Financial Risk Management Operational Risk Framework 1 — Questions and Answers
Question 1: How is operational risk defined under the Basel framework?
- The risk of loss due to changes in market prices
- The risk of loss resulting from inadequate or failed internal processes, people, and systems, or from external events (Correct answer)
- The risk of a counterparty defaulting on an obligation
- The risk of a liquidity shortfall in stress conditions
Correct answer: The risk of loss resulting from inadequate or failed internal processes, people, and systems, or from external events
Basel II's definition of operational risk explicitly includes internal fraud, external fraud, employment practices, clients, damage to physical assets, system failures, and execution/delivery errors.
Question 2: Which of the following is an example of 'internal fraud' as an operational risk event type under Basel?
- A natural disaster destroying a data center
- A rogue trader concealing losses by falsifying trade records (Correct answer)
- A vendor failing to deliver contracted services
- A regulatory fine for mis-selling products
Correct answer: A rogue trader concealing losses by falsifying trade records
Internal fraud involves intentional misappropriation of assets or circumvention of regulations by at least one internal party, such as a rogue trader like the Barings/Nick Leeson case.
Question 3: What is the 'Basic Indicator Approach' (BIA) for operational risk capital under Basel?
- Capital = 15% × average annual gross income over the past three years (Correct answer)
- Capital = 12% × average total assets over the past five years
- Capital = 8% × average net interest income over the past year
- Capital = 18% × gross income for the current year only
Correct answer: Capital = 15% × average annual gross income over the past three years
The BIA requires banks to hold operational risk capital equal to 15% of their average positive annual gross income over the previous three years, using gross income as a proxy for risk exposure.
Question 4: What is a 'Key Risk Indicator' (KRI) in operational risk management?
- A financial ratio used to assess credit quality
- A metric that provides early warning signals of increasing operational risk exposure (Correct answer)
- A mandatory regulatory disclosure about internal control failures
- The minimum threshold for reporting operational losses to regulators
Correct answer: A metric that provides early warning signals of increasing operational risk exposure
KRIs are forward-looking metrics (e.g., staff turnover, system downtime, error rates) that signal when operational risk is rising before a loss event actually occurs.
Question 5: What is a 'Risk and Control Self-Assessment' (RCSA) in operational risk?
- A regulatory audit of a bank's risk management practices
- A structured process where business units identify and evaluate operational risks and the effectiveness of existing controls (Correct answer)
- An external benchmarking study comparing operational losses across peer banks
- A legal review of vendor contracts for liability exposure
Correct answer: A structured process where business units identify and evaluate operational risks and the effectiveness of existing controls
RCSAs are conducted periodically by front-line staff and risk managers to document risks, assess their likelihood and impact, and rate the strength of mitigating controls.
Question 6: What is the purpose of maintaining an 'internal loss database' (ILD) for operational risk?
- To store credit default events for capital model calibration
- To capture historical operational loss events so they can be analyzed and used to calibrate operational risk capital models (Correct answer)
- To report market risk exceptions to senior management
- To archive regulatory correspondence and examination findings
Correct answer: To capture historical operational loss events so they can be analyzed and used to calibrate operational risk capital models
An ILD records date, event type, business line, gross loss, and recovery for each operational loss, providing empirical data for frequency and severity distributions in advanced measurement approaches.
Financial Risk Management Operational Risk Framework 1
How is operational risk defined under the Basel framework?