CRO Risk Reporting & Dashboards 2 — Questions and Answers
Question 1: Which metric is most appropriate for a board-level risk dashboard to convey aggregate credit risk exposure?
- Individual loan default rates
- Expected Credit Loss (ECL) vs. limit (Correct answer)
- Number of credit applications received
- Average loan processing time
Correct answer: Expected Credit Loss (ECL) vs. limit
Expected Credit Loss versus limit directly communicates aggregate credit risk against the firm's risk appetite in terms boards can act on.
Question 2: A CRO notices that risk reports consistently arrive two days after the reporting period closes. What is the primary risk this latency creates?
- Increased printing costs
- Stale data leading to delayed risk decisions (Correct answer)
- Regulatory non-compliance with privacy rules
- Overloading the risk team with reconciliation work
Correct answer: Stale data leading to delayed risk decisions
Report latency means decision-makers act on outdated exposure data, potentially missing emerging risk concentrations or limit breaches.
Question 3: In a risk dashboard, a 'heat map' is best used to communicate:
- Exact numerical values of individual risk positions
- Relative severity and likelihood of risks across categories (Correct answer)
- Historical time-series trends of a single risk factor
- Internal audit findings by department
Correct answer: Relative severity and likelihood of risks across categories
Heat maps use color-coded grids to show risk concentration by likelihood and impact, enabling rapid cross-category comparison.
Question 4: Which principle should guide the selection of KRIs included in an executive risk dashboard?
- Include every available data point to maximize completeness
- Select only indicators with historical precedent of predicting losses
- Limit to indicators that are directly linked to the firm's risk appetite thresholds (Correct answer)
- Choose metrics that are easiest to calculate and explain
Correct answer: Limit to indicators that are directly linked to the firm's risk appetite thresholds
KRIs on executive dashboards should map directly to risk appetite statements so leaders can immediately gauge whether the firm is within tolerance.
Question 5: When a risk report shows a metric in 'amber' status, what action does this typically signal?
- Immediate escalation and mandatory risk committee meeting
- No action needed; the metric is within acceptable bounds
- Heightened monitoring and management attention without mandatory escalation (Correct answer)
- Automatic suspension of related business activities
Correct answer: Heightened monitoring and management attention without mandatory escalation
Amber status in a RAG (Red-Amber-Green) framework indicates an early warning requiring elevated monitoring but not yet mandatory escalation.
Question 6: A firm's operational risk dashboard shows a spike in 'near-miss' events. How should a CRO interpret this trend?
- Near-misses are harmless and require no action
- The reporting culture is improving, but underlying risk exposure may be rising (Correct answer)
- Near-misses indicate controls are fully effective
- The spike is statistical noise and should be excluded from reports
Correct answer: The reporting culture is improving, but underlying risk exposure may be rising
A spike in near-miss reporting can reflect better reporting culture but also signals increasing operational risk exposure that warrants investigation.
Question 7: Which of the following best describes a 'drill-down' capability in a risk dashboard?
- Automated risk limit recalibration triggered by threshold breaches
- The ability to move from summary metrics to underlying granular data (Correct answer)
- A feature that predicts future risk levels using machine learning
- A control that restricts dashboard access by seniority level
Correct answer: The ability to move from summary metrics to underlying granular data
Drill-down functionality allows users to click through high-level summary metrics to the detailed data driving those figures for root-cause analysis.
CRO Risk Reporting & Dashboards 2
Which metric is most appropriate for a board-level risk dashboard to convey aggregate credit risk exposure?