FRM Part II · FRM Exam Part II · Risk Measurement and Assessment
A bank has a taxonomy with Level 1 event types and Level 2 sub-categories. Two business lines record similar phishing-related losses, one under 'External fraud' and the other under 'Business disruption and system failures'. What is the most important weakness this reveals?
The weakness is inconsistent application of the taxonomy. When similar phishing losses are mapped to different categories, loss data cannot be reliably aggregated, compared across business lines or used for analysis. The remedy is clearer category definitions, mapping guidance and data quality review.
- AInsufficient risk appetite limits
- BInconsistent application of the taxonomy, reducing comparability and aggregation of loss dataCorrect
- COverreliance on key risk indicators
- DExcessive granularity of Level 1 categories
Explanation
Identical event types classified differently signals unclear definitions or inadequate guidance, which undermines aggregation, benchmarking and scenario analysis. It does not directly relate to appetite limits or KRIs, and the issue is inconsistent mapping, not too many Level 1 categories.
Did you get it right without looking?
One question tells you little. A timed set on Risk Measurement and Assessment shows your real accuracy, how long you take and where you lose marks.
More Risk Measurement and Assessment questions
- A bank uses scenario analysis alongside its internal loss data to measure operational risk capital. Which is the principal reason scenario a…
- A bank's LDA model has Poisson frequency with mean 20 losses per year. Severity has mean USD 100,000 and standard deviation USD 300,000. Mod…
- A bank's LDA model uses a Poisson frequency with mean 20 events per year and a severity distribution with mean USD 0.5 million. Because of l…
- A risk manager reviews RCSA results and notes that nearly every business unit rated its controls 'effective' and its residual risks 'low', y…
- In a scenario workshop, experts estimate that a payment-fraud event occurs once every 20 years on average. If it occurs, the severity is est…
- A bank combines internal loss data with external consortium data in its operational risk model. A validator raises a concern that external l…