Skip to main content
Promotional banner for the pentest readiness checklist
Category: Regulatory Obligations Management

Basel III

Also known as: Third Basel Accord
Simply put

Basel III is an internationally agreed set of banking reform measures developed by the Basel Committee on Banking Supervision (BCBS) in response to the financial crisis of 2007-09. It is designed to strengthen how banks are regulated, supervised, and managed, in part by requiring them to hold more and higher-quality capital. It is the third of the Basel Accords, building on earlier international standards for the banking sector.

Formal definition

Basel III is an international regulatory framework developed by the Basel Committee on Banking Supervision (BCBS) to strengthen the regulation, supervision, and risk management of the banking sector following the financial crisis of 2007-09. As the third of the Basel Accords, it establishes international standards and minimums covering areas such as bank capital requirements and stress testing, with the broad aim of mitigating risk within the international banking sector. As an international agreement rather than directly binding law, Basel III's specific requirements typically take effect through implementation by national regulators, so applicable capital ratios, timelines, and supervisory expectations vary by jurisdiction and should be confirmed against the relevant national rules and the primary BCBS standards.

Why it matters

Basel III matters because the banking sector sits at the center of the broader financial system, and weaknesses in how individual banks are capitalized and supervised can transmit stress across markets and economies. The framework was developed by the Basel Committee on Banking Supervision (BCBS) as a direct response to the financial crisis of 2007-09, an episode that exposed shortcomings in the regulation, supervision, and risk management of banks. By raising the amount and quality of capital that banks are expected to hold, the reforms aim to make institutions more resilient to periods of stress and to reduce the likelihood and severity of future disruptions to the banking sector.

For compliance and risk professionals within banking organizations, Basel III shapes core prudential obligations, including capital requirements and stress testing. Because it is an international agreement rather than directly binding law, its influence is felt primarily through the national rules that implement it. This means the practical requirements that apply to any given institution, the specific capital ratios, timelines, and supervisory expectations, depend on the jurisdiction in which the bank operates. Professionals should treat Basel III as the internationally agreed reference point while confirming the operative details against the relevant national regulations and the primary BCBS standards.

Who it's relevant to

Compliance officers in banking
Compliance functions within banks rely on Basel III as the internationally agreed reference framework underpinning prudential obligations. Because the accord takes effect through national implementation, compliance officers should map the applicable capital and stress-testing requirements to the specific rules of their jurisdiction rather than to the BCBS text alone.
Risk managers
Risk managers use Basel III's standards for capital requirements and stress testing as part of assessing and treating the uncertainty banks face. The framework's emphasis on holding more and higher-quality capital directly informs how institutions build resilience against stressed conditions.
Bank supervisors and regulators
National supervisors and regulators are central to Basel III because the accord operates through their adoption and enforcement. They translate the internationally agreed minimums into binding domestic rules and set the supervisory expectations that apply within their jurisdictions.
General counsel and legal teams
Legal advisors within banking organizations are relevant where the interpretation of how Basel III has been implemented in national law affects obligations. Because applicable requirements vary by jurisdiction and involve matters of legal interpretation, specific questions should be confirmed against the relevant national rules and primary standards.

Inside Basel III

Enhanced Capital Requirements
Basel III strengthens the quantity and quality of regulatory capital banks must hold, with particular emphasis on common equity Tier 1 (CET1) capital as the most loss-absorbing form of capital. It raises minimum capital ratios relative to earlier Basel accords, though specific ratio thresholds should be verified against the primary Basel Committee texts and applicable national implementing rules.
Capital Buffers
The framework introduces additional capital buffers layered above minimum requirements, commonly including a capital conservation buffer intended to be drawn down in periods of stress and a countercyclical buffer that supervisors can adjust according to macro-financial conditions. Applicability and calibration vary by jurisdiction.
Leverage Ratio
Basel III adds a non-risk-based leverage ratio as a backstop to the risk-weighted capital requirements, intended to constrain the build-up of excessive leverage that risk-weighting alone may not capture.
Liquidity Standards
The framework introduces liquidity measures, commonly described as a short-term liquidity coverage standard and a longer-term stable funding standard, addressing a bank's ability to withstand funding stress. The precise definitions, ratios, and phase-in arrangements should be confirmed against the primary source and local rules.
Voluntary Standard Implemented Through National Law
Basel III is issued by the Basel Committee on Banking Supervision as an international standard rather than as directly binding law. It becomes an enforceable obligation only when transposed into the regulations of a given jurisdiction, so its legal force and specific requirements depend on national implementation.

Common questions

Answers to the questions practitioners most commonly ask about Basel III.

