1. What the law requires

A. Regulatory requirement:

• US: Dodd-Frank Act Stress Test (DFAST), CCAR, OCC Handbook - banks >$250bn must complete annual stress tests reporting results to OCC . They must regularly perform stress tests based on sufficiently severe but plausible scenarios .
• EU/UK: EBA/ECB SREP, PRA SS5/13 - requirement for reverse stress testing and severe idiosyncratic scenarios.
• India: RBI Guidance on Stress Testing 2007, updated 2017 - requires banks to conduct sensitivity analysis and scenario analysis including historical and hypothetical severe stress (GDP -2%, interest rate +300 bps, 50% NPA spike, 20% deposit run). Failure is treated as failure of Risk Management under Risk Based Supervision.

Severe stress assumptions must include:

1. Market Risk: 200-400 bps parallel shift in yield curve, not 50 bps.
2. Credit Risk: Migration of entire portfolio by 2-3 rating notches, sector concentration collapse.
3. Liquidity Risk: Granular deposit segmentation and faster-than-LCR outflows - 5% retail is LCR baseline, but SVB showed concentrated uninsured deposits can run 25-50% in 24 hrs .
4. Operational & Contingent Risk: Inability to raise capital or sell assets at assumed price.

Failure to incorporate these is not just bad practice - it is a breach of:

• Duty of Care under Companies Act, 2013 / Delaware General Corp Law
• Caremark Duty to Monitor (US) / Business Judgment Rule exception
• Regulatory obligations - can lead to enforcement, Prompt Corrective Action

2. Detailed Explanation of Failure Modes

a) Historical Bias: Using 3-year benign period to calculate VaR. JPMorgan London Whale did this - VaR estimates did not adequately capture the risks associated with the trades, leading to massive losses .

b) Ignoring Wrong-Way Risk: Assuming hedges will work when market is stressed.

c) Siloed Stress Tests: Credit team assumes rates stable, treasury assumes deposits stable. SVB's failure is classic: Federal Reserve examiners had flagged foundational weaknesses in SVB's liquidity stress testing and contingency funding plans as early as Aug 2021 . Bank failed to use granular deposit segmentation to model outflows under stress and never comprehensively tested whether its contingency funding sources would work.

d) Misleading Assumptions: Management removed interest rate hedges and adjusted internal models to hide EVE loss . SVB repeatedly failed its internal liquidity stress tests and misleading stress testing assumptions further masked the liquidity risk .

3. Key Case Laws & Enforcement Actions

I. In re Citigroup Inc. Shareholder Derivative Litigation, 964 A.2d 106 (Del. Ch. 2009) - The Red Flags Case

Facts: Shareholders sued board for failing to monitor $55bn subprime exposure despite market warnings.
Holding: Chancellor Chandler dismissed Caremark claims, but established the modern test. Directors have a duty to ensure adequate information and reporting system exists. While Court protected directors under business judgment rule because red flags were not enough to show bad faith, it clarified: if plaintiffs show board utterly failed to implement any monitoring system including severe stress testing, they can survive motion to dismiss. This became the foundation for all later stress testing litigation.

Legal Principle: Absence of severe stress testing infrastructure = evidence of bad faith oversight failure.

II. JPMorgan Chase London Whale - In re JPMorgan Chase & Co. (OCC Consent Order 2013 + SEC Enforcement + Senate PSI Report 2013)

Loss: $6.2bn in Synthetic Credit Portfolio.
Senate investigation found stress testing was "largely ignored". Traders changed VaR model to hide breach, and CIO had no severe stress scenario for illiquid credit tranche.

Outcome: $920mn fine by OCC/Fed/SEC/FCA, $100mn SEC penalty for mis-stating risk controls. Board forced to create Risk Committee with independent stress testing authority. Case law now cited for "VaR without severe stress is securities fraud by omission".

III. Silicon Valley Bank - Federal Reserve Board Review, April 2023 (Barr Report)

Not a court case but a supervisory enforcement precedent. Report found:

• At time of failure, SVB had 31 unaddressed safe and soundness supervisory warnings - triple peer average
• Supervisory stress tests at the time did not account for mark-to-market losses on held-to-maturity securities
• Fed's severely adverse scenario in Feb 2022 failed to encompass large and rapid increases in interest rates that ultimately killed SVB

This led to 2023-2024 rule changes: banks $100bn+ now must include unrealized losses and rapid deposit run assumptions. Plaintiffs' firms have now filed class actions citing Barr Report as evidence of breach of fiduciary duty for failure to stress test.

IV. ECB Comprehensive Assessment 2014 - Banks that failed ECB stress test

24 banks failed and had to raise €24.6bn. Marsh analysis noted banks that failed face greater liability risks - civil, criminal and regulatory action if reports are inaccurate or misleading. Used in EU courts to argue prospectus liability.

V. OCC v. Wells Fargo, Credit Suisse-Archegos (2021-2022)

Credit Suisse lost $5.5bn on Archegos because prime brokerage stress tests assumed normal market liquidity and no simultaneous counterparty default. FINMA Report 2023 found "failure to incorporate severe stress assumptions on concentrated single-name exposure". Result: forced merger with UBS, and FINMA enforcement that senior management breached risk management duties.

VI. India - RBI Enforcement

While India has no public DFAST, RBI has penalized banks under Section 47A of Banking Regulation Act for deficient stress testing frameworks.

• Dharani Sugars and Chemicals Ltd. v. Union of India (2019) - Supreme Court struck down RBI's 12 Feb 2018 stressed asset circular as ultra vires for being without consideration of sector specific difficulties - shows court will strike down stress resolution frameworks that themselves fail to incorporate severe but sector-specific stress assumptions.
• ICICI Bank - Chanda Kochhar case (2019) and Yes Bank Reconstruction (2020) - RBI's inspection reports cited failure to stress test borrower group concentration.

4. Legal Consequences of Failure

1. Director Liability: Under Caremark and Section 166 Companies Act, 2013 - personal liability if no system to test severe stress.
2. Securities Fraud: SEC 10(b)(5) - stating "we have robust stress testing" when models exclude severe rates is misleading. JPMorgan settlement is precedent.
3. Regulatory: Increased Pillar 2 capital add-on, restriction on dividends (CCAR failure), Prompt Corrective Action.
4. Contractual: Loan covenants often require borrower to maintain stress-tested DSCR; lender's own failure to stress test can void right to accelerate if shown to be negligent.

Best Practice to avoid liability:

• Implement Basel's three-tier: Sensitivity > Scenario > Reverse Stress Test (What breaks us?).
• Document why chosen severe scenario is plausible - Fed's 2023 letter urges broker-dealers to stress test positions with proper severity in light of current events.
• Board minutes must show challenge to assumptions - not just approval.