Skip to content

Strategic Performance Management and Business Valuation · Corporate Risk Management Performance

Measuring Risk Management Performance: KRIs and RAROC

Updated 11 October 2026 · Fact-checked

Measuring risk management performance means checking whether risk is being kept within appetite and whether returns justify the risk taken. You use key risk indicators (KRIs) for early warning, risk-adjusted measures like RAROC = (Revenue − Costs − Expected loss) ÷ Economic capital to compare units, and regular reporting against limits.

Understand Measuring Risk Management Performance

Every business takes risk to earn return. Risk management performance asks two questions. First, is the business staying inside the risk it is willing to take? Second, is it being paid enough for the risk it does take?

Key risk indicators (KRIs) answer the first question. A KRI is a metric that signals a rising level of risk before a loss happens. Each KRI has a threshold, often shown as green, amber and red. Examples: percentage of receivables overdue more than 90 days, staff turnover in critical roles, number of IT system outages, foreign currency exposure unhedged as a percentage of total exposure, debt-equity ratio against covenant limit, and number of open audit findings past due. A good KRI is measurable, forward looking, linked to a specific risk, and owned by a named person.

KRIs differ from key performance indicators (KPIs). KPIs show how well objectives are achieved. KRIs show how likely it is that objectives will be missed. Lagging indicators, such as actual losses incurred, confirm what already happened. Leading indicators warn in advance.

Risk-adjusted performance measures answer the second question. Raw profit can mislead, because a unit that earns more may simply be taking far more risk. RAROC (Risk-Adjusted Return on Capital) divides risk-adjusted profit by the economic capital needed to absorb unexpected losses. Compare it with the hurdle rate, which is the required return on equity. If RAROC exceeds the hurdle, the unit creates value after risk. Related ideas include risk-adjusted return on capital variants, the Sharpe ratio (excess return per unit of total risk) and economic profit, which is risk-adjusted profit less a capital charge.

Reporting and monitoring close the loop. Risk reports go to management and the board at set frequencies. They show KRIs against thresholds, limit breaches, loss events, trends, action status and risk-adjusted returns. Breaches are escalated, owners must respond, and the results feed back into the risk appetite and the next planning cycle.

Key rules to remember

RAROC
RAROC = (Revenue − Costs − Expected loss) ÷ Economic capital
Some questions add return on the capital (or tax) in the numerator; follow the data given in the question. Compare with the hurdle rate.
Risk-adjusted profit
Risk-adjusted profit = Net income before risk charge − Expected loss
Expected loss = Probability of default × Exposure × Loss given default, when those inputs are given.
Economic profit (risk-adjusted)
Economic profit = Risk-adjusted profit − (Economic capital × Hurdle rate)
Positive means value is created after charging for capital. It agrees with RAROC > hurdle rate.
Sharpe ratio
Sharpe ratio = (Portfolio return − Risk-free return) ÷ Standard deviation of portfolio return
Higher is better when comparing options with different risk. Uses total risk.
KRI status rule
Green: within threshold; Amber: approaching the limit; Red: limit breached
Thresholds come from the risk appetite. Define them before measuring.

How to solve Measuring Risk Management Performance questions

Use this order for any question on measuring risk management performance, whether it asks for a calculation, a list of indicators or a reporting design.

  1. 1Identify the risk and the decision. Is the question about early warning (KRIs), comparing units (RAROC) or reporting?
  2. 2For a numerical question, list all given data: revenue, costs, expected loss, economic capital, hurdle rate.
  3. 3Compute the risk-adjusted profit first: revenue minus costs minus expected loss.
  4. 4Divide by economic capital to get RAROC. Show the formula and the working.
  5. 5Compare RAROC with the hurdle rate, or compare units with each other. If asked, also compute economic profit.
  6. 6For KRI questions, pick indicators that are leading, measurable and linked to the stated risk. Give a threshold and an owner for each.
  7. 7For reporting questions, state what is reported, to whom, how often, and what happens on a breach.
  8. 8End with a clear recommendation: retain, grow, reprice, reduce exposure or exit, with the reason.

Quickest way: Three-line RAROC check

When to use it: Use in MCQs or when the question gives all inputs and asks which unit or product is better.

  1. Write numerator: Revenue − Costs − Expected loss.
  2. Divide by economic capital and convert to a percentage.
  3. Compare with the hurdle rate. Above it means value is created; the highest RAROC wins if capital is the constraint.

Common mistakes in Measuring Risk Management Performance

  • Ignoring expected loss in the numerator of RAROC.

    Students treat RAROC like ordinary ROI on profit.

    Fix: Always deduct expected loss. Expected loss covers normal losses; economic capital covers unexpected ones.

  • Dividing by total assets or book equity instead of economic capital.

