FRM Part II · FRM Exam Part II · Risk Reporting
A bank sets a reporting escalation protocol: any single operational loss event above USD 500,000 must reach the CRO within 24 hours; the monthly report goes to the executive risk committee; the quarterly report goes to the board. In March, a USD 650,000 fraud loss is discovered on 10 March and is first mentioned in the monthly report issued 5 April. Which assessment is most accurate?
The bank is non-compliant. The USD 650,000 fraud exceeded the USD 500,000 trigger, so the CRO should have been told within 24 hours of discovery on 10 March. Escalation protocols work independently of the routine monthly and quarterly reporting cycles, so waiting until 5 April was a breach.
- ACompliant, because the loss was reported in the next monthly report
- BCompliant, because the board receives quarterly reports anyway
- CCompliant, because only losses above USD 1 million need escalation
- DNon-compliant, because the loss exceeded the threshold and should have been escalated to the CRO within 24 hours, independent of the routine reporting cycleCorrect
Explanation
Threshold-based escalation operates separately from the periodic cycle. USD 650,000 exceeds the USD 500,000 trigger, so the CRO needed to be informed within 24 hours of discovery. Waiting for the monthly report (about 26 days later) breaches the protocol; the USD 1 million figure is invented.
Did you get it right without looking?
One question tells you little. A timed set on Risk Reporting shows your real accuracy, how long you take and where you lose marks.
More Risk Reporting questions
- A bank's operational risk team receives loss event data from three subsidiaries. One subsidiary records losses net of insurance recoveries, …
- During a review of its risk reports, a bank finds that the key risk indicator (KRI) section shows only current-month values with no threshol…
- A payments firm has defined an impact tolerance for its payment processing service of a maximum disruption of 4 hours. During a scenario tes…
- During a stress event, a G-SIB's chief risk officer asks for an ad hoc report on exposures to a specific counterparty group, but the bank ca…
- A bank reports operational loss events to its risk committee each month. Over 12 months the counts were 4, 6, 5, 3, 7, 5, 4, 6, 5, 5, 4, 6. …
- Which approach best reflects sound practice when a firm reports operational resilience to its board?