrades" the OCC asks banks to count, along with "seasoning of ratings (the length of time credits stay in one grade)", the "velocity of rating changes" and "The ratio of rating upgrades to rating downgrades".1
Most loans keep their grade for a year; the cells two or more grades to the right deserve a name and a reason each
Share of loans in each grade at the start of the year that ended in each grade, an illustrative commercial book
Illustrative · replace with your own numbers · Illustrative shape only. Build yours from your rating history by grade, and by region and lender.
Show the numbers
→ 3
→ 4
→ 5
→ 6
→ 7
→ 8+
From 3
Over 70%
2–10%
Under 2%
Under 2%
Under 2%
Under 2%
From 4
2–10%
30–70%
2–10%
Under 2%
Under 2%
Under 2%
From 5
Under 2%
2–10%
30–70%
2–10%
Under 2%
Under 2%
From 6
Under 2%
Under 2%
2–10%
30–70%
2–10%
2–10%
From 7
Under 2%
Under 2%
Under 2%
2–10%
30–70%
10–30%
Read first
Double downgrades
A loan that falls two grades at once was usually a grade that stopped being refreshed. In the example, 9 of the bank's 23 double downgrades in twelve months came from the Mountain region, 6 of them in trucking.
Read second
Upgrades per downgrade
In a flat or falling market, a region upgrading more than it downgrades is making a statement about its lenders. The example's Mountain region upgraded 54 loans and downgraded 30, a ratio of 1.8, while the bank ran at 0.9.
09 · The SNC results
What the Shared National Credit reviews of 2024 and 2025 say about large-loan grades
In shortEach year the Fed, the FDIC and the OCC re-grade a sample of the largest shared loans themselves. In the 2025 review, released January 12, 2026, 8.6% of $6.9 trillion of commitments were special mention or classified, down from 9.1%, but the agencies said the fall came from new lending, "rather than an underlying improvement in credit quality". Nonaccrual commitments rose 30%. The review is the closest public view of how supervisors grade, and its definitions are the ones every bank maps to.
The Shared National Credit (SNC) program covers any loan or commitment of "$100 million or more" shared by "three or more unaffiliated federally supervised institutions".11 Examiners review a risk-based sample twice a year and the agencies publish one statement a year after the third-quarter review.14 The 2025 review covered 6,857 borrowers and $6.9 trillion of commitments, up 6%.15 No 2026 report had been released by the end of October 2026.
Large-loan grades have stayed near 9% non-pass since 2023, well below the 2009 peak
Special mention and classified commitments as a share of all SNC commitments, by review year
0%10%20%30%8.6%
200820112014201720202023
Source11 · Our arithmetic from the program's committed balances (Appendix B). The threshold rose from $20 million to $100 million on January 1, 2018.
In 2024 the agencies described "a modest increase in the severity of risk due to a migration of commitments from special mention to a classified rating".14 From 2025 the program document keeps the tables and drops the commentary.11
Banks hold 45% of large shared loans but only about a fifth of the problem grades
Special mention plus classified as a share of each holder's SNC commitments, 2025 review
US banks$129.7B of $3,081.0B4.2%
Foreign banking organizations$103.3B of $2,344.7B4.4%
Consumer services and technology carry the highest share of problem grades
Special mention plus classified, percent of each industry's SNC commitments, 2025 review, selected industries
Consumer services26.3%
Technology, telecom and media18.7%
Commercial services14.7%
Materials and commodities14.3%
Real estate and construction8.1%
Transportation services7.8%
Oil, gas and pipeline1%
Source11 · Our sums of the program's special mention and classified percentages.
Show the numbers
Industry
Non-pass share
Consumer services
26.3%
Technology, telecom and media
18.7%
Commercial services
14.7%
Materials and commodities
14.3%
Real estate and construction
8.1%
Transportation services
7.8%
Oil, gas and pipeline
1%
How supervisors argue about a grade
An SNC appeal from the third quarter of 2024 shows the reasoning a validation team should expect. The bank that runs the loan for the lending group appealed a substandard rating on a revolving credit, arguing for special mention because the industry downturn and an operational problem were temporary and results had recovered from the low point. An interagency panel upheld substandard: operating cash flow did not cover fixed charges, free cash flow was negative, leverage was high, and "the company had not achieved satisfactory and sustained performance to warrant an upgrade".17
It is the OCC booklet's rule in practice: only sustained numbers lift a grade, however good the plan or the recovery story.1
10 · What goes wrong
Relationship grades, stale statements and parked watch loans: the ten errors behind drifting risk ratings
In shortGrades go wrong in four places: in the people who set them, in the inputs they read, in the scale itself and in the checks around it. Most of the errors lean the same way, toward a better grade, and most look reasonable one loan at a time. They show up as patterns: by lender, by region, by industry, and as double downgrades.
Time in grade for special mention; a plan per loan
In the checks
9
A sample that never lands on the drifting cell
Loan review samples a share of the book each quarter
Every loan compared each quarter; samples aimed where pairs disagree
10
Upgrades on a plan or a recovery story
"The mere existence of a plan for improvement, by itself, does not warrant an upgrade"1,17
Upgrade-to-downgrade ratio by region; sustained performance before an upgrade
Relationship grades and missing reason codes are the errors to test for first
How far it moves the grade →
Hunt for it
Test for it first
Sample it
Report on it
Relationship gradeNo reason codeUnscored riskPlan-based upgradeStale statementParked in watch
How often it happens →
Our reading of the sources1,4 · Positions are our judgment from the OCC booklet, the Federal Reserve study and the example; no public data ranks rating errors by frequency.
Show the numbers
Item
How often it happens (0–1)
How far it moves the grade (0–1)
Relationship grade
0.72
0.74
No reason code
0.80
0.56
Unscored risk
0.15
0.62
Plan-based upgrade
0.12
0.45
Stale statement
0.70
0.30
Parked in watch
0.25
0.15
The common thread. The OCC's examiners judge the "nature and pattern of rating inaccuracies", including "inaccuracies in a specific portfolio or location" and "how many grades away the rating is from what it should be".1 Validation that reports only a bank-wide accuracy rate throws away the two things examiners look at.
11 · Grades that moved too late
From Barnes Banking to First NBC: what failed-bank reviews found when weak loan grading let problem loans pile up
In shortWhen a bank failure costs the deposit insurance fund enough, the agency's inspector general writes a material loss review. The ones that deal with commercial credit tell a consistent story about grades: weak or unreliable grading, loan review that missed problem credits, examiners repeating the same criticism, and problem loans that appear all at once when examiners finally re-grade them. The 2024 and 2025 failures reviewed so far add a harder lesson: grades can be falsified.
In the failed-bank reviews, weak grading let problem loans pile up until examiners re-graded them
March 12, 2010Community First Bank, Oregon
The September 2008 exam cited the risk grading process as "unreliable" and cut the bank's supervisory (CAMELS) rating two steps, to 5. Estimated loss $44.4 million.
September 1, 2010Barnes Banking Company, Utah
Loan grading criticized from 2004; a 2008 target exam found significant weaknesses and classified assets jumped. Estimated loss $266.3 million.
December 8, 2010Midwest Bank and Trust, Illinois
At one exam substandard loans nearly doubled, to $61.8 million, and examiners downgraded "a few of the loan ratings assigned by management". Estimated loss $200.7 million.
November 2017First NBC Bank, Louisiana
"Improper classification of problem loans" overstated the portfolio and underfunded the allowance. Estimated loss $996.9 million.
