SBA Risk Based Reviews
By Lisa Preston1
If you have an SBA portfolio and it continues to grow in size, most likely at some point, you will be subject to an SBA Risk Based Review. The Office of Credit Risk Management (OCRM) is the division of SBA who monitors the loan portfolios and is responsible for the on-site review process for the 7(a) and 504 loan programs. On-site reviews occur at least every 24 months for 7(a) lenders with a portfolio size exceeding $10 million and 504 certified development companies with a portfolio size exceeding $30 million.
The on-site SBA Risk Based Review includes not only loan review but also process review. The SBA is reviewing the overall SBA operation and making an assessment of four key components. They are Portfolio Performance, Management & Operations, Credit Administration, and Compliance. Let’s discuss each component in further detail.
Portfolio Performance is exactly what you would think it is. SBA is looking at the performance of your SBA loan portfolio as it compares to the SBA portfolio averages and as it compares to your specific peer group. The overall portfolio is given an SBA Risk Rating. In addition, the SBA has a Lender Portal accessible by all lenders and CDC’s. Once you obtain a login and password, your portfolio performance rates such as delinquency, past due, etc. are at your fingertips. SBA also provides you with the Small Business Predictive Score (SBPS) which predicts the probability of each loan in your portfolio going into default. The SBA Lender Portal is an excellent tool to monitor what is happening in your portfolio and has consistently been updated quarterly by the SBA in the past. Here recently, the data has not been updated on a consistent basis due to revisions of the system. SBA expects to be back on track with quarterly updates very soon.
Early default is another area SBA consistently monitors to determine if a pattern or trend is developing within the loan portfolio. Guaranty purchases and debenture repurchases are reviewed to ensure any trends developing are addressed immediately. Industry and geographical concentrations are also reviewed to ensure proper diversification of risk.
(Management & Operations is again exactly what you think it is. SBA is reviewing your overall SBA operations and assessing whether management is involved in the day to day details or if they are nonexistent. A review of the structure of management including the Board of Directors and all committees is performed. The internal operating plan of management is also reviewed to determine if it is adequate for the size of the operation and to ascertain whether goals are attainable. If an SBA Credit Policy Manual exists, actual policies and procedures are reviewed to determine if they adequately follow the manual and are in conformity with the Code of Federal Regulations (CFR) and the SBA’s Standard Operating Procedures (SOP’s). Internal and external controls are also reviewed as they are always an important aspect of any management and operational structure.
The Credit Administration component consists of a review of all procedures associated with an SBA loan commencing with the application phase and concluding with the liquidation phase, if applicable. Therefore, application, underwriting, processing, closing, servicing, intensive servicing, collections, and liquidation areas are all reviewed in detail. The SBA is looking to ensure all borrowers are creditworthy small businesses with sufficient management experience to succeed in the stated endeavor, whether an existing or new business.
Pre closing and post closing check and balances are reviewed to determine if adequate internal controls exist. The internal risk rating system is also monitored to determine if it is assessing risk appropriately. If loan agents or brokers are used in the application process, a thorough review of the entities and their involvement including underwriting is assessed to determine if a pattern or trend has occurred with past dues, delinquencies or liquidations. Loan sales are also reviewed to determine if compliant with SBA requirements.
The Compliance component review encompasses borrower eligibility and reporting requirements. All areas of borrower eligibility such as, credit not available elsewhere, personal resources test, size determination, no prior loss to the federal government and EPC/OC requirements, to name just a few, are reviewed when conducting loan review to ascertain compliance with all SBA mandates. Required reporting to SBA is also reviewed for completeness, accuracy, and timeliness.
The SBA Risk Based Review culminates with a written report documenting the review in detail and outlining any deficiencies noted. Any patterns or trends noted during the on-site review in both process and loan review will be stipulated as findings in the written report. The report is usually received within 60 days of the actual on-site review.
Common pitfalls for construction lenders can be found in several areas of the loan process. One area where issues can occur is the proper documentation of borrower injection for 7(a) lenders and borrower contribution for 504 CDC’s. If borrower injection or borrower contribution is a requirement in the Loan Authorization, properly documenting the injection or contribution is absolutely necessary in order to meet SBA’s requirements. Documentation in the borrower injection or contribution area can never be too much!
Site Visits are also a very important part of construction lending. Adequately monitoring construction performance, the job site, costs, disbursements, and construction timeframes are integral to successful completion of a project. Keeping the borrower, general contractor, sub-contractors, lender, and sometimes a CDC happy while eliminating any mechanics and materialmen’s liens, is not an easy feat. Site visits are also required at various intervals of default, liquidation, and during some borrower servicing requests. Dollars spent in this area to ensure compliance with SBA requirements is money well spent. Again, documentation in this area can never be too much!
SBA wants to know the whole story intricately on each and every borrower when conducting the SBA Risk Based Review. This applies to a current, past due, delinquent, or liquidation loan. The only way to ensure SBA has the full story and accurately assesses your compliance is to properly document all loan files.
The most basic and the most advanced rules to follow in SBA are: Document and Document. Prudent lending actions can be justified to SBA with proper documentation.
1 Lisa Preston is President of The Preston Group, a financial consulting company specializing in SBA compliance issues for both 7(a) and 504 loan programs. Formerly working for the FDIC during the banking crisis of the 1980’s and more recently on behalf of the SBA, Ms. Preston has over 25 years of experience in all facets of commercial, residential, acquisition & development, construction, and government guaranteed loans. Ms. Preston may be contacted at 281.557.3435 or via e-mail at lpreston@the-preston-group.com.
«HOME






