The rating is made on the basis of documents provided by the company, the questionnaire, and the rating interview with the company's representatives. NRA conducts an analysis of procedures and the quality of risk identification, assessment, management of credit risks, liquidity risks, operational, market, investment risks, and the company's business activities risks. Assessment of the company's risk management is a comprehensive analysis of the organizational structure of risk management and factors that characterize it, risk management tools used by the company for all types of risks, and control over their implementation.

Based on the analysis, NRA determines the risk management quality and the ability to control the level of risk in the long term.