Credit Approval Policy and Limit Compliance

Overview
Credit Approval Policy and Limit Compliance sits within the Financial, Regulatory and Operational Risk domain of the Certified Treasury Professional (CTP) body of knowledge. It covers how an organization decides whom it will extend credit to, how much exposure it will accept, who has the authority to approve that exposure, and how it monitors and enforces those limits on an ongoing basis. The topic applies to three distinct kinds of exposure that treasury professionals manage: trade credit extended to customers, counterparty credit with banks, brokers and derivative dealers, and investment credit embedded in short-term investment portfolios. On the exam, this material is tested both as a stand-alone concept and as an integrated element of working capital management, investment policy and enterprise risk management questions.

Why It Is Important
Credit risk is the risk that a counterparty will fail to meet its financial obligations when due. For most non-financial companies, accounts receivable is one of the largest assets on the balance sheet, and for treasury specifically, cash deposits, short-term investments and open derivative positions represent concentrated exposures to a small number of financial institutions. A single large default can wipe out years of margin on a customer relationship or, in the case of a failed bank, trap operating liquidity. The 2008 financial crisis and subsequent regional bank failures made counterparty limit compliance a board-level concern.

A formal credit approval policy matters for several reasons:
1. Loss prevention - It converts credit decisions from individual judgment into a consistent, documented process, reducing bad-debt expense and counterparty losses.
2. Liquidity protection - Receivables that are not collected, or deposits that are frozen, directly reduce the cash available to run the business.
3. Governance and audit - Regulators, external auditors and boards expect documented delegation of authority, segregation of duties and evidence that limits are monitored. SOX-style internal control frameworks (COSO) treat credit approval as a key control.
4. Consistency with strategy - The policy aligns credit terms with the company's risk appetite, margin structure and competitive position.
5. Capital efficiency - For financial institutions, credit limits tie directly to regulatory capital; for corporates, they influence borrowing capacity under asset-based lending facilities because lenders only advance against eligible receivables.

What It Is: Core Definitions
Credit policy - The written document, approved by senior management or the board, that establishes the organization's standards for extending credit. It typically has three components tested on the CTP: credit standards (who qualifies), credit terms (how much, for how long, and any discount), and collection policy (how overdue accounts are handled).

Credit approval - The formal act of authorizing a specific exposure to a specific counterparty up to a stated amount, by a person or committee holding the appropriate delegated authority.

Credit limit - The maximum exposure the organization is willing to have outstanding with a single counterparty, group of related counterparties, country, industry or rating category at any point in time. Limits can be expressed in currency amounts, as a percentage of the portfolio, as a percentage of counterparty net worth, or as a tenor restriction (for example, no investments beyond 90 days with an A-2/P-2 issuer).

Limit compliance - The set of monitoring, reporting and escalation processes that ensure actual exposures remain within approved limits, and that any breaches are identified, authorized or cured, and documented.

Exposure - The amount that would be lost if the counterparty defaulted today. For receivables this is the outstanding balance plus unbilled shipments; for deposits it is the balance above any insurance coverage; for derivatives it is the current mark-to-market replacement cost plus a potential future exposure add-on.

Concentration risk - The risk arising from too much exposure to a single counterparty, sector or geography. Concentration limits are a central feature of investment policies and are frequently tested.

How It Works: The Credit Approval Process
Step 1 - Application and information gathering. The prospective customer or counterparty provides financial statements, trade references, bank references and tax identification. For financial counterparties, treasury relies on published credit ratings from NRSROs (S&P, Moody's, Fitch), credit default swap spreads, regulatory capital ratios and equity price trends.

Step 2 - Analysis. Analysts apply a structured framework. The classic model is the Five Cs of Credit: Character (willingness to pay, payment history), Capacity (cash flow sufficient to service obligations), Capital (equity cushion and leverage), Collateral (assets that can secure the exposure), and Conditions (economic, industry and purpose of credit). Many companies supplement this with statistical credit scoring models, agency reports (such as Dun & Bradstreet), and financial ratio analysis including current ratio, debt-to-equity, interest coverage and days sales outstanding of the counterparty itself.

Step 3 - Approval under delegated authority. The policy contains an authority matrix that specifies who may approve what. A typical structure: credit analysts approve up to a small threshold, the credit manager up to a mid-level amount, the treasurer or CFO above that, and the board or a credit committee for the largest or most unusual exposures. Dual approval is common for large amounts. Critically, the salesperson who benefits from the sale should not hold approval authority - this is a segregation of duties control.

Step 4 - Limit setting and documentation. The approved limit, terms, review date and any conditions (personal guarantee, letter of credit, credit insurance, collateral) are recorded in the ERP or treasury management system. For bank counterparties, the investment policy typically sets limits by rating tier, by maximum percentage of the portfolio per issuer, and by maximum maturity.

