ALCO Governance Essentials: How Credit Unions Build Effective Committee Charters That Pass NCUA Scrutiny

Introduction

Asset Liability Committees, or ALCOs, sit at the center of how a credit union manages interest rate risk, liquidity, capital, and increasingly, credit risk. But many credit unions are still running these committees the way they did fifteen years ago: with responsibilities scattered across three or four separate policies, ambiguous authority, and no clear answer to a deceptively simple question: who is actually allowed to make which decisions?

In this episode of With Flying Colors, Todd Miller and I worked through the governance side of ALCO, with a particular focus on committee charters, board involvement, and the rising role of the Chief Risk Officer. Todd spent 34 years at NCUA, including roles as a regional capital markets specialist and Director of Special Actions, and he has seen what happens when ALCO governance is solid, and what happens when it is not. Below are the key insights from that conversation, with practical applications for credit union executives, CFOs, and board members preparing for their next NCUA examination.

Why ALCO Has Quietly Become the Enterprise Risk Committee

Twenty years ago, ALCO was narrowly focused on interest rate risk and liquidity. That is no longer the case. As Todd noted, more and more credit unions are using ALCO as an overall risk function, with capital adequacy and credit quality folded in alongside the traditional IRR and liquidity work.

There is a practical reason for this expansion: you cannot meaningfully manage interest rate risk and liquidity without also having a hand in credit risk and capital. Loan portfolio composition, concentration risk, charge-off trends, and capital ratios all flow directly into balance sheet strategy. Treating them as separate governance silos creates blind spots and slows down decision-making when conditions change quickly, as they did in 2022 and 2023.

That said, this expansion is a credit-union-by-credit-union decision. Some organizations keep credit risk in a separate credit risk committee. Either approach can work. What matters is that the responsibilities are clearly assigned somewhere, with no gaps and no duplication.

Committee Charter or Policy Statement? The Case for a Single Charter

Here is one of the most actionable points from the episode. Most large organizations document committee responsibilities in a dedicated charter. Most smaller credit unions document them across multiple policies: a sentence in the ALM policy, another sentence in the liquidity policy, a third in the financial management policy.

Todd's recommendation, which I agree with, is that even smaller credit unions should adopt the large-organization template and create a single ALCO charter. The reason is simple: when ALCO responsibilities live in five different policies, no one has a clean, complete view of what the committee is actually accountable for. When responsibilities are consolidated into a single charter, the answer to "what does ALCO do" becomes a one-document answer rather than a scavenger hunt.

What an Effective ALCO Charter Should Contain

A well-built ALCO charter covers the following elements. Credit unions revising their charters should walk through this list and confirm each item is addressed:

•        Purpose and role. What is the committee for? Interest rate risk? Liquidity? Capital adequacy? Credit risk? Be explicit.

•        Membership. Specify who serves. Most ALCOs draw from a wide range of staff: CEO, CFO, lending leadership, member service, sometimes a non-voting marketing representative. Larger credit unions often run a staff ALCO and a separate board-level ALCO or risk committee that meets less frequently.

•        Meeting frequency and conditions. How often does the committee meet under normal conditions? What triggers an off-cycle meeting?

•        Responsibilities by risk category. List the specific risks the committee owns and the deliverables expected for each.

•        Authority. This is the section credit unions most often get wrong. Can ALCO change pricing? Can it adjust investment strategy mid-plan? Can it modify lending strategies in response to changing rate or liquidity conditions? Spell it out.

•        Re-delegation authority. For larger credit unions, can ALCO push pricing decisions down to a smaller working group? If yes, define the boundaries.

•        Reporting requirements. What does ALCO produce, to whom, and how often?

•        Performance metrics and self-evaluation. How does the committee assess whether it is doing its job well, and how often is the charter itself reviewed?

•        Documentation standards. Minutes, supporting reports, decision memos, and retention.

The Board Member Question: Should Directors Sit on ALCO?

This is one of the most contested governance questions in credit unions today, and the honest answer is: it depends.

In smaller credit unions, examiners often recommend that a board member serve on ALCO, and the logic makes sense for a small institution where staff depth is limited. In larger credit unions, putting an unpaid volunteer director on a committee that meets monthly, with significant pre-read materials and time commitments, becomes much harder to sustain. The realistic structure for mid-sized and larger credit unions is a staff ALCO that handles tactical decisions and a separate board-level ALCO or risk committee that meets less frequently and focuses on oversight.

Worth flagging: I have seen NCUA examination findings that go beyond recommendation and effectively require specific board participation on ALCO. In a recent client situation involving a mid-sized to larger credit union, NCUA included a document of resolution item dictating committee composition. We pushed back on that, and credit unions should know they can push back too. Committee composition is a board governance decision. The board should be making it based on the knowledge, skills, and abilities of available directors and the needs of the organization, not because an examiner prefers a particular structure.

