Settlement, Safekeeping and Rollover Risk

1. Why This Topic Matters

When treasury professionals think about the risks of short-term investing and short-term borrowing, their minds usually jump straight to credit risk and interest rate risk. Yet some of the most damaging losses in treasury history came not from a borrower defaulting on a bond, but from a failure in the plumbing of the transaction itself: a counterparty that never delivered the securities it was paid for, a custodian that collapsed with client assets in its vault, or a commercial paper program that suddenly could not be refinanced when the market froze.

The AFP Certified Treasury Professional (CTP) exam tests this topic within the Corporate Liquidity Management body of knowledge because the treasury function is the steward of a company's cash and near-cash. A company can have perfectly sound investment policy limits on credit quality and still lose money if it does not understand how a trade settles, where the securities are held, and what happens when a funding instrument matures and must be replaced. These three risks, settlement risk, safekeeping risk and rollover risk, sit at the intersection of liquidity management, operational risk and counterparty risk, which is exactly why examiners like them. They allow a single question to test whether you understand the mechanics of the money market rather than just its vocabulary.

From a practical standpoint, this topic matters because:
- The 2008 financial crisis demonstrated that funding markets can shut down almost overnight, exposing firms that relied on continuously rolling short-term paper.
- The failure of Lehman Brothers left many clients fighting for years to recover assets that were held in custody or used as collateral.
- Foreign exchange settlement failures (the classic Herstatt case) led to the creation of entire industry utilities such as CLS Bank.
- Investment policies written by treasurers and approved by boards must explicitly address who holds the securities, how trades settle and how maturities are staggered.

2. What These Risks Are: Definitions

Settlement Risk
Settlement risk is the risk that one party to a financial transaction delivers its side of the deal (cash or securities) but the counterparty fails to deliver its side. It arises because of the time gap, however brief, between when one leg of a transaction is completed and when the other leg is completed. In its purest form it is a type of counterparty risk, but it is distinct from credit risk because the loss is not caused by a borrower being unable to repay a loan over time; it is caused by a failure at the precise moment of exchange.

The most famous illustration is Herstatt risk, named after the German bank Bankhaus Herstatt, which was closed by regulators in 1974 after it had received Deutsche Mark payments from counterparties but before it had delivered the corresponding US dollar payments in New York. The counterparties had paid in full and received nothing. Because of this example, settlement risk in foreign exchange is often simply called Herstatt risk on the exam.

Safekeeping Risk
Safekeeping risk (sometimes called custody risk) is the risk of loss arising from the way securities are held after purchase. It includes the risk that the institution holding the securities fails, that the securities are lost, stolen, misappropriated or commingled with the custodian's own assets, or that record-keeping errors prevent the investor from proving ownership. The core issue is: who physically or electronically controls the asset, and would the investor still own it if that institution went bankrupt?

Safekeeping risk is especially relevant to repurchase agreements (repos). In a repo, an investor lends cash to a dealer and receives securities as collateral. If the dealer keeps the collateral in its own custody (a hold-in-custody or HIC repo), the investor is exposed to the possibility that the dealer never actually segregated the collateral, pledged the same collateral to multiple investors, or simply fails while holding it.

Rollover Risk
Rollover risk is the risk that a maturing short-term instrument cannot be renewed, replaced or refinanced on acceptable terms, or at all. It has two faces on the CTP exam:

- From the borrower or issuer perspective, rollover risk is the risk that a company funding itself with short-term debt such as commercial paper (CP) will be unable to issue new paper to repay the paper that is maturing. Because CP is typically rolled continuously, with new issues used to pay off old issues, any disruption in investor demand or any deterioration in the issuer's credit rating can leave the company facing a large cash outflow it cannot meet. This is the primary meaning of rollover risk in the corporate liquidity context.

- From the investor perspective, rollover risk is closely related to reinvestment risk: when a short-term investment matures, the investor may be unable to reinvest the proceeds in an instrument with comparable yield, credit quality or liquidity. If rates have fallen or suitable issuers have disappeared from the market, the investor rolls over into lower returns or accepts higher risk.

The common thread is maturity mismatch: short-term instruments must be renewed frequently, and each renewal is a point at which market conditions can fail you.

3. How Each Risk Works and How It Is Managed

3.1 Settlement Risk in Practice

Consider a corporate treasurer who buys 10 million dollars of a Treasury bill from a broker-dealer. The trade is agreed on Monday with settlement on Tuesday. If the treasurer's bank wires the cash on Tuesday morning and the dealer's clearing bank does not deliver the T-bill, the company has 10 million dollars at risk until either the securities arrive or the cash is returned. If the dealer became insolvent during that window, the company would be an unsecured creditor.

