Fundamentals of Payments Risk Management Flashcards
27%
How is enterprise risk management applied?
It is applied at all levels and across all functions of an organization
A failure mode and effects analysis (FMEA) is used to manage operational risk by providing what?
A means to identify and define failure points of a process and to assign steps to prioritize risk incidents and define mitigation plans
A Merchant declaring bankruptcy, committing fraud, or unable to pay a charge-back is considered credit risk for who?
The Acquirer
How many incidents does the Federal Reserve allow before contacting a financial institution about excessive daylight overdrafts?
Up to two incidents per two consecutive two-week reserve-maintenance periods (a total of four weeks)
How should financial controls be graded?
Strong
Moderate
Weak
Setting ACH limits is a control for what type of risk?
Credit risk
Technology failures, power failure, human error, or natural disasters are examples of what type of risk?
Operational risk
What are the four elements of a sound risk management framework?
- Clearly identify risks
- Establish sound governance
- Establish clear and appropriate rules and procedures
- Employ resources necessary to achieve risk management objectives
What are the three lines of defense in a risk management framework?
- Frontline operations own and manage risk and controls
- Management monitors risk, control, and compliance functions
- Internal audit provides independent assurance that the risk management framework is operating effectively
What are user access controls?
Systems put in place to determine the functionality access of each individual on a day-to-day basis
What is a credit policy?
Clear, written guidelines that set terms and conditions, qualification criteria, collection procedures, and steps to take when a loan customer is delinquent
What is a financial transaction control?
A process designed to detect or prevent errors, misappropriations, and ensure adherence to policy
What is a risk management framework?
A set of objectives, policies, arrangements, procedures, and resources employed to limit and manage risk
What is a service level agreement (SLA)?
An agreement with a service provider to ensure compliance with identified action plans, establish service fees, and performance penalties
What is another term for credit risk?
Temporal risk
What is business continuity?
Preparation to ensure that a business can continue to operate in the case of service disruptions
What is business resiliency?
The ability of an organization to adapt to disruptions to safeguard people, assets, and brand
What is capital adequacy?
The minimum amount a financial institution must maintain to absorb losses and continue functions during times of financial distress
What is change control?
A process to manage changes to an operating environment when a change is made to an application, operating system, or utility in the production environment
What is compliance risk?
The risk that a party to a transaction fails to comply, either knowingly or inadvertently, with payment system rules, policies, regulations, and applicable U.S. & state law
What is considered a expeditious return of a check?
A returned check that is received by the Depository Bank no later than 2 p.m. (local time for the Depository Bank) on the second business day following the banking day on which the check was presented to the Paying Bank