NRSRO Designation: Registration and Post-2008 Reform

Key Takeaways

• The 2006 Reform Act formalized what had been an informal SEC label since 1975, creating Form NRSRO and written conflict-of-interest rules for the first time.
• Dodd-Frank Section 932 created the SEC Office of Credit Ratings, which examines every NRSRO at least annually and publishes its findings publicly.
• Section 939A removed all rating references from federal regulations, replacing "AAA-rated" requirements with issuer-assessed creditworthiness standards.
• The Big Three (S&P, Moody's, Fitch) dominate market acceptance; smaller NRSROs are often recognized only in specific asset classes.

What It Is

NRSRO stands for Nationally Recognized Statistical Rating Organization. The SEC first used the label in 1975 through a no-action letter that permitted broker-dealers to use ratings from certain agencies in net capital calculations. For the next three decades the designation was informal, with no written application process.

The Credit Rating Agency Reform Act of 2006 converted the informal status into a statutory registration regime. An agency that wants to be an NRSRO files Form NRSRO with the SEC, makes the form publicly available, and becomes subject to the Commission's rulemaking authority under Section 15E of the Securities Exchange Act.

The Intuition

Before 2006, nobody outside the SEC knew exactly what made a rating agency "nationally recognized." Firms that wanted the designation lobbied quietly and waited. The result was a durable oligopoly: S&P, Moody's, and Fitch held NRSRO status for decades while smaller competitors could not break in.

Congress had two goals with the 2006 Act. First, create an objective application process so new entrants could compete. Second, give the SEC formal authority to police conflicts of interest, recordkeeping, and disclosure. The 2008 crisis then exposed that the 2006 framework was too light, and Dodd-Frank added a second wave of rules in 2010.

How It Works

Registration (Rule 17g-1). An applicant files Form NRSRO with performance statistics, rating methodologies, policies for managing conflicts, and identification of key personnel. The SEC has 90 days to grant or deny. Once registered, the agency must update the form annually and whenever material information changes.

Recordkeeping (Rule 17g-2). Agencies keep rating histories, analyst communications, and compensation records for specified periods.

Financial reporting (Rule 17g-3). Annual audited financial statements and reports on internal controls.

Information handling (Rule 17g-4). Written policies prevent analysts from using nonpublic issuer information for personal trading.

Conflicts of interest (Rule 17g-5). Analysts cannot rate issuers they have a financial stake in. Fee arrangements above thresholds must be disclosed. A separate 17g-5 provision requires issuers of structured-finance products to share underlying data with non-hired NRSROs so they can issue unsolicited ratings.

Prohibited conduct (Rule 17g-6). Agencies cannot condition a favorable rating on additional business from the issuer.

Post-2008 Reform: Dodd-Frank

Four sections of the 2010 Dodd-Frank Act substantially expanded NRSRO oversight.

• Section 932 created the Office of Credit Ratings inside the SEC with a dedicated staff and the authority to examine each NRSRO at least annually. The Office publishes a public report summarizing its findings each year.
• Section 939A directed every federal agency to remove references to credit ratings from its own regulations and replace them with alternative standards of creditworthiness. Capital rules, money-market fund rules, and investment-company restrictions all had to drop their ratings-based language.
• Section 939F ordered a study on whether to replace the issuer-pays model with an assignment system in which the SEC or a utility assigns rating mandates for structured-finance deals. The study was published but the assignment system was not adopted.
• Section 939G rescinded Rule 436(g) under the Securities Act, removing the safe harbor that had shielded NRSROs from expert liability when their ratings were included in registration statements. After 939G, agencies began refusing to consent to having their ratings included in prospectuses for new bond issues, which disrupted ABS markets until the SEC issued no-action relief.

Together the 2006 Act and Dodd-Frank Sections 932, 939A, 939F, and 939G took the rating industry from lightly supervised private opinion writers to federally examined entities subject to written conduct rules.

Worked Example

A mid-size European rating agency wants U.S. recognition. It assembles the 17g-1 package: three years of rating histories, documented methodologies, conflicts policies, personnel disclosures, and audited financials. The SEC reviews the Form NRSRO package, asks clarifying questions, and registers the agency in asset classes where performance is demonstrable: financial institutions and corporates, but not structured finance where the agency lacks track record.

After registration, the agency is examined annually by the SEC's Office of Credit Ratings. The first examination finds that the agency's conflicts log does not capture all analyst-issuer communications within 14 days as required. A deficiency letter follows; the agency remediates and submits documentation. Findings are aggregated into the Office's annual report to Congress.