Key dimensions of settlement risk:
- Principal risk: the full face amount of the transaction is at risk, not just the profit or the interest.
- Time-zone risk: in cross-currency deals, one currency's payment system may close many hours before the other's opens, lengthening the exposure window.
- Operational failure: even a solvent counterparty can fail to settle because of system outages, incorrect instructions or holiday mismatches, creating liquidity gaps for the receiving party.

Mitigation techniques the exam expects you to know:
- Delivery versus Payment (DVP): the securities and the cash are exchanged simultaneously through a clearing system so that neither party delivers unless the other does. DVP is the single most important control against settlement risk in securities transactions and is a near-automatic correct answer when a question asks how to reduce settlement risk on an investment purchase.
- Payment versus Payment (PVP): the foreign exchange equivalent of DVP, implemented by CLS Bank, which settles both legs of an FX trade simultaneously and only if both parties have funded their obligations.
- Central counterparties and clearing houses: a clearing house interposes itself between buyer and seller, guaranteeing performance to both sides and netting obligations to reduce the gross amount that must settle.
- Netting agreements: bilateral or multilateral netting reduces the number and size of payments that must be exchanged, shrinking the exposure.
- Counterparty limits and approved dealer lists: investment policies restrict dealing to financially strong, pre-approved counterparties and cap exposure to any one of them.
- Use of a third-party custodian to settle trades: the custodian only releases cash upon confirmation of receipt of securities.

3.2 Safekeeping Risk in Practice

After a security is purchased, it must be held somewhere. In modern markets almost all securities are held in book-entry form, meaning ownership is recorded electronically through a chain of intermediaries ending at a central securities depository. The corporate investor typically does not appear directly at the depository; instead, its holdings are recorded at a custodian bank or broker-dealer, which in turn holds a position at the depository.

The safekeeping arrangements that matter on the exam:
- Third-party custodian: an independent bank or trust company, separate from the broker-dealer that executed the trade, holds the securities in the investor's name in a segregated account. This is the gold standard and the usual correct answer for minimizing safekeeping risk.
- Securities held by the dealer: holding assets with the same institution that sold them concentrates both counterparty and custody exposure in one place. If the dealer fails, the investor must rely on insolvency law, segregation rules and possibly insurance schemes to recover assets.
- Segregated versus commingled accounts: securities held in a segregated account identified as belonging to the client are generally protected from the custodian's creditors; securities commingled with the custodian's own positions may not be.

Repos and safekeeping risk deserve special attention because the exam frequently frames safekeeping questions around repurchase agreements. The three structures to memorize:
- Hold-in-custody (HIC) repo: the dealer retains the collateral. Lowest cost, highest safekeeping risk. Investors have been defrauded when dealers pledged the same securities to multiple lenders or never possessed them at all.
- Delivery repo: collateral is actually delivered to the investor's custodian. Lowest safekeeping risk, but higher transaction costs, which may be uneconomic for overnight repos.
- Tri-party repo: an independent third-party custodian bank holds the collateral on behalf of both the dealer and the investor, verifies that collateral meets agreed eligibility criteria, marks it to market and manages substitutions. Tri-party repo is the standard answer for balancing cost and safety and is the structure most large corporate treasuries use.

Additional safekeeping controls:
- Regular reconciliation of custodian statements to internal records.
- Independent confirmations sent directly from the custodian to the investor, not through the dealer.
- Review of the custodian's financial strength, regulatory status and internal control reports (such as SOC 1 reports).
- Collateral haircuts and daily marking to market in repo transactions so that collateral value exceeds the cash lent.
- Written custody agreements specifying segregation, liability for loss and procedures on insolvency.

3.3 Rollover Risk in Practice

Imagine a company with 500 million dollars of commercial paper outstanding, issued in maturities of 30 to 90 days. Every few weeks, a tranche matures and the company issues new paper to repay it. In normal markets this is routine and cheap, which is precisely why CP is attractive. But the company has effectively financed long-lived needs with debt that must be renewed roughly every two months. If investors stop buying, perhaps because the company's rating is downgraded below the top tier that money market funds require, or because the entire CP market seizes up as it did in September 2008, the company faces a 500 million dollar obligation with no funding source. This is rollover risk in its most dangerous form, and it is a liquidity risk, not a solvency risk: the company may be perfectly profitable and still default.