March 27, 2025First National Bank of Lindsay, Oklahoma
Employees altered records to hide loan weaknesses from examiners. Estimated loss $42.3 million.
March 11, 2026Santa Anna National Bank, Texas
Fraud and weak controls; deficiencies "masked weaknesses in the Bank's loan portfolio". In-depth review due by December 2026.
Loan reviews were "overseen by the CEO"; examiners noted loan review weaknesses in four of six exams from 2010 to 2016; the external loan review was not "identifying problem credits in a timely manner". The result: the bank "overstated the true condition of the loan portfolio and underfunded the ALLL".21
Barnes Banking, 2010
The same criticism, year after year
From 2004 examiners recommended improving "loan grading, loan review, appraisal review, and problem loan processes". A June 2008 exam "cited significant weaknesses in the bank's internal loan grading process", downgraded several loans, and the classified assets ratio rose about 167%.19
Midwest Bank and Trust, 2010
Problem loans that appeared all at once
At one exam, substandard loans "nearly doubled from $33.3 million … to $61.8 million, and 'special mention' loans increased from $0 to $16 million", and "examiners downgraded a few of the loan ratings assigned by management".20
At Barnes, nonaccrual loans went from $1.6 million to $90 million between two exams a year apart
Nonaccrual loans at Barnes Banking Company, as reported in the inspector general's review, $ millions
$1.6M2007 examination
$90MSeptember 2008 examination
Source19 · The later figure is from the September 2008 full-scope examination; examiners also required an $18.7 million provision to bring the allowance to a minimally acceptable level.
Show the numbers
Period
Value
2007 examination
$1.6M
September 2008 examination
$90M
The 2024 and 2025 failures. The Treasury inspector general's limited reviews of two small national banks found fraud at the center. At First National Bank of Lindsay, weak controls "allowed one or more Bank employees to alter Bank records and hide weaknesses in the Bank's loan portfolio from examiners"; the estimated loss was 54% of assets.22 At Santa Anna National Bank, deficiencies "masked weaknesses in the Bank's loan portfolio".23 The inspector general judged that each failure warranted an in-depth review.
The lesson for validation: check grades against independent facts (statements, payment records, collateral), and treat a rating history that never moves with as much suspicion as one that moves all at once.
The reviews from 2010 judge supervisors as well as bankers, and several of their findings concern the agencies' CAMELS ratings of the bank as well as the bank's loan grades. Their point about loan grades is the one quoted here: weak internal grading let problem loans accumulate until examiners re-graded them.
12 · Automation and AI
Is a rating scorecard a model? AI in rating validation under the April 2026 guidance
Status as of October 2026
In shortSoftware can re-score every loan on the bank's own scorecard, find look-alike borrowers, read the memo behind each grade, build the migration and back-test reports and draft the calibration note. A statistical scorecard may be a model under the April 2026 guidance; arithmetic and fixed rules are not, and generative AI falls outside that guidance, under the bank's own controls. People keep the grade: no supervisory text lets software decide one.
The 2026 guidance defines a model as "a complex quantitative method, system, or approach that applies statistical, economic, or financial theories to process input data into quantitative estimates", and excludes "simple arithmetic calculations, such as those found within spreadsheets, as well as deterministic rule-based processes". Its footnote puts generative AI, and AI that acts on its own, outside the guidance as "novel and rapidly evolving", while a bank's own governance "should guide the determination of appropriate governance and controls".7
One sentence fits judgmental rating systems closely: "When a model's design relies substantially on expert judgment, quantitative outcomes analysis helps to evaluate the quality of that judgment."7 Back-testing and matched pairs are that outcomes analysis.
Most of a rating validation tool sits outside the model guidance, and inside other rules
Does each text cover this part of the work? The 2026 model guidance, the 2020 credit risk review guidance, and the bank's own credit and AI policy
NoPartlyYes
Model guidanceCredit risk reviewYour policyA statistical PD scorecardYesPartlyYesA weighted judgmental scorecardPartlyPartlyYesRe-scoring loans on the scorecardNoPartlyYesMatching look-alike borrowersPartlyPartlyYesReading memos with generative AINoNoYesDeciding a regradeNoYesYes
Our reading of the sources7,6,1 · Our reading for a bank's own use; your model risk team classifies each component. 'Partly' means the text applies depending on design.
Show the numbers
Model guidance
Credit risk review
Your policy
A statistical PD scorecard
Yes
Partly
Yes
A weighted judgmental scorecard
Partly
Partly
Yes
Re-scoring loans on the scorecard
No
Partly
Yes
Matching look-alike borrowers
Partly
Partly
Yes
Reading memos with generative AI
No
No
Yes
Deciding a regrade
No
Yes
Yes
What supervisors have said about technology in rating work
No technology prescribed. In the 2020 credit risk review guidance the agencies wrote that "institutions have significant flexibility to use various types of technology", and declined "to recommend the use of any specific types of technology".6
Models supplement judgment. The OCC's booklet: commercial scoring systems "should be carefully evaluated and periodically validated", and used "to supplement more traditional tools of credit risk management: credit analysis, risk selection at origination, and individual loan review".1
General AI frameworks apply too. NIST's framework organizes the work under GOVERN, MAP, MEASURE and MANAGE.24 The Treasury's 2024 report warns that generative AI "can be susceptible to 'AI hallucinations,' producing confidently stated but incorrect output".25 For memo reading, the defense is the same as for any reviewer: every finding quotes the passage it rests on, so a person can check it in seconds.
Who still sets the grade when software checks ratings
The grade itself, and every regrade. A regional credit officer, never the lender on the loan, should confirm a proposed change.
The scorecard's design and weights, and the decision that a scorecard change goes to model validation before use.
Judgments a scorecard cannot score: a verified guarantee, a contract with escalators, a customer about to leave.
The independent sample: software can point loan review's sample at the loans where pairs disagree, and the reviewer still sets an independent grade.6
13 · How teams validate ratings today
How banks validate risk ratings by hand today, and why re-spreading look-alike borrowers eats the most time
In shortLenders and credit officers set grades; a credit risk or portfolio team reports on them; loan review samples and re-grades; the chief credit officer owns the scale and answers to the board. Comparing like borrowers across regions means re-spreading and re-scoring them by hand, so it is done for a handful of loans a quarter. Most of the days go to gathering and re-scoring, leaving little for judging.
Five people who set, check and sign a grade
CL
Commercial lender
Proposes the grade at approval and renewal, writes or signs the memo, knows the owner.
Cares about: keeping the customer, and an approval inside the lender's own authority.
CO
Credit officer, regional or senior
Co-signs grades, often must agree to overrides, approves above the lender's limit.
Cares about: a grade that holds up line by line.
CR
Credit risk or portfolio analyst
Owns rating reports: migration, overrides, concentration, the quarterly calibration for committee.
Cares about: knowing which grades are wrong, as well as which moved.
LR
Head of loan review
Samples loans, re-grades them independently and reports disagreements to the board. In the Federal Reserve's study, loan review "usually" has "the final authority to set grades".4
Cares about: a sample that lands where the problems are.
CC
Chief credit officer
Owns the scale, definitions, override policy and the map to the regulatory classes; signs for committee and the board.
Cares about: hearing about a drifting region before the examiners do.
A quarterly calibration, hand-off by hand-off
A quarterly calibration passes through four people before committee sees it
1Pull the grades
Grades, changes, overrides and reason codes from the loan system.
