SystemCredit Risk & Portfolio Management

The complete guide · October 2026

Risk rating validation, explained.

A bank gives every business loan a grade, usually a number from 1 to 10, that says how likely the borrower is to fail to repay. That grade sets the price, who may approve the loan, how often anyone looks at it and how much money the bank sets aside for losses. Validating the ratings means checking that the grades are right: that like borrowers get like grades whoever the lender is, that grades move when the borrower changes, and that the worse grades do default more often.

This guide is for anyone who sets, checks, reports or pays for loan grades: chief credit officers, credit risk and portfolio analysts, regional credit officers, heads of loan review, model risk teams, commercial lenders, and the leaders deciding whether to automate the checking. No background needed.

See one case, screen by screen →
Watch with transcript →
A quick example · fictional

Imagine you are a senior credit risk officer at a regional bank with $21.6 billion of assets, five commercial regions and 2,305 graded business loans. It is Monday, October 12, 2026. Your job this quarter is the calibration note for Senior Credit Committee on Tuesday, October 20. Examiners arrive on February 8, 2027.

You lay the bank's 195 freight trucking borrowers side by side by their debt service coverage and their senior debt to EBITDA. Two of them sit almost on top of each other. Brinmoor Freight Lines in Denver borrows $18.5 million. Coulter Haulage in Omaha borrows $17.2 million. Their earnings fell 18% and 15% last year.

The bank's own scorecard puts both at grade 6. Yet the lender in Denver affirmed Brinmoor at grade 4 in March, alone, with no reason code for overriding the scorecard. In August a lender and a credit officer in Omaha graded Coulter 7, special mention, after it missed a coverage covenant.

Brinmoor Freight Lines · Denver
Debt service coverage
1.14x
Senior debt / EBITDA
3.8x
Scorecard says
6
Grade given
4 · pass
Memo
"long-standing relationship"
Coulter Haulage · Omaha
Debt service coverage
1.17x
Senior debt / EBITDA
3.7x
Scorecard says
6
Grade given
7 · special mention
Memo
covenant missed, reason code given
Graded 4 in Denver7 in Omahathree notches apart for the same numbers.

One pair could be bad luck. So you look at the region. Of the bank's 38 trucking loans in the Mountain region, 14 are graded two notches better than both the scorecard and their look-alikes elsewhere, and 11 of those sit with the same lender. Loan review changed 6.1% of the Mountain grades it sampled last quarter, above the 5% line that makes examiners look for a root cause.

Validation finds the grade that leans on a relationship while the numbers point lower, and the region where it has become a habit, before the examiners pull their sample.

Risk rating validation guide
Part A · Understand it

What a loan risk rating is, how banks build the scale, and how they prove the grades are right

Grades, scales, dual ratings, the regulators' five classes, scorecards and overrides, back-testing, the 2024 and 2025 Shared National Credit results and what failed banks teach, explained without selling anything. If you are new to commercial credit, start here.

01 · In plain words

Why every business loan carries a risk grade, and who checks that the grade is right

When a bank lends to a business, it decides more than yes or no. It also gives the loan a grade on its own scale, often 1 to 10, where 1 is a borrower the bank barely worries about and 10 is money it has already written off. The grade is the bank's short answer to one question: how likely is this borrower to stop paying? Some banks give a second grade to each loan as well, for how much they would lose if the borrower did stop.

That number does a lot of work. It decides who in the bank may approve the loan, what interest rate it carries, how often someone reviews it, and how much money the bank sets aside in its allowance for losses.

Near the bottom of the scale, the bank's grades turn into the regulators' own words: special mention for a loan with a weakness worth watching, then substandard, doubtful and loss, the classified grades the board and the examiners count. The OCC, which supervises national banks, puts the expectation in one line: "Risk ratings must be accurate and timely".1

The trouble is that people set the grades, and often the person setting it is the lender who brought in the deal and wants to keep the customer. Two lenders in two cities can look at the same kind of borrower and land two or three grades apart. A grade set at approval can sit unchanged while the borrower's earnings fall. Nobody sees the pattern until loan review, the bank's independent checkers, or the examiners pull a sample.

Validating the ratings is the work of checking the grades as a whole, on four counts: each grade matches the bank's definitions and scorecard; like borrowers get like grades whoever the lender is; grades move when risk moves; and, as the years pass, the worse grades default more often than the better ones. The OCC asks for all four: a rating process "independently validated (in addition to regulatory examinations)", and back-testing to see "whether the assumptions implicit in the rating definitions are valid".1

The life of one loan grade, in five steps

  1. The lender proposes a grade at approvalBrinmoor Freight Lines is graded on the bank's 1-to-10 scale using its scorecard: coverage, leverage, liquidity, management, industry, guarantor.
  2. A credit officer agrees, or the lender sets it aloneIn the example bank's Mountain region, loans under $20 million are graded by the lender alone. Elsewhere a credit officer co-signs every grade.
  3. The grade is refreshed each year, or when news arrivesBrinmoor's annual review in March 2026 affirmed grade 4, two notches better than its scorecard, with no reason code.
  4. The grades are checked across the bookAgainst the scorecard, against look-alike borrowers graded by other lenders, against rating changes and against defaults. This is where Brinmoor's 4 and Coulter's 7 meet.
  5. Loan review and examiners sample, and judge the systemAbove 5% of loans or 3% of dollars graded wrong, examiners look for the root cause and decide whether to widen their sample.1

Step 4 is the subject of this guide. The bank, borrowers, people and figures in this example are fictional.

Undefined pass grades, optimistic lenders: rating surprises

The regulators never define a pass grade

The agencies define special mention, substandard, doubtful and loss. Everything above them is "pass", and how a bank splits pass into four, five or six grades is its own business. "Regulatory ratings do not distinguish among pass credits."1

The supervisor expects lenders to lean optimistic

The OCC writes that a loan officer's "objectivity can be compromised" and that lenders' incentives "are frequently geared more toward producing loans than rating them accurately". It adds: "it can be relatively easy for loan officers and line managers to rate credits a step, or more, above what they deserve."1

Examiners have a number for "too many wrong"

When examiners re-grade a sample and find inaccuracies above 5% of the loans or 3% of the dollars, they "must investigate to determine the root causes and decide whether to expand their loan review sample".1

Defaults are too rare to prove a grade right quickly

A back-test needs defaults, and a good commercial book has few. The Basel Committee's validation study says statistical back-testing "is severely limited by data constraints".2 Comparing like borrowers answers sooner.

Grade, dual rating, classified, override defined

Risk rating, or grade

The number a bank gives a loan on its own scale for how likely the borrower is to default. "Notch" means one step on that scale.

Dual risk rating

Two grades: one for the borrower's chance of default, one for each loan's expected loss given its collateral and structure.

Special mention and classified

The regulators' words for loans with a weakness: special mention to watch, then substandard, doubtful and loss, which are "classified".

Override

A grade set differently from what the bank's scorecard gives. Good policy asks for a reason code and a second signature.

Fourteen terms are defined in the one-page summary.

02 · What a grade measures

What a commercial loan risk rating measures, and the jobs one number is asked to do

In shortA grade measures the borrower's expected ability to repay over at least the next year, mostly from its cash flow. Banks grade the borrower as it is today, while the rating agencies grade through the cycle, so a bank grade should move faster. The same number then drives approval authority, pricing, review frequency, the allowance and the reports the board reads, which is why one wrong grade travels so far.

The OCC asks banks to rate "based on the borrower's expected performance, i.e., the likelihood that the borrower will be able to service its obligations in accordance with the terms", evaluated "over the foreseeable future", which it sets at "not less than one year". Examiners look at "at least the upcoming 12 months". The primary question is the strength of the main source of repayment, "a sustainable source of cash"; collateral and guarantors matter more as that source weakens.1

A grade measures the risk ahead. The booklet's own example: a borrower three years into a seven-year term loan has always paid on time, but its prospects are weakening and next year's cash flow will not cover the payments. "The risk rating should be changed now when the borrower's risk of default increases rather than later when cash flow coverage becomes negative or when default occurs."1

The jobs a grade does

Before the loan

Approval and structure

Ratings "should be used to determine or influence who is authorized to approve a credit, how much credit will be extended or held, and the structure of the credit facility".1

The price

Pricing

"Risk ratings should guide price setting." A loan priced on a grade that is too good pays the bank too little for the risk it carries.1

During the loan

Administration

"Higher risk credits should be reviewed and analyzed more frequently." A flattering grade buys a borrower less attention.1

The books

Allowance and capital

"Risk ratings of individual credits underpin the" allowance. A grade one notch too good understates the reserve on that loan.1

The picture

Board and examiner reports

The OCC's 2026 lending booklet lists "Risk-rating reports, such as special mention and classified loans" and "rating migration" among the reports management should see.3

The people

Performance

"Credit staff should be evaluated on, among other things, the accuracy and timeliness of their risk ratings."1

Today's condition, or condition under stress?

The rating agencies grade "through the cycle": they try to look past a downturn. Banks do the opposite. In a Federal Reserve study of the fifty largest US bank holding companies, "almost all banks have chosen to grade to current condition". Asked over what period they judge risk, the banks interviewed split three ways, and half had no fixed answer.4

Half of the large banks interviewed had no fixed time horizon for their grades

Time period raters have in mind, banks interviewed by the Federal Reserve (published November 1998)

No specific period in mind: 50%One year: 25%Life of the loan: 25%
50%no set period
  • No specific period in mind50%
  • One year25%
  • Life of the loan25%

Source 4 · The study's figures are approximate ('about 25 percent'). The OCC's booklet now asks for not less than one year.

Show the numbers
PartValue
No specific period in mind50%
One year25%
Life of the loan25%

The difference matters when a bank compares itself with public ratings. A bank grade 4 is a statement about this borrower today; an agency BBB is meant to survive a recession. The OCC says banks that use public ratings "must ensure that their internal credit risk ratings change when risk changes, even if there has been no change in the public rating".1

How many grades a scale needs

Most of the work happens in the pass grades, which regulators leave undefined. The OCC: "most rating systems require several pass grades", and a community bank may manage with a few, for example one for loans secured by cash-like collateral, a "watch" grade and one or two others.1 Among the fifty largest banks the Federal Reserve studied, pass grades ranged "from two to the low twenties"; the median was five, six among the ten largest, plus "three or four regulatory problem-asset grades".4

The example bank uses ten: grades 1 to 6 are pass, with 6 as pass/watch, then 7 special mention, 8 substandard, 9 doubtful and 10 loss.

03 · The rules and their dates

Which supervisory texts govern loan risk ratings, from the 2001 OCC booklet to the 2026 exam rules

Status as of October 2026

In shortThere is no federal rule that sets a bank's rating scale. Supervisors expect accurate and timely grades, a written scale that translates into their five classes, independent review, and evidence that worse grades default more. The OCC's 2001 booklet on rating credit risk is still the core text. In 2026 the model risk guidance was replaced, the OCC issued a new lending booklet, the 18-month exam cycle widened to banks under $6 billion, and a new rule, effective November 2, 2026, raises the bar for formal exam findings at OCC and FDIC banks.

The rating rulebook rests on texts from 1991 to 2020, with five changes in 2025 and 2026
  1. 1991 and 1993Classes defined

    Substandard, doubtful and loss (Banking Circular 127, April 1991); special mention (Banking Bulletin 93-35, June 1993).

  2. April 2001Rating Credit Risk

    The OCC booklet on rating systems; updated 2017, reputation-risk references struck March 20, 2025.

  3. October 29, 2013Uniform Agreement

    The agencies' shared classification definitions (SR 13-18, OCC 2013-28, FIL-51-2013).

  4. June 1, 2020Credit risk review guidance

    Independent review validates grades; banks with their own scale document how it maps to the agencies' classes.

  5. April 17, 2026Model risk guidance replaced

    SR 26-2, OCC 2026-13 and FIL-15-2026 supersede SR 11-7.

  6. June 25, 2026New OCC lending booklet

    Lending and Loan Portfolio Risk Management, Version 1.0, July 2026.

  7. September 14, 202618-month exam cycle widened

    Qualifying banks under $6 billion, up from $3 billion.

