FRM Part II · FRM Exam Part II · Introduction to Operational Risk and Resilience
Under the three lines model commonly used in operational risk governance, which activity belongs to the second line?
The second line independently challenges business units' risk assessments and sets operational risk policies and the framework. The first line owns and manages the risks day to day, while internal audit as the third line gives independent assurance to the board.
- AOwning and managing risks in day-to-day business processes
- BIndependently challenging business units' risk assessments and setting operational risk policiesCorrect
- CProviding independent assurance to the board on the effectiveness of governance and controls
- DExecuting trades within approved limits
Explanation
The second line (independent operational risk management function) sets the framework and policies, and provides oversight and challenge. The first line owns and manages risk. Independent assurance to the board is the role of internal audit, the third line.
Did you get it right without looking?
One question tells you little. A timed set on Introduction to Operational Risk and Resilience shows your real accuracy, how long you take and where you lose marks.
More Introduction to Operational Risk and Resilience questions
- A bank's risk team reviews losses from a flood that destroyed a branch's premises and equipment. Which Basel event type is this, and which i…
- A bank's scenario analysis for a severe payment-system outage estimates a frequency of one event every 20 years. Experts estimate the loss i…
- A risk manager notes that the SMA ILM uses a bank's ten-year average annual operational losses above a threshold. Which statement best descr…
- A bank's operational loss data show 40 events in a year. Of these, 10 are boundary events with market risk, and the bank's policy counts bou…
- A bank's fraud team discovers that a branch employee created fictitious customer accounts and diverted funds into them over two years. Under…
- Under the Basel III finalised framework, which approach is the only one banks use to calculate minimum regulatory capital for operational ri…