    Both are familiar denominators.

    Fix: Use the economic capital figure given in the question. It reflects the risk of the unit.

  • Choosing the unit with the highest profit rather than the highest RAROC.

    Profit looks like the natural winner.

    Fix: Compare RAROC with the hurdle rate. A large profit with large capital can still earn a lower return.

  • Listing lagging items such as actual fraud losses as KRIs.

    Students confuse loss data with warning signals.

    Fix: Choose leading metrics, for example the number of overdue control reviews, and mention loss data separately as lagging.

  • Giving KRIs with no threshold or owner.

    Students stop at naming the metric.

    Fix: Add a threshold (green, amber, red), a reporting frequency and the responsible person.

  • Describing reporting without escalation.

    Reporting is seen as only sending information.

    Fix: State that breaches go to a defined senior level, with actions, deadlines and follow-up.

Worked examples

Example 1

Two business units of an Indian bank. Unit A: revenue ₹60 crore, costs ₹30 crore, expected loss ₹6 crore, economic capital ₹100 crore. Unit B: revenue ₹45 crore, costs ₹20 crore, expected loss ₹5 crore, economic capital ₹80 crore. The hurdle rate is 18%. Compute RAROC for each, state which creates value and recommend.

Show the solution
  1. Unit A risk-adjusted profit = 60 − 30 − 6 = ₹24 crore.
  2. Unit A RAROC = 24 ÷ 100 = 24%.
  3. Unit B risk-adjusted profit = 45 − 20 − 5 = ₹20 crore.
  4. Unit B RAROC = 20 ÷ 80 = 25%.
  5. Both exceed the 18% hurdle, so both create value.
  6. Economic profit: A = 24 − (100 × 18%) = 24 − 18 = ₹6 crore. B = 20 − (80 × 18%) = 20 − 14.4 = ₹5.6 crore.
  7. B earns the higher return per rupee of capital, while A adds slightly more absolute economic profit.

Answer: RAROC: Unit A 24%, Unit B 25%. Both beat the 18% hurdle. If capital is scarce, allocate more to B; if capital is available, keep both, as A gives economic profit of ₹6 crore against ₹5.6 crore for B.

Example 2

A manufacturing company's board wants early warning of credit risk on its dealers. Suggest three KRIs with thresholds, and explain how they should be reported.

Show the solution
  1. Choose leading indicators linked to dealer credit risk.
  2. KRI 1: Dealer receivables overdue more than 60 days as a percentage of total dealer receivables. Green below 5%, amber 5% to 8%, red above 8%.
  3. KRI 2: Number of dealers exceeding their credit limit. Green: none, amber: 1 to 3, red: more than 3.
  4. KRI 3: Average collection period against the 45-day policy. Green up to 45 days, amber 46 to 55, red above 55.
  5. Assign owners: the credit controller for KRI 1 and 2, the finance head for KRI 3.
  6. Reporting: a monthly dashboard to the CFO and risk committee, and a quarterly summary to the board showing trends against thresholds.
  7. Escalation: any red indicator goes to the CFO within a week with an action plan, such as stopping supplies to defaulting dealers or tightening limits.

Answer: The three KRIs are overdue receivables percentage, dealers over credit limit, and average collection period. Each has a green, amber and red threshold, a named owner, monthly reporting and escalation of red breaches with an action plan.

Exam tips

  • In numerical questions, show the numerator working line by line. Marks are often given for deducting expected loss.
  • State your conclusion against the hurdle rate in a sentence. A bare percentage loses marks.
  • For KRI answers, give the metric, threshold and owner in a compact list rather than long paragraphs.
  • In MCQs, check whether the question defines RAROC with a different numerator before applying the standard formula.
  • In case-based questions, tie each KRI or measure to the specific risk named in the case.

Practice questions from Corporate Risk Management Performance

Measuring Risk Management Performance in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Measuring Risk Management Performance: frequently asked questions

What are examples of key risk indicators?

Common examples are overdue receivables percentage, unhedged foreign currency exposure, employee turnover in key roles, IT system downtime, covenant headroom and overdue audit actions. Pick ones that give early warning and fit the risk in the question.

What is the RAROC formula?

RAROC = (Revenue − Costs − Expected loss) ÷ Economic capital. You compare the result with the hurdle rate. Use the numerator definition given in the question if it differs.

How is a KRI different from a KPI?

A KPI shows how well an objective is being achieved. A KRI shows how likely it is that an objective will be missed because of rising risk. KRIs are mostly leading indicators with thresholds.

Why use RAROC instead of ROI?

ROI ignores how much risk was taken to earn the profit. RAROC deducts expected loss and divides by capital set aside for unexpected loss, so units with different risk levels can be compared fairly.