Credit risk has two components.The first is known as default risk, or default probability, which is the probability that a borrower defaults—that is, fails to meet its obligation to make full and timely payments of principal and interest, according to the terms of the debt security.
Its refers to a borrower. It is the non-gendered singular possessive pronoun. "A borrower" may be a person (who may have a gender) or a business entity (which does not have a gender).
I might have used their (as a singular pronoun!) instead, which is less sterile and could apply to either a gender-neutral person or an anthropomorphized business entity.