Step 5 - Ongoing monitoring. Exposures are aggregated across all business units, legal entities and product types, so that the company sees its total exposure to a corporate group, not just one subsidiary. Systems perform pre-transaction checks: an order is held if shipment would push the customer over its limit, or a trade is blocked if it would breach a dealer limit. Watch lists track rating downgrades, late payments, covenant breaches and negative news.

Step 6 - Exception management. When a limit is breached, the policy defines whether the breach is passive (caused by market movement, such as a derivative moving further into the money) or active (caused by a new transaction). Active breaches generally require prior approval; passive breaches require prompt reporting and a cure plan. Temporary over-limit approvals must be time-bound and approved at a higher authority level than the original limit.

Step 7 - Periodic review. Limits are not permanent. The policy specifies annual or more frequent reviews, triggered reviews upon rating changes, and a full policy refresh approved by the board at set intervals.

Limit Compliance in Practice
Effective compliance rests on four pillars:
1. Aggregation - A single view of exposure across receivables, deposits, investments, derivatives, guarantees and prepayments.
2. Real-time or daily controls - Automated blocks in the order-to-cash system and the treasury management system, plus daily exception reports.
3. Escalation and reporting - Breaches are reported to a defined level of management within a defined timeframe, and summarized for the treasury committee, audit committee or board.
4. Audit trail - Every approval, override and cure is time-stamped and attributed to an individual, supporting internal and external audit.

Key performance indicators include days sales outstanding (DSO), the aging schedule, bad-debt expense as a percentage of sales, the number and duration of limit breaches, and the percentage of exposure held with counterparties below a stated rating floor.

Risk Mitigation Tools Linked to Credit Policy
The exam frequently asks which tool reduces exposure in a given scenario. Know these:
- Letters of credit substitute a bank's credit for the buyer's.
- Credit insurance transfers default risk to an insurer for a premium.
- Factoring and receivables securitization transfer or finance receivables; non-recourse factoring removes credit risk, recourse factoring does not.
- Collateral and security interests under the Uniform Commercial Code (UCC) provide a claim on assets.
- Guarantees from a parent or third party add a second obligor.
- Netting agreements (such as ISDA master agreements) reduce gross derivative exposure to a net amount.
- Credit support annexes require posting collateral when mark-to-market exposure exceeds a threshold.
- Diversification through issuer and sector limits reduces concentration.
- Deposit insurance (FDIC coverage) and sweep arrangements limit uninsured bank exposure.
- Shortened terms, cash in advance, or COD for marginal customers reduce the size and duration of exposure.

Relationship to Other CTP Topics
Credit approval policy links to working capital management (the trade-off between looser credit terms that increase sales and the resulting rise in DSO, carrying cost and bad debt), to the short-term investment policy (issuer limits, rating floors, maturity ceilings), to bank relationship management (counterparty risk assessment and the number of relationship banks), to derivatives and hedging (counterparty risk on forwards and swaps), and to enterprise risk management and internal controls (COSO components, segregation of duties, delegation of authority).

How to Answer Exam Questions on This Topic
CTP questions in this area are scenario-based. The question describes a company, a counterparty, a transaction or a control weakness, and asks you to identify the correct policy response, the best mitigation tool, the responsible party, or the primary risk. Use this approach:

1. Identify the exposure type. Is the question about a customer (trade credit), a bank or dealer (counterparty credit), or an investment (issuer credit)? The appropriate limit structure and mitigation tool differ by type.

2. Identify what the question is really testing. Common angles include: who should approve, what control is missing, which tool reduces risk, what happens when a limit is breached, how credit terms affect working capital, and how exposure should be measured.

3. Apply the governance hierarchy. The board or senior management approves the policy and the largest limits; the credit function approves individual accounts within delegated authority; treasury monitors financial counterparties; sales and trading never approve their own counterparties.

4. Prefer the answer that is written, aggregated and independently monitored. The CTP consistently rewards formal documented processes over informal judgment, total-exposure views over siloed views, and independent monitoring over self-reporting.

5. Recognize trade-offs. When a question asks about relaxing credit standards, remember the full chain: higher sales, higher receivables and DSO, higher carrying cost, higher bad-debt expense, and a possible net benefit only if incremental margin exceeds incremental cost. The reverse chain applies when tightening.

6. Eliminate answers that violate segregation of duties or exceed delegated authority. These are almost always wrong.

Exam Tips: Answering Questions on Credit Approval Policy and Limit Compliance
Tip 1 - Memorize the Five Cs and be ready to classify a fact pattern. A customer with a strong balance sheet but a history of slow payment is a Character issue, not a Capital issue.

Tip 2 - Know the three components of credit policy: standards, terms and collection. A question about offering 2/10 net 30 is about terms; a question about minimum credit scores is about standards; a question about dunning letters is about collection.

