Contingency Funding Plan KRIs: Metrics That Should Trigger CFP Activation

You have a contingency funding plan. It has an activation section. That section says something like: “The CFP will be activated when management determines that liquidity conditions have deteriorated to a level requiring emergency funding measures.”

That sentence is not a trigger. It’s a description of a judgment call — and a judgment call under stress is exactly what the CFP is supposed to replace with something faster and more reliable.

The July 2023 interagency addendum to the Interagency Policy Statement on Funding and Liquidity Risk Management — issued jointly by the OCC, Federal Reserve, FDIC, and NCUA — was direct about what it found in the CFPs it reviewed: plans that existed on paper but weren’t actionable in practice. The post-SVB supervisory review revealed institutions whose CFPs lacked pre-specified, threshold-bound triggers and who couldn’t demonstrate that contingent funding sources had been tested and verified.

TL;DR

• Most CFPs have activation language that describes a management judgment call, not a pre-specified trigger. That’s the design gap.
• CFP KRIs should specify: the exact metric, the threshold value at each tier, who receives notification within what timeframe, and what action is required — not just “management will review.”
• The OCC, FDIC, and Federal Reserve’s 2023 guidance update explicitly emphasizes testing, operational readiness verification, and actionable threshold design after the SVB and Signature Bank failures.
• Thresholds must be calibrated to your institution’s funding composition — not to industry averages or copied from peer institutions.
• Evidence artifacts matter: monitoring records, board minutes, testing documentation, and counterparty contact verification are what examiners look for when they pull the CFP.

Why Most CFP Triggers Fail Under Pressure

A well-designed CFP activation trigger answers five questions before stress arrives:

1. What metric? Specifically named, with a data source and responsible owner.
2. What threshold? Numerical values at each tier, not qualitative descriptions.
3. Who acts? Named role or function, not “management.”
4. Within what timeframe? Hours, not “promptly.”
5. What is the required action? Specific operational step, not “review the situation.”

When those five elements aren’t present, the CFP activation section becomes a committee memo — not a funding control. The February 2023 Silicon Valley Bank failure is the most-cited example. SVB’s stress tests were showing adverse results by mid-2022. The Federal Reserve’s supervisory review documented that management response to those signals was “not rapidly undertaken or fully executed.” The trigger fired. The escalation was inadequate. The gap between signal and response was fatal.

What SVB’s experience illustrates — and what the 2023 interagency addendum responded to — is that CFP KRIs must be designed for automatic, mandatory escalation. Not for informed discretion.

The CFP Tier Structure and What Activates Each Stage

Most defensible CFPs use three to four activation stages. The KRIs that activate each stage should be documented explicitly in the CFP document itself — not in a separate risk dashboard that exists independently.

Stage 1 — Normal Operations All liquidity KRIs are green. Standard monitoring cadence (typically weekly ALCO review of liquidity position). No elevated actions required.

Stage 2 — Elevated Monitoring One or more KRIs breach amber thresholds. Enhanced monitoring frequency (daily), pre-positioning of contingent funding sources, ALCO notification, management liquidity review. No public communication required.

Stage 3 — Stressed Operations One or more KRIs breach red thresholds. Active funding response: drawing contingent lines, contacting counterparties, accelerating asset sales if applicable. Board and relevant regulators notified per your institution’s notification policy.

Stage 4 — Crisis / Activated CFP fully activated. Emergency funding in use. Regulatory notification triggered (FFIEC 36-hour notification may apply for institutions meeting the criteria). Daily executive reporting. Communications to key depositors and counterparties as appropriate.

The transition between stages should not require a management meeting to decide. Each threshold breach should have a pre-specified, mandatory response that begins without convening a committee first.

Core CFP KRIs: What to Monitor at Each Tier

The following KRIs reflect the most commonly cited liquidity stress signals from the 2023 interagency guidance, SVB post-mortems, and regulatory exam findings. Thresholds are illustrative — your institution must calibrate these to its specific funding composition.

Deposit Runoff Metrics

Deposit runoff is the fastest-moving CFP signal. The FDIC’s post-2023 guidance specifically noted that traditional runoff assumptions embedded in CFPs were based on historical averages that don’t reflect the behavioral characteristics of digitally-enabled depositors. Monitor runoff at the segment level — by depositor type, by product, by channel — not just in aggregate.

Contingent Funding Capacity Metrics

The interagency guidance addendum specifically flagged that institutions often list FHLB advance capacity or Fed discount window as contingent sources without verifying that collateral has been pledged, that the operational access steps are understood by current staff, and that capacity estimates remain current. The KRI isn’t just about utilization — it’s about confirmed, tested availability.

Liquidity Coverage and Quality Metrics

For institutions that are not subject to the full LCR rule (generally applies to banks over $10 billion), internal equivalent metrics that capture the same ratio — available liquid assets versus projected stress outflows — are expected to be part of the CFP.

