FRM Part II · FRM Exam Part II · Risk Identification
A bank's RCSA program has been running for five years. Review findings: ratings across business units cluster in the 'medium' band, scores rarely change year to year, action plans are seldom completed, and the assessments are not linked to loss events or KRIs. Which improvement would most directly address the weakness that RCSA results are not informing risk decisions?
The best fix is to integrate RCSA with loss data, KRIs and scenario analysis, use calibrated consistent rating criteria, and track action plans with accountable owners. The problems of clustered, static ratings and incomplete actions come from weak evidence, calibration and follow-through, not from frequency or template.
- AMove the RCSA from annual to monthly using the same template
- BIntegrate RCSA with loss data, KRIs and scenario analysis, apply calibrated rating criteria, and track action plans with accountable ownersCorrect
- CMake business units responsible for setting their own rating scales
- DReplace the RCSA with external loss data benchmarking only
Explanation
Clustering and static scores suggest weak calibration and no evidence base; unfinished actions show weak follow-through. Linking RCSA to other tools, using consistent criteria and tracking actions fixes these. A more frequent identical template adds burden, unit-set scales reduce consistency, and external data alone loses the internal control view.
Did you get it right without looking?
One question tells you little. A timed set on Risk Identification shows your real accuracy, how long you take and where you lose marks.
More Risk Identification questions
- A bank's risk function combines internal loss data with scenario-based loss estimates. For a cyber-extortion event, internal data shows no l…
- A bank discovers that a single failure at a third-party payment processor caused a system outage, delayed customer payments, and resulted in…
- Which of the following is an advantage of the RCSA approach in identifying operational risks, compared with relying only on historical loss …
- A bank's operational risk function is building its risk taxonomy. A risk manager proposes classifying events by the underlying cause (people…
- A risk manager is building an emerging risk identification process. Which feature best distinguishes an emerging risk from an existing known…
- A bank records a USD 10 million loss from a rogue trader in 2021. By 2024 it discovers USD 4 million of related legal costs and recovers USD…