What Is Basel II? The Three Pillars and Path to Basel III

Basel II is an international banking regulation, published by the Basel Committee on Banking Supervision on June 10, 2004, that requires internationally active banks to hold capital equal to at least 8% of their risk-weighted assets and to manage risk under three connected pillars: minimum capital requirements, supervisory review, and public disclosure. It replaced the simpler 1988 Basel I accord and tied capital charges much more closely to the actual riskiness of a bank’s loans and trading positions. Basel III has since built on top of it, but the three-pillar structure Basel II introduced is still the shape of modern bank regulation.

Why Basel II Replaced Basel I

Basel I, finalized in 1988, was a breakthrough at the time but blunt. It sorted bank assets into a few buckets and gave each a fixed risk weight. Nearly all corporate loans carried a flat 100% weight regardless of the borrower’s credit quality, so a loan to a shaky company consumed the same capital as a loan to a blue-chip multinational.1Investopedia. Basel I Explained That created a perverse incentive: if the capital charge was identical, banks had reason to reach for the higher-yielding, riskier borrower.

Basel II fixed this in three ways. It made credit risk capital sensitive to the actual credit quality of borrowers rather than broad asset categories. It added a dedicated capital charge for operational risk, something Basel I ignored entirely. And it went beyond a single ratio by pairing the numerical rules with supervisory oversight and public disclosure, so regulators and markets could act as checks on the math.

The Three Pillars of Basel II

Basel II is organized around three pillars that reinforce one another:

  • Pillar 1, minimum capital requirements: the quantitative engine that sets formulas for how much capital a bank must hold against credit, operational, and market risk.
  • Pillar 2, supervisory review: national regulators evaluate whether a bank’s own risk management and capital planning are adequate and can require more capital if they are not.
  • Pillar 3, market discipline: banks must publicly disclose their risk exposures and capital structure so that investors and counterparties can judge for themselves.

No pillar was designed to work alone. A bank might clear the Pillar 1 math and still face a Pillar 2 demand for extra capital because its controls are weak, while Pillar 3 disclosures let the market price that weakness into funding costs.

Pillar 1: Minimum Capital Requirements

Pillar 1 sets the minimum capital a bank must hold against three categories of risk: credit, operational, and market. Total capital must be no lower than 8% of risk-weighted assets.2Bank for International Settlements. International Convergence of Capital Measurement and Capital Standards Risk-weighted assets are calculated by multiplying each exposure by a risk weight reflecting the likelihood of loss. A bond from a top-rated government might carry a 0% weight; a loan to a weak corporate borrower could carry 150%.

Credit Risk

Credit risk, the chance a borrower fails to repay, is the largest component of most banks’ capital requirements. Basel II offers two broad measurement options.

The Standardized Approach assigns risk weights based on external credit ratings. For sovereign exposures, weights run from 0% for the highest-rated governments (AAA to AA-) up to 150% for those rated below B-, with unrated sovereigns at 100%.3Bank for International Settlements. CRE20 – Standardised Approach: Individual Exposures Similar rating-linked schedules apply to banks, corporations, and other counterparties. Higher rating, lower weight, less capital tied up.

The Internal Ratings-Based (IRB) Approach lets more sophisticated banks use their own models. Under Foundation IRB, a bank estimates the probability of default for each borrower but uses regulator-set values for loss given default and exposure at default. Under Advanced IRB, the bank estimates all of those inputs itself.4Federal Deposit Insurance Corporation. Financial Stability and Basel II IRB requires regulatory approval, rigorous data, and ongoing validation. The payoff is a capital charge that tracks the bank’s actual risk profile more closely.

Banks can also reduce their credit risk capital charge through recognized mitigation techniques: posting cash or securities as collateral, obtaining guarantees, buying credit derivatives, and netting loans against deposits from the same counterparty.5Bank for International Settlements. Standardised Approach: Credit Risk Mitigation To qualify for capital relief, the protection must be legally enforceable in the relevant jurisdictions, and the protection provider’s credit quality cannot be closely correlated with the borrower.

Operational Risk

One of Basel II’s most important innovations was requiring banks to hold capital against operational risk: losses from internal failures, human error, system breakdowns, fraud, or external events. Basel I had no such requirement, though operational losses have brought down major institutions.

Three methods were offered. The Basic Indicator Approach is the simplest: capital equal to 15% of average positive gross income over the previous three years.6Bank for International Settlements. OPE20 – Basic Indicator Approach The Standardized Approach is more granular, splitting activities into eight business lines and applying a factor to each line’s gross income, ranging from 12% for retail banking, asset management, and retail brokerage up to 18% for corporate finance, trading, and payment and settlement.7Bank for International Settlements. International Convergence of Capital Measurement and Capital Standards

The most sophisticated option was the Advanced Measurement Approach (AMA), which let banks build their own internal models, subject to supervisory approval and a soundness standard comparable to a 99.9th percentile confidence interval over a one-year horizon.7Bank for International Settlements. International Convergence of Capital Measurement and Capital Standards AMA was meant to reward banks that invested in loss data and modeling, but it produced inconsistent results across institutions and was later retired under Basel III.

Market Risk

Market risk covers losses from movements in interest rates, equity prices, foreign exchange rates, and commodity prices on a bank’s trading positions. Basel II largely carried forward the 1996 Amendment to Basel I rather than redesigning market risk from scratch.

