CORES Risk Culture & Awareness Training 2 — Questions and Answers
Question 1: Which behavioral indicator most strongly signals a weak operational risk culture within a firm?
- Employees routinely bypass controls citing productivity pressures (Correct answer)
- Senior managers attend annual risk training sessions
- The risk committee meets quarterly to review KRIs
- Loss events are logged in the operational risk database
Correct answer: Employees routinely bypass controls citing productivity pressures
Routine control circumvention indicates that risk awareness has not been embedded into day-to-day behavior, a hallmark of weak risk culture.
Question 2: In the context of risk culture, what does 'tone at the top' primarily refer to?
- The decibel level of board meetings
- Senior leadership's visible commitment to ethical risk management (Correct answer)
- The volume of risk policies issued by the CEO
- Board-level approval of the risk appetite statement
Correct answer: Senior leadership's visible commitment to ethical risk management
Tone at the top describes how senior leaders' behaviors, decisions, and communications model the risk values they expect throughout the organization.
Question 3: A financial institution wants to embed risk culture into onboarding. Which approach is MOST effective?
- Emailing the code of conduct PDF to new hires
- Including scenario-based operational risk exercises in new-hire orientation (Correct answer)
- Requiring new hires to sign an acknowledgment form
- Posting risk policies on the intranet
Correct answer: Including scenario-based operational risk exercises in new-hire orientation
Scenario-based exercises create experiential learning that helps new employees internalize risk behaviors, rather than passive document reviews.
Question 4: Which metric is BEST suited to measuring the effectiveness of a risk awareness training program?
- Number of training hours completed per employee
- Pre- and post-training assessment score improvements (Correct answer)
- Cost of the training program per head
- Number of slides in the training deck
Correct answer: Pre- and post-training assessment score improvements
Comparing pre- and post-training assessment scores measures actual knowledge gained, which is a direct indicator of training effectiveness.
Question 5: What is the primary purpose of including near-miss reporting in a risk awareness program?
- To penalize employees who almost caused a loss
- To satisfy regulatory reporting requirements
- To capture learning opportunities before losses materialize (Correct answer)
- To increase the size of the operational risk database
Correct answer: To capture learning opportunities before losses materialize
Near-miss reporting allows firms to identify and fix control weaknesses before they result in actual losses, turning potential failures into learning events.
Question 6: Which of the following best describes 'risk appetite' as it relates to risk culture?
- The maximum loss a firm can absorb before insolvency
- The amount and type of risk a firm is willing to accept in pursuit of its objectives (Correct answer)
- The total regulatory capital requirement
- The sum of all operational risk losses in a given year
Correct answer: The amount and type of risk a firm is willing to accept in pursuit of its objectives
Risk appetite defines the boundaries within which the organization is prepared to operate, and communicating it clearly is essential for embedding risk culture.
Question 7: A bank's front-line staff consistently underreport operational risk incidents. What is the MOST likely cultural root cause?
- The risk management system is too complex to navigate
- Fear of blame or retaliation discourages incident disclosure (Correct answer)
- Staff lack internet access to submit reports
- The bank has no operational risk policy
Correct answer: Fear of blame or retaliation discourages incident disclosure
A blame culture suppresses incident reporting because employees fear punishment, which is one of the most common barriers to effective risk culture.
CORES Risk Culture & Awareness Training 2
Which behavioral indicator most strongly signals a weak operational risk culture within a firm?