FRM Part II · FRM Exam Part II · Risk Reporting
An operational risk team reports to the board that the number of loss events fell from 400 to 320 year on year, and presents this as an improvement. Total net losses rose from USD 8 million to USD 12 million, and one event of USD 5 million was caused by a control failure that remains unremediated. Which statement best describes the weakness of the report?
Frequency alone is misleading. Events fell 20% but net losses rose 50%, driven by a USD 5 million event with an unremediated control failure. A sound report pairs frequency with severity, highlights large events and shows remediation status so the board sees the true risk picture.
- AEvent frequency is irrelevant and should be removed from all reports
- BThe report should show only the USD 5 million event and omit all others
- CThe report is sound because a 20% fall in frequency shows controls are working
- DFrequency alone is misleading; the report should pair it with severity, concentration in large events and the status of remediationCorrect
Explanation
Frequency fell 20% (80/400), but losses rose 50% (4/8) and the increase is driven by a large event with an open control weakness. Good reports combine frequency and severity and highlight tail events and remediation status. Omitting other events or frequency entirely would also lose information.
Did you get it right without looking?
One question tells you little. A timed set on Risk Reporting shows your real accuracy, how long you take and where you lose marks.
More Risk Reporting questions
- A bank's operational risk team receives loss event data from three subsidiaries. One subsidiary records losses net of insurance recoveries, …
- During a review of its risk reports, a bank finds that the key risk indicator (KRI) section shows only current-month values with no threshol…
- A payments firm has defined an impact tolerance for its payment processing service of a maximum disruption of 4 hours. During a scenario tes…
- During a stress event, a G-SIB's chief risk officer asks for an ad hoc report on exposures to a specific counterparty group, but the bank ca…
- A bank reports operational loss events to its risk committee each month. Over 12 months the counts were 4, 6, 5, 3, 7, 5, 4, 6, 5, 5, 4, 6. …
- Which approach best reflects sound practice when a firm reports operational resilience to its board?