Nationally Recognized Statistical Rating Organization

A Nationally Recognized Statistical Rating Organization (NRSRO) is a credit rating agency that the U.S. Securities and Exchange Commission officially recognizes as competent to issue ratings for regulatory purposes. The NRSRO designation permits an agency’s ratings to be used in calculating capital adequacy requirements for banks, insurance companies, and investment funds, and exempts investors using NRSRO ratings from conducting their own credit analysis under certain rules. It is simultaneously a credential and a regulatory crutch: agencies that hold it wield outsized influence; agencies without it operate in obscurity.

The regulatory bootstrap

The NRSRO framework originated decades before becoming formal SEC policy. In the 1970s and 1980s, the SEC informally allowed banks and investment funds to reduce compliance burdens by relying on credit ratings from agencies like Standard & Poor’s, Moody’s, and Fitch instead of conducting independent credit analysis. The assumption was that reputable rating agencies with skin in the game would maintain standards and flag deteriorating credit quality before defaults.

This shortcut proved politically and operationally convenient. In 1990, the SEC formalized it in the Rule 2a-7, which permitted money market funds to hold certain securities if they were rated investment-grade by an NRSRO. The framework then spread: bank regulators adopted similar rules for capital calculations, allowing banks to hold lower reserves against bonds rated investment-grade by an NRSRO. The logic was simple—the rating agencies had expertise; regulators did not; deferring to outside experts economized on regulatory cost and preserved confidentiality of issuers’ proprietary information.

But deferring to any private firm for regulatory judgments creates dependence. Once capital rules, insurance regulations, and investment restrictions keyed off NRSRO ratings, those agencies became de facto regulators. A downgrade by S&P Global Ratings could force a pension fund to sell bonds and crystallize losses—not because the credit fundamentals changed overnight, but because the rating change triggered regulatory constraints.

The path to designation

Becoming an NRSRO is difficult by design. An agency must apply to the SEC, demonstrating at least three years of published ratings history, documentation of methodology, and evidence that financial market participants rely on those ratings. The SEC then reviews the application against criteria including:

• Historical accuracy of ratings relative to actual default rates.
• Organizational independence from rated entities.
• Transparency of rating methodology.
• Financial resources and compliance infrastructure.

Once designated, an agency must submit to annual reviews, publish performance data (rating transition matrices and default studies), and comply with record-keeping and conflict-of-interest rules. The SEC can revoke NRSRO status if an agency’s ratings prove systematically inaccurate or if it engages in misconduct.

In practice, only about a dozen agencies hold NRSRO status. The Big Three—S&P Global Ratings, Moody’s, and Fitch—dominate the market and have the scale and history to clear the SEC bar easily. Smaller agencies like Kroll, DBRS, and AM Best have niche positions (insurance, structured finance, specific geographies) and maintain designation through specialized excellence. New entrants face a chicken-and-egg problem: they need years of published ratings and market reliance to qualify, but building that history without NRSRO status—when the market implicitly demands it—is nearly impossible.

The 2008 crisis and post-crisis reform

The 2008 financial crisis exposed dangerous flaws in the NRSRO model. Rating agencies had rated mortgage-backed securities and collateralized debt obligations triple-A when they contained hundreds of millions in subprime loans. Once the housing market faltered, defaults cascaded, and the triple-A ratings proved catastrophically wrong. Investors had relied on those ratings instead of conducting independent analysis—exactly the regulatory permission structure allowed.

In response, Congress passed the Dodd-Frank Act, which included Title II, the Credit Rating Agency Reform Act. Key reforms included:

• Mandatory SEC registration of rating agencies (all agencies rating products for US investors must register).
• Higher standards for methodological transparency and historical performance disclosure.
• Restrictions on conflicts of interest, including rules limiting “rating shopping” (where issuers could select from multiple competing ratings methodologies).
• Liability provisions allowing investors harmed by reckless ratings to sue for damages.
• Rules limiting the extent to which regulators could reference NRSRO ratings in capital requirements (the intent was to reduce dependency).

The latter reform—the “Rule 2(a)(7) pilot”—was meant to phase out the reliance on ratings in money market fund rules. But practical implementation stalled. Removing ratings from capital rules required regulators to conduct their own credit analysis or create alternative frameworks—expensive and contentious tasks. As of 2026, most capital regulations still incorporate NRSRO ratings, though with added overlays and stress testing.

Incumbent dominance and competitive critique

The Big Three’s hold on NRSRO status is near-absolute. They rate over 90% of rated securities globally and earn the overwhelming share of agency revenues. Smaller NRSROs carve out niche markets where they have expertise or relationships the Big Three underserve—for example, insurance credit ratings, municipal bonds, or structured products tied to specific sectors.

This concentration is economically troubling and politically durable. New entrants cannot easily challenge incumbents because:

1. Network effects: investors and regulators are trained on Big Three methodologies and rating scales.
2. Data advantages: incumbents have decades of rating history and default data, which validates (or appears to validate) their methods.
3. Regulatory permission: NRSRO status itself is scarce and costly to obtain, functioning as a cartel gate.

Regulators have periodically proposed de-concentrating the market by lowering NRSRO barriers to entry or by developing alternative credit assessment frameworks that don’t depend on any single agency. None have succeeded, partly because the Big Three lobby fiercely, but also because no consensus exists on what could replace them.

The conflict between access and conflict

An NRSRO designation grants legitimacy and market access but comes with severe conflict-of-interest risks. Because rating agencies operate on the issuer-pays model—meaning the entity seeking a rating pays for it—agencies face pressure to maintain cordial relationships with issuers. A reputation for downgrading readily can shrink an agency’s market share as issuers shop for ratings elsewhere.

The post-Dodd-Frank SEC rules tightened oversight of shopping, but the conflict persists. An NRSRO must balance the integrity of its ratings against the revenue dependency on issuers. This tension is not unique to finance—most professional services face similar conflicts—but when the regulator outsources judgment to a private firm, the risk of misaligned incentives becomes systemic.

Proposals for NRSRO reform

Several reform proposals circulate:

• Public rating agencies: Government could establish a public NRSRO to compete with private agencies and provide baseline credit assessment at low cost.
• Mandatory second-opinion: Rules could require multiple independent NRSRO ratings for securities used in regulatory calculations, reducing reliance on any single agency.
• Investor-pays model: Flipping the revenue model so investors (not issuers) pay for ratings could reduce conflicts, though this would likely shrink rating coverage for smaller issuers.
• Reduced regulatory reliance: Regulators could conduct more credit analysis in-house rather than outsourcing to agencies, though this would increase regulatory cost and require significant expertise buildup.

None of these proposals has gained sufficient political traction to become law. The status quo—heavy reliance on Big Three NRSRO ratings despite acknowledged conflicts—persists because change would be costly and disruptive.

See also