S&P Ratings Criteria: Business Risk, Financial Risk

Key Takeaways

• The Business Risk Profile scores industry risk, country risk, and competitive position on a six-level scale from Excellent to Vulnerable.
• The Financial Risk Profile scores leverage and coverage using metrics like Debt/EBITDA and FFO/Debt, also on a six-level scale.
• Six modifier factors, including liquidity, financial policy, and governance, adjust the anchor up or down to produce the Stand-Alone Credit Profile.
• The Issuer Credit Rating adds group or government support on top of the SACP; for subsidiaries these two can differ by several notches.

What It Is

An S&P corporate rating is an opinion on the probability that an issuer meets its financial obligations on time. Ratings run from AAA (highest) through D (default) on the long-term scale.

The rating is produced by a structured criteria set published in the document Criteria: Corporates: General: Corporate Methodology. The criteria define two main risk profiles, a matrix that combines them into an anchor, and a list of modifier factors that adjust the anchor up or down.

The Intuition

S&P separates what a company does from how it funds itself. The Business Risk Profile asks whether the industry and the competitive position can produce durable cash flows. The Financial Risk Profile asks whether the current capital structure leaves enough cushion on those cash flows to service debt through a downturn.

Strong businesses with weak balance sheets and weak businesses with strong balance sheets can both land in the middle of the scale, but for different reasons. Keeping the two axes separate helps analysts diagnose which risk is binding and helps investors see what has to change for the rating to move.

How It Works

Step 1: Business Risk Profile (BRP). Three inputs combine: industry risk, country risk, and competitive position. Industry risk uses a 1-to-6 scale based on cyclicality, growth, and competitive intensity. Country risk reflects operating environment quality. Competitive position blends scale, diversification, operating efficiency, and profitability. The BRP is scored on a six-point scale: Excellent, Strong, Satisfactory, Fair, Weak, Vulnerable.

Step 2: Financial Risk Profile (FRP). Cash flow and leverage ratios drive this score. Core metrics are Debt/EBITDA and FFO/Debt, supplemented by coverage ratios. Thresholds differ for "standard," "medial," and "low" volatility issuers. The FRP has six levels: Minimal, Modest, Intermediate, Significant, Aggressive, Highly Leveraged.

Step 3: Anchor. A published matrix maps the BRP and FRP combination to a preliminary anchor rating. The anchor is usually a letter rating such as bbb or bb, written in lowercase inside the framework. Business risk tends to dominate at investment-grade anchors; financial risk dominates at speculative-grade anchors.

Step 4: Modifiers. Six factors can shift the anchor up or down by one or more notches:

• Diversification and portfolio effect (for conglomerates with uncorrelated segments)
• Capital structure (currency risk, maturity profile, interest rate mix)
• Financial policy (shareholder returns, M&A appetite, leverage targets)
• Liquidity (five descriptors from Exceptional to Weak)
• Management and governance (Satisfactory, Fair, or Weak)
• Comparable ratings analysis (final peer cross-check)

The sum of adjustments produces the Stand-Alone Credit Profile (SACP). For subsidiaries of rated groups, an overlay adjusts for parent or government support to yield the Issuer Credit Rating (ICR).

Worked Example

A large North American packaged-food company.

• Industry risk: Low cyclicality, mature growth. Score: 3 (low risk).
• Country risk: Investment grade sovereign. Score: 1.
• Competitive position: Broad brand portfolio, strong distribution, stable margins. Assessment: Strong.
• Business Risk Profile: Strong.
• Cash flow metrics: Debt/EBITDA 3.8x, FFO/Debt 22 percent.
• Financial Risk Profile: Significant.
• Anchor from the matrix: bbb.

Modifiers: Liquidity adequate (neutral). Financial policy targets net leverage below 4x (neutral). Management satisfactory (neutral). Diversification benefit across food categories (+1 notch). Final SACP: bbb+.

No parent uplift or government support applies. Issuer Credit Rating: BBB+.

A senior unsecured bond from this issuer would typically carry the same BBB+ rating. A subordinated bond would be notched down one level to BBB.

