FRM Part I · FRM Exam Part I · The Governance of Risk Management
A bank's Chief Risk Officer (CRO) currently reports to the Chief Financial Officer and her compensation is set by the CFO based on firm profitability. Which change would most strengthen the independence of the CRO role in line with good governance practice?
The CRO should report directly to the CEO and the board risk committee, with compensation not driven mainly by short-term profit. This gives independence from risk-taking units and ensures risk concerns reach the board, whereas running a desk or sitting under the CFO compromises objectivity.
- AHave the CRO report directly to the CEO and the board risk committee, with compensation not tied mainly to short-term profitCorrect
- BHave the CRO also head the largest trading desk so she understands the risks first-hand
- CMove the CRO into the internal audit function so she becomes the third line
- DKeep the reporting line to the CFO but add a quarterly risk newsletter
Explanation
Independence needs a direct line to the CEO and board risk committee and pay that does not reward risk-taking profit. Heading a trading desk creates a conflict of interest. Moving the CRO into audit confuses the second and third lines. A newsletter does not alter reporting or incentives.
Did you get it right without looking?
One question tells you little. A timed set on The Governance of Risk Management shows your real accuracy, how long you take and where you lose marks.
More The Governance of Risk Management questions
- Which compensation design best supports good risk governance at a financial institution?
- Before the 2007-2009 crisis, several firms relied heavily on a single VaR figure to report risk to the board. Which lesson about board-level…
- In the three lines of defense model used for risk governance at a bank, which function constitutes the third line of defense?
- A bank's board is reviewing its risk governance after an internal audit report finds that the risk management function has been reviewing it…
- Which statement best describes the role of the board of directors in a risk management framework?
- Which of the following is generally regarded as a core responsibility of the CRO in a financial institution?