CRO Risk Appetite & Tolerance Frameworks 3 — Questions and Answers
Question 1: Under Basel Committee principles for risk appetite frameworks, which body bears ultimate accountability for setting and overseeing risk appetite?
- Chief Risk Officer
- Risk Management Committee
- Board of Directors (Correct answer)
- External auditors
Correct answer: Board of Directors
The Basel Committee assigns ultimate accountability for the risk appetite framework to the board of directors, which sets the tone from the top.
Question 2: A CRO notices that Key Risk Indicators consistently approach tolerance thresholds but never trigger escalation. The most likely root cause is:
- Risk appetite is set too conservatively
- Tolerance thresholds are calibrated too close to appetite limits (Correct answer)
- KRIs are measuring the wrong risk dimensions
- The board has approved elevated risk-taking
Correct answer: Tolerance thresholds are calibrated too close to appetite limits
When KRIs perpetually near thresholds without escalation, it suggests thresholds lack adequate buffer between the warning level and the actual appetite limit.
Question 3: In a risk appetite framework, 'risk posture' most accurately refers to:
- The aggregate level of risk currently being carried by the organization (Correct answer)
- The board's preferred level of risk-taking going forward
- The difference between inherent and residual risk
- The risk transfer arrangements in place
Correct answer: The aggregate level of risk currently being carried by the organization
Risk posture describes the organization's current actual risk exposure at a point in time, which can then be compared to its stated appetite.
Question 4: When a firm operates multiple business lines with differing risk profiles, best practice for risk appetite cascading is to:
- Apply the enterprise appetite uniformly to all business lines
- Allow each business line to set its own independent appetite
- Decompose enterprise appetite into business-line specific sub-limits (Correct answer)
- Delegate appetite-setting entirely to the CFO
Correct answer: Decompose enterprise appetite into business-line specific sub-limits
Cascading disaggregates the enterprise-level appetite into sub-limits tailored to each business line while ensuring the sum remains within the overall enterprise constraint.
Question 5: A risk appetite statement includes both quantitative metrics (e.g., VaR limits) and qualitative statements (e.g., 'no involvement in predatory lending'). This dual approach is best practice because:
- Regulators require an equal split between qualitative and quantitative elements
- Qualitative statements replace the need for numerical limits in ethical risk domains
- Some risks are difficult to quantify yet still require a clear organizational stance (Correct answer)
- Quantitative metrics are only valid for market risk, not credit or operational risk
Correct answer: Some risks are difficult to quantify yet still require a clear organizational stance
Combining quantitative and qualitative elements ensures comprehensive coverage because certain risk categories, especially reputational or ethical risks, resist precise numerical expression.
Question 6: Which metric is most appropriate as a quantitative risk appetite indicator for a bank's credit risk appetite?
- Net Promoter Score
- Non-performing loan ratio (Correct answer)
- Employee turnover rate
- IT system uptime percentage
Correct answer: Non-performing loan ratio
Non-performing loan (NPL) ratio directly measures credit quality deterioration and is a standard quantitative indicator used in bank credit risk appetite statements.
Question 7: 'Risk appetite linkage' requires that the risk appetite framework be directly connected to the organization's:
- Insurance coverage limits
- Strategic planning and business objectives (Correct answer)
- IT disaster recovery timelines
- Vendor contract terms
Correct answer: Strategic planning and business objectives
Risk appetite must be anchored to strategic objectives so that risk-taking decisions support rather than undermine the organization's goals.
CRO Risk Appetite & Tolerance Frameworks 3
Under Basel Committee principles for risk appetite frameworks, which body bears ultimate accountability for setting and overseeing risk appetite?