CISI UAE FRR Risk Management Frameworks

Question 1

The 'three lines of defence' model in UAE financial institution risk management consists of:

Accepted Answer

Business lines, risk/compliance functions, and internal audit

Answer

Regulators, external auditors, and internal audit

Answer

Board, executive management, and shareholders

Answer

Front office, middle office, and back office

Question 2

Under the CBUAE's risk management framework for banks, the Risk Appetite Statement (RAS) should be:

Accepted Answer

Approved by the Board and cascaded through the organisation in measurable metrics

Answer

Developed exclusively by the Chief Risk Officer without board input

Answer

A confidential document not shared with business lines

Answer

Revised only during regulatory examinations

Question 3

Which Basel III risk category covers the risk of losses from inadequate processes, systems, people, or external events?

Accepted Answer

Operational risk

Answer

Credit risk

Answer

Market risk

Answer

Liquidity risk

Question 4

Under CBUAE regulations, banks must conduct stress tests to assess:

Accepted Answer

The impact of adverse scenarios on capital, liquidity, and profitability

Answer

Normal operating performance under current conditions

Answer

Historical performance over the past 10 years

Answer

Competitive positioning relative to peer banks

Question 5

The CBUAE's guidance on model risk requires banks to:

Accepted Answer

Validate, document, and regularly review all financial models used for risk measurement

Answer

Apply only regulatory-approved models without internal development

Answer

Outsource all model development to external consultants

Answer

Use historical data exclusively without scenario analysis

Question 6

What is 'concentration risk' in the context of UAE bank credit risk management?

Accepted Answer

Excessive exposure to a single borrower, sector, geography, or product

Answer

The risk of interest rate rises affecting all loans simultaneously

Answer

The risk that a bank's operational systems fail at once

Answer

Currency risk from operating in a single currency