Credit risk analystDays
2Re-spread look-alikes
Find comparable borrowers in other regions and put their statements on one basis.
Credit risk analystAbout a week
3Re-score and read memos
Apply the scorecard; read the memo behind each flagged grade.
Credit risk analystDays
4Ask the lenders
Request support for grades that look wrong.
Analyst and lenderDays to weeks
5Confirm regrades
A credit officer outside the lending line agrees or changes each proposal.
Regional credit officerHours
6Sign for committee
The calibration note, regrades and policy changes.
Chief credit officerBy the committee date
Illustrative · replace with your own numbers · Times are illustrative for one drifting region; your calendar will differ.
Show the numbers
Step
What happens
Who
Time
Pull the grades
Grades, changes, overrides and reason codes from the loan system.
Credit risk analyst
Days
Re-spread look-alikes
Find comparable borrowers in other regions and put their statements on one basis.
Credit risk analyst
About a week
Re-score and read memos
Apply the scorecard; read the memo behind each flagged grade.
Credit risk analyst
Days
Ask the lenders
Request support for grades that look wrong.
Analyst and lender
Days to weeks
Confirm regrades
A credit officer outside the lending line agrees or changes each proposal.
Regional credit officer
Hours
Sign for committee
The calibration note, regrades and policy changes.
Chief credit officer
By the committee date
Where the days of a hand-built calibration go
Re-spreading look-alike borrowers takes the largest share of a hand-built calibration
Working days for one quarterly calibration of a single drifting region, by hand
Pulling grades and overridesRe-spreading look-alikesRe-scoringReading memosWriting and signing the note
By hand, about 20 days36344
Illustrative · replace with your own numbers · An estimate from the example's own calibration plan, still to be measured. No public source measures time per calibration; time your next one.
Show the numbers
Pulling grades and overrides
Re-spreading look-alikes
Re-scoring
Reading memos
Writing and signing the note
By hand, about 20 days
3
6
3
4
4
Twenty working days for one region explains why most banks compare like borrowers for a few loans a quarter and rely on loan review's sample for the rest. In the example bank, loan review sampled 401 of 2,305 rated loans in the third quarter, about 17%. A region and an industry can drift for a year before a sample lands on them.
Spreadsheets, external loan review or rating software
In house
A credit risk team and spreadsheets
Rating history exported each quarter; migration, override and back-test reports built in workbooks. Cheap to start; matched-pair comparison stays manual and small.
Outsourced
External loan review
A firm samples and re-grades loans on a cycle. Independent by design, but still a sample, and its findings arrive after the quarter.
Software
Scorecards and rating analytics
Scorecard tools standardize how a grade is calculated; analytics tools report migration and overrides. Tools differ most on whether they compare the grades actually given, borrower by borrower, and read the reasons behind them.
Part B · See it working
Botminds Risk Rating Validation compares every graded loan with its look-alikes, overnight
Part A described the work without naming a product. This part shows how Botminds does it, at a fictional regional bank with 2,305 rated commercial loans on a 1-to-10 scale. Every bank, borrower, person, number and memo in the screens is sample data.
14 · One region, start to finish
Graded 4 in Denver, 7 in Omaha: how the Brinmoor and Coulter pair became a calibration note signed for committee
In shortThis is the example from the top of the page, inside the product. Overnight, six agents re-score every rated loan on the bank's own scorecard, pair each borrower with look-alikes graded by other lenders and read the memo behind each grade. On Monday Rachel Okafor, senior credit risk officer, sees the pair, then the pattern, takes the evidence to the regional credit officer and the chief credit officer, and has a signed note for Senior Credit Committee a week ahead of the meeting.
1
Same numbers, different grades
Monday morning, the home screen plots the bank's 195 rated freight trucking borrowers by debt service coverage (up) and senior debt to EBITDA (right), colored by the grade each was given, over shaded bands for the grade the bank's scorecard gives at each point. Two dots sit almost on top of each other and are circled: Brinmoor Freight Lines, graded 4 in Denver, and Coulter Haulage, graded 7 in Omaha.
The panel beside them says why the pair matters: coverage within 0.03x, leverage within 0.1x, both scored 6 by the scorecard. Brinmoor's 4 is an override with no reason code; Coulter's 7 is a documented covenant downgrade. The rail below lists 22 look-alike pairs graded two or more notches apart.
Look-alike borrowers graded apart. Every trucking borrower by coverage and leverage, colored by the grade given, over the scorecard's grade bands, with the circled pair and the pairs list.
2
Against the scorecard, one region lights up
Rachel switches the colors to notches off the scorecard and picks the Mountain region. Fourteen loans, $146.8 million, are graded two or more notches better than the bank's own scorecard. Eleven of them belong to one lender, Brett Kalani. None of the region's 38 trucking loans is graded stricter than the scorecard.
The pattern answers the first question a credit officer asks about any single pair: is this bad luck, or a habit?
Notches off the scorecard, Mountain region. Dark orange dots are graded two or more notches better than the scorecard; the totals under the chart count them by lender.
3
Brinmoor beside its three peers
She opens the pair side by side. Brinmoor (loan C-25-04417, $18.5 million: a $12.0 million term loan and a $6.5 million revolver) sits beside its three matched peers: Coulter in Omaha, Thorne Freight Systems in Milwaukee and Brazos Line Carriers in Waco. Revenue, coverage and leverage all fall within the matching tolerances, each marked with a check.
Assigned 4, affirmed March 14, 2026 by the lender alone. Scorecard 6. Peers 7, 6 and 5, each set by a lender and a credit officer. Peer median 6.
Brinmoor and its peers. The assigned grade, the scorecard grade and the peer grades across the top; every ratio below, with the ones used for matching checked.
4
The scorecard and the two memos
Lower on the same screen, the scorecard shows Brinmoor factor by factor: coverage 1.14x against the grade 4 guide of 1.25x, leverage 3.8x against 3.0x, earnings down 18%, a guarantor statement from June 2024. Weighted 5.6, grade 6. Then the lender's override: −2 notches, reason code none.
Beside it, the memos. Brinmoor's annual review affirms grade 4 on "a long-standing relationship since 2014" and a sponsor with "substantial outside liquidity", and scores 34 of 100. Coulter's covenant review explains its one-notch stricter grade with the covenant test, the ratios and an upgrade path, and scores 82. Each highlighted passage opens the memo at its page.
Scorecard and memos. The weighted score behind grade 6, the override that made it 4, and the memo passages that do and do not support each grade.
5
Confirmed, then signed for committee
The calibration drafter writes the finding and its cause, every line cited, and proposes a grade for each of the 14 loans: 12 regrades, 3 of them into special mention ($31.4 million), and 2 kept, Cache Valley Freight and Snake River Carriers, whose memos show a verified guarantee and a contract. Rachel sends it for sign-off.
Kevin Brandt, the Mountain regional credit officer, confirms the regrades; the lender on a loan can never confirm a regrade of it. Daniel Whitford, chief credit officer, signs the note for Senior Credit Committee on Tuesday, October 20, 2026. Nothing changes in the loan system until committee approves.
Signed for committee. Finding and cause, the proposed grade for each loan, the effect if approved and the three sign-offs. The finding's phrase "at which examiners widen their sample" is the product's shorthand: the OCC booklet says examiners investigate the root cause and decide whether to expand the sample.1
In the example the solution compares all 2,305 rated loans with their look-alikes every night, against a loan review sample of 401 loans, 17% of the book, so drift can surface within the quarter it starts, ahead of the next exam. Measure both on your own book.