Mitigation from the issuer side:
- Backup lines of credit: rating agencies effectively require CP issuers to maintain committed bank credit facilities covering 100 percent of outstanding paper (sometimes less for the very highest-rated issuers). If the CP cannot be rolled, the company draws the bank line to repay investors. On the exam, backup credit facility is the textbook answer to the question of how a CP issuer manages rollover risk.
- Staggering or laddering maturities: spreading maturity dates so that only a manageable portion of total debt comes due at any one time, reducing the amount that must be refinanced on any single day.
- Diversifying funding sources: combining CP with bank debt, medium-term notes, asset-backed facilities and longer-term bonds so no single market failure is fatal.
- Extending average maturity: issuing longer-dated paper or terming out debt reduces the frequency of rollovers, albeit at a higher cost.
- Maintaining a liquidity buffer: holding cash and highly liquid investments sufficient to cover near-term maturities.
- Protecting the credit rating: because CP demand is heavily rating-dependent, maintaining metrics consistent with a strong short-term rating (A-1/P-1) is itself a rollover-risk management tool.

Mitigation from the investor side:
- Maturity laddering of the investment portfolio so that funds mature at regular intervals and are reinvested across varying rate environments, smoothing reinvestment outcomes.
- Matching maturities to forecast cash needs so that proceeds are used for operations rather than needing to be reinvested in an unfavorable market.
- Diversifying across instruments and issuers so that the disappearance of one issuer or one instrument type from the market does not force a sharp change in portfolio quality or yield.
- Avoiding overconcentration in very short maturities when rates are expected to fall, since every rollover would lock in a lower rate.

3.4 Distinguishing These Risks from Their Neighbors

A large share of exam errors in this area come from confusing closely related terms. Keep these distinctions sharp:

- Settlement risk versus credit (default) risk: Credit risk is the risk that the issuer of the security fails to pay interest or principal over the life of the instrument. Settlement risk is the risk that the counterparty to the trade fails to deliver at the moment of exchange. You can have settlement risk when buying a risk-free Treasury bill, because the dealer, not the US government, might fail to deliver.
- Safekeeping risk versus credit risk: The security may be perfectly sound; the risk is that the entity holding it for you fails or misappropriates it.
- Rollover risk versus reinvestment risk: Reinvestment risk is specifically about reinvesting cash flows (coupons or principal) at lower interest rates. Rollover risk is broader and includes the possibility of being unable to refinance or reinvest at all. When the question is about an issuer of CP, the answer is rollover risk, not reinvestment risk.
- Rollover risk versus liquidity risk: Liquidity risk for an investor is the risk of being unable to sell a security quickly at fair value before maturity. Rollover risk is about what happens at maturity. For a borrower, rollover risk is a specific sub-type of funding liquidity risk.
- Settlement risk versus Herstatt risk: Herstatt risk is settlement risk in the specific context of foreign exchange transactions across time zones. If the question mentions currencies, FX or time zones, Herstatt is the precise term.

4. Worked Exam-Style Examples

Example 1
A treasurer purchases 25 million dollars of agency discount notes from a broker-dealer and instructs the company's bank to wire payment on settlement date. The dealer experiences a system failure and does not deliver the notes until two days later. Which risk did the company experience?

Reasoning: Cash went out before securities came in; the exposure arose at the point of exchange. This is settlement risk. It is not credit risk, because the agency issuer was never in question, and it is not safekeeping risk, because the company never had custody of the notes during the gap. The control that would have prevented it is delivery versus payment.

Example 2
A company invests excess cash in overnight repos with a single dealer. The dealer holds the collateral in its own account and sends the company a daily confirmation listing the securities pledged. Which action would most reduce the company's safekeeping risk?

Reasoning: This is a hold-in-custody repo. Options such as increasing the haircut or diversifying dealers reduce credit exposure but do not address who holds the collateral. Moving to a tri-party repo arrangement, where an independent custodian holds and verifies the collateral, is the direct answer to safekeeping risk.

Example 3
A manufacturer funds its working capital with 300 million dollars of commercial paper, continuously issued in 45-day maturities. Its treasurer is concerned that a credit downgrade could make the paper unsellable. Which is the most appropriate tool to manage this exposure?

Reasoning: The risk described is rollover risk from the issuer's perspective. The standard mitigation is a committed backup line of credit sized to cover outstanding paper. Interest rate swaps address rate risk, not refinancing risk, and are a common distractor.

Example 4
An investor holds a portfolio of 30-day CP. Rates have fallen sharply and the investor must now reinvest maturing proceeds at much lower yields. Which risk is this?

Reasoning: The proceeds can be reinvested, just at lower rates. This is reinvestment risk, the investor-side version of rollover risk. If the answer choices include both reinvestment risk and rollover risk, examiners usually intend reinvestment risk when the emphasis is on lower rates and rollover risk when the emphasis is on inability to renew financing. Read the stem carefully for which party is affected.

