FRM Part II · FRM Exam Part II · Risk Governance
A bank is preparing to launch a new payments product. The head of operational risk reviews the plan against the Basel operational risk principles. Which action best aligns with the principles on change management?
The bank should assess operational risk in the new product's processes and systems before launch and confirm that the risks fit within risk appetite as part of the approval process. Waiting for losses, relying only on vendor assurance, or reviewing only revenue and credit risk fails the principles.
- ADefer operational risk assessment until losses appear in the first year after launch
- BPerform a risk assessment of the new product's processes and systems before launch, and confirm that its risks are within appetite and the approval process covers operational riskCorrect
- CRely on the vendor's assurance that the system is secure and skip internal assessment
- DLimit the assessment to the product's expected revenue and credit risk
Explanation
The principles require that the approval process for new products, activities, processes and systems fully assess operational risk before introduction, with consideration of risk appetite. Waiting for losses is reactive, vendor assurance does not replace internal assessment, and ignoring operational risk leaves the key exposure unexamined.
Did you get it right without looking?
One question tells you little. A timed set on Risk Governance shows your real accuracy, how long you take and where you lose marks.
More Risk Governance questions
- A trading desk head receives a large annual bonus paid entirely in cash immediately, based on that year's profits. Losses from the positions…
- A bank's internal audit finds that the operational risk reports to the board contain only realized loss totals by business line, with no for…
- A bank's board approves an operational risk appetite statement that sets annual operational loss tolerance at USD 40 million. Management set…
- A bank's board has approved an operational risk framework, but the document does not say how much operational risk the bank is willing to ac…
- A bank's operational risk committee reviews key risk indicators (KRIs) with amber threshold 4 and red threshold 7 failed settlements per wee…
- A bank's operational risk function receives monthly loss data from business lines. The Chief Risk Officer notices that several divisions rec…