Source 1,5,6,7,8,9,10

Show the numbers
WhenWhat
1991 and 1993Classes defined
April 2001Rating Credit Risk
October 29, 2013Uniform Agreement
June 1, 2020Credit risk review guidance
April 17, 2026Model risk guidance replaced
June 25, 2026New OCC lending booklet
September 14, 202618-month exam cycle widened
November 2, 2026Matters requiring attention
TextWhat it asks of a bank's gradesStatus
OCC, Rating Credit RiskAll exposures rated; several pass grades; accurate and timely; clear criteria; "dynamic"; "independently validated"; back-tested; well supported in the file. MIS by loan officer and location. The 5% / 3% examiner lines.1April 2001, current
OCC, Lending and Loan Portfolio Risk Management"Accurate and timely credit risk ratings"; rating migration in management reports; examiners sample loans "to determine whether a bank's risk-rating system is reliable".3Version 1.0, July 20268
Interagency credit risk review guidance, 85 FR 33278Independent review that "appropriately validates and, if necessary, adjusts risk ratings"; "the lower classification or risk rating typically prevails"; a written map from the bank's scale to the agencies' classes.6June 1, 2020, in force
Uniform Agreement, Attachment 1The agencies' shared definitions of the classified grades, which the 2020 guidance points to for the mapping.5October 29, 2013
SR 26-2 / OCC 2026-13 / FIL-15-2026Model risk management. A statistical scorecard can be a model; simple arithmetic and fixed rules are not; generative AI is out of scope.7April 17, 2026
Expanded exam cycle, 91 FR 58009Full-scope exams every 12 months; every 18 months for qualifying banks under $6 billion of assets.9Interim final rule, September 14, 2026
Unsafe or unsound practices and MRAs, 91 FR 56004OCC and FDIC formal findings for practices that "could reasonably be expected to … materially harm the financial condition of the institution", or a violation of law.10Effective November 2, 2026
What the November 2026 rule does and does not change. A rating system whose errors understate the allowance or hide problem loans can still meet the new bar for a matter requiring attention, because that is financial harm. Smaller weaknesses become supervisory observations. The 5% and 3% lines in the OCC booklet are untouched, and the Federal Reserve is not a party to the rule.10,1
04 · Dual risk rating

Dual risk rating: a borrower grade for the chance of default, a facility grade for the loss

In shortA single grade has to mix two questions: will this borrower default, and how much would the bank lose on this loan if it did? A dual system answers them separately, with a borrower grade tied to a probability of default (PD) and a facility grade for each loan tied to loss given default (LGD) or expected loss. The OCC accepts either design, as long as both questions are answered. The common failure is a borrower grade that quietly absorbs the collateral.

The OCC describes the design in one sentence: "Dual rating systems typically assign a rating to the general creditworthiness of the obligor and a rating to each facility outstanding." The facility rating "considers the loss protection afforded by assigned collateral and other elements of the loan structure in addition to the obligor's creditworthiness". Banks adopted it "because a single rating may not support all of the functions that require credit risk ratings": borrower grades serve structuring and administration, facility grades serve the allowance and capital.1

The OCC "does not advocate any particular rating system" and accepts "a single rating or dual ratings".1

Four in ten large banks graded on two scales in the Federal Reserve's study
40 in 100

of the large bank holding companies interviewed used two-dimensional systems; the other 60 graded each facility on one scale

Source 4

Show the numbers
MeasureValue
of the large bank holding companies interviewed used two-dimensional systems; the other 60 graded each facility on one scale40 of 100
Default risk climbs steeply in the last grades of a typical scale

Borrower probability of default by grade, percent a year, in the Federal Reserve's example of a two-scale system

0%1
0.1%2
0.3%3
1%4
3%5
6%6
20%7
60%8

Source 4 · The example's grade 9, doubtful, carries a 100% default probability. Its facility scale multiplies each PD by an average loss of 30%.

Show the numbers
PeriodValue
10%
20.1%
30.3%
41%
53%
66%
720%
860%

The three numbers behind a dual grade

Expected loss = probability of default × loss given default × exposure at default

The borrower grade carries the probability of default. The facility grade carries the loss given default, the share of the loan the bank would not recover. Their product with the amount owed at default is the expected loss. The regulators' classes do not use these words, but the OCC notes that the concepts sit inside them: substandard loans have "a high probability of payment default", and a doubtful loan "a high probability of total or substantial loss".1

Brinmoor's two loans (fictional)Borrower gradeFacility viewExpected loss, illustrative
$12.0 million term loan, secured by tractors and trailersSame grade for both loansAssumed loss given default 30%; amortizing, so exposure shrinks3.0% × 30% × $12.0M ≈ $108,000
$6.5 million revolver, secured by receivablesSame grade for both loansAssumed loss given default 45%; assume fully drawn at default3.0% × 45% × $6.5M ≈ $88,000

Illustrative arithmetic with assumed rates: a 3.0% one-year default probability is the Federal Reserve example's grade 5, and the loss rates are assumptions to replace with your own. The point is the shape: the two loans share one borrower grade, and the revolver's higher loss and its tendency to be drawn as the borrower weakens belong in the facility grade.

Four rules that keep two scales honest

Rule 1

One borrower, one borrower grade

A borrower graded 4 on its term loan and 5 on its revolver has no borrower grade at all. The grade belongs to the company.

Rule 2

Collateral moves the facility grade only

When a lender nudges the borrower grade up "because the loan is well secured", the borrower grade stops being comparable with any other borrower's.

Rule 3

The facility grade must sometimes differ

Treacy and Carey found banks set the facility grade "equal to the borrower grade unless the structure" is substantially better or worse. A second scale that never moves carries no information.4

Rule 4

Write down what the second scale means

Loss given default alone, or expected loss? In the Fed's study, two-scale banks mostly used PD for one and expected loss for the other; a few planned to move to LGD.4

Split ratings grade two slices of one loan. A split rating gives two parts of one loan different grades, "usually assigned when collateral or other structural protection supports only part of the credit": for example the cash-secured part as pass and the rest as substandard.1 A dual system grades two questions about the whole loan. A bank can use both.
05 · Mapping to the five classes

Mapping a 1-to-10 scale to pass, special mention, substandard, doubtful and loss

In shortEvery bank grades on its own scale, and every bank reports in the regulators' five words. The 2020 interagency guidance asks a bank with its own scale to keep documentation that translates it into the agencies' classes, so examiners can reconcile the totals. The map is easy to draw and easy to blur: the risk sits at the line between the last pass grade and special mention, where a watch grade can become a place to park loans.

The interagency guidance on credit risk review says a bank whose framework "differs from the framework for loan classifications used by the Federal banking agencies" should "maintain documentation that translates their risk ratings into the regulatory classification framework". The documentation lets examiners "reconcile the totals for the various loan classifications or risk ratings under the institution's system to the Federal banking agencies' categories".6 The agencies' definitions are the same for every bank and every kind of credit.1,5

Example bank's gradeRegulatory classThe agencies' definition, in their wordsWhat it usually looks like
1 to 5PassNo formal definition: "Credits that are not covered by these definitions are 'pass' credits".1 The SNC program: "A loan that is in good standing and is not rated special mention or classified".11Coverage and leverage inside policy; current statements; the bank's own grades split them by strength
6 · pass/watchPassA bank's own "watch" category among pass grades; the OCC lists it as one a community bank might use.1A weakness to follow, short of the potential weakness that defines special mention
7Special mention"Potential weaknesses that deserve management's close attention. If left uncorrected, these potential weaknesses may result in deterioration of the repayment prospects".1Falling revenue or margins, high leverage, tight liquidity, a new competitor, management problems, a weak loan agreement1
8Substandard (classified)"Inadequately protected by the current sound worth and paying capacity of the obligor or of the collateral pledged"; "a well-defined weakness"; "the distinct possibility that the bank will sustain some loss".1Unprofitable operations, inadequate debt service coverage or liquidity, repayment depending on collateral1
9Doubtful (classified)All the weaknesses of substandard, plus "collection or liquidation in full … highly questionable and improbable".1Usually in default; a pending event decides the loss; nonaccrual required1
10Loss (classified)"Considered uncollectible and of such little value that their continuance as bankable assets is not warranted".1Charged off in the period it becomes uncollectible1

Classified means substandard, doubtful or loss. "Non-pass" or "criticized" usually adds special mention. Special mention comes from an interagency statement of June 1993; the classified definitions from April 1991.1

Where mapping goes wrong

Special mention used as a waiting room. The OCC is direct: "Special mention is not a compromise between pass and substandard and should not be used to avoid exercising such judgment."1 A grade 7 that stays for years with no plan is a substandard loan under another name, or a pass loan the bank is nervous about.
Upgrades on a plan. For a classified loan, examiners "normally will await correction of the weaknesses and a period of sustained performance". "The mere existence of a plan for improvement, by itself, does not warrant an upgrade."1

The watch grade is the line most worth testing. In the example, Brinmoor's scorecard grade is 6, pass/watch, and its assigned grade is 4. Three of its Mountain neighbors with coverage near or below 1.0x carry pass grades of 5 while matched peers elsewhere sit at 7, special mention. Those three loans, $31.4 million together, are on the wrong side of the line the board and the examiners count.

06 · Drivers and overrides

Scorecards, rating drivers and overrides: where a grade comes from and how it bends

In shortMost commercial grades start from a scorecard: a handful of factors such as coverage, leverage, liquidity, earnings trend, industry, management and guarantor support, each with a weight. Then a person may override the result. Overrides are legitimate, because a scorecard cannot see everything, but each one needs a reason that someone else can check. An override with no reason code, set by the lender alone, is the pattern validation looks for first.

The OCC asks for criteria "clear and precisely defined using objective (e.g., cash flow coverage, debt-to-worth, etc.) and subjective (e.g., the quality of management, willingness to repay, etc.) factors", and for ratings that reflect "both the borrower's expected performance and the transaction's structure".1 A scorecard writes those criteria down with weights, so two people scoring the same borrower land on the same number.

Brinmoor's scorecard lands on grade 6; only management scores better than a 5

Factor grade on the example bank's 1-to-10 scale, with each factor's weight; weighted score 5.6, which rounds to grade 6

Debt service coverage (25%)1.14x; the grade 4 guide is 1.25x or better6
Senior debt to EBITDA (20%)3.8x; the grade 4 guide is 3.0x or less6
Liquidity (10%)current ratio 1.215
Earnings trend (10%)EBITDA down 18% on the year7
Industry and market (10%)truckload, exposed to spot rates6
Management and ownership (10%)24 years, second generation3
Customer concentration (5%)top customer 31%6
Guarantor support (10%)statement from June 2024, not verified5

Fictional example from this guide · Weighted: (25×6 + 20×6 + 10×5 + 10×7 + 10×6 + 10×3 + 5×6 + 10×5) ÷ 100 = 5.6. The lender's grade was 4.

Show the numbers
Factor (weight)Factor grade
Debt service coverage (25%)6
Senior debt to EBITDA (20%)6
Liquidity (10%)5
Earnings trend (10%)7
Industry and market (10%)6
Management and ownership (10%)3
Customer concentration (5%)6
Guarantor support (10%)5

Why overrides happen, and when they are right

A good override

Coulter Haulage, one notch stricter

Scorecard 6, graded 7 by a lender and a credit officer, reason code CV-2: fixed charge coverage of 1.08x at the June 30 test, below a 1.10x covenant. The memo names the ratios, the weakness and what would move the grade back. Fictional.

A weak override

Brinmoor Freight Lines, two notches better

Scorecard 6, affirmed at 4 by the lender alone, reason code: none. The memo cites a "long-standing relationship since 2014", a sponsor with "substantial outside liquidity" on a June 2024 statement, and a recovery expected "in 2026". It never mentions the 18% fall in earnings. Fictional.