Example 5
A US company sells euros and buys dollars with a European bank. The euros are paid out through the European payment system in the morning European time; the dollars are to be received through the US system later that day. The European bank is closed by regulators at midday. What risk has materialized?

Reasoning: Cross-currency, time-zone gap, one leg paid, counterparty fails. This is Herstatt risk, the FX form of settlement risk. CLS Bank's payment-versus-payment mechanism exists to eliminate it.

5. Exam Tips: Answering Questions on Settlement, Safekeeping and Rollover Risk

Tip 1: Identify the moment in the transaction life cycle. Ask yourself where the risk occurs. At the point of exchange of cash for securities? That is settlement risk. While the security is being held after purchase? That is safekeeping risk. When the instrument matures and must be replaced? That is rollover risk. Mapping the stem to a point on this timeline resolves most classification questions.

Tip 2: Identify whose perspective the question takes. Rollover risk means something slightly different for an issuer (cannot refinance) than for an investor (cannot reinvest on comparable terms). If the stem describes a company issuing commercial paper, think backup credit lines. If it describes a company investing in commercial paper, think laddering and reinvestment risk.

Tip 3: Learn the risk-to-control pairings cold. The exam often asks for the best mitigation rather than the name of the risk. Memorize these pairs:
- Settlement risk: delivery versus payment (DVP), payment versus payment via CLS for FX, clearing houses, netting, approved counterparty lists.
- Safekeeping risk: independent third-party custodian, segregated accounts, tri-party repo instead of hold-in-custody repo, direct confirmations, reconciliations.
- Rollover risk (issuer): committed backup line of credit, staggered maturities, diversified funding sources, maintaining strong short-term credit ratings.
- Rollover or reinvestment risk (investor): maturity laddering, matching maturities to cash needs, diversification of instruments and issuers.

Tip 4: Watch for trigger words. Custodian, segregated, hold-in-custody, tri-party and collateral held by the dealer all point to safekeeping risk. Fails to deliver, counterparty did not pay, time zone and Herstatt point to settlement risk. Refinance, renew, maturing paper, downgrade and backup facility point to rollover risk.

Tip 5: Eliminate the classic distractors. Interest rate swaps and futures hedge interest rate risk, not rollover or settlement risk. Credit default swaps and credit limits address issuer default, not settlement failure. Increasing a repo haircut addresses collateral value fluctuation, not who holds the collateral. If an answer choice sounds sophisticated but addresses a different risk, it is a distractor.

Tip 6: Remember that risk-free issuers do not eliminate operational risk. A question may describe a purchase of Treasury bills and ask what risk remains. The temptation is to say none, but settlement and safekeeping risk remain because they arise from the dealer and the custodian, not from the issuer.

Tip 7: Know the repo hierarchy. Rank repo structures by safekeeping risk from highest to lowest: hold-in-custody, tri-party, delivery. Rank by cost from lowest to highest in the same order. The exam loves asking which structure best balances the two; the answer is tri-party.

Tip 8: Connect to investment policy. Questions framed around what a written short-term investment policy should include often have answers touching these risks: requiring DVP settlement, naming an approved independent custodian, specifying acceptable repo structures and collateral, setting maximum maturity and laddering requirements, and limiting concentration by counterparty.

Tip 9: Use the process of elimination on definitional questions. When four risks are listed and the stem describes one scenario, cross out the two that are clearly about the issuer's ability to pay (credit) or about market price movement (interest rate or price risk). The remaining operational risks, settlement, safekeeping and rollover, can then be separated using the life cycle test in Tip 1.

Tip 10: Expect the historical references. Herstatt (1974) illustrates FX settlement risk and led to CLS. The 2008 freeze of the commercial paper market illustrates rollover risk and the importance of backup lines. Dealer failures and collateral disputes illustrate safekeeping risk and the value of tri-party custody. Recognizing these examples helps you quickly identify what an unfamiliar scenario is really about.

6. Quick Recap

- Settlement risk: counterparty fails to deliver at the moment of exchange; full principal at risk; FX version is Herstatt risk; mitigated by DVP, PVP/CLS, clearing houses and netting.
- Safekeeping risk: loss from how securities are held after purchase; highest in hold-in-custody repos and dealer custody; mitigated by independent third-party custodians, segregation and tri-party repo.
- Rollover risk: inability to refinance maturing debt or to reinvest maturing investments on acceptable terms; CP issuers mitigate it with backup lines of credit and staggered maturities; investors mitigate it with laddering and diversification.

Master the timeline, the perspective and the risk-to-control pairings, and questions on settlement, safekeeping and rollover risk become among the most predictable points available on the CTP exam.