Is Basel III a law that applies directly to banks?
Not by itself. Basel III is a set of internationally agreed standards developed by the Basel Committee on Banking Supervision, which has no direct legal authority. Its provisions become binding only when national or regional authorities transpose them into their own laws and regulations, and the resulting requirements can vary in scope, timing, and detail across jurisdictions. Whether and how a specific institution is bound depends on the rules adopted by its home and host regulators, so the applicable local implementation should be consulted rather than the Basel text alone.
Does Basel III replace Basel II entirely?
It is more accurate to view Basel III as building on and strengthening the earlier framework rather than wholly replacing it. Basel III revised and added to prior standards, particularly in areas such as capital quality, capital buffers, leverage, and liquidity, while much of the underlying architecture continued from earlier accords. Because the framework has evolved across multiple documents and revisions, the precise relationship between provisions should be confirmed against the current consolidated standards and the applicable national implementation.
Which functions within an organization are typically involved in implementing Basel III requirements?
Implementation commonly spans several functions rather than resting with a single team. Risk management is typically involved in measuring and treating capital, liquidity, and leverage exposures; finance and treasury in capital planning and funding; compliance in tracking adherence to the applicable transposed rules; and governance bodies such as the board and relevant committees in setting risk appetite and overseeing outcomes. The exact division of responsibilities depends on the institution's size, structure, and the requirements adopted in its jurisdiction.
How does Basel III relate to an institution's risk appetite framework?
Regulatory capital and liquidity standards generally establish minimum expectations that an institution operates within, while risk appetite reflects the amount and type of risk the organization is willing to accept in pursuit of its objectives. In practice, institutions often set internal targets above regulatory minimums to maintain buffers, and these targets are typically expressed through risk appetite and tolerance measures. The relationship between externally imposed minimums and internally chosen appetite should be defined within the institution's own governance documentation.
What role does internal audit typically play regarding Basel III compliance?
Internal audit generally provides independent assurance over the processes and controls used to meet the applicable requirements, rather than owning those requirements directly. This can include reviewing the reliability of data feeding capital and liquidity calculations, the appropriateness of controls, and the governance around reporting. Internal audit's specific scope and mandate depend on the institution's structure and the expectations of its regulators, and its work does not substitute for management's responsibility to maintain compliance.
How should an organization approach evidencing compliance with the applicable Basel III requirements?
Evidencing compliance typically involves documenting the calculation methodologies, data sources, controls, and governance decisions supporting reported capital, leverage, and liquidity positions, in the form and detail required by the relevant supervisor. Because reporting expectations and formats are set by national or regional authorities, organizations generally align their documentation with those transposed requirements. What constitutes sufficient evidence is a matter of supervisory expectation and, where uncertain, should be confirmed with the relevant regulator or qualified advisors.

Common misconceptions

Basel III is itself legally binding on banks worldwide.
Basel III is a set of internationally agreed standards issued by the Basel Committee on Banking Supervision; it is not law in itself. It creates binding obligations only where and to the extent that national or regional authorities transpose it into their own regulatory frameworks, so applicability and detail vary by jurisdiction.
Basel III addresses only bank capital.
While enhanced capital requirements are a central element, Basel III also introduces a leverage ratio backstop and liquidity-related standards. It spans both the adequacy and quality of capital and the management of liquidity and funding risk.
Meeting Basel III requirements eliminates the risk of bank failure.
Basel III is intended to strengthen resilience and reduce the likelihood and severity of stress, but no capital or liquidity standard eliminates risk. It modifies residual risk rather than removing it, and compliance with the standard does not guarantee any particular outcome.

Best practices

Confirm the specific ratios, buffers, and phase-in timelines applicable to your institution against the primary Basel Committee texts and, more importantly, the national or regional rules that implement them, since these govern your actual obligations.
Treat the leverage ratio and liquidity standards as distinct requirements from risk-weighted capital ratios, and monitor performance against each rather than assuming that satisfying one implies satisfying the others.
Distinguish clearly between minimum capital requirements and capital buffers in internal reporting, recognizing that certain buffers are designed to be usable during periods of stress.
Maintain governance structures with clear decision rights over capital and liquidity planning so that responsibility for meeting and monitoring these standards is explicitly assigned.
Engage qualified regulatory and legal advisors on jurisdiction-specific carve-outs, transitional arrangements, and interpretation, as the applicability and detail of Basel III depend heavily on local implementation.
Track revisions and successive editions of the framework, as the Basel Committee's standards evolve over time and national implementation may lag or diverge from the international text.
Promotional banner highlighting failures found in PCI audits and how to spot the gaps