RISK MANAGEMENT MODULE A QUIZ 1

Banks perform financial intermediation by accepting funds from depositors and extending credit, often transforming short-term liabilities into longer-term assets. Because depositors and counterparties rely on confidence in a bank‘s ability to meet obligations, liquidity shocks can spread quickly.

Financial intermediation channels funds from savers to borrowers. Banks also support payments, credit creation and monetary-policy transmission, but the scenario specifically describes mobilising savings and allocating funds to borrowers.

Maturity transformation occurs when a financial institution funds longer-term assets with shorter-term liabilities. It supports lending and economic activity, but exposes the bank to liquidity and interest-rate risk if funding becomes unavailable or rates change.

Risk concerns the effect of uncertainty on objectives. It may involve downside losses, variability or upside opportunities, depending on the framework. In banking, risk identification and assessment connect uncertainty to capital, earnings, liquidity and strategic objectives.

Business risk arises from the bank‘s business model, strategy, competitive position or external environment. Control risk relates to the possibility that internal controls fail to prevent, detect or correct unwanted events. Competitive loss is primarily business/strategic risk.

Credit risk and market risk are financial risks because they directly affect financial positions and values. Conduct risk is generally treated as a non-financial risk category, although its consequences may include fines, losses and reputational damage.

Banking risks are interconnected. A rate shock can create market losses, increase credit defaults and intensify liquidity pressure. Risk management should assess common drivers and feedback loops rather than treating each risk silo as fully independent.

Unsystematic or idiosyncratic risk is specific to a borrower, firm or sector and can often be reduced by diversification. Systematic risk arises from broad market or macroeconomic factors and cannot be eliminated merely by holding more exposures.

Risk appetite is the aggregate level and types of risk an organisation is willing to assume in pursuit of its objectives. It is set with board oversight and should be translated into measurable limits, policies and operating controls.

Risk appetite expresses the overall risk-taking posture, while limits translate that posture into measurable constraints for portfolios, products, business units or exposures. Breaches should trigger escalation and corrective action under governance arrangements.

A sound risk culture encourages transparent escalation, accountability, informed challenge and decisions consistent with approved appetite. It does not punish staff for raising legitimate concerns or reward business growth regardless of risk.

A common cycle is to identify risks, analyse or measure them, evaluate and prioritise, treat or mitigate, then monitor and review with reporting. The process is iterative: new data and events may require reassessment.

Risk identification systematically determines what could affect objectives, where and why it could happen, and how. Methods include process mapping, workshops, scenario analysis, loss data, external information and expert judgement.

Quantitative measures support comparison and monitoring, but historical data may be incomplete and emerging risks may not be captured by models. Qualitative judgement and scenario analysis help interpret results and consider low-frequency or novel events.

Syndication shares exposure among lenders and reduces the originating bank‘s concentration, subject to retained obligations and counterparty risk. Risk responses can include avoidance, reduction, transfer or acceptance within approved appetite.

A risk MIS should provide timely, accurate, relevant and sufficiently granular information, including limit utilisation, concentrations, breaches, trends and emerging risks. Data aggregation and reporting must support decisions and escalation.

ERM considers risks across the organisation in an integrated manner, linked to strategy, performance and objectives. It helps management understand combined exposures, interdependencies and opportunities rather than managing each risk solely in a separate silo.

COSO‘s 2017 ERM framework is titled ‘Integrating with Strategy and Performance‘. It highlights governance and culture, strategy and objective-setting, performance, review and revision, and information, communication and reporting.

Internal controls—such as approvals, reconciliations, segregation of duties and access restrictions—are important tools for reducing operational risk. They form part of a broader framework that also includes governance, risk assessment, monitoring, resilience and culture.

Risk acceptance means knowingly retaining a risk within approved appetite, with appropriate authority and monitoring. It is not the same as ignoring a risk; the decision should be documented and reconsidered if conditions change.