The right test is straightforward. Would a particular director add value to ALCO based on their background? A director who is a CPA or former CFO with availability and interest is an obvious yes. A director without financial background and without bandwidth is probably not the right fit, regardless of what an exam report suggests.

The Chief Risk Officer Question: A Recent NCUA Trend Worth Watching

Here is a development that has come up multiple times since Todd and I left NCUA: examiners pushing credit unions to remove the Chief Risk Officer from ALCO, on the theory that having the CRO on ALCO creates a conflict because the CRO is then participating in risk-taking decisions they are supposed to oversee independently.

That theory does not hold up well in practice. ALCO is not making individual transaction-level risk decisions like buying a specific investment or approving a specific loan. ALCO is part of the strategy team. Even at very large banks, the CRO typically sits on ALCO precisely because the risk function benefits from being integrated into strategy discussions, not walled off from them. Removing the CRO from ALCO often reduces the quality of the conversation without producing any real independence benefit.

Like the board member question, this is a credit-union-by-credit-union call. If the CRO role is heavily compliance-focused and the individual does not have a strong balance sheet management background, putting them on ALCO may not add value. If the CRO is a true enterprise risk professional, having them in the room is almost always net positive. The decision belongs to the credit union, not to the examination team.

Practical Steps for Credit Unions This Quarter

•        Audit your current setup. Where are ALCO responsibilities documented today? Pull every policy that references ALCO and inventory what is in each.

•        Consolidate into a single charter. Draft a unified ALCO charter covering all nine elements above. Reference policies for technical limits and details rather than duplicating them.

•        Review committee composition deliberately. Document the rationale for who is on ALCO. If a board member is on the committee, document why. If the CRO is on the committee, document why. Examiners are far less likely to second-guess decisions when the rationale is on paper.

•        Define authority and re-delegation explicitly. Pricing authority in particular tends to be ambiguous. Tighten it.

•        Build a charter review cadence. Annual review at minimum, with off-cycle updates whenever ALCO scope materially changes.

Key Takeaways

•        ALCO has expanded beyond interest rate risk and liquidity into an enterprise risk function for many credit unions, often covering capital adequacy and credit risk.

•        Even smaller credit unions benefit from a single, consolidated ALCO charter rather than scattering responsibilities across multiple policies.

•        A complete ALCO charter addresses purpose, membership, meeting cadence, responsibilities by risk category, authority, re-delegation, reporting, performance metrics, and documentation.

•        Board member participation on ALCO is a credit union governance decision, not an NCUA mandate. Credit unions can and should push back when examiners try to dictate committee composition.

•        Removing the Chief Risk Officer from ALCO is often counterproductive. ALCO is a strategy committee, not a transaction approval body, and CRO participation typically improves both ALCO and the risk function.

•        Larger credit unions should consider a two-tier structure: a staff ALCO for tactical decisions and a separate board-level risk or ALCO committee for oversight.

•        Document the rationale behind committee composition decisions. Documented rationale survives examiner scrutiny far better than verbal explanations.

NCUA Exam Preparation

Examiners increasingly probe ALCO governance during interest rate risk and liquidity reviews. Specific items to have ready before your next exam:

•        A current ALCO charter, board-approved, with a clear last review date.

•        Twelve months of ALCO minutes showing the committee actually doing what the charter says it does.

•        A documented rationale for who serves on ALCO and why.

•        Evidence that ALCO acted within its authority, particularly on pricing changes, investment strategy adjustments, and lending strategy updates.

•        If your structure includes both a staff ALCO and a board-level committee, a clear delineation of which committee owns which decisions.

•        If you receive an exam finding that attempts to dictate committee composition, do not assume it is settled. Discuss it with experienced counsel or a former NCUA executive who has navigated these situations before.

Final Thoughts

ALCO governance is the kind of credit union infrastructure that nobody pays attention to until something breaks. When rates moved 500 basis points in fifteen months, the credit unions that managed the transition best were the ones with clear authority structures, well-defined committees, and decision-makers who knew exactly what they were empowered to do. The credit unions that struggled were the ones figuring out their governance in real time.

A consolidated charter, deliberate committee composition, and explicit authority are not glamorous. They are the foundation everything else sits on. Get them right now, well before your next exam cycle, and ALCO becomes an asset rather than a liability.

If your credit union would like help reviewing your ALCO charter, preparing for an NCUA examination, or pushing back on examination findings that overstep the boundaries between supervision and governance, visit MarkTreichel.com.