CORES CORES Operational Risk Reporting & Communication 1 — Questions and Answers
Question 1: What is the primary purpose of operational risk management reporting to the board?
- To give the board the information needed to oversee risk-taking and ensure the firm stays within its risk appetite (Correct answer)
- To satisfy quarterly regulatory filing requirements exclusively
- To justify the risk department's budget
- To provide detailed transaction-level data for board review
Correct answer: To give the board the information needed to oversee risk-taking and ensure the firm stays within its risk appetite
Board-level risk reports provide aggregated, actionable information enabling directors to exercise oversight and confirm the firm operates within approved risk appetite.
Question 2: Which characteristic is most important for operational risk reports provided to senior management?
- Timeliness, accuracy, and forward-looking insights alongside historical data (Correct answer)
- Maximum detail and data granularity on every process
- Backward-looking summaries with no trend analysis
- Formatting that matches regulatory submission templates
Correct answer: Timeliness, accuracy, and forward-looking insights alongside historical data
Effective senior management risk reports balance timely delivery of accurate historical data with trend analysis and forward-looking indicators to support proactive decision-making.
Question 3: A heat map in operational risk reporting typically displays risks according to which two dimensions?
- Likelihood (probability) and impact (severity) (Correct answer)
- Cost and revenue impact
- Number of incidents and number of employees
- Regulatory priority and audit frequency
Correct answer: Likelihood (probability) and impact (severity)
Risk heat maps plot risks on a matrix using likelihood on one axis and impact on the other, visually prioritizing which risks require the most attention.
Question 4: When escalating an operational risk issue, which information is most critical to include?
- The nature of the risk, current controls, potential impact, and recommended action (Correct answer)
- Only the financial loss estimate
- The names of staff responsible for the failure
- The full technical audit trail in raw log format
Correct answer: The nature of the risk, current controls, potential impact, and recommended action
Effective escalation packages the risk description, existing control status, potential impact, and a recommended response so decision-makers can act promptly.
Question 5: What distinguishes a management information system (MIS) report from an operational risk dashboard?
- MIS reports are typically periodic and structured, while dashboards provide near-real-time visual summaries of key metrics (Correct answer)
- MIS reports are for regulators; dashboards are for employees
- Dashboards contain more historical data than MIS reports
- MIS reports are automated; dashboards require manual entry
Correct answer: MIS reports are typically periodic and structured, while dashboards provide near-real-time visual summaries of key metrics
MIS reports are scheduled, structured documents, whereas dashboards aggregate live or near-real-time KRIs and metrics in a visual format for rapid status assessment.
Question 6: Which reporting principle ensures that operational risk reports are consistent and comparable across periods?
- Standardization of definitions, methodologies, and data sources across reporting cycles (Correct answer)
- Changing report formats each quarter to reflect new insights
- Using different risk categories each reporting period
- Allowing each business unit to define its own risk terminology
Correct answer: Standardization of definitions, methodologies, and data sources across reporting cycles
Standardization of definitions, data sources, and methodologies ensures that reports are directly comparable across periods, enabling trend analysis and meaningful benchmarking.
CORES CORES Operational Risk Reporting & Communication 1
What is the primary purpose of operational risk management reporting to the board?