Key topics to study Flashcards
Which of the following would be a marker of a robust risk culture within a firm?
- Management of risk is an integral part of business decision making.
Which of the following communicates how the management of operational risk can enable a firm to achieve its business objectives?
- Operational risk policy.
Which of the following are all main categories of external change?
- Environmental, political, regulatory, legal changes.
What are the key elements of a firm’s risk appetite framework?
- Risk appetite statements, targets, metrics and policies.
Which of the following provides information to assist risk identification?
- Details of planned change and transformation.
Which of the following is the main advantage of adopting a workshop approach to risk and control self-assessment?
- There is an opportunity to mitigate estimation bias.
**When reporting risk and control self-assessments to boards and senior management it is suggested the following detail is included: **-
- Key risk drivers, residual risk and control self-assessment result, heat maps
Which of the following could best be described as a performance indicator?
- Asset growth.
Why is it a desirable feature for risk indicators to be “auditable”?
- Because it allows independent validation of how indicators are sourced, aggregated and delivered to management.
Implementing an effective operational risk indicator framework involves a number of tasks and decisions.
- Documenting the governance arrangements for overseeing the Key Risk Indicator framework.
- Agreeing whether indicators are to be selected on a top down or bottom up basis.
- Developing procedures for adding or changing indicators.
- Setting RAG thresholds.
The statement “all Key Risk Indicators must be ‘leading’ rather than ‘lagging’ to be effective” is:
- Incorrect, as leading Key Risk Indicators are difficult to achieve because they rely partly on historical data.
Which of the following is an indirect impact of an operational risk event?
*Client dissatisfaction.
What is root cause analysis primarily interest in identifying?**
- Control failure.
What is the biggest challenge in collecting risk event data?
* Incomplete reporting.
It is difficult to make a direct comparison with another firm’s experience from external loss event data. Which of the following differences might best explain the reasons for that?
- Control environment, risk appetite, risk culture.