Supervisors and researchers name the same reasons lenders lean toward better grades. The Federal Reserve's study of large banks found that "at banks that use ratings in computing profitability measures, establishing pricing guidelines, or setting loan size limits, the staff may be tempted to assign ratings that are more favorable than warranted".4 The OCC lists compensation that rewards production, relationship structures that encourage lenders to "hide" problems "for fear of losing control over a customer relationship", and "unfounded optimism" as impediments examiners should look for.1 Its 2026 lending booklet warns against pay that ignores "risk-rating recognition".3

What a sound override policy says

  • Who may override, and by how much. For example, a lender may move one notch with a credit officer's agreement; two notches needs the regional credit officer; never the lender alone.
  • A reason code from a fixed list, plus the memo passage that supports it, so a reviewer can test the reason.
  • Joint grades. The OCC: "Many banks, therefore, find risk rating accuracy improves by requiring ratings to be a joint decision of lenders and credit officers (at least one person from each function)."1
  • Override reporting by lender and region, with the share that carry no reason. The OCC's MIS list includes "Rating changes by line of business, loan officer, and location".1
  • A review of the scorecard itself when overrides cluster on one factor. In the example, trucking overrides cluster on spot-rate exposure, which the bank's scorecard does not score.
07 · Consistency between lenders

Do two lenders give the same borrower the same grade? What the evidence shows

In shortNot reliably. Federal Reserve researchers who compared the risk estimates different banks reported for the same syndicated loans found wide dispersion, and found that banks short of capital reported lower default risk. Nobody publishes the same test inside one bank, but the causes are the same: incentives, local habits and stale inputs. Comparing look-alike borrowers graded by different lenders is the fastest way to see it, because it needs no defaults.

100 bp

at most: the difference in borrower default probability, at the portfolio level, between banks reporting on the same syndicated loans, linked to how much capital the bank had. It "can improve the typical loan portfolio's Tier 1 capital ratio by as much as 33 percent".12

Plosser and Santos, Federal Reserve Bank of New York, 2014
2×

minimum capital at the bank setting the highest loss-given-default estimates, against the bank setting the lowest, "for an identical loan portfolio", among nine large US banks.13

Firestone and Rezende, Federal Reserve Board, 2013
0

public studies we found that measure how often lenders inside one bank grade like borrowers apart. Measure yours with matched pairs (below).

As of October 2026

Both studies use loans shared by several banks in a syndicate, which is the cleanest test there is: the same borrower, the same loan, the same date, different graders. Plosser and Santos found the link to capital stronger "for larger, riskier, and more opaque credits".12 Firestone and Rezende found "Banks differ substantially in PDs, but only a few set PDs systematically higher or lower than the median bank", while loss estimates differed systematically.13

The same test inside one bank: matched pairs

A bank cannot put one borrower in front of two of its lenders, but it can find two borrowers that look the same on paper and were graded by different people. The method is simple to state:

  1. Define "alike". Same industry at a fine level, revenue within a band, coverage and leverage within a tolerance. The example uses the same three-digit NAICS industry, revenue within 25%, coverage within 0.10x and leverage within 0.5x.
  2. Take peers from other lenders. A lender's own loans never serve as each other's peers; most peers come from other regions.
  3. Compare the grades given and the grade the scorecard gives, and flag pairs two notches or more apart.
  4. Read the memos behind both grades. A gap with a good reason is an override doing its job.
  5. Add the gaps up by lender, region and industry. One pair is an anecdote; a cell of 38 loans leaning the same way is a pattern.
Four look-alike trucking borrowers, four different grades

Grade given (higher is riskier), with debt service coverage and senior debt to EBITDA; the scorecard puts Brinmoor at 6

Coulter Haulage, Omaha1.17x · 3.7x · lender and credit officer7
Thorne Freight Systems, Milwaukee1.12x · 4.0x · lender and credit officer6
Brazos Line Carriers, Waco1.21x · 3.5x · lender and credit officer5
Brinmoor Freight Lines, Denver1.14x · 3.8x · lender alone4

Fictional example from this guide · Peer median 6. Revenue $79.5M to $88.9M; EBITDA down 11% to 19% on the year.

Show the numbers
BorrowerGrade given
Coulter Haulage, Omaha7
Thorne Freight Systems, Milwaukee6
Brazos Line Carriers, Waco5
Brinmoor Freight Lines, Denver4

In the example, the bank's 2,305 rated loans fall into 45 cells of nine industries by five regions. Four cells lean more than half a notch from their matched peers. The widest is freight trucking in the Mountain region: 38 loans, $286.4 million, graded on average 1.2 notches better than trucking borrowers elsewhere, where the gaps stay within 0.2. Inside that cell, one lender's 17 loans lean 1.6 notches, a second's 1.0 and a third's 0.7.

Why this answers sooner than defaults. A matched-pair test needs only enough look-alikes, and every quarter produces new grades to compare. A default back-test needs years and enough defaults, as the next section shows. The Basel Committee's validation study calls comparison with other references "a complement to formal statistical backtesting".2
08 · Back-testing and migration

Back-testing grades against defaults, and reading a migration matrix

In shortBack-testing asks whether the grades came true: did the worse grades default more, and did each grade default about as often as the bank assumed? Migration asks how grades moved: how many stayed put, how many fell one grade and how many fell two at once. A test across the whole bank can pass while one region fails it, so read both by region and lender. Expect few defaults, and treat a small cohort's surprise as a reason to look closer and gather more evidence.

The OCC sets two standards. Systems that state default probabilities or expected loss rates "should be back-tested", and back-tests "should show that the definitions' default probabilities and expected loss rates are largely confirmed by experience". Systems with no stated probabilities should still "rank-order risk": "banks should be able to show that credits with more severe ratings exhibit higher defaults and losses".1 The Basel Committee's study separates the same two questions: "discriminatory power", meaning ranking, and "calibration", meaning the level.2

Average default rates rise about fivefold from BB to B, and almost fourfold again to CCC

Standard & Poor's average one-year default rate by rating, 1981–94, as printed in the Federal Reserve Bulletin

AAA0%
AA0%
A0.07%
BBB0.25%
BB1.17%
B5.39%
CCC20%

Source 4 · Agency ratings are through the cycle and cover large bond issuers. Use them for the shape of a scale; a bank grade needs its own default history.

Show the numbers
RatingAverage default rate per year
AAA0%
AA0%
A0.07%
BBB0.25%
BB1.17%
B5.39%
CCC20%

The shape matters more than the levels. Default risk grows slowly at the top of a scale and very fast at the bottom, so a one-notch error among the strong grades costs little, while the same error near special mention can hide a loan that will default.

A back-test that passes for the bank and fails for one region

In one region, grade 4 loans defaulted more often than grade 5 loans

Three-year default rate of loans graded in October 2023, by grade: the scorecard's expectation, the whole bank and the Mountain region

Scorecard expectationWhole bankMountain region
0%2.5%5%7.5%10%
Grade 3Grade 4Grade 5Grade 6Grade 7

Fictional example from this guide · Fictional example bank. A small cohort: a few defaults move a regional rate a long way.

Show the numbers
Scorecard expectationWhole bankMountain region
Grade 30.4%0.3%0.5%
Grade 40.8%0.9%1.9%
Grade 51.5%1.4%1.8%
Grade 63.2%3.6%3.1%
Grade 78%8.7%7.9%

Across the example bank, each grade defaults close to its expectation and the order holds. In the Mountain region, grade 4 loans defaulted at 1.9% over three years, against 0.8% expected and above the region's own grade 5. That is a rank-order break: the region's 4s behave like 5s, which is exactly what a habit of grading one notch better would produce. Averaged into a book of 2,305 loans, it disappears.

How sure can a back-test be? Not very, with commercial default counts. Suppose a regional grade 4 cohort has 100 loans and 0.8% are expected to default in three years: you expect 0.8 defaults, and seeing two or more happens about one time in five by chance alone. The Basel Committee adds that defaults arrive together, so tests that assume independence will fail sound scales in bad years.2 Pool grades into bands, pool years, and use the back-test to confirm what matched pairs and loan review already suggest.

The one-in-five figure is our arithmetic (Poisson, mean 0.8): chance of two or more defaults = 1 − e−0.8(1 + 0.8) ≈ 19%.

The migration matrix

A migration matrix sets each loan's grade at the start of a year against its grade at the end. Each row adds to 100%. The diagonal is loans that stayed put; right of it, loans that got worse; two or more columns right, the "double downgrades" the OCC asks banks to count, along with "seasoning of ratings (the length of time credits stay in one grade)", the "velocity of rating changes" and "The ratio of rating upgrades to rating downgrades".1

Most loans keep their grade for a year; the cells two or more grades to the right deserve a name and a reason each

Share of loans in each grade at the start of the year that ended in each grade, an illustrative commercial book

Under 2%2–10%10–30%30–70%Over 70%
→ 3→ 4→ 5→ 6→ 7→ 8+From 3Over 70%2–10%Under 2%Under 2%Under 2%Under 2%From 42–10%30–70%2–10%Under 2%Under 2%Under 2%From 5Under 2%2–10%30–70%2–10%Under 2%Under 2%From 6Under 2%Under 2%2–10%30–70%2–10%2–10%From 7Under 2%Under 2%Under 2%2–10%30–70%10–30%

Illustrative · replace with your own numbers · Illustrative shape only. Build yours from your rating history by grade, and by region and lender.

Show the numbers
→ 3→ 4→ 5→ 6→ 7→ 8+
From 3Over 70%2–10%Under 2%Under 2%Under 2%Under 2%
From 42–10%30–70%2–10%Under 2%Under 2%Under 2%
From 5Under 2%2–10%30–70%2–10%Under 2%Under 2%
From 6Under 2%Under 2%2–10%30–70%2–10%2–10%
From 7Under 2%Under 2%Under 2%2–10%30–70%10–30%
Read first

Double downgrades

A loan that falls two grades at once was usually a grade that stopped being refreshed. In the example, 9 of the bank's 23 double downgrades in twelve months came from the Mountain region, 6 of them in trucking.

Read second

Upgrades per downgrade

In a flat or falling market, a region upgrading more than it downgrades is making a statement about its lenders. The example's Mountain region upgraded 54 loans and downgraded 30, a ratio of 1.8, while the bank ran at 0.9.

09 · The SNC results

What the Shared National Credit reviews of 2024 and 2025 say about large-loan grades

In shortEach year the Fed, the FDIC and the OCC re-grade a sample of the largest shared loans themselves. In the 2025 review, released January 12, 2026, 8.6% of $6.9 trillion of commitments were special mention or classified, down from 9.1%, but the agencies said the fall came from new lending, "rather than an underlying improvement in credit quality". Nonaccrual commitments rose 30%. The review is the closest public view of how supervisors grade, and its definitions are the ones every bank maps to.

The Shared National Credit (SNC) program covers any loan or commitment of "$100 million or more" shared by "three or more unaffiliated federally supervised institutions".11 Examiners review a risk-based sample twice a year and the agencies publish one statement a year after the third-quarter review.14 The 2025 review covered 6,857 borrowers and $6.9 trillion of commitments, up 6%.15 No 2026 report had been released by the end of October 2026.

Large-loan grades have stayed near 9% non-pass since 2023, well below the 2009 peak

Special mention and classified commitments as a share of all SNC commitments, by review year

0%10%20%30%8.6%
200820112014201720202023

Source 11 · Our arithmetic from the program's committed balances (Appendix B). The threshold rose from $20 million to $100 million on January 1, 2018.

Show the numbers
Non-pass share of commitments
200813.4%
200922.3%
201017.8%
201112.7%
201210.6%
201310%
201410.1%
20159.5%
201610.3%
20179.7%
20186.6%
20196.9%
202012.4%
202110.6%
20227%
20238.9%
20249.1%
20258.6%
Measure2024 review2025 reviewWhat it tells a rating team
Non-pass share9.1% (from 8.9%)168.6%15New lending can lower the ratio while credit quality stays the same
Special mention$161.8B, down 8.4%14$155.3B, down 4.0%11Fewer loans parked on watch
Classified$434.0B, up 9.7%14$437.5B, up 0.8%11Weak loans kept moving down
Nonaccrual$65.1B, up 29.1%14$84.9B, up 30.4%11Classified loans are reaching nonaccrual
Leveraged loans' share of non-pass79%1681%15Leverage drives most problem grades

In 2024 the agencies described "a modest increase in the severity of risk due to a migration of commitments from special mention to a classified rating".14 From 2025 the program document keeps the tables and drops the commentary.11

Banks hold 45% of large shared loans but only about a fifth of the problem grades

Special mention plus classified as a share of each holder's SNC commitments, 2025 review

US banks$129.7B of $3,081.0B4.2%
Foreign banking organizations$103.3B of $2,344.7B4.4%
Other investors$359.9B of $1,485.7B24.2%

Source 11

Show the numbers
HolderNon-pass share
US banks4.2%
Foreign banking organizations4.4%
Other investors24.2%
Consumer services and technology carry the highest share of problem grades

Special mention plus classified, percent of each industry's SNC commitments, 2025 review, selected industries

Consumer services26.3%
Technology, telecom and media18.7%
Commercial services14.7%
Materials and commodities14.3%
Real estate and construction8.1%
Transportation services7.8%
Oil, gas and pipeline1%

Source 11 · Our sums of the program's special mention and classified percentages.

