Credit Risk KRIs: Delinquency, Concentration, and CECL Metrics That Examiners Actually Check

TL;DR:

• Credit risk KRIs translate loan portfolio health into signals that trigger management action — before loans default or examiners find the trend.
• The metrics that matter most: NPL ratio, net charge-off rate, delinquency aging buckets, CRE concentration relative to Tier 1 capital, criticized asset ratio, and CECL allowance coverage.
• The FDIC’s 2026 Risk Review flags commercial real estate, auto loans, and credit cards as the consumer and commercial segments with the most elevated risk going into 2026.
• KRIs don’t replace credit underwriting — they measure whether underwriting discipline is holding at the portfolio level over time.

What Gets Found in Exams vs. What Gets Caught by KRIs

The pattern is almost always the same: the deterioration started months earlier.

A borrower who ends up in a criticized loan category that eventually requires charge-off typically showed stress signals two or three quarters before any formal rating action. A CRE concentration that drew examiner comments in October usually crossed the first internal policy threshold the prior spring. A rising delinquency trend that resulted in a management recommendation becomes, in the exam report, “deficient monitoring” — because the data was available but no one was tracking it against defined thresholds.

Most banks aren’t missing the data. They’re missing the connection between data and action. Credit KRIs exist to close that gap: defined thresholds, clear escalation protocols, documented evidence that the board and senior management are watching the portfolio and acting on signals before they become findings.

The FDIC’s 2026 Risk Review flagged commercial real estate — particularly office and multifamily at large banks — as well as consumer loan segments including auto loans and credit cards, where past-due and nonaccrual (PDNA) rates remain above pre-pandemic averages. Those are the portfolio areas where credit KRI discipline matters most right now.

9 Credit Risk KRIs Worth Tracking

These metrics map to what OCC, FDIC, and state banking regulators review during credit examinations. They cover five domains: portfolio quality, loss performance, reserve adequacy, concentration risk, and early warning.

1. Non-Performing Loan (NPL) Ratio

Definition: (Loans 90+ days past due + nonaccrual loans) ÷ Total loans outstanding

The most widely cited portfolio quality metric and typically the first number examiners ask about. Captures loans where repayment is severely at risk — either because the borrower is 90+ days past due or because the bank has stopped accruing interest on the relationship.

The Federal Reserve publishes quarterly charge-off and delinquency data by loan category at federalreserve.gov/releases/chargeoff — use this for peer benchmarking.

2. Delinquency Rate by Aging Bucket

Definition: Loans in each bucket ÷ Total loans, reported separately for 30–59, 60–89, and 90+ days past due

Examiners sometimes focus on 90+ day delinquency only. That’s too late for early action. The 30-day bucket is where stress first shows up, particularly in consumer credit cards and auto loans — exactly the segments flagged as elevated in the FDIC’s most recent review. Track all three buckets and trend them over at least six rolling quarters.

Trend matters more than the snapshot. A 30-day rate that has risen from 0.9% to 1.8% over two quarters is a materially different signal than one that has been flat at 1.8% for six consecutive quarters.

3. Net Charge-Off (NCO) Rate

Definition: (Gross charge-offs − recoveries) ÷ Average loans outstanding (annualized)

This is the realized loss metric. Unlike delinquency ratios, charge-offs represent losses already recognized. Review NCO rate alongside the allowance coverage ratio — if you’re charging off faster than you’re building reserves, the coverage ratio will compress.

Break this out by portfolio segment. An aggregate NCO rate of 0.4% can mask a 2.5% credit card charge-off rate running alongside a 0.1% rate on secured real estate. Segment-level NCO is always the more informative signal.

4. Criticized and Classified Asset Ratio

Definition: Criticized = (Special Mention + Substandard + Doubtful + Loss) ÷ Total loans. Classified = (Substandard + Doubtful + Loss) ÷ Total loans

Criticized loans are those with documented weaknesses. The ratio provides a leading indicator of future NPL pressure — loans don’t typically jump from “current” to “90+ days past due” without traveling through the criticized path first. The Special Mention subcategory deserves particular attention: per the OCC’s Comptroller’s Handbook on Rating Credit Risk, Special Mention assets have potential weaknesses requiring management’s close attention. A rising Special Mention rate is often the earliest portfolio warning signal available.

5. CRE Concentration — Total Commercial Real Estate

Definition: Total CRE loans ÷ (Tier 1 capital + ALLL)

The most-cited concentration metric in community bank examinations, anchored in the FFIEC’s 2006 Interagency Guidance on Concentrations in Commercial Real Estate. Exceeding 300% of Tier 1 + ALLL doesn’t trigger an automatic violation, but it dramatically increases examiner focus on your CRE concentration management program and stress testing practices. Banks above the threshold need documented concentration policies, board-approved limits, and evidence of regular stress scenario analysis.

