FRM Part II · FRM Exam Part II · Risk Measurement and Assessment
A bank's loss database records a loan fraud as follows: an employee colluded with an outside borrower to approve a false loan, causing a loss, and the bank also lost money because credit analysis was not performed. A risk manager wants to avoid double counting between credit and operational risk. Which treatment is most consistent with common industry practice?
The loss should be recorded as operational risk, specifically internal fraud, with a flag showing its credit-related nature. This follows the cause-based approach to boundary events and prevents duplicate capital, whereas booking it in both categories double counts and excluding it hides a real loss.
- ARecord the loss in both credit and operational risk loss databases and add the capital for each
- BRecord it only as credit risk because the loss arose from a loan default
- CRecord it as operational risk (internal fraud) and flag it as credit-related for boundary reporting, avoiding duplicate capitalCorrect
- DExclude it from both databases because collusion losses are unpredictable
Explanation
Boundary events caused by fraud or process failure are treated as operational risk losses, since the cause is the operational failure, and flagged as credit-related so the exposure is not counted twice in capital. Adding capital in both categories double counts, and excluding it ignores a genuine loss.
Did you get it right without looking?
One question tells you little. A timed set on Risk Measurement and Assessment shows your real accuracy, how long you take and where you lose marks.
More Risk Measurement and Assessment questions
- A bank's LDA model has Poisson frequency with mean 20 losses per year. Severity has mean USD 100,000 and standard deviation USD 300,000. Mod…
- A bank's LDA model uses a Poisson frequency with mean 20 events per year and a severity distribution with mean USD 0.5 million. Because of l…
- A risk manager reviews RCSA results and notes that nearly every business unit rated its controls 'effective' and its residual risks 'low', y…
- In a scenario workshop, experts estimate that a payment-fraud event occurs once every 20 years on average. If it occurs, the severity is est…
- A bank aggregates RCSA results across 40 business units to prioritize remediation. Unit A rates a risk 'high' on a 3-level scale (low, mediu…
- A bank combines internal loss data with external consortium data in its operational risk model. A validator raises a concern that external l…