Show the numbers
IndustryNon-pass share
Consumer services26.3%
Technology, telecom and media18.7%
Commercial services14.7%
Materials and commodities14.3%
Real estate and construction8.1%
Transportation services7.8%
Oil, gas and pipeline1%

How supervisors argue about a grade

An SNC appeal from the third quarter of 2024 shows the reasoning a validation team should expect. The bank that runs the loan for the lending group appealed a substandard rating on a revolving credit, arguing for special mention because the industry downturn and an operational problem were temporary and results had recovered from the low point. An interagency panel upheld substandard: operating cash flow did not cover fixed charges, free cash flow was negative, leverage was high, and "the company had not achieved satisfactory and sustained performance to warrant an upgrade".17

It is the OCC booklet's rule in practice: only sustained numbers lift a grade, however good the plan or the recovery story.1

10 · What goes wrong

Relationship grades, stale statements and parked watch loans: the ten errors behind drifting risk ratings

In shortGrades go wrong in four places: in the people who set them, in the inputs they read, in the scale itself and in the checks around it. Most of the errors lean the same way, toward a better grade, and most look reasonable one loan at a time. They show up as patterns: by lender, by region, by industry, and as double downgrades.

#ErrorWhy it happensWhat catches it
In the people
1Relationship grades: "long-standing", "strong sponsor"The lender knows the owner and the loan's pricing depends on the grade4Matched pairs graded by other lenders; memo tests for ratios
2Overrides with no reason codeThe field is optional, or nobody reports on itOverride reports by lender; a required code and second signature
3Grades held to avoid a workout transferLenders "hide" problems "for fear of losing control over a customer relationship"1Seasoning reports; independent review of watch grades
In the inputs
4Stale guarantor or borrower statementsThe last statement is carried forward; the grade leans on support nobody re-checkedStatement age by loan; a policy limit, for example 15 months
5History in place of forecastThe borrower has always paid; the grade waits for a missed payment1Trailing coverage and earnings trend in the scorecard
6A risk the scorecard does not scoreSpot-rate exposure, a lost contract, one large customerOverrides clustering on one factor; a scorecard review
In the scale
7Collateral folded into the borrower gradeOne scale doing two jobsA facility grade; a rule that collateral moves only the facility grade
8Special mention used as a waiting roomAvoiding the substandard decision1Time in grade for special mention; a plan per loan
In the checks
9A sample that never lands on the drifting cellLoan review samples a share of the book each quarterEvery loan compared each quarter; samples aimed where pairs disagree
10Upgrades on a plan or a recovery story"The mere existence of a plan for improvement, by itself, does not warrant an upgrade"1,17Upgrade-to-downgrade ratio by region; sustained performance before an upgrade
Relationship grades and missing reason codes are the errors to test for first
How far it moves the grade →
Hunt for it
Test for it first
Sample it
Report on it
Relationship gradeNo reason codeUnscored riskPlan-based upgradeStale statementParked in watch
How often it happens →

Our reading of the sources 1,4 · Positions are our judgment from the OCC booklet, the Federal Reserve study and the example; no public data ranks rating errors by frequency.

Show the numbers
ItemHow often it happens (0–1)How far it moves the grade (0–1)
Relationship grade0.720.74
No reason code0.800.56
Unscored risk0.150.62
Plan-based upgrade0.120.45
Stale statement0.700.30
Parked in watch0.250.15
The common thread. The OCC's examiners judge the "nature and pattern of rating inaccuracies", including "inaccuracies in a specific portfolio or location" and "how many grades away the rating is from what it should be".1 Validation that reports only a bank-wide accuracy rate throws away the two things examiners look at.
11 · Grades that moved too late

From Barnes Banking to First NBC: what failed-bank reviews found when weak loan grading let problem loans pile up

In shortWhen a bank failure costs the deposit insurance fund enough, the agency's inspector general writes a material loss review. The ones that deal with commercial credit tell a consistent story about grades: weak or unreliable grading, loan review that missed problem credits, examiners repeating the same criticism, and problem loans that appear all at once when examiners finally re-grade them. The 2024 and 2025 failures reviewed so far add a harder lesson: grades can be falsified.

In the failed-bank reviews, weak grading let problem loans pile up until examiners re-graded them
  1. March 12, 2010Community First Bank, Oregon

    The September 2008 exam cited the risk grading process as "unreliable" and cut the bank's supervisory (CAMELS) rating two steps, to 5. Estimated loss $44.4 million.

  2. September 1, 2010Barnes Banking Company, Utah

    Loan grading criticized from 2004; a 2008 target exam found significant weaknesses and classified assets jumped. Estimated loss $266.3 million.

  3. December 8, 2010Midwest Bank and Trust, Illinois

    At one exam substandard loans nearly doubled, to $61.8 million, and examiners downgraded "a few of the loan ratings assigned by management". Estimated loss $200.7 million.

  4. November 2017First NBC Bank, Louisiana

    "Improper classification of problem loans" overstated the portfolio and underfunded the allowance. Estimated loss $996.9 million.

  5. March 27, 2025First National Bank of Lindsay, Oklahoma

    Employees altered records to hide loan weaknesses from examiners. Estimated loss $42.3 million.

  6. March 11, 2026Santa Anna National Bank, Texas

    Fraud and weak controls; deficiencies "masked weaknesses in the Bank's loan portfolio". In-depth review due by December 2026.

Source 18,19,20,21,22,23

Show the numbers
WhenWhat
March 12, 2010Community First Bank, Oregon
September 1, 2010Barnes Banking Company, Utah
December 8, 2010Midwest Bank and Trust, Illinois
November 2017First NBC Bank, Louisiana
March 27, 2025First National Bank of Lindsay, Oklahoma
March 11, 2026Santa Anna National Bank, Texas

What the reviews found

First NBC Bank, 2017

Grades nobody independent checked

Loan reviews were "overseen by the CEO"; examiners noted loan review weaknesses in four of six exams from 2010 to 2016; the external loan review was not "identifying problem credits in a timely manner". The result: the bank "overstated the true condition of the loan portfolio and underfunded the ALLL".21

Barnes Banking, 2010

The same criticism, year after year

From 2004 examiners recommended improving "loan grading, loan review, appraisal review, and problem loan processes". A June 2008 exam "cited significant weaknesses in the bank's internal loan grading process", downgraded several loans, and the classified assets ratio rose about 167%.19

Midwest Bank and Trust, 2010

Problem loans that appeared all at once

At one exam, substandard loans "nearly doubled from $33.3 million … to $61.8 million, and 'special mention' loans increased from $0 to $16 million", and "examiners downgraded a few of the loan ratings assigned by management".20

At Barnes, nonaccrual loans went from $1.6 million to $90 million between two exams a year apart

Nonaccrual loans at Barnes Banking Company, as reported in the inspector general's review, $ millions

$1.6M2007 examination
$90MSeptember 2008 examination

Source 19 · The later figure is from the September 2008 full-scope examination; examiners also required an $18.7 million provision to bring the allowance to a minimally acceptable level.

Show the numbers
PeriodValue
2007 examination$1.6M
September 2008 examination$90M
The 2024 and 2025 failures. The Treasury inspector general's limited reviews of two small national banks found fraud at the center. At First National Bank of Lindsay, weak controls "allowed one or more Bank employees to alter Bank records and hide weaknesses in the Bank's loan portfolio from examiners"; the estimated loss was 54% of assets.22 At Santa Anna National Bank, deficiencies "masked weaknesses in the Bank's loan portfolio".23 The inspector general judged that each failure warranted an in-depth review.

The lesson for validation: check grades against independent facts (statements, payment records, collateral), and treat a rating history that never moves with as much suspicion as one that moves all at once.

The reviews from 2010 judge supervisors as well as bankers, and several of their findings concern the agencies' CAMELS ratings of the bank as well as the bank's loan grades. Their point about loan grades is the one quoted here: weak internal grading let problem loans accumulate until examiners re-graded them.

12 · Automation and AI

Is a rating scorecard a model? AI in rating validation under the April 2026 guidance

Status as of October 2026

In shortSoftware can re-score every loan on the bank's own scorecard, find look-alike borrowers, read the memo behind each grade, build the migration and back-test reports and draft the calibration note. A statistical scorecard may be a model under the April 2026 guidance; arithmetic and fixed rules are not, and generative AI falls outside that guidance, under the bank's own controls. People keep the grade: no supervisory text lets software decide one.

The 2026 guidance defines a model as "a complex quantitative method, system, or approach that applies statistical, economic, or financial theories to process input data into quantitative estimates", and excludes "simple arithmetic calculations, such as those found within spreadsheets, as well as deterministic rule-based processes". Its footnote puts generative AI, and AI that acts on its own, outside the guidance as "novel and rapidly evolving", while a bank's own governance "should guide the determination of appropriate governance and controls".7

One sentence fits judgmental rating systems closely: "When a model's design relies substantially on expert judgment, quantitative outcomes analysis helps to evaluate the quality of that judgment."7 Back-testing and matched pairs are that outcomes analysis.

Most of a rating validation tool sits outside the model guidance, and inside other rules

Does each text cover this part of the work? The 2026 model guidance, the 2020 credit risk review guidance, and the bank's own credit and AI policy

NoPartlyYes
Model guidanceCredit risk reviewYour policyA statistical PD scorecardYesPartlyYesA weighted judgmental scorecardPartlyPartlyYesRe-scoring loans on the scorecardNoPartlyYesMatching look-alike borrowersPartlyPartlyYesReading memos with generative AINoNoYesDeciding a regradeNoYesYes

Our reading of the sources 7,6,1 · Our reading for a bank's own use; your model risk team classifies each component. 'Partly' means the text applies depending on design.

Show the numbers
Model guidanceCredit risk reviewYour policy
A statistical PD scorecardYesPartlyYes
A weighted judgmental scorecardPartlyPartlyYes
Re-scoring loans on the scorecardNoPartlyYes
Matching look-alike borrowersPartlyPartlyYes
Reading memos with generative AINoNoYes
Deciding a regradeNoYesYes

What supervisors have said about technology in rating work

No technology prescribed. In the 2020 credit risk review guidance the agencies wrote that "institutions have significant flexibility to use various types of technology", and declined "to recommend the use of any specific types of technology".6
Models supplement judgment. The OCC's booklet: commercial scoring systems "should be carefully evaluated and periodically validated", and used "to supplement more traditional tools of credit risk management: credit analysis, risk selection at origination, and individual loan review".1

General AI frameworks apply too. NIST's framework organizes the work under GOVERN, MAP, MEASURE and MANAGE.24 The Treasury's 2024 report warns that generative AI "can be susceptible to 'AI hallucinations,' producing confidently stated but incorrect output".25 For memo reading, the defense is the same as for any reviewer: every finding quotes the passage it rests on, so a person can check it in seconds.

Who still sets the grade when software checks ratings

  • The grade itself, and every regrade. A regional credit officer, never the lender on the loan, should confirm a proposed change.
  • The scorecard's design and weights, and the decision that a scorecard change goes to model validation before use.
  • Judgments a scorecard cannot score: a verified guarantee, a contract with escalators, a customer about to leave.
  • The independent sample: software can point loan review's sample at the loans where pairs disagree, and the reviewer still sets an independent grade.6
13 · How teams validate ratings today

How banks validate risk ratings by hand today, and why re-spreading look-alike borrowers eats the most time

In shortLenders and credit officers set grades; a credit risk or portfolio team reports on them; loan review samples and re-grades; the chief credit officer owns the scale and answers to the board. Comparing like borrowers across regions means re-spreading and re-scoring them by hand, so it is done for a handful of loans a quarter. Most of the days go to gathering and re-scoring, leaving little for judging.