15 · Every screen
The drift map, loan review disagreement, memo scores and lender comparisons on the remaining screens
In shortOne pair is the story. These screens show the rest: the map of industries by regions that points to the drifting cell, the overnight comparison step by step, loan review disagreement against the examiners' lines, migration and the default back-test, memo scores, each lender's grades against their peers, the policy changes in the note, and the settings that hold the bank's own rules.
The drift map. 2,305 loans in 45 cells, each colored by how far its grades lean from matched borrowers elsewhere. Four cells lean more than half a notch; freight trucking in the Mountain region leans furthest, 1.2 notches better.
The comparison, step by step. Six agents on 38 loans in 1 minute 34 seconds: 61 grade changes read, 6 stale guarantor statements, 142 peers found, memos with a median score of 57. The matrix shows 14 loans two notches better than their peers.
Loan review disagreement by region. Mountain: 5 of 82 sampled grades changed, 6.1% of loans and 4.5% of dollars; the bank: 3.7% and 2.4%. The header's "examiners widen their sample" is the product's shorthand; the OCC's wording is that examiners investigate the root cause and decide whether to expand the sample.1
Upgrades, downgrades and the back-test. Mountain upgraded 1.8 loans for every downgrade while the bank ran at 0.9, and had 9 of the bank's 23 double downgrades. Its grade 4 loans defaulted at 1.9% over three years against 0.8% expected.
Memo scores. 1,146 approvals, renewals and annual reviews scored on whether they support the grade they give, on the bank's five tests. Mountain's median is 51, against 71 in the Plains region.
Lenders. Each lender's grades against borrowers graded by others, across all his rated loans (Brett Kalani: 1.1 notches better on 64 loans; 1.6 on his 17 Mountain trucking loans), with overrides, missing reasons and memo medians.
Policy changes. The note fixes the cause as well as the grades: co-signed overrides, required reason codes, a scorecard change that goes to model validation before use, and retraining.
Who decides. The approved scorecard version, the override rules, the regional credit officer who confirms regrades, the chief credit officer who signs, and a nightly run.
Your matching rules. What counts as a look-alike, when a cell or a single loan is flagged, the smallest cohort worth flagging, the memo minimum and the examiner lines watched by region. Changes are versioned and on the audit trail.
Select any screen to open it larger. The bank, borrowers, people and figures are fictional.
16 · Agents, and who signs
Who may change a risk grade: a regional credit officer confirms, the chief credit officer signs, six agents prepare the evidence
In shortEach agent has one job and limits it does not cross. None of them changes a grade, a scorecard weight or the allowance, and none sends a note unsigned. A regional credit officer, never the lender on the loan, confirms each regrade; the chief credit officer signs the note for committee. Every finding cites the rating history, the spread, the scorecard line or the memo passage it rests on.
Six agents that gather rating history, spreads and look-alikes
Rating history reader
Reads every grade and grade change from the loan system: who set it, when, the scorecard grade at the time, the override and its reason code. Flags overrides without a code and grades set by the lender alone.
Never writes to the loan system or changes a grade.
Financial spreader
Puts each borrower's latest statements on one basis: coverage, senior debt to EBITDA, fixed charge coverage, current ratio, liabilities to tangible net worth, earnings trend, and the date of the guarantor's statement.
Never estimates a missing number; it marks what is missing and flags statements older than 15 months.
Scorecard re-scorer
Applies the bank's approved scorecard factor by factor with its weights and grade guides, and reports the weighted score, the scorecard grade and the gap to the grade given.
Never changes a weight or a grade guide, and uses only the approved version.
Peer matcher
Finds three to five look-alike borrowers for each loan, graded by a different lender: same three-digit industry, revenue within 25%, coverage within 0.10x, leverage within 0.5x. Reports their grades and median.
Never matches across industries or size bands, or uses the same lender's loans as peers; says when fewer than three peers exist.
Memo justification reader
Reads the approval memo or annual review that set or affirmed the grade and scores it on the bank's five tests: ratios cited, each weakness addressed, override explained, current statements used, what would move the grade.
Never judges the credit itself; it quotes the passage behind every finding.
Calibration drafter
Writes the finding and its cause, a proposed grade for each flagged loan, the policy changes and the estimated effect, and routes the note to the regional credit officer, then the chief credit officer.
Never regrades a loan or sends a note unsigned, and keeps a grade where the memo justifies it.
PreparesSenior credit risk officerReviews the pairs and the cells, asks lenders to support grades, keeps or drops each proposal, and sends the note.
Confirms each regradeRegional credit officerKeeps or changes any proposed grade. The lender on the loan can never confirm its regrade; lenders see their loans read only.
Signs for committeeChief credit officerSigns the note with its regrades and policy changes. Nothing moves in the loan system until committee approves.
Scorecard and threshold changes are versioned. Agent steps and human decisions are kept apart on the activity trail with who, what and when. A memo that scores below the bank's minimum goes back to the lender with the tests it missed.
Owns rating reports for 2,305 rated loans; prepares the quarterly calibration.
"I can tell you which grades moved. I can't tell you which grades are wrong."
KB
Kevin Brandt · regional credit officer, Mountain
Confirms regrades; co-signs credits above the lenders' authority.
"Show me the twin borrower and I'll fix the grade."
DW
Daniel Whitford · chief credit officer
Chairs Senior Credit Committee; owns the rating system.
"I'd rather find it in October than read it in the exam report."
TI
Tomás Ibarra · head of loan review
Samples 401 loans a quarter; reports grade disagreements to the audit committee.
"Our sample found it. Our sample is 17% of the book."
BK
Brett Kalani · commercial lender, Mountain
Seventeen trucking relationships; sets grades alone on loans under $20 million.
"I know these owners. The numbers lag the business."
17 · What goes in and out
What rating validation software reads from your loan system and memos, and the drift map and calibration note it leaves behind
In shortIt reads what the bank already keeps, the grades and their history, the spreads, the approved scorecard and the memos, and leaves behind a comparison of every rated loan with its look-alikes, a drift map by lender, region and industry, scored memos and a calibration note with its regrades confirmed and signed. The loan system stays the system of record.
From your systems
Risk rating history per loan, with overrides and reason codes
Borrower and guarantor financial spreads
Approval memos, renewals, annual and covenant reviews
Loan review and exam grade changes
Your credit policy
Your rating scale and its map to the regulatory classes
Your approved scorecard, weights and grade guides
Match tolerances and flag thresholds
Who may override, and who confirms a regrade
Agents re-score, match and readEvery rated loan, every night, on your scorecard and your rules
People confirm every regrade
Every finding cites its source
Outputs
A drift map by lender, region and industry
Look-alike pairs graded apart, with reasons
A score for each memo against your tests
Loan review disagreement against the 5% and 3% lines, migration and back-tests by region
A calibration note with proposed grades, policy changes and the estimated allowance effect
What changes for the team
Every loan compared each night, so samples go where pairs disagree
Evidence for each regrade ready for the credit officer
A calibration in about 4.5 analyst days instead of 20, the example's own estimate, to be measured
Loan system, spreading tool, scorecard and loan review tracking
Allowance modelGrades by pool, for the committee's estimate
Identity and accessWho confirms, who signs, read-only lenders
Committee portalThe signed note and its evidence
For each, check whether it has an API, a file feed, or only screens, and who owns it.