Common Mistakes

• Assuming the 10 NRSROs are interchangeable. Big Three S&P, Moody's, and Fitch dominate bond-market acceptance. Smaller NRSROs are often recognized only in specific asset classes.
• Confusing NRSRO status with accuracy. NRSRO registration is a regulatory license, not a quality verdict. The SEC explicitly does not endorse any agency's methodology.
• Overlooking 939A. Post-2010, a federal capital rule cannot require "AAA-rated" collateral. It must use substitute wording like "highest creditworthiness as assessed by the institution."
• Treating 939G as dead letter. The SEC's no-action relief made structured issuance workable, but the underlying statute still removes the safe harbor. If the no-action posture ever flips, ABS markets would reprice quickly.
• Ignoring the Office of Credit Ratings' annual report. The report documents methodology failures, conflict breaches, and internal-control weaknesses by agency. It is primary-source supervisory data.

Frequently Asked Questions

How did the NRSRO label originate and why did it take until 2006 to formalize it? The SEC coined NRSRO in a 1975 no-action letter allowing broker-dealers to use certain agencies' ratings for net capital calculations, but wrote no formal criteria into regulation. Agencies received recognition through informal lobbying and SEC comfort rather than any published standard. Congress finally acted through the Credit Rating Agency Reform Act of 2006 after years of criticism that the barrier to entry was opaque, the Big Three's market position was entrenched by regulatory mandate rather than analytical quality, and the SEC had no clear authority to discipline agency conduct.

What is Rule 17g-5 and why does it matter for structured finance? Rule 17g-5 requires issuers of structured-finance products to make the underlying data package available to all registered NRSROs, not just the one hired to rate the deal. The intent is to encourage unsolicited ratings from agencies that were not paid, creating a check on the issuer-pays model. In practice, few NRSROs have issued meaningful unsolicited structured-finance ratings, but the rule does require broad data disclosure and prevents the issuer from monopolizing the information flow to a single favored agency.

What did Dodd-Frank Section 939G do to structured finance markets? Section 939G removed the Securities Act safe harbor that had shielded NRSROs from liability as experts when their ratings appeared in registration statements for new bond issues. After the section took effect, agencies refused to consent to rating inclusion in ABS prospectuses because they could not accept expert liability for forward-looking opinions. This briefly froze new ABS issuance until the SEC issued no-action relief allowing issuers to omit ratings from prospectuses without penalty. The underlying statute remains unchanged, meaning the relief is contingent on SEC forbearance.

How many NRSROs are currently registered with the SEC? As of the mid-2020s, approximately 10 agencies hold NRSRO status, down from a peak of around 10 registered at different points after the 2006 Act. The number has fluctuated as some smaller agencies have withdrawn registration or merged. Despite open registration, S&P, Moody's, and Fitch continue to receive the vast majority of rating mandates because market participants, trustee agreements, and fund documentation routinely require ratings from one or more of the Big Three by name.

What practical effect did Section 939A have on bank capital rules? Before 939A, rules like the SEC net capital rule and bank capital adequacy standards explicitly referenced credit ratings as proxies for credit quality, requiring "AAA-rated" or "investment-grade" collateral for specific purposes. After 939A directed federal agencies to remove those references, regulators substituted internal creditworthiness assessments. For banks this meant developing or purchasing internal models or using regulatory risk-weight schedules that do not depend on NRSRO ratings, which shifted more credit judgment responsibility inside institutions and raised questions about consistency and comparability across firms.

Sources

1. SEC. Oversight of Nationally Recognized Statistical Rating Organizations: Small Entity Compliance Guide. https://www.sec.gov/about/divisions-offices/office-credit-ratings/oversight-nrsros-small-entity-compliance-guide
2. SEC Press Release. Final Rules to Implement the Credit Rating Agency Reform Act of 2006 (May 23, 2007). https://www.sec.gov/news/press/2007/2007-104.htm
3. SEC. Form NRSRO. https://www.sec.gov/about/forms/formnrsro.pdf
4. Congressional Research Service. Credit Rating Agency Reform Act of 2006. https://www.everycrsreport.com/files/20061011_RS22519_5c843e84ccf35bd2c2e9d17a9a059a84b380c341.pdf
5. SEC. Dodd-Frank Act Rulemaking: Credit Rating Agencies. https://www.sec.gov/spotlight/dodd-frank/creditratingagencies.shtml

Disclaimer

This article is educational content only and is not financial advice. Nothing here is a recommendation to buy, sell, or hold any security. Consult a licensed advisor before making investment decisions.