SunTrust 2015 Annual Report Download - page 87

59
rules, regulations, regulatory guidance, decrees and orders,
and stated corporate business and risk objectives, including
risk appetite, measures, and limits.
• The third line of defense is comprised of our assurance
functions, i.e., Audit Services and Risk Review, which
independently test, verify, and evaluate management
controls and provide risk-based advice and counsel to
management to help develop and maintain a risk
management culture that supports safety, soundness, and
business objectives.
Enterprise risk oversight is supported by a number of risk-
focused senior management committees. These “enterprise
governance committees” are responsible for ensuring effective
risk measurement and management within their respective areas
of authority, and include the Corporate Risk Committee, Asset/
Liability Committee, Capital Committee, and Portfolio
Management Committee.
• CRC is chaired by the CRO and supports the CRO in
measuring and managing our aggregate risk profile.
• ALCO is chaired by the CFO, and provides management
and oversight of market, liquidity, and balance sheet-related
risks, and has the responsibility to manage those risks in
relation to the profitability of the underlying businesses.
• CC is also chaired by the CFO and provides management
and oversight of our capital actions and our enterprise stress
analytics programs that, among other things, support our
annual CCAR/DFAST submissions.
• PMC is chaired by the Wholesale Banking Executive and
provides active portfolio management and oversight of
balance sheet allocations to ensure that new asset
originations, asset sales, and asset purchases meet our risk
and business objectives. PMC also oversees progress
towards long-term balance sheet objectives.
The CEO, CFO, and the CRO are members of each enterprise
governance committee to promote a culture of consistency and
communication. Additionally, other executive and senior
officers are members of these committees based upon their
responsibilities and subject matter expertise.
The CRO and, by extension, CRM, establishes sound
subsidiary risk frameworks, policies, and processes that focus
on identifying, measuring, analyzing, managing, and reporting
the risks that we face. At its core, CRM's objective is to deliver
sophisticated risk management capabilities throughout the
organization that:
• Identify, measure, analyze, manage, and report risk at the
transaction, portfolio, and enterprise levels
• Support client facing businesses as they seek to balance risk
taking with business and safety and soundness objectives
• Optimize decision making
• Promote sound processes and regulatory compliance
• Maximize shareholder value
• Support our purpose of Lighting the Way to Financial Well-
Being, support our performance promise of Leading the
Movement for Financial Well-Being, and conform to our
supporting principles of Client First, One Team, Executional
Excellence, and Profitable Growth
To achieve this objective, CRM continually refines our risk
governance structures, frameworks and management limits,
policies, processes, and procedures to reflect changes in our
operating environment and/or corporate goals and strategies. In
terms of underwriting, CRM Credit Risk seeks to mitigate risk
through analysis of such things as a borrower's credit history;
pertinent financial information, e.g., financial statements and tax
returns, cash flow, and liquidity; and collateral value.
Additionally, our loan products and underwriting elements are
continuously reviewed and refined. Examples include: client
eligibility requirements, documentation requirements, loan
types, collateral types, LTV ratios, and minimum credit scores.
Prior reviews have resulted in changes such as enhanced
documentation standards, maximum LTV ratios and production
channels, which contributed to material reductions in higher-risk
exposures, such as higher-risk mortgage, home equity, and
commercial construction loans, as well as a decline in early stage
delinquencies and NPLs.
In practice, CRM measures and oversees business execution
and risk management along a number of primary risk
dimensions: credit, market, liquidity, operational, and
compliance. Other risks, such as legal, strategic, and reputational
risk, which can arise from any corporate activity, are also
monitored by CRM and other risk stewards. Subject matter
experts directly supporting the CRO in the management/
oversight of these risks include, but are not limited to the:
• Chief Wholesale Credit Officer and the Chief Retail
(Consumer/Mortgage) Credit Officer
• Corporate Market/Liquidity Risk and Enterprise Analytics
Officer
• Corporate Operational Risk Officer, who is also responsible
for oversight of risk stewards
• Corporate Compliance Officer
• Corporate Model Risk Management Officer
• Corporate Regulatory Liaison Officer
Risk Review, an assurance function, reports directly to the BRC
and administratively to the CRO.
Credit Risk Management
Credit risk refers to the potential for economic loss arising from
the failure of clients to meet their contractual agreements on all
credit instruments, including on-balance sheet exposures from
loans and leases, investment securities, and contingent exposures
including unfunded commitments, letters of credit, credit
derivatives, and counterparty risk under derivative products. As
credit risk is an essential component of many of the products and
services we provide to our clients, the ability to accurately
measure and manage credit risk is integral to maintaining the
long-run profitability and capital adequacy of our business. We
commit to maintain and enhance a comprehensive credit system
to meet business requirements and comply with evolving
regulatory standards.
CRM establishes and oversees the adherence to the credit
risk management governance frameworks and policies,
independently measures, analyzes, and reports on portfolio and
risk trends, and actively participates in the formulation of our
credit strategies. Credit risk officers and supporting teammates
within our lines of business are direct participants in the
origination, underwriting, and ongoing management of credit.
They work to promote an appropriate balance between our risk
management and business objectives through adherence to