Mixed Deck — All CRO Topics Flashcards

A CRO reviews a model that consistently underestimates losses during market stress. This is an example of which risk?

Answer: Model risk

Model risk is the risk of loss due to errors or limitations in financial models, including systematic underestimation of tail losses.

How can stress testing support financial risk management?

Answer: It evaluates performance under adverse scenarios

Stress testing is a critical risk management technique that assesses the resilience of an organization's financial position under extreme, yet plausible, adverse market conditions or economic scenarios. It helps identify vulnerabilities and potential losses that might not be apparent under normal operating conditions, informing capital planning and risk mitigation strategies.

How should CRO professionals handle confidential information related to cybersecurity risk management?

Answer: Follow established protocols for data protection, access control, and disclosure in accordance with applicable regulations

Confidential information must be handled according to established protocols, regulatory requirements, and professional ethics standards, including proper access control and disclosure procedures.

Under the Basel III Net Stable Funding Ratio (NSFR), what does the ratio require?

Answer: Available stable funding must be at least 100% of required stable funding over a one-year horizon

The NSFR requires banks to maintain sufficient stable funding (liabilities with maturity > 1 year) relative to the stable funding required by their asset mix.

Which concept ensures that risk ownership is clearly assigned within an organization?

Answer: Risk ownership

Risk ownership is the concept that clearly assigns accountability for managing specific risks to individuals or departments within an organization. This ensures that risks are actively monitored, controlled, and mitigated, preventing them from being overlooked or falling through the cracks due to unclear responsibilities.

Under a finite risk insurance program, the primary transfer mechanism that distinguishes it from conventional insurance is:

Answer: Limited risk transfer combined with a significant time-value-of-money component

Finite risk programs combine modest risk transfer with investment income and multi-year premium smoothing, making them more financing than pure insurance.

Why is diversification important in financial risk mitigation?

Answer: It spreads risk and reduces potential losses

Diversification is a fundamental principle in financial risk mitigation, involving investing in a variety of assets across different sectors or types. By spreading investments, the negative performance of one asset is less likely to severely impact the overall portfolio, thereby reducing overall risk and potential losses.

When a CRO professional encounters an unfamiliar challenge in cybersecurity risk management, what is the recommended first course of action?

Answer: Research applicable standards, consult with subject matter experts, and document the approach

Professional practice requires a methodical approach to unfamiliar challenges: research the applicable standards, consult experts when needed, and document the reasoning for the chosen approach.

During crisis triage, a CRO must prioritize which operations to restore first. What tool is specifically designed to inform this prioritization?

Answer: Business Impact Analysis (BIA)

A Business Impact Analysis quantifies the consequences of disruption to each process over time, directly informing recovery prioritization decisions.

What is liquidity risk primarily concerned with?

Answer: The risk that an organization cannot meet its financial obligations as they come due without incurring unacceptable losses

Liquidity risk is the risk that an organization cannot meet its financial obligations as they come due without incurring unacceptable losses or disrupting normal business operations.

When a quantitative risk model consistently underestimates losses during periods of market stress, this is MOST likely caused by:

Answer: Assuming linear correlations that break down during crises due to contagion effects

In crisis periods, correlations between assets spike non-linearly due to contagion, causing models calibrated on normal-period linear correlations to drastically underestimate joint losses.

Which metric measures the proportion of highly liquid assets to net cash outflows over a 30-day stress period?

Answer: Liquidity Coverage Ratio (LCR)

The Liquidity Coverage Ratio (LCR) requires banks to hold enough High Quality Liquid Assets (HQLA) to cover total net cash outflows over a 30-day stress scenario.

An organization self-insures workers' compensation and purchases a 'specific stop-loss' policy with a $250K per-claim retention. A single claim reaches $800K. How much does stop-loss pay?

Answer: $550,000

Specific stop-loss pays the amount above the per-claim retention: $800K - $250K = $550,000.

Why is risk governance essential in ERM?

Answer: To ensure risk activities align with strategic goals

Risk governance provides the structure and oversight necessary to integrate ERM into an organization's overall strategy and decision-making processes. It ensures that risk management activities are consistent with the organization's risk appetite and contribute directly to achieving its strategic objectives, rather than merely serving a compliance function.

When assessing counterparty credit risk on an OTC derivative, which metric captures the potential future increase in exposure over the life of the contract?

Answer: Potential Future Exposure (PFE)

PFE estimates the worst-case exposure at a given confidence level at future points in time, accounting for market movements that increase replacement cost.

Which of the following best defines 'risk culture' within an organization?

Answer: The shared values, beliefs, and behaviors that shape how employees identify and manage risk

Risk culture encompasses the shared values, beliefs, and behaviors that influence how all employees across an organization recognize and respond to risk.

A multinational corporation faces simultaneous crises in two different regions. Which crisis management approach best addresses resource allocation conflicts?

Answer: Apply a pre-established crisis prioritization matrix based on severity, stakeholder impact, and regulatory exposure

A crisis prioritization matrix enables objective, criteria-based resource allocation across simultaneous crises, preventing ad hoc decisions under pressure.

In the context of CRO certification, what is the most important consideration when implementing operational resilience planning?

Answer: Ensuring alignment with established standards, stakeholder needs, and best practices

When implementing operational resilience planning, CRO professionals must ensure alignment with industry standards and stakeholder needs. Hasty implementation without proper planning often leads to compliance issues and suboptimal outcomes.

A CRO wants to measure risk culture maturity across business units. Which tool is MOST appropriate?

Answer: A structured risk culture survey combined with behavioral observation data

Risk culture maturity assessments combine survey data on attitudes with behavioral evidence to provide a validated, multi-dimensional view of cultural health.

Which principle of crisis leadership is MOST important for maintaining organizational decision-making effectiveness during a high-stakes, rapidly evolving crisis?

Answer: Establishing a clear command structure with predefined decision rights and authority levels

A clear command structure with predefined decision authority enables fast, coordinated action without waiting for consensus or complete information during crises.