CORES CORES Operational Risk Reporting & Communication

Question 1

What is the primary purpose of operational risk management reporting to the board?

Accepted Answer

To give the board the information needed to oversee risk-taking and ensure the firm stays within its risk appetite

Answer

To satisfy quarterly regulatory filing requirements exclusively

Answer

To justify the risk department's budget

Answer

To provide detailed transaction-level data for board review

Question 2

Which characteristic is most important for operational risk reports provided to senior management?

Accepted Answer

Timeliness, accuracy, and forward-looking insights alongside historical data

Answer

Maximum detail and data granularity on every process

Answer

Backward-looking summaries with no trend analysis

Answer

Formatting that matches regulatory submission templates

Question 3

A heat map in operational risk reporting typically displays risks according to which two dimensions?

Accepted Answer

Likelihood (probability) and impact (severity)

Answer

Cost and revenue impact

Answer

Number of incidents and number of employees

Answer

Regulatory priority and audit frequency

Question 4

When escalating an operational risk issue, which information is most critical to include?

Accepted Answer

The nature of the risk, current controls, potential impact, and recommended action

Answer

Only the financial loss estimate

Answer

The names of staff responsible for the failure

Answer

The full technical audit trail in raw log format

Question 5

What distinguishes a management information system (MIS) report from an operational risk dashboard?

Accepted Answer

MIS reports are typically periodic and structured, while dashboards provide near-real-time visual summaries of key metrics

Answer

MIS reports are for regulators; dashboards are for employees

Answer

Dashboards contain more historical data than MIS reports

Answer

MIS reports are automated; dashboards require manual entry

Question 6

Which reporting principle ensures that operational risk reports are consistent and comparable across periods?

Accepted Answer

Standardization of definitions, methodologies, and data sources across reporting cycles

Answer

Changing report formats each quarter to reflect new insights

Answer

Using different risk categories each reporting period

Answer

Allowing each business unit to define its own risk terminology