Common Mistakes

• Treating the BRP matrix as a formula. The matrix gives an anchor, not a rating. Two issuers with identical BRP and FRP scores can end up two notches apart because of different modifiers.
• Confusing SACP with ICR. The SACP is the standalone view. The ICR adds group or government support and is what actually governs bond ratings. A government-owned utility may have an SACP of bb+ but an ICR of A- after sovereign uplift.
• Using only one ratio. Debt/EBITDA alone can be misleading when working capital or capex swing sharply. S&P uses a basket of ratios and adjusts reported figures for operating leases, pension deficits, and securitizations.
• Ignoring the 2013 break. Pre-2013 ratings were produced under a different criteria set. Historical comparisons that assume methodological continuity can misstate rating migration rates.
• Reading lowercase and uppercase as the same thing. In S&P documents the anchor and SACP use lowercase letters (bbb); only the final published ICR uses uppercase (BBB). Mixing them in notes creates confusion.

Frequently Asked Questions

What is the difference between an anchor, a SACP, and an Issuer Credit Rating in the S&P framework? The anchor is the preliminary letter rating produced by the BRP-FRP matrix before any modifier adjustments. The Stand-Alone Credit Profile applies the six modifier factors to the anchor, reflecting the company's specific financial policy, liquidity, governance, and capital structure. The Issuer Credit Rating then adds any external support from a parent entity or government, which can lift the ICR well above the SACP for strategically important subsidiaries.

How does the Financial Risk Profile threshold differ for low-volatility versus standard issuers? S&P categorizes business risk as low, standard, or high volatility based on industry cyclicality and cash-flow predictability. Low-volatility industries like regulated utilities can qualify for the same FRP category at higher leverage ratios than standard-volatility companies, because their cash flows are more predictable and lenders have higher confidence in debt service. A utility at Debt/EBITDA of 4.5x might score Modest on the FRP while a manufacturing company at the same ratio scores Intermediate.

What does the financial policy modifier measure and why does it matter? The financial policy modifier reflects the issuer's stated leverage targets, dividend and share-buyback appetite, and appetite for M&A. An aggressive financial policy, one that tolerates high leverage or prioritizes shareholder returns over debt reduction, is a negative modifier that can move the anchor down by one notch. It captures the behavioral dimension of credit risk that balance-sheet ratios alone cannot, since a company committed to returning all excess cash to shareholders has less financial flexibility than one targeting deleveraging.

How does S&P handle operating lease adjustments in the Financial Risk Profile? S&P capitalizes operating leases by multiplying the annual minimum lease payment by an industry-specific multiplier, typically 6 to 8 times for retail and airlines, and adds the result to reported debt. This adjustment makes lease-heavy retailers look significantly more leveraged than their reported balance sheets suggest and is one reason why retail companies often sit in lower FRP categories than naive leverage ratios imply. After the adoption of IFRS 16 and ASC 842, most leases already appear on balance sheets, but S&P's adjustments still differ from accounting treatment in some cases.

Can a company with a weak Business Risk Profile achieve an investment-grade rating? Yes, if its Financial Risk Profile is strong enough. The BRP-FRP matrix allows a Weak BRP to produce investment-grade anchors if the issuer has Minimal or Modest financial risk, meaning very little debt relative to its cash flows. However, investment-grade ratings for weak-BRP issuers are uncommon in practice because the low-cyclicality, stable cash-flow industries that justify Minimal financial risk rarely coexist with weak competitive positions. The more typical path to investment grade for a challenged business is through sovereign or parent uplift rather than intrinsic strength.

Sources

1. S&P Global Ratings. Criteria: Corporates: General: Corporate Methodology (November 19, 2013). https://www.maalot.co.il/Publications/MT20190703113602.PDF
2. S&P Global Ratings. Criteria: Corporates: General: Corporate Methodology (January 7, 2024). https://www.maalot.co.il/Publications/MT20240214173645.PDF
3. S&P Global Market Intelligence. Financial and Business Risk Profile and the Relative Strength of Issuers. https://www.spglobal.com/market-intelligence/en/news-insights/research/financial-and-business-risks
4. Squire Patton Boggs. Standard & Poor's Updates Criteria Used to Determine SACP and ICR (2013). https://www.squirepattonboggs.com/en/insights/publications/2013/11/standard--poors-updates-criteria-used-to-determi__

Disclaimer

This article is educational content only and is not financial advice. Nothing here is a recommendation to buy, sell, or hold any security. Consult a licensed advisor before making investment decisions.