CHIEF GENERAL MANAGER
MUTUAL FUNDS DEPARTMENT
MFD/CIR/15/19133/2002
September 30, 2002
All Mutual Funds Registered with SEBI
Unit Trust of India
Association of Mutual Funds in India
Dear Sirs,
Risk Management System
As you are aware, SEBI (Mutual Funds) Regulations, 1996 prescribe the duties and obligations of asset management companies (AMCs) and trustees. The code of conduct prescribed under the Regulations requires that mutual funds should render at all times high standards of service and exercise due diligence and ensure proper care in their operations.
In furtherance of the above objectives and to protect the interests of investors, certain systems, procedures and practices must be followed by all the mutual funds.
You may recall that vide our letter dated March 29, 2001, all the mutual funds were advised to inform us on the adequacy of their risk management systems. Subsequently, on our advice, AMFI in association with Pricewaterhouse Coopers as a part of Indo-US Financial Institutions Reforms and Expansion Project, has undertaken a detailed study on risk management practices followed by all the mutual funds. They have made certain recommendations to ensure a minimum standard of due diligence or risk management system for all the mutual funds in various areas of their operations like fund management, operations, customer service, marketing and distribution, disaster recovery and business contingency, etc.
Operating Manual for Risk Management System
AMFI and Pricewaterhouse Coopers have prepared an operating manual for risk management system for the mutual funds. A copy of the operating manual has been sent to you by e-mail and is also available on SEBI website under the Mutual Funds Section.
The risk management practices in various areas of operations of mutual funds are covered in the operating manual under three categories: (i) Existing industry practices (ii) Practices to be followed on mandatory basis, and (iii) Best Practices to be followed by all mutual funds. Details are given below:
(i) Existing Industry Practices:
Under each head of risk area, the manual covers the exemplary practices followed by some / most of mutual funds in India. It may be mentioned that though there are exemplary practices covered in this category, the extent and degree of observance of these practices differ among the mutual funds. Therefore, it is desirable that all mutual funds should develop their systems and follow these practices, if not being done at present.
(ii) Practices to be followed on Mandatory Basis
All mutual funds shall follow the practices which have been indicated as mandatory in the operating manual. These are - (i) risk management function should be assigned to compliance officer or internal risk management committee or to an external agency (ii) disaster recovery and business contingency plans, and (iii) mutual funds should take insurance cover against certain risks.
(iii) Best Practices to be followed by Mutual Funds
These are the practices which must be adopted by the mutual funds as a part of their due diligence exercise after considering the size of their operations.
How to Implement the Risk Management System
The mutual funds are advised to follow the following step-by-step approach to implement the risk management system:
- Identification of observance of each recommendation
The mutual funds shall identify areas of current adherence as well as non-adherence of various risk management practices under each of the aforesaid three categories. They shall examine the areas where development or improvement of systems is required.
After identifying the same, the mutual funds shall review the progress made on implementation of the systems on a monthly basis and place the progress report in periodical meetings of Boards of AMCs and trustees. The mutual funds shall ensure full compliance of all the risk management practices within a period of six months.
- Review of Progress of implementation:
Boards of AMCs and trustee companies shall review the progress made by their mutual funds with regard to risk management practices and the same shall be
reported to SEBI at the time of sending quarterly compliance test reports and half-yearly trustee reports.
For the first two quarters – December 2002 and March 2003 – all mutual funds shall send a detailed report informing how each recommendation in each of three categories has been implemented and whether Boards of AMCs and trustees are satisfied.
- Review by Internal Auditors
After full implementation of the risk management system, it shall be made a part of internal audit from April
1, 2003 onwards and the auditors shall check on a constant basis about the adequacy of risk management
systems. Their reports shall be placed before the Boards of AMCs and trustees who shall make comments
on the adequacy of systems in the quarterly and half-yearly compliance reports filed with SEBI.
These guidelines are being issued in accordance with the provisions of Regulation 77 of the SEBI (Mutual Funds) Regulations, 1996.
Yours faithfully,
P.K. NAGPAL
ANNEXURE
OPERATING MANUAL FOR RISK MANAGEMENT
FOR INDIAN MUTUAL FUNDS
TABLE OF CONTENTS
I. INTRODUCTION *
II. RISK MANAGEMENT FRAMEWORK OVERVIEW *
III. FUND MANAGEMENT *
IV. OPERATIONS RISKS *
V. CUSTOMER SERVICE *
VI. MARKETING AND DISTRIBUTION *
VII. OTHER BUSINESS RISKS *
APPENDIX A: FINAL RECOMMENDATIONS AS APPROVED BY THE AMFI BOARD ON 3 JULY 2002 *
I. INTRODUCTION
Risk management can be defined as the "overall process of identifying and understanding the full spectrum of an organisation’s risk and taking informed actions to help it achieve its strategic objectives, reduce the likelihood of failure and decrease the uncertainty of overall business performance".
