CORES CORES Operational Risk Reporting & Communication 2

Question 1

Which of the following best describes 'risk aggregation' in operational risk reporting?

Accepted Answer

Combining risk data from across business units and risk types to provide an enterprise-wide view

Answer

Risk aggregation consolidates risk data from all business lines and risk categories to provide senior management and the board with a holistic enterprise-wide risk picture.

Question 2

What is the risk of reporting only losses above a specific threshold (i.e., applying a collection threshold)?

Accepted Answer

High-frequency, low-severity events that signal systemic issues may be missed

Answer

Threshold-based collection can exclude small but frequent losses that, in aggregate, indicate deeper systemic control failures or deteriorating risk culture.

Question 3

When designing an operational risk report for the audit committee, what level of detail is most appropriate?

Accepted Answer

Summarized findings with key themes, control gaps, and management responses rather than transaction-level detail

Answer

Audit committees require summarized, theme-based reporting that highlights control gaps and management actions, enabling oversight without overwhelming with operational granularity.

Question 4

An operational risk report shows a sudden spike in KRI readings for a payment processing unit. The most appropriate immediate action is to:

Accepted Answer

Escalate the anomaly to risk management and the relevant business line for root cause investigation

Answer

A KRI spike is an early warning signal that requires immediate escalation and root cause investigation to determine whether it signals a real control deterioration.

Question 5

Which element is essential for making operational risk reports 'actionable'?

Accepted Answer

Recommendations or suggested actions tied to each identified risk or control gap

Answer

Actionable reports pair each finding with specific recommendations, enabling business lines and management to take concrete steps to address identified risks or gaps.

(CORES) Certified Operational Risk Executive Specialist Practice Test

(CORES) Certified Operational Risk Executive Specialist Practice Test

CORES CORES Operational Risk Reporting & Communication 2