FRM Part II · FRM Exam Part II · Risk Measurement and Assessment
A bank scores each RCSA risk on a 1-5 scale for likelihood and a 1-5 scale for impact, and defines the risk score as likelihood multiplied by impact. Control effectiveness is rated as a percentage reduction of the inherent score. A process risk has likelihood 4 and impact 5. Controls are rated 60% effective. The bank's tolerance for residual score is 6. What is the residual score and is it within tolerance?
The inherent score is 4 times 5, which is 20. A 60% effective control leaves 40% of it, giving a residual score of 8. That exceeds the tolerance of 6, so the risk is outside tolerance and needs further treatment.
- AResidual score 8; outside toleranceCorrect
- BResidual score 12; outside tolerance
- CResidual score 8; within tolerance
- DResidual score 4; within tolerance
Explanation
Inherent score = 4 x 5 = 20. Residual = 20 x (1 - 0.60) = 8. Since 8 exceeds the tolerance of 6, it is outside tolerance. A score of 12 comes from wrongly using 40% as the reduction, and 4 from applying the reduction to a wrong base.
Did you get it right without looking?
One question tells you little. A timed set on Risk Measurement and Assessment shows your real accuracy, how long you take and where you lose marks.
More Risk Measurement and Assessment questions
- A bank's LDA model has Poisson frequency with mean 20 losses per year. Severity has mean USD 100,000 and standard deviation USD 300,000. Mod…
- A bank's LDA model uses a Poisson frequency with mean 20 events per year and a severity distribution with mean USD 0.5 million. Because of l…
- A bank aggregates RCSA results across 40 business units to prioritize remediation. Unit A rates a risk 'high' on a 3-level scale (low, mediu…
- A risk manager reviews RCSA results and notes that nearly every business unit rated its controls 'effective' and its residual risks 'low', y…
- In a scenario workshop, experts estimate that a payment-fraud event occurs once every 20 years on average. If it occurs, the severity is est…
- A risk manager is reviewing how the bank defines operational risk for its taxonomy. Which of the following losses should be excluded from th…