Five people who set, check and sign a grade

CL

Commercial lender

Proposes the grade at approval and renewal, writes or signs the memo, knows the owner.

Cares about: keeping the customer, and an approval inside the lender's own authority.
CO

Credit officer, regional or senior

Co-signs grades, often must agree to overrides, approves above the lender's limit.

Cares about: a grade that holds up line by line.
CR

Credit risk or portfolio analyst

Owns rating reports: migration, overrides, concentration, the quarterly calibration for committee.

Cares about: knowing which grades are wrong, as well as which moved.
LR

Head of loan review

Samples loans, re-grades them independently and reports disagreements to the board. In the Federal Reserve's study, loan review "usually" has "the final authority to set grades".4

Cares about: a sample that lands where the problems are.
CC

Chief credit officer

Owns the scale, definitions, override policy and the map to the regulatory classes; signs for committee and the board.

Cares about: hearing about a drifting region before the examiners do.

A quarterly calibration, hand-off by hand-off

A quarterly calibration passes through four people before committee sees it
  1. 1Pull the grades

    Grades, changes, overrides and reason codes from the loan system.

    Credit risk analystDays
  2. 2Re-spread look-alikes

    Find comparable borrowers in other regions and put their statements on one basis.

    Credit risk analystAbout a week
  3. 3Re-score and read memos

    Apply the scorecard; read the memo behind each flagged grade.

    Credit risk analystDays
  4. 4Ask the lenders

    Request support for grades that look wrong.

    Analyst and lenderDays to weeks
  5. 5Confirm regrades

    A credit officer outside the lending line agrees or changes each proposal.

    Regional credit officerHours
  6. 6Sign for committee

    The calibration note, regrades and policy changes.

    Chief credit officerBy the committee date

Illustrative · replace with your own numbers · Times are illustrative for one drifting region; your calendar will differ.

Show the numbers
StepWhat happensWhoTime
Pull the gradesGrades, changes, overrides and reason codes from the loan system.Credit risk analystDays
Re-spread look-alikesFind comparable borrowers in other regions and put their statements on one basis.Credit risk analystAbout a week
Re-score and read memosApply the scorecard; read the memo behind each flagged grade.Credit risk analystDays
Ask the lendersRequest support for grades that look wrong.Analyst and lenderDays to weeks
Confirm regradesA credit officer outside the lending line agrees or changes each proposal.Regional credit officerHours
Sign for committeeThe calibration note, regrades and policy changes.Chief credit officerBy the committee date

Where the days of a hand-built calibration go

Re-spreading look-alike borrowers takes the largest share of a hand-built calibration

Working days for one quarterly calibration of a single drifting region, by hand

Pulling grades and overridesRe-spreading look-alikesRe-scoringReading memosWriting and signing the note
By hand, about 20 days36344

Illustrative · replace with your own numbers · An estimate from the example's own calibration plan, still to be measured. No public source measures time per calibration; time your next one.

Show the numbers
Pulling grades and overridesRe-spreading look-alikesRe-scoringReading memosWriting and signing the note
By hand, about 20 days36344

Twenty working days for one region explains why most banks compare like borrowers for a few loans a quarter and rely on loan review's sample for the rest. In the example bank, loan review sampled 401 of 2,305 rated loans in the third quarter, about 17%. A region and an industry can drift for a year before a sample lands on them.

Spreadsheets, external loan review or rating software

In house

A credit risk team and spreadsheets

Rating history exported each quarter; migration, override and back-test reports built in workbooks. Cheap to start; matched-pair comparison stays manual and small.

Outsourced

External loan review

A firm samples and re-grades loans on a cycle. Independent by design, but still a sample, and its findings arrive after the quarter.

Software

Scorecards and rating analytics

Scorecard tools standardize how a grade is calculated; analytics tools report migration and overrides. Tools differ most on whether they compare the grades actually given, borrower by borrower, and read the reasons behind them.

Part B · See it working

Botminds Risk Rating Validation compares every graded loan with its look-alikes, overnight

Part A described the work without naming a product. This part shows how Botminds does it, at a fictional regional bank with 2,305 rated commercial loans on a 1-to-10 scale. Every bank, borrower, person, number and memo in the screens is sample data.

14 · One region, start to finish

Graded 4 in Denver, 7 in Omaha: how the Brinmoor and Coulter pair became a calibration note signed for committee

In shortThis is the example from the top of the page, inside the product. Overnight, six agents re-score every rated loan on the bank's own scorecard, pair each borrower with look-alikes graded by other lenders and read the memo behind each grade. On Monday Rachel Okafor, senior credit risk officer, sees the pair, then the pattern, takes the evidence to the regional credit officer and the chief credit officer, and has a signed note for Senior Credit Committee a week ahead of the meeting.

1

Same numbers, different grades

Monday morning, the home screen plots the bank's 195 rated freight trucking borrowers by debt service coverage (up) and senior debt to EBITDA (right), colored by the grade each was given, over shaded bands for the grade the bank's scorecard gives at each point. Two dots sit almost on top of each other and are circled: Brinmoor Freight Lines, graded 4 in Denver, and Coulter Haulage, graded 7 in Omaha.

The panel beside them says why the pair matters: coverage within 0.03x, leverage within 0.1x, both scored 6 by the scorecard. Brinmoor's 4 is an override with no reason code; Coulter's 7 is a documented covenant downgrade. The rail below lists 22 look-alike pairs graded two or more notches apart.

Look-alike borrowers graded apart. Every trucking borrower by coverage and leverage, colored by the grade given, over the scorecard's grade bands, with the circled pair and the pairs list.
2

Against the scorecard, one region lights up

Rachel switches the colors to notches off the scorecard and picks the Mountain region. Fourteen loans, $146.8 million, are graded two or more notches better than the bank's own scorecard. Eleven of them belong to one lender, Brett Kalani. None of the region's 38 trucking loans is graded stricter than the scorecard.

The pattern answers the first question a credit officer asks about any single pair: is this bad luck, or a habit?

Notches off the scorecard, Mountain region. Dark orange dots are graded two or more notches better than the scorecard; the totals under the chart count them by lender.
3

Brinmoor beside its three peers

She opens the pair side by side. Brinmoor (loan C-25-04417, $18.5 million: a $12.0 million term loan and a $6.5 million revolver) sits beside its three matched peers: Coulter in Omaha, Thorne Freight Systems in Milwaukee and Brazos Line Carriers in Waco. Revenue, coverage and leverage all fall within the matching tolerances, each marked with a check.

Assigned 4, affirmed March 14, 2026 by the lender alone. Scorecard 6. Peers 7, 6 and 5, each set by a lender and a credit officer. Peer median 6.

Brinmoor and its peers. The assigned grade, the scorecard grade and the peer grades across the top; every ratio below, with the ones used for matching checked.
4

The scorecard and the two memos

Lower on the same screen, the scorecard shows Brinmoor factor by factor: coverage 1.14x against the grade 4 guide of 1.25x, leverage 3.8x against 3.0x, earnings down 18%, a guarantor statement from June 2024. Weighted 5.6, grade 6. Then the lender's override: −2 notches, reason code none.

Beside it, the memos. Brinmoor's annual review affirms grade 4 on "a long-standing relationship since 2014" and a sponsor with "substantial outside liquidity", and scores 34 of 100. Coulter's covenant review explains its one-notch stricter grade with the covenant test, the ratios and an upgrade path, and scores 82. Each highlighted passage opens the memo at its page.

Scorecard and memos. The weighted score behind grade 6, the override that made it 4, and the memo passages that do and do not support each grade.
5

Confirmed, then signed for committee

The calibration drafter writes the finding and its cause, every line cited, and proposes a grade for each of the 14 loans: 12 regrades, 3 of them into special mention ($31.4 million), and 2 kept, Cache Valley Freight and Snake River Carriers, whose memos show a verified guarantee and a contract. Rachel sends it for sign-off.

Kevin Brandt, the Mountain regional credit officer, confirms the regrades; the lender on a loan can never confirm a regrade of it. Daniel Whitford, chief credit officer, signs the note for Senior Credit Committee on Tuesday, October 20, 2026. Nothing changes in the loan system until committee approves.

Signed for committee. Finding and cause, the proposed grade for each loan, the effect if approved and the three sign-offs. The finding's phrase "at which examiners widen their sample" is the product's shorthand: the OCC booklet says examiners investigate the root cause and decide whether to expand the sample.1

In the example the solution compares all 2,305 rated loans with their look-alikes every night, against a loan review sample of 401 loans, 17% of the book, so drift can surface within the quarter it starts, ahead of the next exam. Measure both on your own book.

15 · Every screen

The drift map, loan review disagreement, memo scores and lender comparisons on the remaining screens

In shortOne pair is the story. These screens show the rest: the map of industries by regions that points to the drifting cell, the overnight comparison step by step, loan review disagreement against the examiners' lines, migration and the default back-test, memo scores, each lender's grades against their peers, the policy changes in the note, and the settings that hold the bank's own rules.

The drift map. 2,305 loans in 45 cells, each colored by how far its grades lean from matched borrowers elsewhere. Four cells lean more than half a notch; freight trucking in the Mountain region leans furthest, 1.2 notches better.
The comparison, step by step. Six agents on 38 loans in 1 minute 34 seconds: 61 grade changes read, 6 stale guarantor statements, 142 peers found, memos with a median score of 57. The matrix shows 14 loans two notches better than their peers.
Loan review disagreement by region. Mountain: 5 of 82 sampled grades changed, 6.1% of loans and 4.5% of dollars; the bank: 3.7% and 2.4%. The header's "examiners widen their sample" is the product's shorthand; the OCC's wording is that examiners investigate the root cause and decide whether to expand the sample.1
Upgrades, downgrades and the back-test. Mountain upgraded 1.8 loans for every downgrade while the bank ran at 0.9, and had 9 of the bank's 23 double downgrades. Its grade 4 loans defaulted at 1.9% over three years against 0.8% expected.
Memo scores. 1,146 approvals, renewals and annual reviews scored on whether they support the grade they give, on the bank's five tests. Mountain's median is 51, against 71 in the Plains region.
Lenders. Each lender's grades against borrowers graded by others, across all his rated loans (Brett Kalani: 1.1 notches better on 64 loans; 1.6 on his 17 Mountain trucking loans), with overrides, missing reasons and memo medians.
Policy changes. The note fixes the cause as well as the grades: co-signed overrides, required reason codes, a scorecard change that goes to model validation before use, and retraining.
Who decides. The approved scorecard version, the override rules, the regional credit officer who confirms regrades, the chief credit officer who signs, and a nightly run.
Your matching rules. What counts as a look-alike, when a cell or a single loan is flagged, the smallest cohort worth flagging, the memo minimum and the examiner lines watched by region. Changes are versioned and on the audit trail.

Select any screen to open it larger. The bank, borrowers, people and figures are fictional.

16 · Agents, and who signs

Who may change a risk grade: a regional credit officer confirms, the chief credit officer signs, six agents prepare the evidence

In shortEach agent has one job and limits it does not cross. None of them changes a grade, a scorecard weight or the allowance, and none sends a note unsigned. A regional credit officer, never the lender on the loan, confirms each regrade; the chief credit officer signs the note for committee. Every finding cites the rating history, the spread, the scorecard line or the memo passage it rests on.

Six agents that gather rating history, spreads and look-alikes

Rating history reader

Reads every grade and grade change from the loan system: who set it, when, the scorecard grade at the time, the override and its reason code. Flags overrides without a code and grades set by the lender alone.

Never writes to the loan system or changes a grade.

Financial spreader

Puts each borrower's latest statements on one basis: coverage, senior debt to EBITDA, fixed charge coverage, current ratio, liabilities to tangible net worth, earnings trend, and the date of the guarantor's statement.

Never estimates a missing number; it marks what is missing and flags statements older than 15 months.

Scorecard re-scorer

Applies the bank's approved scorecard factor by factor with its weights and grade guides, and reports the weighted score, the scorecard grade and the gap to the grade given.

Never changes a weight or a grade guide, and uses only the approved version.

Peer matcher

Finds three to five look-alike borrowers for each loan, graded by a different lender: same three-digit industry, revenue within 25%, coverage within 0.10x, leverage within 0.5x. Reports their grades and median.

