Beyond Capital Adequacy, Enterprise Resilience is the Next Frontier for Nigerian Banks 

Historically, we have seen financial institutions that looked comfortably capitalised on paper but saw their entire capital buffer and capital evaporate within weeks during a systemic shock. This demonstrates that capital strength or adequacy does not translate to resilience under extreme plausible conditions. An urgent transition from static compliance to dynamic resilience is without doubt required in the management of risks today. A bank’s executive board shouldn’t be comfortable seeing that its operations hold enough capital for today’s calm waters, its mandate should ensure that there is consistent rigorous stress testing of the bank’s entire system architecture to guarantee solvency when tomorrow’s inevitable storms hit.

The New Regulatory Baseline

What regulators want is changing, and it’s changing fast; they are not just checking if your balance sheet meets today’s minimum requirements. The new expectation is entirely forward-looking. This is why Nigeria’s Central Bank (CBN) soon after the recapitalisation milestone required a stress test and additionally wanted to know the cyber security posture of banks. The real question they are asking now is, “can our banks stay above regulatory minimums after being hit by a severe but plausible macroeconomic shock?” Banks need to understand what happens if the answer to that is no.

A bank that is merely compliant is just focusing on a static view of capital in an era of fluidity in business environments.

Dynamic enterprise-wide stress testing is the only real way for a bank to measure its capacity because it calculates not just the capital level today, but the exact rate at which capital bleeds during a crisis. It’s how a resilient bank makes sure it never accidentally steers into that regulatory ICU.

Six Core Systemic Vulnerabilities

A FY 2025 cursory review of the Nigerian banking sector makes things look pretty broadly resilient on the surface, but the real meat is what real structural cracks start to show up if a rigorous, above-regulatory-minimum stress testing lens is used to look at the industry’s resilience; cracks that could easily push an institution right out of its comfort zone within weeks. Below are six core vulnerabilities that should be on every board’s radar:

If these are left unmanaged, a bank’s ability to weather macroeconomic turbulence will be severely compromised. It is therefore critical how these threats are actually tackled. Every single vulnerability needs a proactive, immediate management action from the board.

For non-performing loans, early warning systems must be sharpened to ensure distressed quarters are caught before a default even happens. For FX risk, especially given the sharp exchange rate adjustments we’ve seen in the past (2023/24), continuous, rigorous shock simulations under compounding devaluation scenarios have to be executed to arrive at visible outcomes. And for concentration risk, strict concentration limits have to be hardwired into daily capital allocation decisions, forcing portfolio diversification and throwing genuine executive weight behind it to make it happen. These active limits must anticipate adverse conditions without limiting the institution’s revenue generating ability.

Which brings us to the multi-risk cascade — what happens when these vulnerabilities actually collide. What happens when these isolated risks don’t just sit politely on a spreadsheet but interact simultaneously in the real world? We have to visualise this domino effect because it is visceral and it is fast.

The Multi-Risk Cascade

Imagine a sudden macroeconomic shock hits. That’s stage one, which instantly triggers stage two, a severe sharp FX depreciation. As a result of that sudden currency drop, stage three hits hard. Borrowers relying on imported raw materials or operating in heavily exposed sectors like oil and gas suddenly can’t service their debt and see associated collaterals get significantly devalued, driving an immediate spike in NPLs. The whole cascade then culminates in stage four: massive impairment charges that crush profitability, rapidly drain available liquidity, and completely chew through structural capital buffers.

Let’s put some numbers to this to really see the mechanics of this erosion. Visualise a highly realistic scenario where an institution’s pre-shock baseline shows a pretty healthy capital adequacy ratio (CAR) of 40% sitting comfortably above the regulatory minimum (15%). Now hit the economy with a 30% currency devaluation combined with a mild recession. The interaction of those immediate credit losses, intense FX shocks, and crushing margin pressure mechanically burns through that capital.

A crucial question will then be how long can that degraded buffer keep the institution going? This post-cascade reality is a brutal erosion that pushes a bank straight down into the amber zone, totally stripping away its strategic autonomy.

The takeaway here is that managing risks in silos is just totally defunct. The absolute greatest threat to a bank’s resilience is never just one single risk happening in isolation. It’s the simultaneous interaction of these shocks that erode liquidity and destroy capital. Traditional risk management tends to treat credit risk, FX risk, and liquidity risk as completely separate departments. But this multi-risk cascade is so deadly precisely because it exploits those exact operational silos.

Roadmap to Genuine Resilience

The strategic mandate that a board has is to proactively protect the bank, and ensure its bank never faces capital depletion, and remain firmly in the CBN’s comfort zone, significantly above regulatory minimum. A road map to genuine resilience and proactive defense mechanisms would need to follow a practical three-step route:

What does that actually look like? It means a massive new syndicated lending initiative is not approved until that specific portfolio passes a forward-looking stress simulation. More often than not, profitability is the overbearing consideration on such lending initiatives, which is why we’ve seen a sector-specific shock adversely affect some banks recently. These action items have to be tangible and they have to be strictly enforced.

By integrating these specific defense mechanisms, we start adopting the habits of institutions that live safely in the green zone, significantly above regulatory minimum. Internal capital targets that are materially above the minimums have to be maintained. Aggressive diversification of revenue streams beyond just interest income has to be pursued. Why? Because in a highly volatile interest rate environment, non-interest revenue acts as a crucial stabilising ballast. Please note that most times volatility is seen as referencing movements, but even in seemingly stable times volatility can reference over-hanging structural uncertainties fueled by macro-economic policies that are not well thought-through.

Institutions also really need to firm up asset liability matching across currencies. For a Nigerian bank dealing with relentless FX uncertainties, this means making absolutely sure its foreign currency liabilities are perfectly matched with high-quality foreign currency assets so its balance sheet doesn’t collapse during a sudden devaluation. And lastly, banks must strengthen those concentration risk limits immediately.

Each institution’s execution would surely be affected by its internal operational dynamics, but one thing is sure: modern risk management has shifted from predicting specific crises to building institutional resilience against a multi-risk cascade of extreme but plausible events.

This article is based on an internal executive brief drawing on FY2025 published financial results and current supervisory guidance. It reflects the author’s analytical assessment and does not constitute regulatory or investment advice.