Skip to content

FRM Exam Part I · Learning From Financial Disasters

Governance, Reputation and Compliance Failures in Risk Management

Updated 11 October 2026 · Fact-checked

Governance, reputation and compliance failures happen when a firm's oversight, incentives and culture let people hide risk, break rules or mislead customers. Enron, Volkswagen and Wells Fargo are the standard cases. To answer exam questions, identify the root cause, the control that failed, and the lesson.

Understand Governance, Reputation and Compliance Failures

A governance failure is a breakdown in how a firm is directed and controlled. The board, senior management and control functions are meant to challenge decisions, check information and enforce limits. When they do not, losses that look like market or credit problems often turn out to be people and process problems.

Enron (collapse in 2001) is the classic case of opaque structure and weak oversight. The firm used special purpose entities (SPEs) to keep debt and losses off its balance sheet and to book gains with related parties. Investors and even directors could not see true leverage. Conflicts of interest, complex disclosure, a compliant auditor and a board that waived its own rules all added to the failure. When confidence went, the firm lost trading counterparties and funding quickly.

Volkswagen (emissions scandal, revealed in 2015) is a compliance and culture failure. Software was designed to detect testing and cut emissions only during tests. The lesson is that aggressive targets, fear of reporting bad news and weak challenge from control functions can lead to deliberate rule-breaking. The costs were fines, legal settlements, recalls and heavy damage to the brand.

Wells Fargo (sales practices scandal, made public around 2016) is an incentive risk case. Aggressive cross-selling targets and pay tied to sales pushed staff to open accounts customers had not authorised. Warning signs such as complaints and staff dismissals were not escalated effectively. The result was regulatory penalties, leadership changes and lasting reputational harm.

Reputation risk is the risk that stakeholders lose trust in a firm. It is usually a consequence of another failure, such as fraud, misconduct or poor controls, rather than a stand-alone event. It shows up as lost customers, higher funding costs, regulatory restrictions and falling share price. It is hard to quantify, so firms manage it through culture, controls and ethical standards.

How to solve Governance, Reputation and Compliance Failures questions

This topic is qualitative. Use the same structure for any case-based question.

  1. 1Identify the firm and the case from the clues (SPEs, defeat devices, cross-selling targets).
  2. 2Name the root cause: opaque structure, incentive design, weak culture, or poor oversight.
  3. 3Identify which control or line of defense failed: board, risk function, audit, compliance or whistleblowing.
  4. 4Link the failure to its consequence: financial loss, fines, funding loss or reputational damage.
  5. 5Decide what the question asks: cause, lesson, or fix.
  6. 6Match the option to the specific lesson, such as aligning pay with risk or ensuring transparent disclosure.
  7. 7Eliminate options that blame a single market factor when the case was a people or process failure.

Quickest way: Case to root cause mapping

When to use it: Use when a multiple-choice question describes a case and asks for the main lesson or cause.

  1. Enron: off-balance-sheet SPEs, opacity, conflicts of interest, weak board and auditor challenge.
  2. Volkswagen: deliberate rule-breaking, compliance and culture failure, emissions testing evasion.
  3. Wells Fargo: sales incentives, unauthorised accounts, weak escalation of red flags.
  4. Pick the option that names that cause, not a market or model explanation.

Common mistakes in Governance, Reputation and Compliance Failures

  • Treating these cases as market or credit risk losses.

    The financial impact looks like a normal loss.

    Fix: Look for the root cause. Here it is governance, incentives or compliance.

  • Saying Enron's SPEs were illegal by nature.

    SPEs are linked to the scandal.

    Fix: SPEs are legitimate tools. The problem was using them to hide debt and losses and to deal with related parties.

  • Calling reputation risk a separate, easily measured risk.

    It has its own name.

    Fix: Remember it usually follows other failures and is hard to quantify.

  • Mixing up the cases, for example attributing emissions cheating to Wells Fargo.

    Three similar scandal stories blur together.

    Fix: Tie each case to one keyword: SPEs, emissions software, sales incentives.

  • Blaming individual rogue staff only.

    Headlines focus on individuals.

    Fix: Exam answers focus on systemic causes such as targets, culture and weak oversight.

Worked examples

Example 1

Which feature of Enron's use of special purpose entities was the main governance concern? A) They hedged commodity price risk perfectly B) They kept debt and losses out of view and involved related parties C) They reduced the firm's tax rate D) They were prohibited by accounting rules

Show the solution
  1. Identify the case: Enron and SPEs.
  2. Recall the root cause: opacity and conflicts of interest, not hedging or taxes.
  3. Option A is wrong because the SPEs did not hedge effectively.
  4. Option C is not the main concern.
  5. Option D is wrong because SPEs are permitted; the abuse was the issue.
  6. Option B matches the concern.

Answer: B

Example 2

A bank pays staff large bonuses for the number of products sold per customer. Employees open accounts customers did not request. Which case does this resemble and what is the main lesson? A) Volkswagen; improve engineering tests B) Enron; avoid SPEs C) Wells Fargo; align incentives with customer outcomes and escalate red flags D) LTCM; reduce leverage

Show the solution
  1. The clues are sales targets and unauthorised accounts.
  2. This matches Wells Fargo's sales practices scandal.
  3. The root cause is incentive risk plus weak escalation.
  4. The lesson is to align pay with customer outcomes and risk, and to act on warning signs.
  5. Options A, B and D describe other cases or causes.

Answer: C

Exam tips

  • Expect conceptual questions that ask for the main cause or lesson of a named case.
  • Focus on one clear root cause per case rather than every detail.
  • Link incentives, culture and the three lines of defense when options are close.
  • Watch for distractors that offer a market or model explanation.

Practice questions from Learning From Financial Disasters

Governance, Reputation and Compliance Failures: frequently asked questions

Do I need dates and fine amounts for these cases?

Focus on causes, failed controls and lessons. Exact figures are rarely needed for multiple-choice questions.

What is the key lesson from Enron?

Complex, opaque structures and conflicts of interest can hide leverage and losses. Boards, auditors and risk functions must challenge and disclose clearly.

What is incentive risk?

It is the risk that pay and targets push employees toward behaviour that harms customers or the firm. Wells Fargo is the standard example.

Is reputation risk a separate risk type in the exam?

It is usually treated as a consequence of failures in governance, compliance or operations, and it is hard to measure directly.