Your rating scale, scorecard and loan review stay as they are
Your rating scale
Kept as it is, with your map to pass, special mention, substandard, doubtful and loss.
Your scorecard
Applied as approved, factor by factor; a new version goes through your model validation before use.
Your loan system
Stays the system of record. Regrades move only after committee approves, through your normal process.
Your loan review
Keeps its independence and its sample, and can aim the sample where look-alikes disagree.
Your allowance committee
Gets the estimated effect of proposed regrades to measure in its own model.
Your lenders
See their own loans read only, get a specific request when a grade needs support, and keep the right to explain.
Like with like, cited evidence, people grade
1
Like with like
Same industry, size, coverage and leverage, graded by a different lender.
2
Every finding cites its source
The rating history, the spread, the scorecard line, the memo passage, one click away.
3
Agents propose; people grade
A regional credit officer confirms each regrade, the chief credit officer signs, and committee decides.
Part C · Are you ready to automate?
Deciding whether to automate risk rating validation: the cost of flattering grades, the return, your readiness and a pilot
You own the rating system, or report on it, or answer to the board and the examiners for it. This part is written for you: what wrong grades cost, what automating the checks could return, whether your team is ready, and what to ask any vendor of rating validation software, including us.
18 · What wrong grades cost
What a flattering risk grade costs you: an understated allowance, an exam finding on the rating system, and double downgrades later
In shortThe direct cost is analyst days spent comparing a handful of loans by hand. The bigger costs are harder to count: an allowance too small for the loans you hold, a rating system that becomes an exam finding, and problem loans that arrive all at once as double downgrades. No public study prices any of these, so the numbers that matter are yours.
5% / 3%
of loans or of dollars graded wrong in the examiners' sample: above either line they look for the root cause and decide whether to widen the sample.1
OCC, Rating Credit Risk
1.20%
of C&I loans at banks with $1 billion to $10 billion of assets were noncurrent at June 30, 2026, against 0.96% across all insured institutions.26
FDIC Quarterly Banking Profile, Q2 2026
$2.96T
of commercial and industrial loans at US commercial banks in September 2026, every one of them carrying a grade.27
Federal Reserve H.8 via FRED
Smaller banks carry more noncurrent business loans, where each grade weighs more
C&I loans 90 days or more past due or on nonaccrual, percent of C&I loans, by bank asset size, June 30, 2026
Most of a hand-built calibration is gathering and re-scoring, which software can take
Working days for one quarterly calibration of a single drifting region, by hand and with automation
By handWith automation
Pulling grades, overrides and reason codes30.5
Re-spreading look-alike borrowers60.5
Re-scoring on the scorecard30.5
Reading the memos behind each grade41
Writing the note for committee31
Regional confirmation and sign-off11
Illustrative · replace with your own numbers · The example's own estimate, still to be measured. Sign-off takes the same day either way: it is the people's part.
Show the numbers
By hand
With automation
Pulling grades, overrides and reason codes
3
0.5
Re-spreading look-alike borrowers
6
0.5
Re-scoring on the scorecard
3
0.5
Reading the memos behind each grade
4
1
Writing the note for committee
3
1
Regional confirmation and sign-off
1
1
What nobody publishes. There is no public figure for how often lenders inside a bank grade like borrowers apart, how long a calibration takes, how much allowance a drifting region understates, or how often a rating system becomes an exam finding. Vendor figures come without a dataset. Measure your own.
Calibration days and unsampled loans, from your own records
Cost
Where it hides
How to find your number in a week
Analyst days
Pulling rating history, re-spreading look-alikes, re-scoring by hand
Time last quarter's calibration step by step, from the analyst's calendar
Grades nobody compared
The loans loan review did not sample this quarter
Rated loans minus loans sampled, by region
Disagreement by region
A bank-wide rate under 5% that hides a region above it
Loan review changes ÷ loans sampled, by region, in count and dollars
Late recognition
Double downgrades and upgrades in a falling market
Double downgrades and the upgrade-to-downgrade ratio for twelve months, by region and lender
Undocumented overrides
An optional reason code field
Overrides of the scorecard without a code, by lender
Allowance gap
Pass loans that belong in special mention
Ask your allowance team to re-run ten loans one grade worse
Rating-system findings, mispriced loans and a misled board
The exam finding on the rating systemOnce examiners decide inaccuracies distort the picture of portfolio risk, every report built on grades is in question.
The loan that should have been special mentionA year of reviews at the pass-grade frequency, with no plan and no attention.
Prices set on the wrong gradeRisk-based pricing on a flattering grade earns too little for the risk carried.
The board's pictureCriticized and classified totals that understate the book, quarter after quarter.
The lender who learns the habit is fineOverrides without reasons spread when nobody reports them.
19 · Your return
Comparing every rated loan each quarter: the analyst days and sample coverage automated calibration could return
In shortPut in your own numbers. The time saved on calibrations rarely pays for a tool on its own; the case usually rests on what the time buys: every loan compared every quarter beyond loan review's sample, drift found within the quarter, and evidence ready when examiners ask. The calculator values the time and shows how many grades a sample never reaches.
Six places automated rating checks pay back
Analyst time
Comparisons already built
Pairs, scorecard gaps and memo scores arrive each morning; analysts spend their time on judgment.
calibrations × days saved × 8 × loaded hourly cost
Coverage
Every loan, every quarter
Loan review's sample keeps its independence and goes where pairs disagree.
rated loans − loans sampled each quarter
Timing
Drift found in the quarter
A region leaning a notch is seen before a sample or an exam lands on it.
months from first drift to regrade, before and after
Allowance
Reserves on the right grade
Regrades move loans into the pools and classes the allowance model expects.
allowance on regraded loans, measured by your committee
Exams
Evidence by lender and location
The reports the OCC lists, from double downgrades to rating changes by loan officer, ready to hand.
hours spent assembling rating evidence for exams and loan review
Behavior
Reasons on every override
Lenders know each override is compared and read.
share of overrides without a reason code, before and after
Value the analyst days a calibration takes, with your numbers
The hourly cost is built from published figures: the credit analyst median wage, $83,510, divided by 2,080 hours and by the 70% wage share of employer costs.28,29 Every input marked illustrative is an assumption.
Your bookYour calibrationsYour cost
Illustrative yearly value
Calibration time today, valued$0
Analyst time released, valued$0
After your yearly cost$0
Analyst hours released a year0
Rated loans a quarter's sample never reaches0
Calibrations a year to cover your cost0
Formulas, per year: Calibration time today = calibrations × days by hand × 8 × hourly cost Time released = calibrations × (days by hand − days with automation) × 8 × hourly cost After your cost = time released − yearly cost Loans a sample never reaches = rated loans − loans sampled each quarter Break-even = yearly cost ÷ (days saved × 8 × hourly cost)
The defaults describe the example bank: four drifting cells a quarter, about 20 days each by hand and 4.5 with automation (its own estimate, still to be measured), and loan review's 401 of 2,305 loans. Not counted: the allowance on regraded loans, exam findings avoided, faster regrades and loan review hours re-aimed. Released hours are value only when you decide what they are for.
