Financial Risk Management Operational Risk Framework 2

Question 1

What is 'scenario analysis' used for in operational risk capital modeling?

Accepted Answer

Using expert judgment to estimate the frequency and severity of rare but plausible extreme operational loss events not in the historical data

Answer

Scenario analysis supplements internal loss data by capturing low-frequency/high-severity events (e.g., a major cyber attack or rogue trader) that haven't occurred recently but could happen.

Question 2

What does the Basel Standardized Approach (TSA) for operational risk use to differentiate capital across business lines?

Accepted Answer

Different beta factors (12–18%) applied to gross income by business line

Answer

TSA assigns beta factors ranging from 12% to 18% to eight defined business lines (retail banking, trading, asset management, etc.) and multiplies each by its gross income.

Question 3

Which of the following best describes the 'Advanced Measurement Approach' (AMA) for operational risk under Basel II?

Accepted Answer

An internal model approach where banks use quantitative models combining internal loss data, external data, scenario analysis, and business environment factors to estimate operational risk capital

Answer

The AMA allowed sophisticated banks to build bespoke models for operational risk capital, incorporating all four data elements, subject to regulatory approval — it was replaced by the Standardized Measurement Approach in Basel IV.

Question 4

What is 'cyber risk' classified as under the operational risk framework?

Accepted Answer

Operational risk under the 'systems failures' or 'external events' category

Answer

Cyber attacks (data breaches, ransomware, DDoS) fall within the Basel operational risk definition under 'systems failures' or 'external events,' and are increasingly the largest operational risk concern for banks.

Question 5

What is 'business continuity planning' (BCP) in the context of operational risk?

Accepted Answer

A documented framework ensuring critical business functions can continue or recover quickly after a disruptive operational risk event

Answer

BCP includes disaster recovery plans, backup systems, alternate operating sites, and communication protocols to minimize downtime and loss when a disruption (fire, flood, cyberattack) occurs.

Financial Risk Management Practice Test

Financial Risk Management Practice Test

Financial Risk Management Operational Risk Framework 2