FRM Part I · FRM Exam Part I · Enterprise Risk Management and Future Trends
A chief risk officer (CRO) at a diversified financial group reports functionally to the CEO but also has a direct, unrestricted line to the board risk committee, and the committee alone approves the CRO's appointment, removal and compensation. A director argues this is excessive and that the CRO should be accountable only to the head of the largest business line to keep risk aligned with strategy. Which assessment is most consistent with sound risk governance?
The director is incorrect. A CRO with direct board access and board control over appointment, removal and pay is independent from revenue-generating units, which protects the risk function from pressure. Reporting to a business head creates conflicts of interest and weakens challenge of risk-taking.
- AThe director is correct, since alignment with the largest business improves risk decisions
- BThe director is correct, provided the CRO also has authority to approve all trades
- CThe director is incorrect, because the arrangement protects the independence and stature of the risk function from pressure by revenue-generating unitsCorrect
- DThe director is incorrect, because the CRO should report only to regulators
Explanation
Sound governance requires the CRO to be independent of revenue-generating units, with board access and board control over appointment and pay. Reporting to a business head creates conflicts of interest. Approving all trades would make the CRO part of first-line decisions and blur ownership; reporting only to regulators is not standard.
Did you get it right without looking?
One question tells you little. A timed set on Enterprise Risk Management and Future Trends shows your real accuracy, how long you take and where you lose marks.
More Enterprise Risk Management and Future Trends questions
- Which of the following is most consistent with the role of a chief risk officer (CRO) in an effective ERM framework?
- A bank's board is reviewing its enterprise risk management (ERM) program. Which of the following best describes the primary distinguishing f…
- A bank increasingly outsources critical processing to a small number of cloud providers. Which emerging risk is most directly increased by t…
- A bank's board wants a single, integrated view of credit, market, operational and strategic risks across all business lines, rather than hav…
- A bank's board wants a single, integrated view of credit, market, operational and strategic risks, with risk appetite linked to strategy and…
- A bank's risk committee is reviewing its use of machine-learning models for credit scoring. Regulators have asked the bank to explain why in…