The days saved per calibration decide how many calibrations cover the cost
Calibrations a year to cover $100,000 of yearly cost, at $57 an analyst hour
Saves 15.5 days a calibration14.1 calibrations
Saves 10 days a calibration21.9 calibrations
Saves 5 days a calibration43.9 calibrations
Illustrative · replace with your own numbers
Show the numbers
Days saved
Calibrations a year
Saves 15.5 days a calibration
14.1 calibrations
Saves 10 days a calibration
21.9 calibrations
Saves 5 days a calibration
43.9 calibrations
A bank that calibrates one or two segments a year by hand will not cover a tool's cost with time alone, and should buy only if it wants to compare every loan every quarter. A bank that already calibrates every region each quarter is closer to the first line.
Start here20 · Readiness check
Score your rating system's readiness: scale and map, scorecard, overrides, rating history and sign-off
In shortPick the answer closest to your team today. Eight questions score 0 to 2; the last is for reflection. The meter adds up your score as you go, and each question says why it matters and what a strong answer sounds like.
1
Scale and map
Is your rating scale written down, with each pass grade defined and a documented map to special mention, substandard, doubtful and loss?
Why it mattersThe 2020 interagency guidance asks for that map, and software can only compare grades against definitions that exist.6
A strong answer"Ten grades, each with a written description and guide ratios; 7 to 10 map to the agencies' classes, approved by the board."
2
Scorecard
Do you have an approved, versioned scorecard that every lender uses, and has model risk said whether it is a model?
Why it mattersRe-scoring needs one approved version, and the April 2026 guidance makes classification a real question for a statistical scorecard.7
A strong answer"Version 4.2, approved in January; model risk reviewed it as a judgmental tool with outcomes testing."
3
Overrides
Does your policy say who may override the scorecard and by how much, and is a reason code required in the loan system?
Why it mattersUnexplained overrides are the first thing a comparison finds; without a policy there is nothing to measure them against.
A strong answer"One notch with a credit officer, two with the regional credit officer, a required code from a fixed list."
4
Rating history
Can you export every grade and grade change, with who set it, when, and the scorecard grade at the time?
Why it mattersMigration, seasoning, double downgrades and back-tests all start from history; the OCC lists them as rating MIS.1
A strong answer"Five years of history in the loan system with an API, including the rater and the override."
5
Spreads and memos
Are borrower spreads kept on one template, and are approval memos and annual reviews stored where software can read them?
Why it mattersLook-alikes are found on ratios, and the reason for a grade lives in the memo.
A strong answer"One spreading template; memos in the document system, linked to the loan number."
6
Your baseline
Do you know loan review disagreement by region in count and dollars, double downgrades and the upgrade-to-downgrade ratio for the last year?
Why it mattersNo public benchmark exists, so your own baseline is the only way to show improvement; examiners read the same figures by location.1
A strong answer"3.7% of loans and 2.4% of dollars bank-wide, one region above 5%, 23 double downgrades."
7
Owner and sign-off
Is there a named owner of the rating system with a budget, and a written rule for who confirms a regrade?
Why it mattersCalibration crosses lenders, credit officers, loan review and model risk; regrades need someone outside the lending line.
A strong answer"The chief credit officer sponsors it; regional credit officers confirm regrades, never the lender."
8
Governance
Do you have a path to approve AI in credit work: vendor due diligence, a view on the April 2026 model guidance, human sign-off and an audit trail?
Why it mattersThe 2026 guidance leaves generative AI to your own framework, and the grade must stay a person's decision.7
A strong answer"Model risk and vendor management have a path for AI tools; every regrade needs a named credit officer."
9
Vision · for reflection
If examiners asked tomorrow for rating changes by loan officer and location, and for the ten largest pass loans whose look-alikes are graded worse, what would you hand them?
Why it mattersYour answer lists the gaps between the grades you report and the evidence behind them.
A strong answerA short list: "the drift map, the pairs with both memos, and the regrades committee already approved."
What your score says about starting rating validation
0–6
Explore
Write down the scale, the map to the five classes and the override rule, make the reason code required, and measure loan review disagreement by region. Then compare one industry by hand to see what you find.
7–11
Ready to pilot
Run a measured pilot on one industry across every region: compare every loan with its look-alikes, score the memos, and check the findings against loan review's own grades and your credit officers' judgment.
12–16
Ready to implement
Plan every rated loan, every night: your scorecard and rules as settings, who confirms and who signs, links to the loan system and spreads, and the evidence examiners will ask for.
21 · Questions for any vendor
What to ask a rating validation vendor about look-alike matching, your scorecard, memo evidence and who changes a grade
In shortAsk every vendor the same questions, us included. The answers show whether the tool compares the grades you actually gave or only calculates new ones, whose scorecard and rules it uses, what evidence you keep, who decides, and how you would measure it on your own book.
Ask
A good answer
A warning sign
What it compares
Does it compare the grades we gave, borrower by borrower, or calculate a grade of its own?
It compares your grades with your scorecard and with look-alikes graded by your other lenders
"Our model gives a better grade"
How does it decide two borrowers are alike?
Industry, size, coverage and leverage within tolerances you set; never the same lender
A similarity score nobody can explain
Can it show drift by lender, region and industry at once?
A map you can open to the loans and the pairs
Bank-wide averages only
Your scorecard and scale
Does it use our approved scorecard as it is, version by version?
Yes; a new version only after your approval and model validation
Its own scorecard, "calibrated to industry data"
Does it handle a dual scale and our map to the regulatory classes?
Borrower and facility grades kept apart; your map applied as written
One grade per loan
Can it produce migration, double downgrades and back-tests by region and lender?
The OCC's MIS list, from your history, by count and dollars
A bank-wide migration matrix once a year
Memos and evidence
How does it judge whether a memo supports a grade?
Against tests you set, quoting the passage for each finding
A sentiment score
Can every finding be opened at its source?
The rating history entry, the spread, the scorecard line, the memo page
A confidence percentage in place of a source
What does it do when a statement is stale or missing?
Marks it and says what is missing; never estimates
Fills the gap from last year
Who decides
Can it change a grade in our loan system?
No; it proposes, a credit officer confirms, committee approves
"Auto-correct" for grades
Can a lender confirm a regrade on a loan they manage?
No, by rule
Any user can approve
Who can change tolerances and thresholds, and is it versioned?
Named roles; versioned; on the audit trail
Settings any user can change
Your data and AI
Which AI models read the memos, where do they run, and does our data train them?
Named models, a region you choose, no training on your data, in writing
"Proprietary AI", no more detail
How should we classify each part under the April 2026 model guidance?
A component-by-component answer for your model risk team
"None of it is a model"
Proof
Can we test it on our own grades and memos before we sign?
Yes, on one industry across all regions
Demo data only
How will we know its findings are right?
Compared with loan review's own re-grades and credit officers' decisions
"Trust the score"
What will you report from the test?
Pairs flagged, share confirmed by credit officers, false alarms, analyst days
One accuracy percentage
We found no published independent test of any rating validation vendor, as of October 2026. A pilot on one industry, checked against your own loan review, is the fairest comparison, and the same test measures your current process.
22 · How to start
Test rating validation on one industry across every region, and judge it against loan review's own re-grades
In shortPick one industry with enough loans in every region, measure your current process, compare every loan with its look-alikes, check the findings against loan review and your credit officers, and decide with four numbers. None of these steps commits you to a vendor.
Pick one industry with at least 30 loans in most regions, and write down the scale, the map and the override rule as they stand.
Measure your baseline: loan review disagreement by region, overrides without a code, double downgrades and the days your last calibration took.