This document sets out an enterprise-wide risk management framework for a Mutual Fund in India. For the purpose of this document, the term "Mutual Fund" is used colloquially to refer to the whole group of entities that constitute the mutual fund organisation; i.e. the Asset Management Company (including its Board of Directors and employees) and the Board of Trustees. It is not used to refer to a Mutual Fund as per the definition in the SEBI Regulations.
The framework manual is intended to serve as a model which will help Mutual Funds monitor and mitigate all the risks faced by them, and also use risk management to increase value for investors. The risk management practices described are based on current exemplary practices and international best practice as identified in our "Survey of Risk Management Practices in the Indian Mutual Fund Industry", March 2002. It also takes into account the recommendations in the same survey document, duly modified based on feedback from AMFI members and finally approved by the AMFI Board on 3 July 2002. (See Appendix A). Some of the recommendations are to be mandated by SEBI (Appendix A, Part 1), others will be issued by AMFI as best practice guidelines (Appendix A, Part 2). The mandatory and best practice recommendations have been incorporated in the framework manual.
All measures described in the manual have been categorised as follows:
- to be mandated by SEBI (as per Appendix A, Part 1)
- recommended best practice (as per Appendix A, Part 2)
- existing industry practice (exemplary practices followed by some/ most Mutual Funds in India as identified in the "Survey of Risk Management Practices in the Indian Mutual Fund Industry, March 2002).
II. RISK MANAGEMENT FRAMEWORK OVERVIEW
The risk management framework described in this document covers all aspects of a Mutual Fund’s operations. Risks have been broadly categorised into five areas:
- Fund Management
- Operations
- Customer Service
- Sales and Marketing
- Other Business Risks.
Risk management measures have been described for each of these areas across three dimensions: policies and procedures, systems and organisation. Additionally, measures for specific risks in each area have also been described.
1. Policies and Procedures
Risk management is most effective when it follows a top-down approach. In this approach, the senior management of the Mutual Fund is the main center of power and responsibility. Based on various factors like the risk appetite and business strategy of the organisation, the philosophy regarding risk should be developed. This philosophy should then be transmitted throughout the organisation in the form of concrete and detailed policies, procedures and guidelines. The policy and procedures documents should build a framework for the effective and efficient management of the fund and should include:
- Investment Policy, including Risk Philosophy (existing industry practice)
- Operating Procedures (existing industry practice)
- Compliance Manual (existing industry practice)
- Code of Conduct (existing industry practice)
- Disaster Recovery and Business Contingency Plan (to be mandated by SEBI)
- Reporting Framework (existing industry practice)
2. Systems
The establishment of an enterprise-wise integrated systems architecture will substantially reduce operational risk. The systems of a Mutual Fund should include the following applications:
- Integrated front and back office systems for fund management, dealing, trade confirmation and settlement (recommended best practice)
- Fund accounting system for calculation of net asset values (NAVs) (existing industry practice)
- Unit-holder administration and servicing systems for customer service (existing industry practice)
- Financial accounting and reporting system for the AMC (existing industry practice)
Systems should ideally be integrated and developed using open platform architecture. They should facilitate straight-through processing and also be capable of generating the necessary reports to monitor and manage risks. Security features such as access control, firewalls and virus protection measures should also be established.
3. Organisation
The Mutual Fund organisation should be designed taking into account the following risk management principles:
- Segregation of front office and back office in the AMC (existing industry practice)
- Independent verification of data input (existing industry practice)
- Establishment of Committees for Investment, Valuation and Audit (existing industry practice)
- Development of a second line for key positions (existing industry practice)
- Establishment of a risk management function (to be mandated by SEBI)
The responsibility of understanding the risks run by the Mutual Fund and ensuring that they are appropriately managed ultimately rests with the Board of Trustees. The Board of Trustees must approve all the risk management and should delegate to the AMC the responsibility of the day-to-day execution of these policies.
Risk Management Function (To be Mandated by SEBI)
The Mutual Fund should have an independent risk management function consisting of one or more risk managers. This function will be responsible for identifying, evaluating or measuring all risks inherent in a mutual fund organisation, as well as establishing controls to mitigate such risks. The risks include:
- Fund Management: volatility in performance, style drift and portfolio concentration, interest rate movements, liquidity issues, credit risk
- Operations: deal errors, settlement problems, NAV and fund pricing errors, inaccurate financial reporting, fraud, failure of mission critical systems and infrastructure, obsolete systems
- Customer Service: errors in deal processing, other investor services, fraud
- Marketing and Distribution: new product development, selling and distribution
- Other Business Risks: critical knowledge loss, skills shortage, non-compliance, third party risks.
The function should be separate from fund management and should report to the Chief Executive Officer of the AMC. The function could be carried out in a number of ways:
- As an additional function of an existing employee of the AMC, e.g. the Compliance Officer or Internal Auditor;
- Through a Risk Management Committee;
- Outsourced to an external agency; or
- As the Trustees of the mutual fund may deem fit.
III. FUND MANAGEMENT