6. CRE Acquisition, Development, and Construction (ADC) Ratio

Definition: CRE ADC loans ÷ (Tier 1 capital + ALLL)

ADC loans carry the highest credit risk in commercial real estate. The project is incomplete, the cash flow to service the debt hasn’t materialized yet, and the collateral value depends on construction completing on time and budget. The FFIEC’s guidance set a separate, lower threshold for ADC: 100% of Tier 1 + ALLL.

7. CECL Allowance Coverage Ratio

Definition: Allowance for loan and lease losses (ALLL) ÷ Nonperforming loans (and separately, ALLL ÷ Total loans)

Under CECL, the allowance must reflect expected lifetime losses from origination. Track both ratios, but track the quarter-over-quarter change as the KRI, not just the current level. If portfolio risk is building — rising delinquencies, growing CRE concentration, mix shift toward higher-risk segments — while the coverage ratio holds flat, that’s the signal. Your CECL model may not be fully reflecting the portfolio shift.

8. Single-Borrower Concentration

Definition: Largest individual credit exposure ÷ Tier 1 capital

OCC national bank legal lending limits cap individual borrower exposure at 15% of Tier 1 for unsecured credit and 25% with qualifying collateral. But being at the legal limit is different from being at a prudent management limit. Most well-managed banks set internal concentration thresholds below the regulatory cap and track this monthly.

9. Sector Concentration Ratio

Definition: Exposure to a specific industry or sector ÷ Total loan portfolio

Single-sector concentration produces correlated losses when that sector turns. A community bank with 35% of its commercial book in restaurants or hospitality faces a very different loss profile in an economic downturn than one with broad diversification. Track the top 3 sector concentrations monthly.

Connecting Credit KRIs to Stress Testing

These KRIs are most actionable when calibrated to your stress testing program. If your adverse scenario assumes a 150bps increase in net charge-off rate, your Amber/Red boundaries should reflect how close you currently are to that assumption. If you’re already at 0.9% NCO and the adverse scenario adds 150bps, you have essentially no buffer before reaching stressed levels.

Stress Testing KRIs covers how to bridge stress scenario outputs into ongoing threshold design — the same methodology applies to credit risk KRI calibration. The threshold you set at Red should be a leading indicator of your stress scenario outcome, not the outcome itself.

The CECL Dimension: Two Signals the Old Model Missed

Under the incurred loss model, a bank could show a clean NPL ratio right up until borrowers started missing payments. CECL shifts that: lifetime expected losses are booked at origination.

Two CECL-specific signals worth tracking as distinct KRIs:

Reserve release rate. Is the ALLL balance declining quarter-over-quarter even as early-bucket delinquencies are ticking up? Reserve releases are sometimes driven by model parameter updates or economic assumption improvements — but when early warning signals are trending the wrong direction while reserves shrink, that’s a flag worth reviewing.

Model recalibration frequency. When was your CECL model last updated against actual performance data? A model not recalibrated in 18+ months may not reflect current portfolio risk, particularly in segments where borrower behavior has shifted. This is a qualitative KRI, but it’s one examiners will ask about.

So What? Building the Credit Risk Dashboard

These nine KRIs belong in a single dashboard reviewed by the Chief Credit Officer and risk committee monthly, with defined escalation triggers. A few practical notes for implementation:

Build by segment, not just aggregate. An aggregate NPL ratio of 0.8% can mask a 4% NPL rate in your small business segment. The portfolio segments with the most risk (or the most recent examiner attention) need their own KRI rows.

Set thresholds inside your policy limits. Your credit concentration policy has defined limits. Your KRI Amber threshold should sit inside those limits — giving you time to act before you’re technically out of compliance. The KRI fires first; the policy limit is the hard stop.

Use FDIC peer group data. The FDIC’s quarterly data lets you compare your metrics to peers by asset size, charter type, and geography. A credit risk KRI at the 80th percentile of your peer group tells a different story than one at the 50th.

For a complete set of credit, liquidity, operational, and compliance KRIs built for financial services teams, the KRI Library (132 Key Risk Indicators) includes pre-built thresholds, escalation definitions, and committee-ready reporting templates.

Related reading: Deposit Concentration KRIs covers the funding-side concentration signals that often accompany credit risk findings. BSA/AML KRIs addresses the compliance-side metrics that examiners frequently review alongside loan portfolio quality.