Typically, banks begin with a redefinition of the risk appetite—a clear statement of how much and what kind of risk will be taken on.
That risk appetite is then translated into specific limits for each region, sector and rating. Other steps might include supplementing the traditional historical analysis of credit risk with more forward-looking techniques.