Harun Raaj & AssociatesHarun Raaj & Associates
+91 93008 97008Contact
Business Compliance & Labour Lawvia RBI CIMS Portal & RBI DOR (rbi.org.in)

NBFC Scale-Based Regulation (SBR) — Tier Classification & Enhanced Governance Compliance

Advisory and implementation support for RBI's Scale-Based Regulation framework for NBFCs — assessing tier classification (Base/Middle/Upper Layer), implementing enhanced governance for Middle and Upper Layer NBFCs (Board composition, CRO, RMC), and meeting the 2022 SBR transition timelines.

Talk to a CAWhatsApp us
STARTING FROM₹34,999
TYPICAL TIMELINE45 days
DOCS REQUIRED5 documents
APPLICABLE TOCompany

Regulatory Framework

RBI Circular RBI/2021-22/112 dated 22 October 2021 (Master Direction – Scale Based Regulation for NBFCs, effective 1 October 2022): Part A — Base Layer; Part B — Middle Layer (deposit-taking NBFCs + non-deposit taking with asset size ≥₹1,000 crore); Part C — Upper Layer (top 10 by asset size + RBI-designated); Part D — Top Layer (exceptional). Governance norms: RBI/DNBR/2016-17/44 Chapter X (corporate governance); minimum 1/3rd independent directors; CRO mandatory for ML/UL with asset size ≥₹5,000 crore (RBI/2021-22/169); Risk Management Committee at Board level. NBFC-UL listing requirement: 3 years from date of designation in NBFC-UL list. LCR for NBFC-UL: RBI/2019-20/195 DNBR.PD.(PRD).CC.No.099/03.10.119/2019-20. Companies Act, 2013: Section 149 — independent director eligibility; Section 177 — Audit Committee; Section 178 — Nomination and Remuneration Committee.

Overview

The Reserve Bank of India's Scale-Based Regulation (SBR) framework, introduced vide RBI Circular RBI/2021-22/112 dated 22 October 2021 and effective from 1 October 2022, fundamentally restructured the regulatory architecture for NBFCs based on size, activity, and systemic risk. The SBR replaced the earlier binary (Systemically Important vs. Non-SI) classification with a four-tier pyramid.

The Four-Tier SBR Architecture:

NBFC-Base Layer (NBFC-BL):

  • Non-deposit taking NBFCs with asset size below ₹1,000 crore not classified in higher layers.

  • P2P lending platforms, Account Aggregators, non-operative financial holding companies (NOFHC), mortgage guarantee companies.

  • Compliance requirements: basic prudential norms, NOF of ₹10 crore, basic return filing.

NBFC-Middle Layer (NBFC-ML):

  • All deposit-taking NBFCs (NBFC-D) regardless of size.

  • Non-deposit taking NBFCs with asset size ≥₹1,000 crore.

  • NBFC-HFCs (Housing Finance Companies) with asset size ≥₹1,000 crore.

  • Enhanced governance requirements: (i) MD/CEO appointment with prior RBI approval if asset size ≥₹5,000 crore; (ii) Chief Risk Officer (CRO) mandatory if asset size ≥₹5,000 crore; (iii) Risk Management Committee (RMC) at Board level; (iv) enhanced disclosures.

NBFC-Upper Layer (NBFC-UL):

  • Top 10 NBFCs by asset size as identified by RBI each year (RBI publishes the list annually in September/October).

  • Other NBFCs specifically designated by RBI based on systemic risk assessment.

  • Most stringent requirements: (i) IPO listing mandatory within 3 years of designation; (ii) enhanced CAR requirements; (iii) differential capital requirement based on leverage; (iv) RBI's Risk-Based Supervision; (v) all ML requirements plus enhanced governance; (vi) Liquidity Coverage Ratio (LCR).

NBFC-Top Layer (NBFC-TL):

  • Exceptional category reserved by RBI for NBFCs posing extreme systemic risk. Currently empty.

