CORES CORES Model Risk & Quantitative Methods 1 — Questions and Answers
Question 1: How is 'model risk' defined in the context of operational risk management?
- The risk that a financial model produces inaccurate outputs leading to adverse decisions (Correct answer)
- The risk that IT systems will fail to run quantitative models
- The risk that regulators will reject all internal models
- The risk of losing key model developers to competitors
Correct answer: The risk that a financial model produces inaccurate outputs leading to adverse decisions
Model risk is the potential for adverse outcomes resulting from errors in model design, incorrect inputs, or misuse of model outputs in decision-making.
Question 2: Under the US Federal Reserve's SR 11-7 guidance, what are the two primary components of model risk?
- Market risk and credit risk
- Fundamental model error and inappropriate use of the model (Correct answer)
- Liquidity risk and reputational risk
- Data entry errors and system outages
Correct answer: Fundamental model error and inappropriate use of the model
SR 11-7 identifies fundamental model error (flawed design or incorrect assumptions) and inappropriate use (applying the model outside its intended scope) as the two main model risk sources.
Question 3: What is the purpose of model validation in a sound model risk management framework?
- To certify that models comply with marketing standards
- To independently assess whether a model is conceptually sound and appropriate for its intended use (Correct answer)
- To ensure models are only used by senior executives
- To replace model developers with automated systems
Correct answer: To independently assess whether a model is conceptually sound and appropriate for its intended use
Model validation involves an independent review of a model's conceptual soundness, data integrity, and performance to confirm it is fit for purpose.
Question 4: Which quantitative method is commonly used in operational risk to estimate potential losses at a given confidence level over a specified time horizon?
- Net Present Value (NPV)
- Value at Risk (VaR) (Correct answer)
- Earnings Per Share (EPS)
- Internal Rate of Return (IRR)
Correct answer: Value at Risk (VaR)
Value at Risk (VaR) estimates the maximum expected loss at a specified confidence level (e.g., 99%) over a defined time horizon, commonly used in risk capital modeling.
Question 5: What distinguishes Expected Loss (EL) from Unexpected Loss (UL) in operational risk capital modeling?
- EL is the average loss anticipated over time; UL is the additional loss beyond EL that capital must cover (Correct answer)
- EL is covered by external insurance; UL is absorbed by shareholders
- EL refers to cyber losses only; UL refers to all other losses
- EL and UL are identical concepts under Basel III
Correct answer: EL is the average loss anticipated over time; UL is the additional loss beyond EL that capital must cover
Expected Loss is the average loss an organization anticipates and typically prices into business costs; Unexpected Loss represents the volatility beyond EL that regulatory and economic capital is designed to absorb.
Question 6: In operational risk quantification, what is a 'frequency-severity' model?
- A model that measures how often an employee attends risk training
- A framework that separately models the number of loss events (frequency) and the size of each event (severity) to estimate total losses (Correct answer)
- A regulatory report submitted to the OCC quarterly
- A model used exclusively for credit scoring
Correct answer: A framework that separately models the number of loss events (frequency) and the size of each event (severity) to estimate total losses
The frequency-severity approach separately estimates how often losses occur and how large they are, then combines these distributions (e.g., via Monte Carlo simulation) to model aggregate losses.
CORES CORES Model Risk & Quantitative Methods 1
How is 'model risk' defined in the context of operational risk management?