Early Stress Signals: Pre-Activation KRIs

Some institutions run a set of leading indicators specifically designed to fire before any formal CFP tier transitions occur. These aren’t activation triggers in themselves — they’re warnings that the monitoring frequency should increase.

These pre-activation KRIs won’t appear on a board dashboard — they’re operational signals for treasury. But they should be documented in the CFP so there’s a clear record of the monitoring cadence and the triggers that escalate it.

Calibrating Thresholds to Your Funding Composition

The threshold values in any example table — including the ones above — are illustrative. Using them without calibration to your institution’s actual funding profile is the same mistake as copying a peer institution’s CFP language without adapting it to your funding mix.

Threshold calibration should begin with historical stress data:

What happened during the 2020 COVID shock? How quickly did deposits move? What was the maximum 7-day runoff rate you experienced? Where did you end up in terms of FHLB utilization? If you didn’t have a stress event, use peer data from public supervisory reports.

What do your stress tests show? If your own modeling produces a scenario where uninsured deposit runoff exceeds 4% in 7 days before management response time allows action — your amber threshold needs to be lower than 4%.

What’s the composition of your deposit base today? If your deposit composition has shifted significantly since your last calibration — new fintech partnerships, a product launch that brought in institutional depositors, geographic expansion — your runoff assumptions are wrong for your current book.

See Contingency Funding Plan Triggers: How to Set Liquidity Thresholds You Can Defend to Regulators for a detailed walkthrough of the calibration methodology, including how to use your own stress test results to set defensible amber/red thresholds.

Evidence Artifacts Regulators Look For

A CFP with well-designed KRIs needs corresponding evidence that the monitoring actually happened and that the thresholds weren’t just aspirational. Examiners reviewing the CFP will typically request:

Monitoring records: Historical KRI tracking showing the metrics were actually measured on the specified cadence. A weekly ALCO liquidity report that includes each CFP KRI with current status, compared to prior period, is the standard format.

Threshold breach documentation: If any metric ever reached amber or red — even briefly — the examiner will ask for evidence of the management response: who was notified, within what timeframe, what actions were taken, and how the metric moved afterward.

Contingent source testing evidence: Documentation showing that contingent funding sources were contacted, balances and availability were confirmed, operational access procedures were tested, and collateral pledging status was verified. This isn’t just paper; it’s records of actual outreach.

ALCO and board minutes: Evidence that the CFP — including trigger thresholds — was reviewed and approved by the appropriate governance bodies, and that any material changes to the funding composition were brought to board or committee attention with CFP implications noted.

Annual CFP review documentation: A formal annual review that evaluates whether existing thresholds remain appropriate given current funding composition, stress test results, and any market developments.

Connecting CFP KRIs to the Board Reporting Layer

CFP KRIs operate at two levels: operational (treasury/ALCO, typically daily or weekly) and governance (board risk committee, typically quarterly with escalation on any stage transition).

The board reporting layer doesn’t need every CFP KRI — it needs the summary: current CFP stage, current status of the tier-trigger KRIs (green/amber/red), and any events over the reporting period that caused a stage transition or threshold breach. That’s four to six data points, not a liquidity dashboard.

What the board needs to know: are we currently in normal operations, and if not, why not and what’s being done?

What the board does not need: detailed collateral pledging spreadsheets, individual counterparty confirmation records, or intraday deposit monitoring data. Those belong in ALCO and treasury management reporting.

For guidance on how to separate operational EWI monitoring from board KRI design — using the same underlying metrics but with different cadences, audiences, and responses — see Early Warning Indicators vs KRIs: How Liquidity Teams Should Use Both.

For a specific look at how deposit concentration KRIs connect to CFP run-off assumptions and activation triggers, see Deposit Concentration KRIs: Measuring Customer, Sector, and Platform Dependency.

So What Does This Mean for Your Program?

The regulators who reviewed SVB and Signature Bank post-failure found the same failure mode: metrics existed, stress signals appeared, and escalation was inadequate. The 2023 interagency guidance update was a direct response — and examiners are now specifically testing CFP activation design, threshold calibration, and evidence of operational readiness in a way they weren’t before 2023.

If your CFP’s activation section uses language like “when management determines that stress is sufficiently severe,” that section needs to be rebuilt around specific, threshold-bound KRIs with pre-specified, mandatory responses. Not because regulators are asking — but because the design that prevents management discretion from being the only variable standing between a stress signal and a response is what makes the CFP functional.

The calibration takes time. Start with your three highest-risk deposit runoff metrics, set amber thresholds that match your actual stress test outputs, assign named owners, and specify the response within 24 hours for each amber breach. That’s the minimum viable CFP KRI design.

If your program needs pre-built liquidity and financial risk KRIs — including deposit runoff rate, HQLA coverage, contingent funding line utilization, and brokered deposit concentration — with green/amber/red thresholds, data source fields, owners, and escalation triggers ready to deploy, the KRI Library (132 Key Risk Indicators) covers the financial risk domain with metrics calibrated for financial services institutions. Get the KRI Library →