Never matches across industries or size bands, or uses the same lender's loans as peers; says when fewer than three peers exist.

Memo justification reader

Reads the approval memo or annual review that set or affirmed the grade and scores it on the bank's five tests: ratios cited, each weakness addressed, override explained, current statements used, what would move the grade.

Never judges the credit itself; it quotes the passage behind every finding.

Calibration drafter

Writes the finding and its cause, a proposed grade for each flagged loan, the policy changes and the estimated effect, and routes the note to the regional credit officer, then the chief credit officer.

Never regrades a loan or sends a note unsigned, and keeps a grade where the memo justifies it.

Risk officer prepares, regional officer confirms, CCO signs

PreparesSenior credit risk officerReviews the pairs and the cells, asks lenders to support grades, keeps or drops each proposal, and sends the note.
Confirms each regradeRegional credit officerKeeps or changes any proposed grade. The lender on the loan can never confirm its regrade; lenders see their loans read only.
Signs for committeeChief credit officerSigns the note with its regrades and policy changes. Nothing moves in the loan system until committee approves.

Scorecard and threshold changes are versioned. Agent steps and human decisions are kept apart on the activity trail with who, what and when. A memo that scores below the bank's minimum goes back to the lender with the tests it missed.

The calibration team behind 2,305 rated loans

Fictional, from the sample data
RO

Rachel Okafor · senior credit risk officer, portfolio risk

Owns rating reports for 2,305 rated loans; prepares the quarterly calibration.

"I can tell you which grades moved. I can't tell you which grades are wrong."
KB

Kevin Brandt · regional credit officer, Mountain

Confirms regrades; co-signs credits above the lenders' authority.

"Show me the twin borrower and I'll fix the grade."
DW

Daniel Whitford · chief credit officer

Chairs Senior Credit Committee; owns the rating system.

"I'd rather find it in October than read it in the exam report."
TI

Tomás Ibarra · head of loan review

Samples 401 loans a quarter; reports grade disagreements to the audit committee.

"Our sample found it. Our sample is 17% of the book."
BK

Brett Kalani · commercial lender, Mountain

Seventeen trucking relationships; sets grades alone on loans under $20 million.

"I know these owners. The numbers lag the business."
17 · What goes in and out

What rating validation software reads from your loan system and memos, and the drift map and calibration note it leaves behind

In shortIt reads what the bank already keeps, the grades and their history, the spreads, the approved scorecard and the memos, and leaves behind a comparison of every rated loan with its look-alikes, a drift map by lender, region and industry, scored memos and a calibration note with its regrades confirmed and signed. The loan system stays the system of record.

From your systems

  • Risk rating history per loan, with overrides and reason codes
  • Borrower and guarantor financial spreads
  • Approval memos, renewals, annual and covenant reviews
  • Loan review and exam grade changes

Your credit policy

  • Your rating scale and its map to the regulatory classes
  • Your approved scorecard, weights and grade guides
  • Match tolerances and flag thresholds
  • Who may override, and who confirms a regrade
Agents re-score, match and read Every rated loan, every night, on your scorecard and your rules
People confirm every regrade
Every finding cites its source

Outputs

  • A drift map by lender, region and industry
  • Look-alike pairs graded apart, with reasons
  • A score for each memo against your tests
  • Loan review disagreement against the 5% and 3% lines, migration and back-tests by region
  • A calibration note with proposed grades, policy changes and the estimated allowance effect

What changes for the team

  • Every loan compared each night, so samples go where pairs disagree
  • Evidence for each regrade ready for the credit officer
  • A calibration in about 4.5 analyst days instead of 20, the example's own estimate, to be measured

Loan system, spreading tool, scorecard and loan review tracking

Loan systemGrades, changes, overrides, reason codes
Spreading toolBorrower and guarantor statements
ScorecardThe approved version and its weights
Document managementMemos and reviews
Loan review trackingIndependent grade changes
Allowance modelGrades by pool, for the committee's estimate
Identity and accessWho confirms, who signs, read-only lenders
Committee portalThe signed note and its evidence

For each, check whether it has an API, a file feed, or only screens, and who owns it.

Your rating scale, scorecard and loan review stay as they are

Your rating scale

Kept as it is, with your map to pass, special mention, substandard, doubtful and loss.

Your scorecard

Applied as approved, factor by factor; a new version goes through your model validation before use.

Your loan system

Stays the system of record. Regrades move only after committee approves, through your normal process.

Your loan review

Keeps its independence and its sample, and can aim the sample where look-alikes disagree.

Your allowance committee

Gets the estimated effect of proposed regrades to measure in its own model.

Your lenders

See their own loans read only, get a specific request when a grade needs support, and keep the right to explain.

Like with like, cited evidence, people grade

1

Like with like

Same industry, size, coverage and leverage, graded by a different lender.

2

Every finding cites its source

The rating history, the spread, the scorecard line, the memo passage, one click away.

3

Agents propose; people grade

A regional credit officer confirms each regrade, the chief credit officer signs, and committee decides.

Part C · Are you ready to automate?

Deciding whether to automate risk rating validation: the cost of flattering grades, the return, your readiness and a pilot

You own the rating system, or report on it, or answer to the board and the examiners for it. This part is written for you: what wrong grades cost, what automating the checks could return, whether your team is ready, and what to ask any vendor of rating validation software, including us.

18 · What wrong grades cost

What a flattering risk grade costs you: an understated allowance, an exam finding on the rating system, and double downgrades later

In shortThe direct cost is analyst days spent comparing a handful of loans by hand. The bigger costs are harder to count: an allowance too small for the loans you hold, a rating system that becomes an exam finding, and problem loans that arrive all at once as double downgrades. No public study prices any of these, so the numbers that matter are yours.

5% / 3%

of loans or of dollars graded wrong in the examiners' sample: above either line they look for the root cause and decide whether to widen the sample.1

OCC, Rating Credit Risk
1.20%

of C&I loans at banks with $1 billion to $10 billion of assets were noncurrent at June 30, 2026, against 0.96% across all insured institutions.26

FDIC Quarterly Banking Profile, Q2 2026
$2.96T

of commercial and industrial loans at US commercial banks in September 2026, every one of them carrying a grade.27

Federal Reserve H.8 via FRED
Smaller banks carry more noncurrent business loans, where each grade weighs more

C&I loans 90 days or more past due or on nonaccrual, percent of C&I loans, by bank asset size, June 30, 2026

Under $100 million2.3%
$100 million to $1 billion1.5%
$1 billion to $10 billion1.2%
$10 billion to $250 billion1%
Over $250 billion0.87%
All insured institutions0.96%

Source 26

Show the numbers
Bank sizeNoncurrent rate
Under $100 million2.3%
$100 million to $1 billion1.5%
$1 billion to $10 billion1.2%
$10 billion to $250 billion1%
Over $250 billion0.87%
All insured institutions0.96%
Most of a hand-built calibration is gathering and re-scoring, which software can take

Working days for one quarterly calibration of a single drifting region, by hand and with automation

By handWith automation
Pulling grades, overrides and reason codes30.5
Re-spreading look-alike borrowers60.5
Re-scoring on the scorecard30.5
Reading the memos behind each grade41
Writing the note for committee31
Regional confirmation and sign-off11

Illustrative · replace with your own numbers · The example's own estimate, still to be measured. Sign-off takes the same day either way: it is the people's part.

Show the numbers
By handWith automation
Pulling grades, overrides and reason codes30.5
Re-spreading look-alike borrowers60.5
Re-scoring on the scorecard30.5
Reading the memos behind each grade41
Writing the note for committee31
Regional confirmation and sign-off11
What nobody publishes. There is no public figure for how often lenders inside a bank grade like borrowers apart, how long a calibration takes, how much allowance a drifting region understates, or how often a rating system becomes an exam finding. Vendor figures come without a dataset. Measure your own.

Calibration days and unsampled loans, from your own records

CostWhere it hidesHow to find your number in a week
Analyst daysPulling rating history, re-spreading look-alikes, re-scoring by handTime last quarter's calibration step by step, from the analyst's calendar
Grades nobody comparedThe loans loan review did not sample this quarterRated loans minus loans sampled, by region
Disagreement by regionA bank-wide rate under 5% that hides a region above itLoan review changes ÷ loans sampled, by region, in count and dollars
Late recognitionDouble downgrades and upgrades in a falling marketDouble downgrades and the upgrade-to-downgrade ratio for twelve months, by region and lender
Undocumented overridesAn optional reason code fieldOverrides of the scorecard without a code, by lender
Allowance gapPass loans that belong in special mentionAsk your allowance team to re-run ten loans one grade worse

Rating-system findings, mispriced loans and a misled board

The exam finding on the rating systemOnce examiners decide inaccuracies distort the picture of portfolio risk, every report built on grades is in question.
The loan that should have been special mentionA year of reviews at the pass-grade frequency, with no plan and no attention.
Prices set on the wrong gradeRisk-based pricing on a flattering grade earns too little for the risk carried.
The board's pictureCriticized and classified totals that understate the book, quarter after quarter.
The lender who learns the habit is fineOverrides without reasons spread when nobody reports them.
19 · Your return

Comparing every rated loan each quarter: the analyst days and sample coverage automated calibration could return

In shortPut in your own numbers. The time saved on calibrations rarely pays for a tool on its own; the case usually rests on what the time buys: every loan compared every quarter beyond loan review's sample, drift found within the quarter, and evidence ready when examiners ask. The calculator values the time and shows how many grades a sample never reaches.

Six places automated rating checks pay back

Analyst time

Comparisons already built

Pairs, scorecard gaps and memo scores arrive each morning; analysts spend their time on judgment.

calibrations × days saved × 8 × loaded hourly cost
Coverage

Every loan, every quarter

Loan review's sample keeps its independence and goes where pairs disagree.

rated loans − loans sampled each quarter
Timing

Drift found in the quarter

A region leaning a notch is seen before a sample or an exam lands on it.

months from first drift to regrade, before and after
Allowance

Reserves on the right grade

Regrades move loans into the pools and classes the allowance model expects.

allowance on regraded loans, measured by your committee
Exams

Evidence by lender and location

The reports the OCC lists, from double downgrades to rating changes by loan officer, ready to hand.

hours spent assembling rating evidence for exams and loan review
Behavior

Reasons on every override

Lenders know each override is compared and read.

share of overrides without a reason code, before and after

Value the analyst days a calibration takes, with your numbers

The hourly cost is built from published figures: the credit analyst median wage, $83,510, divided by 2,080 hours and by the 70% wage share of employer costs.28,29 Every input marked illustrative is an assumption.

Your book
Your calibrations
Your cost
Illustrative yearly value
Calibration time today, valued$0
Analyst time released, valued$0
After your yearly cost$0
Analyst hours released a year0
Rated loans a quarter's sample never reaches0
Calibrations a year to cover your cost0

Formulas, per year:
Calibration time today = calibrations × days by hand × 8 × hourly cost
Time released = calibrations × (days by hand − days with automation) × 8 × hourly cost
After your cost = time released − yearly cost
Loans a sample never reaches = rated loans − loans sampled each quarter
Break-even = yearly cost ÷ (days saved × 8 × hourly cost)

The defaults describe the example bank: four drifting cells a quarter, about 20 days each by hand and 4.5 with automation (its own estimate, still to be measured), and loan review's 401 of 2,305 loans. Not counted: the allowance on regraded loans, exam findings avoided, faster regrades and loan review hours re-aimed. Released hours are value only when you decide what they are for.

The days saved per calibration decide how many calibrations cover the cost

Calibrations a year to cover $100,000 of yearly cost, at $57 an analyst hour

Saves 15.5 days a calibration14.1 calibrations
Saves 10 days a calibration21.9 calibrations
Saves 5 days a calibration43.9 calibrations

Illustrative · replace with your own numbers

Show the numbers
Days savedCalibrations a year
Saves 15.5 days a calibration14.1 calibrations
Saves 10 days a calibration21.9 calibrations
Saves 5 days a calibration43.9 calibrations

A bank that calibrates one or two segments a year by hand will not cover a tool's cost with time alone, and should buy only if it wants to compare every loan every quarter. A bank that already calibrates every region each quarter is closer to the first line.

