FRM Part II · FRM Exam Part II · Risk Governance
A bank's board wants its operational risk appetite to be effective in practice. Which approach best achieves this?
The best approach is board-approved risk appetite translated into quantitative limits and triggers, such as loss and key risk indicator thresholds, cascaded to business units with clear escalation procedures. This makes appetite measurable, monitorable and actionable rather than a vague statement.
- AA single qualitative statement that the bank has low tolerance for losses, with no metrics
- BRisk appetite expressed with quantitative limits and triggers (e.g., loss and key risk indicator thresholds) cascaded to business units with escalation proceduresCorrect
- CRisk appetite set by the first line alone, without board review, to reflect business needs
- DRisk appetite defined only as a regulatory capital figure reviewed once at inception
Explanation
Effective appetite is approved by the board and translated into measurable limits, triggers and escalation paths so that breaches can be detected and acted on. Qualitative-only statements cannot be monitored, first-line-only setting lacks oversight, and a one-time capital figure is not dynamic.
Did you get it right without looking?
One question tells you little. A timed set on Risk Governance shows your real accuracy, how long you take and where you lose marks.
More Risk Governance questions
- A bank organizes its operational risk governance using three lines of defense. The independent corporate operational risk function (CORF) re…
- A bank's board has approved an operational risk framework, but the document does not say how much operational risk the bank is willing to ac…
- A business unit head argues that the unit should be allowed to exceed its operational risk limit for one quarter because revenue targets are…
- A bank's operational risk committee reviews key risk indicators (KRIs) with amber threshold 4 and red threshold 7 failed settlements per wee…
- A bank's operational risk function receives monthly loss data from business lines. The Chief Risk Officer notices that several divisions rec…
- Which of the following BEST describes the 'tone from the top' in risk culture?