CRO Risk Appetite & Tolerance Frameworks 2

Question 1

A bank's board sets a risk appetite statement allowing up to $50M in annual credit losses before requiring remediation. A subsidiary exceeds this by $5M in Q2. What does this breach most directly indicate?

Accepted Answer

The risk tolerance threshold has been exceeded

Answer

Exceeding the defined loss limit breaches the risk tolerance, which is the acceptable deviation boundary around the risk appetite.

Question 2

Which document typically serves as the primary vehicle for communicating an organization's risk appetite to internal and external stakeholders?

Accepted Answer

Risk Appetite Statement (RAS)

Answer

The Risk Appetite Statement (RAS) formally articulates the types and amounts of risk an organization is willing to accept in pursuit of its objectives.

Question 3

When calibrating risk tolerance bands, a CRO should ensure they are set:

Accepted Answer

Narrow enough to trigger escalation before risk appetite is breached

Answer

Tolerance bands should provide an early-warning buffer so management can intervene before the overall risk appetite limit is actually reached.

Question 4

A manufacturing firm states it has 'zero tolerance' for environmental regulatory violations. In framework terms, this is an example of:

Accepted Answer

A qualitative risk appetite dimension

Answer

Qualitative dimensions of risk appetite express absolute stances on specific risk categories in non-numeric terms such as 'zero tolerance.'

Question 5

The primary difference between risk capacity and risk appetite is that risk capacity represents:

Accepted Answer

The maximum risk an entity can absorb without threatening viability

Answer

Risk capacity is the absolute maximum risk an organization can bear given its financial strength and regulatory constraints, setting a hard ceiling above appetite.

(CRO) Chief Risk Officer Certification Practice Test

(CRO) Chief Risk Officer Certification Practice Test

CRO Risk Appetite & Tolerance Frameworks 2