Compare every loan in the industry with its look-alikes on your scorecard, and score the memos behind the grades.
Check the findings against loan review's own re-grades and against your regional credit officers' decisions on each flagged pair.
Decide with four numbers: pairs flagged, share confirmed by credit officers, false alarms, and analyst days per calibration.
A ten-week pilot ends with a decision on four numbers
Your teamVendor
Pick the industry; write down scale, map and rules
Measure the baseline
Load history, spreads, scorecard and memos
Compare every loan; score memos
Credit officers review flagged pairs
Check against loan review's re-grades
Decide
Week 0246810
Illustrative · replace with your own numbers
Show the numbers
Activity
From
To
Pick the industry; write down scale, map and rules
0
1
Measure the baseline
0
2
Load history, spreads, scorecard and memos
1
4
Compare every loan; score memos
3
5
Credit officers review flagged pairs
5
8
Check against loan review's re-grades
6
9
Decide
9
10
What to measure in a rating validation pilot, and how
Measure
How
Why
Pairs flagged
Look-alike pairs two or more notches apart, by region and lender
The size of the drift
Confirmed by credit officers
Proposed regrades a regional credit officer agrees with ÷ proposals
The tool's usefulness, judged by your people
False alarms
Flags where the memo showed a good reason, in reviewer minutes
A tool that flags everything finds everything
Agreement with loan review
Loans loan review re-graded that the comparison also flagged
Independent confirmation
Analyst days
From pulling the data to a signed note
The cost case rests on it
The full working-session questions: 21 questions in seven groups
Bring the chief credit officer, credit risk, regional credit officers, loan review, model risk, the allowance team and IT into one room. Each question says why it matters, what a strong answer looks like, and the warning sign.
A
Scale and map
A1
What does each pass grade mean, in words and guide ratios?
Why it mattersThe regulators do not define pass grades; you must.1
Strong answer · warning sign
A page per grade.
"Everyone knows a 4."
A2
Where is our map to the five classes written down?
Has our model risk policy moved from SR 11-7 to SR 26-2?
Why it mattersThe old letter was replaced on April 17, 2026.7
Strong answer · warning sign
Updated, with a view on AI tools.
Still cites SR 11-7.
F2
Is the scorecard a model, and how is it validated?
Why it mattersExpert-judgment designs need outcomes analysis.7
Strong answer · warning sign
A documented classification.
Never asked.
F3
What does vendor management need before a pilot sees real grades and memos?
Why it mattersSets the pilot's start date.
Strong answer · warning sign
A known path and timeline.
First time anyone has asked.
G
Nightly look-alike checks and visible override reasons
G1
What if every grade were compared with its look-alikes every night?
Why it mattersTests the appetite for continuous checking.
Strong answer · warning sign
"Loan review would sample where pairs disagree."
"Nobody would read it."
G2
What if every override showed its reason to the next reader?
Why it mattersLinks grading to accountability.
Strong answer · warning sign
Fewer, better overrides.
Lenders would stop overriding and stop explaining.
G3
Which decisions would we never let software make?
Why it mattersTells you where the signatures belong.
Strong answer · warning sign
Every grade, every regrade, every policy change.
"It can fix the obvious ones."
23 · Frequently asked questions
Dual risk ratings, the 5% and 3% lines, back-testing and SR 26-2: what credit teams ask about rating validation
In shortThe questions credit teams and buyers search for most, each answered on its own.
What is risk rating validation?
Risk rating validation is checking that a bank's loan grades are accurate, consistent and timely. It compares each grade with the bank's own definitions and scorecard, compares like borrowers graded by different lenders, tracks how grades move, and back-tests whether worse grades default more often. The OCC expects the rating process to be independently validated, in addition to examinations.
What is a dual risk rating system?
A dual risk rating system gives each borrower one grade for its probability of default and each loan a second grade for the loss the bank would take if the borrower defaulted, considering collateral and structure. It keeps the two judgments apart, so a strong collateral position does not flatter the borrower grade. The OCC accepts a single or dual system as long as both questions are answered.
What are the regulatory risk rating definitions?
The federal banking agencies define four problem grades. Special mention has potential weaknesses that deserve management's close attention; substandard is inadequately protected by the borrower's paying capacity or collateral, with a well-defined weakness; doubtful adds that full collection is highly questionable and improbable; loss is uncollectible. Anything else is pass, which the agencies do not define further.
How do you map an internal risk rating scale to regulatory classifications?
Write down which of your grades correspond to pass, special mention, substandard, doubtful and loss, with the definitions behind each, and keep it in your credit policy. The 2020 interagency guidance on credit risk review asks banks with their own scale to maintain documentation that translates it into the agencies' classes, so examiners can reconcile the totals. In this guide's example, the map is grades 1 to 6 pass, 7 special mention, 8 substandard, 9 doubtful and 10 loss.
When is a risk rating override acceptable?
An override is acceptable when the person setting the grade sees something the scorecard cannot, records a reason code, and a credit officer outside the lending line agrees. A one-notch stricter grade after a covenant miss, explained in the memo, is a good override. A two-notch better grade set by the lender alone with no reason is the pattern validation looks for first.
How do you back-test commercial loan risk ratings?
Take every loan graded on a start date, follow it for a fixed window, such as three years, and count defaults by the grade it started with. Check that worse grades defaulted more, and, if your grades carry default probabilities, that each grade defaulted close to its estimate. Pool grades and years because commercial defaults are rare, and run the test by region and lender as well as bank-wide.
What is a migration matrix and a double downgrade?
A migration matrix sets each loan's grade at the start of a period against its grade at the end, so you can see how many stayed, improved or worsened. A double downgrade is a loan that fell two or more grades at once, usually a sign the grade was not kept current. The OCC lists double downgrades, time in grade and the ratio of upgrades to downgrades among the rating reports banks should produce.
What do the 5% and 3% examiner thresholds mean?
In the OCC's Rating Credit Risk booklet, examiners re-grade a sample of loans and compare their grades with the bank's. When inaccuracies are generally greater than 5% of the number of credits reviewed or 3% of the dollar amount, examiners must investigate the root causes and decide whether to expand their sample. They also look at patterns, such as inaccuracies concentrated in one portfolio or location.
What did the 2025 Shared National Credit review find?
The 2025 SNC review, released January 12, 2026, covered $6.9 trillion of commitments to 6,857 borrowers. Special mention and classified loans were 8.6% of commitments, down from 9.1% in 2024, which the agencies attributed to growth in new commitments rather than better credit quality. US banks held 45% of commitments but 22% of non-pass loans, and leveraged loans were 81% of non-pass.
How often should commercial loan risk ratings be reviewed?
The OCC expects grades to be updated whenever relevant new information arrives, and every credit to get a formal review at least annually, with large, new, higher-risk and complex credits reviewed more often. Smaller performing loans may be reviewed by exception. Independent credit risk review samples on top of that, and examiners test the result.
Is a risk rating scorecard a model under SR 26-2?
It can be. The April 17, 2026 guidance defines a model as a complex quantitative method applying statistical, economic or financial theories to produce quantitative estimates, and excludes simple arithmetic and deterministic rule-based processes. A statistical default model is likely a model; a weighted judgmental scorecard is a classification your model risk team should document, and the guidance notes that outcomes analysis helps evaluate expert judgment.
Can AI validate loan risk ratings?
