FRM Part II · FRM Exam Part II · Risk Reporting
Under BCBS 239, which statement best describes the responsibility for compliance with the principles at a bank?
The board and senior management are responsible. BCBS 239 treats governance as an overarching principle, requiring them to ensure the bank's risk data aggregation, architecture and IT infrastructure meet the principles across all material risks. It is not solely an IT task, and auditors only review it.
- AThe board and senior management are responsible for ensuring the bank's governance, data architecture and IT infrastructure meet the principlesCorrect
- BCompliance is the sole responsibility of the IT department
- CCompliance is only required for credit risk data
- DExternal auditors are responsible for risk data aggregation capabilities
Explanation
BCBS 239 sets governance as an overarching principle: the board and senior management must strongly support risk data aggregation and reporting, and own its quality. Delegating to IT alone or limiting scope to credit risk is inconsistent with the principles, which cover all material risks. Auditors review but do not own the capability.
Did you get it right without looking?
One question tells you little. A timed set on Risk Reporting shows your real accuracy, how long you take and where you lose marks.
More Risk Reporting questions
- A bank's head of operational risk wants to confirm that the board risk report is effective after distribution. Which action best reflects go…
- A bank's operational risk team receives loss event data from three subsidiaries. One subsidiary records losses net of insurance recoveries, …
- During a review of its risk reports, a bank finds that the key risk indicator (KRI) section shows only current-month values with no threshol…
- A payments firm has defined an impact tolerance for its payment processing service of a maximum disruption of 4 hours. During a scenario tes…
- During a stress event, a G-SIB's chief risk officer asks for an ad hoc report on exposures to a specific counterparty group, but the bank ca…
- A bank reports operational loss events to its risk committee each month. Over 12 months the counts were 4, 6, 5, 3, 7, 5, 4, 6, 5, 5, 4, 6. …