RISK MANAGEMENT

9 Months Ended

Sep. 30, 2021


18. RISK MANAGEMENT

The primary risks to the Company are capital, liquidity and funding risk, investment/market risk, credit risk and operational risk. Interest rates are highly sensitive to many factors, including governmental monetary and tax policies, domestic and international economic and political considerations and other factors beyond the Company’s control. Changes in the general level of interest rates can affect net interest income, which is the difference between the interest income earned on interest earning assets and the interest expense incurred in connection with the interest bearing liabilities, by affecting the spread between the interest earning assets and interest bearing liabilities. Changes in the level of interest rates can also affect the value of the interest earning assets and the Company’s ability to realize gains from the sale of these assets. A decline in the value of the interest earning assets pledged as collateral for borrowings under repurchase agreements and derivative contracts could result in the counterparties demanding additional collateral or liquidating some of the existing collateral to reduce borrowing levels.

The Company may seek to mitigate the potential financial impact by entering into interest rate agreements such as interest rate swaps, interest rate swaptions and other hedges.

Weakness in the mortgage market, the shape of the yield curve, changes in the expectations for the volatility of future interest rates and deterioration of financial conditions in general may adversely affect the performance and market value of the Company’s investments. This could negatively impact the Company’s book value. Furthermore, if many of the Company’s lenders are unwilling or unable to provide additional financing, the Company could be forced to sell its investments at an inopportune time when prices are depressed. The Company has established policies and procedures for mitigating risks, including conducting scenario and sensitivity analyses and utilizing a range of hedging strategies.

The payment of principal and interest on the Freddie Mac and Fannie Mae Agency mortgage-backed securities, which exclude CRT securities issued by Freddie Mac and Fannie Mae, is guaranteed by those respective agencies and the payment of principal and interest on Ginnie Mae Agency mortgage-backed securities is backed by the full faith and credit of the U.S. government.

The Company faces credit risk on the portions of its portfolio which are not guaranteed by the respective Agency or by the full faith and credit of the U.S. government. The Company is exposed to credit risk on CRE Debt and Preferred Equity Investments, real estate investments, commercial mortgage-backed securities, residential mortgage loans, CRT securities, other non-Agency mortgage-backed securities and corporate debt. MSR values may also be adversely impacted by rising borrower delinquencies which would reduce servicing income and increase the overall costs to service the underlying mortgage loans. The Company is exposed to risk of loss if an issuer, borrower, tenant or counterparty fails to perform its obligations under contractual terms. The Company has established policies and procedures for mitigating credit risk, including reviewing and establishing limits for credit exposure, limiting transactions with specific counterparties, pre-purchase due diligence, maintaining qualifying collateral

and continually assessing the creditworthiness of issuers, borrowers, tenants and counterparties, credit rating monitoring and active servicer oversight.

The Company depends on third-party service providers to perform various business processes related to its operations, including mortgage loan servicers and sub-servicers. The Company’s vendor management policy establishes procedures for engaging, onboarding and monitoring the performance of third-party vendors. These procedures include assessing a vendor’s financial health as well as oversight of its compliance with applicable laws and regulations, cybersecurity and business continuity programs and security of personally identifiable information.