CRA CRA Risk Culture & Stakeholder Communication 2 — Questions and Answers
Question 1: Which type of risk report is specifically designed to provide the board of directors with a high-level view of the firm's risk profile?
- Operational risk incident log
- Board Risk Report (BRR) (Correct answer)
- Trading desk P&L attribution report
- Credit analyst underwriting memo
Correct answer: Board Risk Report (BRR)
The Board Risk Report (BRR) aggregates key risk metrics, emerging threats, and limit breaches into a concise document tailored for board-level governance.
Question 2: When presenting a risk heat map to stakeholders, the axes typically represent:
- Cost and benefit of risk mitigation
- Likelihood (probability) and impact (severity) of risks (Correct answer)
- Risk owner and risk category
- Time horizon and regulatory classification
Correct answer: Likelihood (probability) and impact (severity) of risks
Risk heat maps plot risks on a matrix with likelihood on one axis and impact on the other, visually prioritizing risks that require immediate attention.
Question 3: Which behavioral bias can lead risk managers to underreport risk findings when communicating upward?
- Overconfidence bias
- Availability heuristic
- Organizational silence or 'shoot the messenger' culture (Correct answer)
- Anchoring bias
Correct answer: Organizational silence or 'shoot the messenger' culture
Organizational silence — where employees fear negative consequences for raising bad news — is a major cultural barrier to effective upward risk communication.
Question 4: A risk appetite statement communicated to stakeholders should include:
- Only quantitative metrics like VaR limits
- Qualitative and quantitative boundaries that define the types and levels of risk the organization will accept (Correct answer)
- A list of all risk events that occurred in the prior year
- The organization's detailed risk mitigation action plans
Correct answer: Qualitative and quantitative boundaries that define the types and levels of risk the organization will accept
An effective risk appetite statement combines qualitative declarations (e.g., 'we do not accept reputational risks') with quantitative limits (e.g., 'maximum VaR of $X') to guide decision-making.
Question 5: In risk communication, the BLUF (Bottom Line Up Front) technique is used to:
- Bury the key risk finding at the end of a lengthy report
- Lead with the most critical conclusion or recommendation before supporting details (Correct answer)
- Present all data equally without prioritization
- Avoid mentioning uncertainty or confidence levels
Correct answer: Lead with the most critical conclusion or recommendation before supporting details
BLUF communication starts with the key message or recommendation, allowing busy executives to grasp the critical point immediately before reading supporting details.
Question 6: Stakeholder mapping in risk communication helps risk managers to:
- Eliminate stakeholders with low influence from risk discussions
- Identify each stakeholder's interest, influence, and information needs to tailor risk messages appropriately (Correct answer)
- Assign blame for risk events to specific stakeholders
- Determine which risks to hide from lower-level employees
Correct answer: Identify each stakeholder's interest, influence, and information needs to tailor risk messages appropriately
Stakeholder mapping allows risk managers to customize the depth, format, and frequency of risk communications based on each stakeholder's role and decision-making authority.
CRA CRA Risk Culture & Stakeholder Communication 2
Which type of risk report is specifically designed to provide the board of directors with a high-level view of the firm's risk profile?