Start here20 · Readiness check

Score your rating system's readiness: scale and map, scorecard, overrides, rating history and sign-off

In shortPick the answer closest to your team today. Eight questions score 0 to 2; the last is for reflection. The meter adds up your score as you go, and each question says why it matters and what a strong answer sounds like.

1
Scale and map

Is your rating scale written down, with each pass grade defined and a documented map to special mention, substandard, doubtful and loss?

Why it mattersThe 2020 interagency guidance asks for that map, and software can only compare grades against definitions that exist.6
A strong answer"Ten grades, each with a written description and guide ratios; 7 to 10 map to the agencies' classes, approved by the board."
2
Scorecard

Do you have an approved, versioned scorecard that every lender uses, and has model risk said whether it is a model?

Why it mattersRe-scoring needs one approved version, and the April 2026 guidance makes classification a real question for a statistical scorecard.7
A strong answer"Version 4.2, approved in January; model risk reviewed it as a judgmental tool with outcomes testing."
3
Overrides

Does your policy say who may override the scorecard and by how much, and is a reason code required in the loan system?

Why it mattersUnexplained overrides are the first thing a comparison finds; without a policy there is nothing to measure them against.
A strong answer"One notch with a credit officer, two with the regional credit officer, a required code from a fixed list."
4
Rating history

Can you export every grade and grade change, with who set it, when, and the scorecard grade at the time?

Why it mattersMigration, seasoning, double downgrades and back-tests all start from history; the OCC lists them as rating MIS.1
A strong answer"Five years of history in the loan system with an API, including the rater and the override."
5
Spreads and memos

Are borrower spreads kept on one template, and are approval memos and annual reviews stored where software can read them?

Why it mattersLook-alikes are found on ratios, and the reason for a grade lives in the memo.
A strong answer"One spreading template; memos in the document system, linked to the loan number."
6
Your baseline

Do you know loan review disagreement by region in count and dollars, double downgrades and the upgrade-to-downgrade ratio for the last year?

Why it mattersNo public benchmark exists, so your own baseline is the only way to show improvement; examiners read the same figures by location.1
A strong answer"3.7% of loans and 2.4% of dollars bank-wide, one region above 5%, 23 double downgrades."
7
Owner and sign-off

Is there a named owner of the rating system with a budget, and a written rule for who confirms a regrade?

Why it mattersCalibration crosses lenders, credit officers, loan review and model risk; regrades need someone outside the lending line.
A strong answer"The chief credit officer sponsors it; regional credit officers confirm regrades, never the lender."
8
Governance

Do you have a path to approve AI in credit work: vendor due diligence, a view on the April 2026 model guidance, human sign-off and an audit trail?

Why it mattersThe 2026 guidance leaves generative AI to your own framework, and the grade must stay a person's decision.7
A strong answer"Model risk and vendor management have a path for AI tools; every regrade needs a named credit officer."
9
Vision · for reflection

If examiners asked tomorrow for rating changes by loan officer and location, and for the ten largest pass loans whose look-alikes are graded worse, what would you hand them?

Why it mattersYour answer lists the gaps between the grades you report and the evidence behind them.
A strong answerA short list: "the drift map, the pairs with both memos, and the regrades committee already approved."

What your score says about starting rating validation

0–6

Explore

Write down the scale, the map to the five classes and the override rule, make the reason code required, and measure loan review disagreement by region. Then compare one industry by hand to see what you find.

7–11

Ready to pilot

Run a measured pilot on one industry across every region: compare every loan with its look-alikes, score the memos, and check the findings against loan review's own grades and your credit officers' judgment.

12–16

Ready to implement

Plan every rated loan, every night: your scorecard and rules as settings, who confirms and who signs, links to the loan system and spreads, and the evidence examiners will ask for.

21 · Questions for any vendor

What to ask a rating validation vendor about look-alike matching, your scorecard, memo evidence and who changes a grade

In shortAsk every vendor the same questions, us included. The answers show whether the tool compares the grades you actually gave or only calculates new ones, whose scorecard and rules it uses, what evidence you keep, who decides, and how you would measure it on your own book.

AskA good answerA warning sign
What it compares
Does it compare the grades we gave, borrower by borrower, or calculate a grade of its own?It compares your grades with your scorecard and with look-alikes graded by your other lenders"Our model gives a better grade"
How does it decide two borrowers are alike?Industry, size, coverage and leverage within tolerances you set; never the same lenderA similarity score nobody can explain
Can it show drift by lender, region and industry at once?A map you can open to the loans and the pairsBank-wide averages only
Your scorecard and scale
Does it use our approved scorecard as it is, version by version?Yes; a new version only after your approval and model validationIts own scorecard, "calibrated to industry data"
Does it handle a dual scale and our map to the regulatory classes?Borrower and facility grades kept apart; your map applied as writtenOne grade per loan
Can it produce migration, double downgrades and back-tests by region and lender?The OCC's MIS list, from your history, by count and dollarsA bank-wide migration matrix once a year
Memos and evidence
How does it judge whether a memo supports a grade?Against tests you set, quoting the passage for each findingA sentiment score
Can every finding be opened at its source?The rating history entry, the spread, the scorecard line, the memo pageA confidence percentage in place of a source
What does it do when a statement is stale or missing?Marks it and says what is missing; never estimatesFills the gap from last year
Who decides
Can it change a grade in our loan system?No; it proposes, a credit officer confirms, committee approves"Auto-correct" for grades
Can a lender confirm a regrade on a loan they manage?No, by ruleAny user can approve
Who can change tolerances and thresholds, and is it versioned?Named roles; versioned; on the audit trailSettings any user can change
Your data and AI
Which AI models read the memos, where do they run, and does our data train them?Named models, a region you choose, no training on your data, in writing"Proprietary AI", no more detail
How should we classify each part under the April 2026 model guidance?A component-by-component answer for your model risk team"None of it is a model"
Proof
Can we test it on our own grades and memos before we sign?Yes, on one industry across all regionsDemo data only
How will we know its findings are right?Compared with loan review's own re-grades and credit officers' decisions"Trust the score"
What will you report from the test?Pairs flagged, share confirmed by credit officers, false alarms, analyst daysOne accuracy percentage

We found no published independent test of any rating validation vendor, as of October 2026. A pilot on one industry, checked against your own loan review, is the fairest comparison, and the same test measures your current process.

22 · How to start

Test rating validation on one industry across every region, and judge it against loan review's own re-grades

In shortPick one industry with enough loans in every region, measure your current process, compare every loan with its look-alikes, check the findings against loan review and your credit officers, and decide with four numbers. None of these steps commits you to a vendor.

  1. Pick one industry with at least 30 loans in most regions, and write down the scale, the map and the override rule as they stand.
  2. Measure your baseline: loan review disagreement by region, overrides without a code, double downgrades and the days your last calibration took.
  3. Compare every loan in the industry with its look-alikes on your scorecard, and score the memos behind the grades.
  4. Check the findings against loan review's own re-grades and against your regional credit officers' decisions on each flagged pair.
  5. Decide with four numbers: pairs flagged, share confirmed by credit officers, false alarms, and analyst days per calibration.
A ten-week pilot ends with a decision on four numbers
Your teamVendor
Pick the industry; write down scale, map and rules
Measure the baseline
Load history, spreads, scorecard and memos
Compare every loan; score memos
Credit officers review flagged pairs
Check against loan review's re-grades
Decide
Week 0246810

Illustrative · replace with your own numbers

Show the numbers
ActivityFromTo
Pick the industry; write down scale, map and rules01
Measure the baseline02
Load history, spreads, scorecard and memos14
Compare every loan; score memos35
Credit officers review flagged pairs58
Check against loan review's re-grades69
Decide910

What to measure in a rating validation pilot, and how

MeasureHowWhy
Pairs flaggedLook-alike pairs two or more notches apart, by region and lenderThe size of the drift
Confirmed by credit officersProposed regrades a regional credit officer agrees with ÷ proposalsThe tool's usefulness, judged by your people
False alarmsFlags where the memo showed a good reason, in reviewer minutesA tool that flags everything finds everything
Agreement with loan reviewLoans loan review re-graded that the comparison also flaggedIndependent confirmation
Analyst daysFrom pulling the data to a signed noteThe cost case rests on it
The full working-session questions: 21 questions in seven groups

Bring the chief credit officer, credit risk, regional credit officers, loan review, model risk, the allowance team and IT into one room. Each question says why it matters, what a strong answer looks like, and the warning sign.

A

Scale and map

A1

What does each pass grade mean, in words and guide ratios?

Why it mattersThe regulators do not define pass grades; you must.1
Strong answer · warning sign
A page per grade.
"Everyone knows a 4."
A2

Where is our map to the five classes written down?

Why it mattersThe 2020 guidance asks for it.6
Strong answer · warning sign
In the credit policy, board-approved.
Only in the call report workpapers.
A3

Do we run one scale or two, and what does the second mean?

Why it mattersA facility scale that never moves carries no information.
Strong answer · warning sign
A written definition of each.
Two scales, one meaning.
B

Scorecard and overrides

B1

Which scorecard version is approved, and who approves a change?

Why it mattersRe-scoring uses one version.
Strong answer · warning sign
Named version and owner.
Several copies in use.
B2

What share of grades override the scorecard, and how many carry no reason?

Why it mattersThe first pattern a comparison finds.
Strong answer · warning sign
A report by lender.
Nobody knows.
B3

Where do overrides cluster on one factor?

Why it mattersA cluster can mean the scorecard misses a risk.
Strong answer · warning sign
A scorecard review triggered by clusters.
Overrides never analyzed.
C

Loan review findings and the 5% and 3% lines

C1

What did loan review and examiners say about our grades in the last two years?

Why it mattersFindings show where the process breaks.
Strong answer · warning sign
A list by region and type.
"No issues."
C2

Which region is closest to 5% of loans or 3% of dollars?

Why it mattersExaminers judge patterns by location.1
Strong answer · warning sign
Known, by quarter.
Bank-wide only.
C3

Do our worse grades default more, in every region?

Why it mattersThe OCC's rank-order test.1
Strong answer · warning sign
A back-test by band and region.
Never run.
D

Rating history, spreads and memos on file

D1

Can we export rating history with rater, date and reason?

Why it mattersMigration and seasoning need it.
Strong answer · warning sign
Yes, five years.
Current grade only.
D2

Are spreads on one template, with statement dates?

Why it mattersLook-alikes are matched on ratios.
Strong answer · warning sign
One template.
Each analyst's workbook.
D3

Where do memos live, and are they linked to the loan?

Why it mattersThe reason for a grade is in the memo.
Strong answer · warning sign
Document system, linked.
Email attachments.
E

Who sets and confirms a regrade

E1

Who sets grades today, alone or jointly, by region and size?

Why it mattersLender-alone grading is where drift starts.1
Strong answer · warning sign
Joint everywhere.
"Depends on the region."
E2

Who confirms a regrade, and can lenders confirm regrades on their own loans?

Why it mattersIndependence of the decision.
Strong answer · warning sign
A credit officer, never the lender.
The lender, with a note.
E3

How does a regrade reach the allowance model?

Why it mattersThe grade underpins the allowance.1
Strong answer · warning sign
Next run after committee.
At year end.
F

The scorecard as a model under SR 26-2

F1

Has our model risk policy moved from SR 11-7 to SR 26-2?

Why it mattersThe old letter was replaced on April 17, 2026.7
Strong answer · warning sign
Updated, with a view on AI tools.
Still cites SR 11-7.
F2

Is the scorecard a model, and how is it validated?

Why it mattersExpert-judgment designs need outcomes analysis.7
Strong answer · warning sign
A documented classification.
Never asked.
F3

What does vendor management need before a pilot sees real grades and memos?

Why it mattersSets the pilot's start date.
Strong answer · warning sign
A known path and timeline.
First time anyone has asked.
G

Nightly look-alike checks and visible override reasons

G1

What if every grade were compared with its look-alikes every night?

Why it mattersTests the appetite for continuous checking.
Strong answer · warning sign
"Loan review would sample where pairs disagree."
"Nobody would read it."
G2

What if every override showed its reason to the next reader?

Why it mattersLinks grading to accountability.
Strong answer · warning sign
Fewer, better overrides.
Lenders would stop overriding and stop explaining.
G3

Which decisions would we never let software make?