Key SBR Governance Requirements for ML/UL NBFCs:
(i) Board composition: independent directors forming ≥ 1/3rd of total directors; no individual to simultaneously hold director positions in more than three NBFCs.
(ii) CRO reporting structure: CRO must report to MD/CEO or directly to Board; cannot be dual-hatted as a business function head.
(iii) Internal Audit function independence: Chief Internal Auditor must report functionally to Audit Committee of Board.
(iv) Compensation policy: variable pay structure for MD/CEO and Key Managerial Personnel linked to risk-adjusted performance metrics.
(v) Interest Rate Risk in Banking Book (IRRBB) framework: ML/UL NBFCs must put in place an IRRBB framework.

How It Works

  1. 1

    SBR Tier Classification — Current Layer Assessment

    Determine the NBFC's tier under the SBR framework: compute asset size (as per last audited balance sheet), check deposit-taking status, and verify whether the NBFC appears in RBI's annual NBFC-UL designation list. Cross-check activity type (NBFC-ICC, NBFC-HFC, NBFC-MFI, NBFC-Factor, NBFC-P2P, NBFC-AA) — some activity types are automatically classified in BL regardless of asset size (e.g., NBFC-P2P, NBFC-AA). Map all current regulatory compliance against SBR requirements for the identified tier to determine gaps.

    Government5-7 days
  2. 2

    Gap Analysis — Governance, CRO, RMC & Risk Framework Requirements

    Conduct a structured gap analysis for ML/UL NBFCs: (i) Board composition — is at least 1/3rd of directors independent? Are any directors holding >3 NBFC directorships (now restricted)? (ii) CRO appointment — is there a dedicated CRO, or is the risk function bundled with another role? (iii) RMC — does the Board have a Risk Management Committee with a documented Risk Appetite Statement? (iv) Internal Audit independence — does the Chief Internal Auditor report to the Audit Committee? (v) Compensation policy — is there a documented, RBI-compliant compensation policy? Prepare a gap register with remediation timelines.

    Government7-10 days
  3. 3

    Board Composition Rectification & Director KYC Filings

    Where the Board composition is non-compliant, advise on appointment of additional independent directors — eligibility criteria under Section 149 of the Companies Act and RBI NBFC Master Direction (independent director must not be a significant shareholder, employee, or related party). File DIR-12 with MCA for director appointments/resignations. Update RBI regulatory filings to reflect Board changes. Ensure all directors complete the Directors and Officers (D&O) KYC with RBI on the CIMS portal. For NBFC-ML: seek prior RBI approval for MD/CEO appointment if asset size ≥₹5,000 crore (application to DNBR, Department of Regulation, RBI).

    Government10-15 days
  4. 4

    Risk Management Framework & IRRBB Implementation

    Draft or review the NBFC's Risk Management Policy: credit risk, market risk, operational risk, liquidity risk, and interest rate risk. For ML/UL NBFCs: implement an Interest Rate Risk in Banking Book (IRRBB) framework — define repricing assumptions, compute duration gap, stress test earnings at risk and economic value of equity under RBI's prescribed shock scenarios. Set up the Liquidity Coverage Ratio (LCR) computation for UL NBFCs (monthly LCR reporting to RBI). Prepare Risk Appetite Statement for Board approval.

    Government15-20 days
  5. 5

    IPO Readiness Timeline (for NBFC-UL) & Ongoing SBR Calendar

    For NBFC-UL designated by RBI: the company must list on a recognised stock exchange within 3 years of designation. Initiate IPO readiness assessment: restatement of financial statements under Ind AS (SEBI ICDR requires Ind AS-compliant financials for DRHP), appointment of merchant bankers, eligibility assessment for IPO (minimum 3-year track record, positive net worth for 3 years). For all tiers: prepare and maintain an ongoing SBR compliance calendar — return filing deadlines, Board meeting frequency requirements, annual policy review cycles, and RBI inspection preparation checklist.

