CRA Risk Appetite & Tolerance Frameworks 4

Question 1

A manufacturing firm sets its risk appetite for safety incidents at 'zero tolerance.' In practice, what does 'zero tolerance' most accurately mean within a risk framework?

Accepted Answer

Any incident, regardless of severity, triggers mandatory investigation and remediation

Answer

Zero tolerance in practice means any occurrence triggers mandatory response and remediation; it does not imply incidents are impossible but that none are acceptable without action.

Question 2

A risk appetite framework uses Key Risk Indicators (KRIs) as 'traffic lights' — green, amber, red. What does an AMBER status typically signal?

Accepted Answer

Risk is approaching tolerance limits; heightened monitoring and potential escalation required

Answer

Amber status serves as an early warning that risk is trending toward limits, triggering increased monitoring and proactive management before a breach occurs.

Question 3

Which of the following BEST illustrates the concept of 'risk appetite aggregation' at the enterprise level?

Accepted Answer

Adding all individual business unit VaR figures to get total portfolio VaR, adjusted for correlation

Answer

Enterprise-level risk appetite aggregation combines individual exposures while accounting for correlations to avoid double-counting or underestimating diversification benefits.

Question 4

A firm's risk appetite states it seeks 'moderate' growth with 'low' operational risk. A proposed acquisition would accelerate growth but significantly increase operational complexity. This situation is best described as:

Accepted Answer

A risk appetite conflict requiring board-level resolution

Answer

When strategic pursuits conflict with stated risk appetite dimensions, the conflict must be escalated to the board to either adjust appetite or decline the initiative.

Question 5

In the Three Lines of Defense model, which line is PRIMARILY responsible for SETTING risk appetite?

Accepted Answer

Second line — risk management and compliance

Answer

The second line (risk management function) typically designs and proposes the risk appetite framework, which is then approved by the board.

(CRA) Certified Risk Analyst Practice Test

(CRA) Certified Risk Analyst Practice Test

CRA Risk Appetite & Tolerance Frameworks 4