FRM Exam Part II · The Evolution of Stress Testing Counterparty Exposures

Governance and Use of Counterparty Stress Test Results

Updated 11 October 2026 · Fact-checked

Governance of counterparty stress testing means the board and senior management own the programme, set clear scenarios and limits, ensure accurate exposure data aggregation, and use results in risk appetite, limits, collateral terms and management actions. Supervisors expect stress results to drive decisions, not sit in reports.

Understand Governance, Regulation and Use of Stress Test Results

A stress test is only useful if someone acts on it. Supervisors, including the Basel Committee and the US Federal Reserve, treat stress testing as a governance matter first and a modelling matter second.

The core expectation is that the board and senior management are actively involved. The board approves the risk appetite and understands the main assumptions and limits of the programme. Senior management makes sure the programme is documented, resourced, reviewed regularly and challenged independently. Weak governance means results are ignored, scenarios are too mild or the programme is run as a box-ticking exercise.

For counterparties, the firm needs to see exposure across the whole firm. That needs strong data aggregation: trade-level data, netting sets, collateral and margin terms, legal agreements and counterparty hierarchies pulled together fast and accurately. In stress the firm must be able to answer who the largest exposures are, what collateral is held, and how much would be lost under a default of a major counterparty. Poor data was a recurring finding after the 2007-2009 crisis.

Supervisors also expect stress results to be linked to limits and risk appetite. Stressed exposure measures can be used to set or cut counterparty limits, to size concentration limits, to set initial margin and collateral terms, and to trigger hedging or reductions. Results should be reported to senior committees and the board, with clear escalation when a threshold is breached.

Finally, the programme must be reviewed and validated. Scenarios should cover severe but plausible events, include wrong-way risk, large counterparty defaults and margin or collateral effects, and be updated as markets change. Limits of the models, such as ignoring second-round effects, should be understood and reported.

How to solve Governance, Regulation and Use of Stress Test Results questions

Governance questions are usually scenario-based. Match the situation to the supervisory expectation and pick the answer that links stress results to action.

1Identify the weakness or situation: governance, data, scenario design, limits or use of results.
2Ask who should own it. Board and senior management own the framework and risk appetite; independent functions challenge and validate.
3Check whether results feed decisions: limits, collateral terms, hedging, capital, risk appetite.
4Check data and aggregation: can the firm see exposures by counterparty, netting set and collateral quickly across the firm?
5Check scenario quality: severe but plausible, includes wrong-way risk, large counterparty default and collateral effects.
6Check review and escalation: regular validation, documentation, clear thresholds and reporting lines.
7Choose the option that makes stress tests actionable and independent, not purely technical or purely informational.

Quickest way: Action and ownership filter

When to use it: Use when four options all sound reasonable and you have little time.

Eliminate options where results are only reported or filed with no action.
Eliminate options giving the board a purely technical modelling role or leaving oversight to the trading desk.
Prefer options that tie stress results to limits, risk appetite or collateral terms.
Prefer options with firm-wide data aggregation and independent review.

Common mistakes in Governance, Regulation and Use of Stress Test Results

Treating stress testing as a purely quantitative modelling task.
Earlier chapters focus on exposure metrics, so governance seems secondary.
Fix: Remember supervisors judge ownership, challenge, documentation and use of results as much as the maths.
Assuming stress results are informational only.
Reports often present numbers without decisions attached.
Fix: Choose answers where stress outcomes drive limits, margin terms, hedges or risk appetite changes.
Placing responsibility for the programme with the trading desk.
Desks know the positions best.
Fix: Risk functions run it, the board and senior management own it, and independent review challenges it.
Ignoring data aggregation weaknesses.
Data problems look like IT issues, not risk issues.
Fix: Link inability to aggregate exposures quickly to poor stress testing and weak risk governance.
Using mild or purely historical scenarios.
Historical scenarios are easy to defend and calibrate.
Fix: Expect supervisors to want severe but plausible, forward-looking scenarios, including wrong-way risk and large counterparty defaults.

Worked examples

Example 1

A global bank runs counterparty stress tests quarterly. Results go to the risk department but have never changed a limit or collateral term. Which finding would a supervisor most likely raise?

Show the solution

Identify the issue: the tests run but nothing changes.
Supervisory expectation: stress results should feed risk appetite, limits and management actions.
Here there is no link between results and decisions, so use of results is the weakness.
Model precision or test frequency is not the stated problem.

Answer: The stress results are not integrated into limits, risk appetite and management actions; senior management and board should use them for decisions.

Example 2

After a major counterparty shock, a bank needed several days to compile its exposure to a single corporate group across subsidiaries and netting sets. What weakness does this show and what should be done?

Show the solution

The delay arose from compiling exposures across entities and netting sets.
This points to weak risk data aggregation and counterparty hierarchy mapping.
Supervisory expectation: firm-wide exposure, collateral and netting data available quickly, including under stress.
The fix is to invest in data infrastructure and governance, with senior management ownership, so exposures aggregate by counterparty group and netting set.

Answer: It shows inadequate data aggregation; the bank should build firm-wide, timely counterparty exposure data, with clear ownership and regular testing.

Exam tips

Look for the option that links stress results to limits, risk appetite or management action.
Board and senior management ownership is the default correct answer on governance questions.
Data aggregation weaknesses are a common case-study finding; connect them to stress testing quality.
Be cautious of options that treat stress testing as a one-off or purely regulatory exercise.

Practice questions from The Evolution of Stress Testing Counterparty Exposures

Governance, Regulation and Use of Stress Test Results in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Governance, Regulation and Use of Stress Test Results: frequently asked questions

Who is responsible for a stress testing programme?

The board and senior management are ultimately responsible. Risk management runs it and independent functions review and challenge it.

How are counterparty stress results used?

They inform counterparty and concentration limits, collateral and margin terms, hedging, risk appetite and capital planning. They should lead to documented management actions.

Why does data aggregation matter for stress testing?

A firm cannot stress what it cannot see. Accurate firm-wide data on exposures, netting and collateral lets it assess large counterparty losses quickly.

What makes a good stress scenario for counterparties?

It should be severe but plausible, include wrong-way risk, large counterparty defaults and collateral effects, and be reviewed as markets change.