Banks can use a Standardized Approach that applies fixed risk weights to open positions, or, with regulatory approval, internal Value-at-Risk (VaR) models. Under the internal models approach, the capital charge is the higher of the previous day’s VaR or the 60-business-day average multiplied by a supervisor-set factor of at least 3, with VaR calculated using a 99% confidence interval, a minimum 10-day holding period, and at least one year of historical data.8Bank for International Settlements. An Internal Model-Based Approach to Market Risk Capital Requirements

Pillar 2: Supervisory Review

Pillar 1 produces a number. Pillar 2 asks whether that number is enough. National regulators evaluate each bank’s overall risk management, controls, governance, and capital planning in a process that goes well past checking a ratio.9Federal Reserve. The Second Pillar – Supervisory Review Process

There are two sides to it. Banks run an Internal Capital Adequacy Assessment Process (ICAAP), where management identifies every material risk the institution faces, including risks Pillar 1 formulas do not fully capture such as concentration risk, liquidity risk, and strategic risk, and decides how much capital is needed to cover them. Regulators then conduct their own Supervisory Review and Evaluation Process (SREP) to test whether the bank’s internal work holds up.10Bank for International Settlements. Overview of Pillar 2 Supervisory Review Practices and Approaches

Where regulators find weaknesses such as poor controls, thin modeling, or concentrated exposures that Pillar 1 does not penalize, they can require capital above the Pillar 1 minimum, restrict certain activities, or demand improvements to risk management.9Federal Reserve. The Second Pillar – Supervisory Review Process More capital is not the only remedy. The framework explicitly allows stronger internal limits, higher loan-loss provisions, and better controls as alternatives.

Pillar 3: Market Discipline

Pillar 3 requires banks to publish detailed information about their risk exposures and capital adequacy. The logic is straightforward. If investors, depositors, and counterparties can see how risky a bank actually is, they will charge riskier banks more for funding and reward better-managed ones with cheaper capital.11Bank for International Settlements. The New Basel Capital Accord – Pillar Three

Required disclosures split into qualitative and quantitative categories. Qualitative disclosures cover risk management objectives, policies, and the processes used to identify and measure risk. Quantitative disclosures include breakdowns of the capital structure (Tier 1, Tier 2, and total eligible capital), capital adequacy ratios, and capital requirements for each of the three major risk types.11Bank for International Settlements. The New Basel Capital Accord – Pillar Three Banks using the IRB approach must disclose their key model parameters and assumptions.

Market discipline only works if the disclosures are meaningful. A bank that buries critical risk information in hundreds of pages of boilerplate satisfies the letter of Pillar 3 while defeating its purpose, and in the years before the 2008 crisis many observers argued that Pillar 3 disclosures were too inconsistent across institutions to allow real comparison.

How Basel II Was Applied in the United States

The United States took a selective approach. Only the largest and most internationally active banks, above set thresholds for total consolidated assets or foreign exposure, were required to adopt the Advanced Approaches (IRB and AMA). Other banks could volunteer with regulatory approval, but most stayed under existing rules derived from Basel I.12Office of the Comptroller of the Currency. Risk-Based Capital Standards: Advanced Capital Adequacy Framework – Basel II

Implementation moved slowly. By mid-2011, no U.S. bank had completed the transition to the advanced approaches; all were still computing capital under the general Basel I-based rules.12Office of the Comptroller of the Currency. Risk-Based Capital Standards: Advanced Capital Adequacy Framework – Basel II That timing matters. When the 2008 crisis hit, the United States was still largely on Basel I rules even though Basel II had been published four years earlier.

What Basel II Missed and Why Basel III Followed

The financial crisis exposed serious weaknesses in the Basel II framework, even in jurisdictions that had not yet fully adopted it.

Procyclicality was the loudest criticism. Because IRB ties capital requirements to estimates of default probability and loss severity, those requirements automatically rise in a downturn, exactly when banks can least afford to raise fresh capital. Rising requirements push banks to pull back on lending, which deepens the downturn and triggers more defaults, so the regulatory framework ends up amplifying the instability it was designed to prevent.13International Monetary Fund. The Procyclical Effects of Basel II

Basel II also lacked a simple leverage ratio and relied entirely on risk-weighted measures. A bank could look well-capitalized on a risk-weighted basis while operating with very thin capital against its total unweighted assets, especially where internal models assigned low risk weights to exposures that turned out to be far riskier than assumed.

The framework also placed heavy trust in banks’ internal models and in external credit ratings. Both proved unreliable. Models tended to understate risk during calm periods, and rating agencies assigned top-tier ratings to mortgage-backed securities that later turned out to be toxic. The AMA for operational risk drew criticism for producing wildly inconsistent capital charges across banks.

Basel III kept the three-pillar structure and strengthened it. The minimum Common Equity Tier 1 (CET1) ratio, the highest-quality capital, was set at 4.5%.14Federal Reserve. Annual Large Bank Capital Requirements A capital conservation buffer of 2.5% pushes the effective CET1 requirement to 7%, and banks that let the buffer slip face restrictions on dividends, share buybacks, and bonuses. A countercyclical buffer of up to 2.5% can be activated by national regulators during credit booms to build resilience before a downturn, addressing the procyclicality problem directly. Basel III also added a non-risk-based leverage ratio as a backstop and new liquidity requirements (the Liquidity Coverage Ratio and Net Stable Funding Ratio) covering a risk category Basel II had largely left to Pillar 2. The Advanced Measurement Approach for operational risk was retired in favor of a new standardized method, reflecting the view that internal operational-risk models produced results too inconsistent to serve as a regulatory tool.