3 - Operational Risk and Resiliency Flashcards
Describe the three lines of defense in the Basel model for operational risk governance.
.
Summarize the fundamental principles of operational risk management as suggested by the Basel Committee.
.
Explain guidelines for strong governance of operational risk and evaluate the role of the board of directors, senior management, and supervisors in implementing an effective operational risk framework.
.
Describe tools and processes that can be used to Identify and assess operational risk.
.
Describe features of an effective control environment and Identify specific controls that should be in place to address operational risk.
.
Explain the Basel Committee’s suggestions for managing technology risk and outsourcing risk.
.
Define enterprise risk management (ERM) and explain how implementing ERM practices and policies can create shareholder value, both at the macro and the micro level.
.
Explain how a company can determine its optimal amount of risk through the use of credit rating targets.
.
Describe the development and implementation of an ERM system, as well as challenges to the implementation of an ERM system.
.
Describe the role of and issues with correlation in risk aggregation and describe typical properties of a firm’s market risk, credit risk, and operational risk distributions.
.
Distinguish between regulatory and economic capital and explain the use of economic capital in the corporate decision-making process.
.
Describe Enterprise Risk Management (ERM) and compare and contrast differing definitions of ERM.
.
Compare the benefits and costs of ERM and describe the motivations for a firm to adopt an ERM initiative.
.
Describe the role and responsibilities of a chief risk officer (CRO) and assess how the CRO should interact with other senior management.
.
Describe the key components of an ERM program.
.
Describe best practices for the implementation and communication of a risk appetite framework (RAF) at a firm.
.
Explain key challenges to the implementation of an RAF and describe how a firm can overcome each challenge.
.
Assess the role of stress testing within an RAF and describe challenges in aggregating firm-wide risk exposures.
.
Explain lessons learned in the implementation of an RAF through the presented case studies.
.
Describe challenges faced by banks with respect to conduct and culture and explain motivations for banks to improve their conduct and culture.
.
Explain methods by which a bank can improve its corporate culture and assess the progress made by banks in this area.
.
Assess the role of regulators in encouraging strong conduct and culture at banks, and provide examples of regulatory initiatives in this area.
.
Describe best practices and lessons learned in managing a bank’s corporate culture.
.
Compare risk culture and corporate culture and explain how they interact.
.
Explain factors that influence a firm’s corporate culture and its risk culture.
.
Describe methods by which corporate culture and risk culture can be measured.
.
Describe characteristics of a strong risk culture and challenges to the implementation of an effective risk culture.
.
Assess the relationship between risk culture and business performance.
.
Describe the seven Basel II event risk categories and identify examples of operational risk events in each category.
.
Summarize the process of collecting and reporting internal operational loss data, including the selection of thresholds, the timeframe for recoveries, and reporting expected operational losses.
.
Explain the use of a risk control self-assessment (RCSA) and key risk indicators (KRIs) in identifying, controlling, and assessing, operational risk exposures.
.
Describe and assess the use of scenario analysis in managing operational risk and identify the biases and challenges that can arise when using scenario analysis.
.
Compare the typical operational risk profiles of firms in different financial sectors.
.
Explain the role of operational risk governance and how a firm’s organizational structure can impact risk governance.
.
Describe model risk and explain how it can arise in the implementation of a model.
.
Describe elements of an effective model risk management process.
.
Explain best practices for the development and implementation of models.
.
Describe elements of a strong model validation process and challenges to an effective validation process.
.
Identify the most common issues that result in data errors.
.
Explain how a firm can set expectations for its data quality and describe some key dimensions of data quality used in this process.
.
Describe the operational data governance process, including the use of scorecards in managing information risk.
.
Explain the process of model validation and describe best practices for the roles of internal organizational units in the validation process.
.
Compare qualitative and quantitative processes for validating internal ratings and describe elements of each process.
.