    GovernmentOngoing

Frequently Asked Questions

Which NBFCs fall under the Middle Layer (NBFC-ML) under the SBR framework?
Under RBI's Scale-Based Regulation framework (effective 1 October 2022), the Middle Layer (NBFC-ML) comprises: (i) all deposit-taking NBFCs (NBFC-D) regardless of asset size; (ii) non-deposit taking NBFCs with asset size of ₹1,000 crore or more; (iii) Housing Finance Companies with asset size of ₹1,000 crore or more; (iv) standalone primary dealers. NBFC-ML entities face enhanced governance requirements compared to Base Layer NBFCs — including RMC, CRO (if asset size ≥₹5,000 crore), enhanced Board composition standards, and higher disclosure obligations.
Is a Chief Risk Officer (CRO) mandatory for all NBFCs?
A CRO is mandatory only for NBFCs with asset size of ₹5,000 crore or more (as per RBI circular RBI/2021-22/169). The CRO must be a dedicated senior executive who reports to the MD/CEO or directly to the Board of Directors — the CRO cannot simultaneously head any business function or be assigned business targets. The CRO's responsibilities include: (i) developing and maintaining the risk management framework; (ii) oversight of credit, market, operational, and liquidity risks; (iii) risk appetite framework and stress testing; and (iv) reporting risk concerns to the Board-level Risk Management Committee (RMC). Smaller NBFCs (below ₹5,000 crore) are encouraged to have a risk function but a dedicated CRO is not mandatory.
What is the IPO listing requirement for NBFC-Upper Layer entities?
An NBFC that has been designated as NBFC-UL (Upper Layer) by RBI must list its equity shares on a recognised stock exchange within 3 years of such designation. RBI publishes the NBFC-UL list annually (typically in October). The listing requirement is mandatory — it is not optional for designated UL entities. The rationale is enhanced market discipline and public disclosure for systemically significant NBFCs. For the IPO, the NBFC must comply with SEBI ICDR Regulations 2018: minimum 3-year track record, positive net worth for last 3 financial years, Ind AS-compliant financial statements for at least 3 years in the DRHP, and appointment of SEBI-registered merchant bankers.
How is the SBR different from the previous NBFC regulatory framework?
Before SBR (effective October 2022), NBFCs were classified primarily as Systemically Important (asset size ≥₹500 crore) vs. Non-Systemically Important, and Deposit-Taking vs. Non-Deposit Taking — resulting in a relatively flat regulatory structure. SBR introduced a four-tier pyramid: Base Layer (light regulation), Middle Layer (enhanced governance), Upper Layer (near-bank regulation), and Top Layer (emergency). Key changes under SBR: (i) the systemically important threshold shifted from ₹500 crore to ₹1,000 crore for the Middle Layer; (ii) the Upper Layer identified by name (RBI publishes the list), not just by a threshold; (iii) the UL IPO listing requirement is new; (iv) LCR (Liquidity Coverage Ratio) introduced for UL NBFCs; (v) differential capital requirements based on leverage introduced for UL.
What are the Board composition requirements for NBFCs under SBR?
Under the SBR framework and RBI's corporate governance circular: (i) at least one-third of the Board must be independent directors — same as Companies Act but now explicitly applicable to NBFCs; (ii) no individual can simultaneously be a director on the Boards of more than three NBFCs (applicable to BL, ML, and UL); (iii) the MD/CEO cannot simultaneously be the Chairman of the Board (applicable for ML and UL); (iv) no director can hold the position of both independent director and nominee director on the same Board; (v) all NBFCs must have an Audit Committee of the Board and a Nomination and Remuneration Committee (as per Companies Act); and (vi) ML/UL NBFCs must have a Board-level Risk Management Committee (RMC) — not just a management-level risk committee.

Ready to get NBFC Scale-Based Regulation (SBR) — Tier Classification & Enhanced Governance Compliance?

File a request in under 2 minutes. Our team contacts you within 24 hours.