Why it mattersTells you where the signatures belong.
Strong answer · warning sign
Every grade, every regrade, every policy change.
"It can fix the obvious ones."
23 · Frequently asked questions

Dual risk ratings, the 5% and 3% lines, back-testing and SR 26-2: what credit teams ask about rating validation

In shortThe questions credit teams and buyers search for most, each answered on its own.

What is risk rating validation?

Risk rating validation is checking that a bank's loan grades are accurate, consistent and timely. It compares each grade with the bank's own definitions and scorecard, compares like borrowers graded by different lenders, tracks how grades move, and back-tests whether worse grades default more often. The OCC expects the rating process to be independently validated, in addition to examinations.

What is a dual risk rating system?

A dual risk rating system gives each borrower one grade for its probability of default and each loan a second grade for the loss the bank would take if the borrower defaulted, considering collateral and structure. It keeps the two judgments apart, so a strong collateral position does not flatter the borrower grade. The OCC accepts a single or dual system as long as both questions are answered.

What are the regulatory risk rating definitions?

The federal banking agencies define four problem grades. Special mention has potential weaknesses that deserve management's close attention; substandard is inadequately protected by the borrower's paying capacity or collateral, with a well-defined weakness; doubtful adds that full collection is highly questionable and improbable; loss is uncollectible. Anything else is pass, which the agencies do not define further.

How do you map an internal risk rating scale to regulatory classifications?

Write down which of your grades correspond to pass, special mention, substandard, doubtful and loss, with the definitions behind each, and keep it in your credit policy. The 2020 interagency guidance on credit risk review asks banks with their own scale to maintain documentation that translates it into the agencies' classes, so examiners can reconcile the totals. In this guide's example, the map is grades 1 to 6 pass, 7 special mention, 8 substandard, 9 doubtful and 10 loss.

When is a risk rating override acceptable?

An override is acceptable when the person setting the grade sees something the scorecard cannot, records a reason code, and a credit officer outside the lending line agrees. A one-notch stricter grade after a covenant miss, explained in the memo, is a good override. A two-notch better grade set by the lender alone with no reason is the pattern validation looks for first.

How do you back-test commercial loan risk ratings?

Take every loan graded on a start date, follow it for a fixed window, such as three years, and count defaults by the grade it started with. Check that worse grades defaulted more, and, if your grades carry default probabilities, that each grade defaulted close to its estimate. Pool grades and years because commercial defaults are rare, and run the test by region and lender as well as bank-wide.

What is a migration matrix and a double downgrade?

A migration matrix sets each loan's grade at the start of a period against its grade at the end, so you can see how many stayed, improved or worsened. A double downgrade is a loan that fell two or more grades at once, usually a sign the grade was not kept current. The OCC lists double downgrades, time in grade and the ratio of upgrades to downgrades among the rating reports banks should produce.

What do the 5% and 3% examiner thresholds mean?

In the OCC's Rating Credit Risk booklet, examiners re-grade a sample of loans and compare their grades with the bank's. When inaccuracies are generally greater than 5% of the number of credits reviewed or 3% of the dollar amount, examiners must investigate the root causes and decide whether to expand their sample. They also look at patterns, such as inaccuracies concentrated in one portfolio or location.

What did the 2025 Shared National Credit review find?

The 2025 SNC review, released January 12, 2026, covered $6.9 trillion of commitments to 6,857 borrowers. Special mention and classified loans were 8.6% of commitments, down from 9.1% in 2024, which the agencies attributed to growth in new commitments rather than better credit quality. US banks held 45% of commitments but 22% of non-pass loans, and leveraged loans were 81% of non-pass.

How often should commercial loan risk ratings be reviewed?

The OCC expects grades to be updated whenever relevant new information arrives, and every credit to get a formal review at least annually, with large, new, higher-risk and complex credits reviewed more often. Smaller performing loans may be reviewed by exception. Independent credit risk review samples on top of that, and examiners test the result.

Is a risk rating scorecard a model under SR 26-2?

It can be. The April 17, 2026 guidance defines a model as a complex quantitative method applying statistical, economic or financial theories to produce quantitative estimates, and excludes simple arithmetic and deterministic rule-based processes. A statistical default model is likely a model; a weighted judgmental scorecard is a classification your model risk team should document, and the guidance notes that outcomes analysis helps evaluate expert judgment.

Can AI validate loan risk ratings?

AI can do the gathering: re-score every loan on your scorecard, find look-alike borrowers, read the memo behind each grade and draft the calibration note, with every finding cited. It should not set or change a grade. A credit officer outside the lending line should confirm each regrade, and generative AI falls outside the 2026 model guidance, so your own governance must cover it.

24 · One-page summary

Validating commercial loan risk ratings on one page: the six-step method, the 2026 rules and fourteen terms

Print this page

In shortThe whole guide on one screen: the method, the rules as of October 2026, the readiness bands and the terms.

The method
  1. Write down the scale, each pass grade and the map to the five regulatory classes.
  2. Re-score every loan on the approved scorecard; list overrides and their reasons.
  3. Compare look-alike borrowers graded by different lenders; add the gaps up by lender, region and industry.
  4. Read the memo behind each flagged grade; keep the grades the memo justifies.
  5. Report migration, double downgrades and upgrades per downgrade by region; back-test by band.
  6. A credit officer outside the lending line confirms each regrade; the chief credit officer signs for committee.

Readiness: score 0–2 on eight questions: 0–6 explore · 7–11 pilot · 12–16 implement.

As of October 2026: OCC Rating Credit Risk (2001) is the core text · 2020 interagency credit risk review guidance in force · SR 26-2 replaced SR 11-7 on April 17, 2026 · OCC lending booklet Version 1.0, July 2026 · 18-month exam cycle under $6 billion since September 14, 2026 · OCC and FDIC MRA rule effective November 2, 2026 · 2025 SNC non-pass 8.6%.

14 terms
Risk rating
The bank's grade for a loan on its own scale; one step is a notch.
Pass
Any grade above special mention; banks define their own pass grades.
Special mention
Potential weaknesses that deserve management's close attention.
Classified
Substandard, doubtful or loss.
Substandard
A well-defined weakness; inadequately protected; some loss possible.
Doubtful · Loss
Full collection improbable · uncollectible, charge it off.
Dual risk rating
A borrower grade for default and a facility grade for the loss.
PD · LGD · EL
Probability of default · loss given default · expected loss.
Scorecard
Weighted factors that produce a suggested grade.
Override
A grade set apart from the scorecard; needs a reason code.
Look-alike pair
Two borrowers alike on industry, size and ratios, graded by different lenders.
Migration matrix
Grades at the start of a period against grades at the end.
Double downgrade
A fall of two or more grades at once.
SNC
Shared National Credit: loans of $100 million or more shared by three or more supervised institutions, re-graded by the agencies.
25 · Sources

Sources

Accessed October 2026. Regulatory status statements are as of October 2026.

  1. OCC, Comptroller's Handbook, Rating Credit Risk, April 2001, updated June 2017 and March 2025. occ.gov
  2. Basel Committee on Banking Supervision, Working Paper No. 14, Studies on the Validation of Internal Rating Systems, revised May 2005. bis.org
  3. OCC, Comptroller's Handbook, Lending and Loan Portfolio Risk Management, Version 1.0, July 2026. occ.gov
  4. W. Treacy and M. Carey, "Credit Risk Rating at Large U.S. Banks", Federal Reserve Bulletin, November 1998. federalreserve.gov
  5. Federal Reserve, SR 13-18, "Uniform Agreement on the Classification and Appraisal of Securities Held by Depository Institutions" (with OCC Bulletin 2013-28 and FDIC FIL-51-2013), October 29, 2013. federalreserve.gov
  6. OCC, Federal Reserve, FDIC and NCUA, "Interagency Guidance on Credit Risk Review Systems", 85 FR 33278, June 1, 2020. govinfo.gov
  7. Federal Reserve SR 26-2, OCC Bulletin 2026-13 and FDIC FIL-15-2026, "Revised Guidance on Model Risk Management", April 17, 2026, with the attached guidance. federalreserve.gov
  8. OCC Bulletin 2026-29, "Credit Risk: 'Lending and Loan Portfolio Risk Management' Booklet of the Comptroller's Handbook and Rescissions", June 25, 2026. occ.gov
  9. OCC, Federal Reserve and FDIC, "Expanded Examination Cycle for Certain Small Insured Depository Institutions and U.S. Branches and Agencies of Foreign Banks", interim final rule, 91 FR 58009, September 14, 2026. federalregister.gov
  10. OCC and FDIC, "Unsafe or Unsound Practices, Matters Requiring Attention", final rule, 91 FR 56004, September 1, 2026 (effective November 2, 2026). federalregister.gov
  11. Shared National Credit Program, "2025 SNC Program Charts, 1st and 3rd Quarter 2025 Reviews" (attachment), January 12, 2026. federalreserve.gov
  12. M. Plosser and J. Santos, "Banks' Incentives and the Quality of Internal Risk Models", Federal Reserve Bank of New York Staff Report 704, December 2014 (published in the Review of Financial Studies, 2018). newyorkfed.org
  13. S. Firestone and M. Rezende, "Are Banks' Internal Risk Parameters Consistent? Evidence from Syndicated Loans", Finance and Economics Discussion Series 2013-84, Federal Reserve Board, October 2013. federalreserve.gov
  14. Shared National Credit Program, "1st and 3rd Quarter 2024 Reviews", March 10, 2025. federalreserve.gov
  15. Federal Reserve, FDIC and OCC, "Agencies issue 2025 Shared National Credit Program report", January 12, 2026. federalreserve.gov
  16. Federal Reserve, FDIC and OCC, "Agencies issue 2024 Shared National Credit Program report", March 10, 2025. federalreserve.gov
  17. OCC, Bank appeal summary: Shared National Credit, third quarter 2024 examination (interagency appeals panel). occ.gov
  18. Federal Reserve Office of Inspector General, "Material Loss Review of Community First Bank", March 12, 2010. oig.federalreserve.gov
  19. Federal Reserve Office of Inspector General, "Material Loss Review of Barnes Banking Company", September 1, 2010. oig.federalreserve.gov
  20. Federal Reserve Office of Inspector General, "Material Loss Review of Midwest Bank and Trust Company", December 8, 2010. oig.federalreserve.gov
  21. FDIC Office of Inspector General, AUD-18-002, "Material Loss Review of First NBC Bank, New Orleans, Louisiana", November 2017. fdicoig.gov
  22. U.S. Treasury OIG, OIG-25-024, "Safety and Soundness: Failed Bank Limited Review – First National Bank of Lindsay", March 27, 2025. oig.treasury.gov
  23. U.S. Treasury OIG, OIG-26-023, "Safety and Soundness: Failed Bank Limited Review – Santa Anna National Bank", March 11, 2026. oig.treasury.gov
  24. NIST, Artificial Intelligence Risk Management Framework (AI RMF 1.0), January 2023. nvlpubs.nist.gov
  25. U.S. Department of the Treasury, "Artificial Intelligence in Financial Services", December 2024. home.treasury.gov
  26. FDIC, Quarterly Banking Profile, Second Quarter 2026 (data as of June 30, 2026). fdic.gov
  27. Federal Reserve Bank of St. Louis, FRED, Commercial and Industrial Loans, All Commercial Banks (BUSLOANS), from the Federal Reserve H.8 release, through September 2026. fred.stlouisfed.org
  28. O*NET OnLine (U.S. Department of Labor), Credit Analysts, 13-2041.00: median wages (2025), from Bureau of Labor Statistics wage data. onetonline.org
  29. U.S. Bureau of Labor Statistics, "Employer Costs for Employee Compensation – June 2026", September 9, 2026 (copy on FRASER). fraser.stlouisfed.org
Next step

See it on your own rated book.

Explore the solution, or bring a sample of your rated loans, your scorecard and the memos behind the grades, and we will compare like with like with you, every finding cited.

botminds.ai The complete guide to risk rating validation · October 2026. Kestrel Valley Bank, Brinmoor Freight Lines, Coulter Haulage, every other bank, borrower and person, and every figure in the example and the screens are fictional. Regulatory status is as of October 2026; check the sources before relying on it.