HomeCirculars › RBI/2021-2022/62

Mandatory Chief Risk Officer for Large Urban Co-op Banks

No longer current — withdrawn, no replacement on file yet
Source: Reserve Bank of India · RBI/2021-2022/62 · issued 25 Jun 2021 · ~2 min read
Quick answerRBI mandates all Primary Urban Co-operative Banks with asset size of ₹5,000 crore or above to appoint a Chief Risk Officer by March 31, 2022, with fixed tenure, board approval, and independence from business roles.

What changed

RBI has made it mandatory for UCBs with assets of ₹5,000 crore or more to appoint a Chief Risk Officer. The CRO must have a fixed tenure, board-approved appointment, and cannot hold dual roles like CEO or CFO. The CRO reports directly to MD/CEO or board, with quarterly board meetings without MD/CEO if reporting to them.

What it means for you

Large UCBs must now strengthen risk governance by appointing a dedicated CRO, ensuring independence from business functions. This enhances risk oversight but increases compliance costs. Banks need to review their risk management frameworks and board committees to meet the March 2022 deadline.

Historical instruction — do not use for current compliance. This is what was required at the time; it no longer reflects current RBI requirements. If no replacement rule is linked above, that only means none is recorded on our register yet — it does not prove no later applicable rule exists. Confirm on the official RBI source below.

What banks were required to do at the time

Who it affects

Primary Urban Co-operative Banks with asset size of ₹5,000 crore or more, Boards of Directors of these UCBs, Risk management teams and senior management

❓ Common questions

Regulatory timeline

Built from our lineage records — each fact carries its provenance; missing history simply is not shown (never guessed).

What is the deadline for appointing a CRO?

UCBs meeting the ₹5,000 crore asset threshold as on March 31, 2021, must appoint a CRO by March 31, 2022. Those crossing the threshold later have six months from the end of the financial year.

Can the CRO also hold other roles like CEO or CFO?

No, dual hatting is prohibited. The CRO cannot have any other responsibility such as CEO, COO, CFO, or Chief of Internal Audit, ensuring independence from business verticals.

What happens if the CRO is removed before tenure ends?

Premature transfer or removal requires board approval and must be reported to the concerned Regional Office of RBI's Department of Supervision.

📜 This document’s life story (1 recorded event, each backed by RBI’s own words)
Repealed by RBI/2025-26/100 — Consolidation of Regulations — Withdrawal of circulars (28 Nov 2025)
RBI’s words: “Official withdrawal register entry #300: DOR.CRE(DIR).REC.26/21.04.103/2021-22 — "Appointment of Chief Risk Officer in Primary (Urban) Co-operative Banks" dated June 25, 2021”
📜 Read the original circular — full text as issued by RBI
RBI/2021-2022/62 DOR.CRE(DIR).REC.26/21.04.103/2021-22 June 25, 2021 The Chief Executive Officer All Primary (Urban) Co-operative Banks Madam/ Dear Sir, Appointment of Chief Risk Officer in Primary (Urban) Co-operative Banks With increasing size and scope of business, Primary (Urban) Co-operative Banks (UCBs) are gradually getting exposed to greater degree of risks. It is, therefore, necessary that every UCB focuses its attention on putting in place appropriate risk management mechanism commensurate with its business profile and strategic objectives. In this connection, it has been decided that all UCBs having asset size 1 of ₹5000 crore or above, shall appoint a Chief Risk Officer (CRO). The Board 2 must clearly define the CRO’s role and responsibilities and ensure that he/she functions independently. 2. UCBs shall strictly adhere to the following instructions in this regard: The CRO shall be a senior official in the bank’s hierarchy and shall have adequate professional qualification / experience in the area of risk management. The CRO shall be appointed for a fixed tenure with the approval of the Board. The CRO can be transferred / removed from the post before completion of the tenure only with the approval of the Board and such premature transfer / removal shall be reported to the concerned Regional Office 3 of Department of Supervision, Reserve Bank of India. The Board shall put in place adequate policies to safeguard the independence of the CRO. The CRO shall have direct reporting lines to MD/CEO or Board or Risk Management Committee of Board (RMC). In case the CRO reports to the MD/CEO, the Board or the RMC shall meet the CRO, without the presence of the MD & CEO, at least on a quarterly basis. The CRO shall not have any reporting relationship with the business verticals and shall not be given any business targets. Further, there shall not be any ‘dual hatting’ i.e. the CRO shall not be given any other responsibility such as CEO, COO, CFO, Chief of the Internal Audit, etc. In UCBs that follow committee approach in credit sanction process for high value proposals, if the CRO is one of the decision makers in the credit sanction process, he shall have voting power and all members who are part of the credit sanction process, shall individually and severally be liable for all the aspects, including risk perspective related to the credit proposal. If the CRO is not a part of the credit sanction process, his role will be limited to that of an adviser. In UCBs which do not follow committee approach for sanction of high value credits, the CRO can only be an adviser in the sanction process and shall not have any sanctioning power. All credit products shall be vetted by the CRO from the angle of inherent and control risks. 3. The CRO shall support the Board in establishing an integrated risk management system, capable of identifying, measuring and monitoring all types of risks on an ongoing basis. This will include developing the organisational risk appetite and a framework that will translate the Board’s strategy into clearly laid down monitorable risk limits at the aggregate and at granular levels. The CRO shall also be involved in actual monitoring and mitigation of risks. 4. It is emphasized that the primary responsibility of risk management lies with the Board. In order to focus the required level of attention on various aspects of risk management, UCBs meeting the eligibility criteria specified in para 1 above are advised to set up a Risk Management Committee (of the Board) by March 31, 2022. The Board shall decide the membership, scope of work and frequency of meeting of the Risk Management Committee. 5. UCBs meeting the prescribed criteria as on March 31, 2021 shall appoint / designate a CRO by March 31, 2022. UCBs which may fulfill the criteria at the end of the current or subsequent financial years shall appoint / designate a CRO within a period of six months from the end of the financial year concerned. 6. A copy of this circular should be placed before the Board of Directors of the bank at its next meeting. Yours faithfully, (Manoranjan Mishra) Chief General Manager 1 As on March 31 of the previous year 2 ‘Board’ in this circular refers to Board of Directors (BoD) 3 UCBs reporting earlier to Mumbai Regional Office of the erstwhile Department of Co-operative Bank Supervision shall report to the Central Office of the Department of Supervision.
Reproduced for reference with acknowledgment — Source: Reserve Bank of India · RBI/2021-2022/62 · issued 25 Jun 2021. The plain-English explanation above is BankPulse’s own independent summary.
🧰 Tools — save, print, templates & related

💬 Banker Discussion

Discuss this circular with fellow bankers — reply, upvote what helps, report what doesn’t belong. Be professional; no client data. Views are the commenter’s own, not BankPulse’s.

Loading comments…
BankPulse Compliance Evidence Pack — generated 03 Aug 2026 · status cross-checked against RBI’s official withdrawal register (refreshed weekly).
Official RBI source: https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=12121&Mode=0 — Plain-English summary by BankPulse (bankpulse.ai), reviewed by our expert reviewer, CA Amit Jain. Independent platform, not affiliated with the Reserve Bank of India; is our own plain-English paraphrase, not RBI’s original wording.
Public beta — plain-English informational summaries. Always verify against the official RBI source (circular number cited on every page) before making compliance, credit, treasury, audit, or operational decisions. · Join our WhatsApp channel ↗