AI can do the gathering: re-score every loan on your scorecard, find look-alike borrowers, read the memo behind each grade and draft the calibration note, with every finding cited. It should not set or change a grade. A credit officer outside the lending line should confirm each regrade, and generative AI falls outside the 2026 model guidance, so your own governance must cover it.
24 · One-page summary
Validating commercial loan risk ratings on one page: the six-step method, the 2026 rules and fourteen terms
Print this page
In shortThe whole guide on one screen: the method, the rules as of October 2026, the readiness bands and the terms.
The method
Write down the scale, each pass grade and the map to the five regulatory classes.
Re-score every loan on the approved scorecard; list overrides and their reasons.
Compare look-alike borrowers graded by different lenders; add the gaps up by lender, region and industry.
Read the memo behind each flagged grade; keep the grades the memo justifies.
Report migration, double downgrades and upgrades per downgrade by region; back-test by band.
A credit officer outside the lending line confirms each regrade; the chief credit officer signs for committee.
Readiness: score 0–2 on eight questions: 0–6 explore · 7–11 pilot · 12–16 implement.
As of October 2026: OCC Rating Credit Risk (2001) is the core text · 2020 interagency credit risk review guidance in force · SR 26-2 replaced SR 11-7 on April 17, 2026 · OCC lending booklet Version 1.0, July 2026 · 18-month exam cycle under $6 billion since September 14, 2026 · OCC and FDIC MRA rule effective November 2, 2026 · 2025 SNC non-pass 8.6%.
14 terms
Risk rating
The bank's grade for a loan on its own scale; one step is a notch.
Pass
Any grade above special mention; banks define their own pass grades.
Special mention
Potential weaknesses that deserve management's close attention.
Classified
Substandard, doubtful or loss.
Substandard
A well-defined weakness; inadequately protected; some loss possible.
Doubtful · Loss
Full collection improbable · uncollectible, charge it off.
Dual risk rating
A borrower grade for default and a facility grade for the loss.
PD · LGD · EL
Probability of default · loss given default · expected loss.
Scorecard
Weighted factors that produce a suggested grade.
Override
A grade set apart from the scorecard; needs a reason code.
Look-alike pair
Two borrowers alike on industry, size and ratios, graded by different lenders.
Migration matrix
Grades at the start of a period against grades at the end.
Double downgrade
A fall of two or more grades at once.
SNC
Shared National Credit: loans of $100 million or more shared by three or more supervised institutions, re-graded by the agencies.
25 · Sources
Sources
Accessed October 2026. Regulatory status statements are as of October 2026.
OCC, Comptroller's Handbook, Rating Credit Risk, April 2001, updated June 2017 and March 2025. occ.gov
Basel Committee on Banking Supervision, Working Paper No. 14, Studies on the Validation of Internal Rating Systems, revised May 2005. bis.org
OCC, Comptroller's Handbook, Lending and Loan Portfolio Risk Management, Version 1.0, July 2026. occ.gov
W. Treacy and M. Carey, "Credit Risk Rating at Large U.S. Banks", Federal Reserve Bulletin, November 1998. federalreserve.gov
Federal Reserve, SR 13-18, "Uniform Agreement on the Classification and Appraisal of Securities Held by Depository Institutions" (with OCC Bulletin 2013-28 and FDIC FIL-51-2013), October 29, 2013. federalreserve.gov
OCC, Federal Reserve, FDIC and NCUA, "Interagency Guidance on Credit Risk Review Systems", 85 FR 33278, June 1, 2020. govinfo.gov
Federal Reserve SR 26-2, OCC Bulletin 2026-13 and FDIC FIL-15-2026, "Revised Guidance on Model Risk Management", April 17, 2026, with the attached guidance. federalreserve.gov
OCC Bulletin 2026-29, "Credit Risk: 'Lending and Loan Portfolio Risk Management' Booklet of the Comptroller's Handbook and Rescissions", June 25, 2026. occ.gov
OCC, Federal Reserve and FDIC, "Expanded Examination Cycle for Certain Small Insured Depository Institutions and U.S. Branches and Agencies of Foreign Banks", interim final rule, 91 FR 58009, September 14, 2026. federalregister.gov
OCC and FDIC, "Unsafe or Unsound Practices, Matters Requiring Attention", final rule, 91 FR 56004, September 1, 2026 (effective November 2, 2026). federalregister.gov
Shared National Credit Program, "2025 SNC Program Charts, 1st and 3rd Quarter 2025 Reviews" (attachment), January 12, 2026. federalreserve.gov
M. Plosser and J. Santos, "Banks' Incentives and the Quality of Internal Risk Models", Federal Reserve Bank of New York Staff Report 704, December 2014 (published in the Review of Financial Studies, 2018). newyorkfed.org
S. Firestone and M. Rezende, "Are Banks' Internal Risk Parameters Consistent? Evidence from Syndicated Loans", Finance and Economics Discussion Series 2013-84, Federal Reserve Board, October 2013. federalreserve.gov
Shared National Credit Program, "1st and 3rd Quarter 2024 Reviews", March 10, 2025. federalreserve.gov
Federal Reserve, FDIC and OCC, "Agencies issue 2025 Shared National Credit Program report", January 12, 2026. federalreserve.gov
Federal Reserve, FDIC and OCC, "Agencies issue 2024 Shared National Credit Program report", March 10, 2025. federalreserve.gov
OCC, Bank appeal summary: Shared National Credit, third quarter 2024 examination (interagency appeals panel). occ.gov
Federal Reserve Office of Inspector General, "Material Loss Review of Community First Bank", March 12, 2010. oig.federalreserve.gov
Federal Reserve Office of Inspector General, "Material Loss Review of Barnes Banking Company", September 1, 2010. oig.federalreserve.gov
Federal Reserve Office of Inspector General, "Material Loss Review of Midwest Bank and Trust Company", December 8, 2010. oig.federalreserve.gov
FDIC Office of Inspector General, AUD-18-002, "Material Loss Review of First NBC Bank, New Orleans, Louisiana", November 2017. fdicoig.gov
U.S. Treasury OIG, OIG-25-024, "Safety and Soundness: Failed Bank Limited Review – First National Bank of Lindsay", March 27, 2025. oig.treasury.gov
U.S. Treasury OIG, OIG-26-023, "Safety and Soundness: Failed Bank Limited Review – Santa Anna National Bank", March 11, 2026. oig.treasury.gov
U.S. Department of the Treasury, "Artificial Intelligence in Financial Services", December 2024. home.treasury.gov
FDIC, Quarterly Banking Profile, Second Quarter 2026 (data as of June 30, 2026). fdic.gov
Federal Reserve Bank of St. Louis, FRED, Commercial and Industrial Loans, All Commercial Banks (BUSLOANS), from the Federal Reserve H.8 release, through September 2026. fred.stlouisfed.org
O*NET OnLine (U.S. Department of Labor), Credit Analysts, 13-2041.00: median wages (2025), from Bureau of Labor Statistics wage data. onetonline.org
U.S. Bureau of Labor Statistics, "Employer Costs for Employee Compensation – June 2026", September 9, 2026 (copy on FRASER). fraser.stlouisfed.org
Next step
See it on your own rated book.
Explore the solution, or bring a sample of your rated loans, your scorecard and the memos behind the grades, and we will compare like with like with you, every finding cited.
We use essential cookies to make this site work, and cookieless, anonymised analytics to understand how it's used. "Accept all" also turns on Google Analytics, which sets cookies. Privacy policy