Tip 3 - Watch for the word 'aggregate' or 'total.' If a company has exposure to a bank through deposits, a forward contract and commercial paper, the correct counterparty exposure is the sum, net of any enforceable netting, not any single piece.

Tip 4 - Distinguish gross from net exposure on derivatives. Without a netting agreement, exposure is the sum of positive mark-to-market positions; with an ISDA master agreement, it is the net of all positions.

Tip 5 - For investment policy questions, remember that limits are usually set by minimum rating, maximum percentage per issuer, maximum maturity, and permitted instrument type. Government securities are often exempt from issuer concentration limits.

Tip 6 - Remember that recourse matters. Factoring with recourse keeps credit risk with the seller; non-recourse factoring transfers it. Credit insurance transfers risk; a letter of credit substitutes it.

Tip 7 - A rating downgrade should trigger a review, not an automatic forced sale in every case. The best answer usually involves reassessing the limit, reducing new exposure and reporting to management, unless the policy explicitly mandates liquidation.

Tip 8 - Passive breaches versus active breaches. A limit breached because a derivative gained value is passive and requires reporting and a cure plan; entering a new trade that exceeds a limit without approval is an active breach and a control failure.

Tip 9 - Who approves the policy? The board of directors or a board committee approves the credit and investment policies; management implements them. Questions that place policy approval with the credit analyst or the treasurer alone are usually wrong.

Tip 10 - Segregation of duties is a favorite distractor. Any answer in which the salesperson sets the customer limit, the trader approves the dealer limit, or the person booking the exposure also monitors compliance is incorrect.

Tip 11 - Connect to liquidity. If a question asks why uninsured deposits at a single bank are a concern, the answer is both credit loss and loss of access to operating liquidity.

Tip 12 - Use calculation shortcuts. For credit-term questions, be able to compute the effective annual cost of forgoing a cash discount, the change in receivables from a change in DSO (receivables equals daily sales times DSO), and the incremental profit from a credit policy change (incremental contribution margin minus incremental carrying cost minus incremental bad debt).

Sample Question 1
A company has a USD 25 million deposit, a forward contract with a positive mark-to-market of USD 3 million, and USD 10 million of commercial paper, all with the same bank. There is no netting agreement. The counterparty limit for that bank is USD 30 million. Which statement is correct?
A. The company is within its limit because deposits are not counterparty exposure.
B. The company has a USD 38 million exposure and is in breach of its limit.
C. The company has a USD 35 million exposure because derivatives are excluded.
D. The company is within its limit because the commercial paper is rated A-1.

Answer: B. All three items are exposures to the same counterparty and must be aggregated. Without netting, the full positive mark-to-market counts. Total is USD 38 million, which exceeds the USD 30 million limit and must be reported and cured.

Sample Question 2
A regional sales director wants to ship a large order to a new customer whose balance would exceed the limit set by the credit department. Under a well-designed credit approval policy, what should happen?
A. The sales director approves the override because the sale is profitable.
B. The order is shipped and the credit department is notified afterward.
C. The order is held pending approval by the individual holding delegated authority for that exposure level, with any approval documented.
D. The credit limit is automatically increased to match the order.

Answer: C. Sales cannot approve credit (segregation of duties), approval must precede the exposure, and the approver must hold the appropriate delegated authority.

Sample Question 3
Which action most directly reduces concentration risk in a short-term investment portfolio?
A. Extending the maximum maturity.
B. Establishing a maximum percentage of the portfolio per issuer.
C. Requiring all investments to be held with the primary relationship bank.
D. Eliminating the minimum credit rating requirement.

Answer: B. Per-issuer limits are the defining tool for concentration risk. Options A and D increase risk, and C concentrates exposure.

Key Terms Quick Review
Credit standards - minimum criteria to be granted credit.
Credit terms - payment period, discount and limit offered.
Collection policy - procedures for overdue accounts.
Delegation of authority matrix - who may approve which exposure levels.
Concentration limit - cap on exposure to one issuer, sector or country.
Rating floor - minimum acceptable credit rating.
Passive breach - limit exceeded by market movement.
Active breach - limit exceeded by a new transaction.
Netting - offsetting positive and negative positions under a master agreement.
Credit support annex - collateral requirement attached to an ISDA agreement.
Non-recourse factoring - sale of receivables that transfers credit risk.
DSO - days sales outstanding, a primary monitoring metric.

Final Thoughts
For the CTP exam, think of credit approval policy and limit compliance as a complete control cycle: set the policy at the top, delegate authority clearly, analyze each counterparty with a structured framework, document the approved limit, aggregate and monitor exposure continuously, manage exceptions with higher-level approval, and review everything periodically. When faced with a scenario, locate where in that cycle the question sits, identify the control or trade-off being tested, and choose the answer that keeps the process formal, independent and fully aggregated. Mastering this logic will serve you not only on this topic but across the entire Financial, Regulatory and Operational Risk domain.