

The FSB doesn’t underestimate the scale of the challenge, and rightly recognises that operational risk management and supervision, as a whole, needs revisiting. Which leads us back to the FSB Report and its emphasis on enhancing operational risk management. In short, over €20Bn of 2011’s operational risk losses can be attributed to failed processes, procedures and controls. However, the largest chunk of losses – nearly 65% – stemmed from the Clients, Products and Business Practices event type, which encompasses a range of issues from product suitability and disclosure to improper trading, insider trading, and market manipulation. So where did all these losses come from? According to the ORX Report, about 20% of gross losses fell into an event type called Execution, Delivery and Process Management, which covers losses due to incorrect reference data, missed deadlines, late or inaccurate regulatory reporting and a range of other activity based functions. That’s nearly 3% of bank income gone, due largely, as we shall see, to preventable situations. Yet what is particularly revealing is the impact operational risk has to bank profitability: ORX reports that the 2011 gross loss amount per €100 of gross income was €2.84.

ORX’s 65 member banks categorize and report operational risk losses in excess of €20,000, and its 2012 Report on Operational Risk Loss Data gives some insight into its pervasiveness.įor example, in 2011 member banks reported a total of 36,528 loss events with total gross losses of €25.1bn – an average of €687,430 per incident. To get a sense of scale we turn to findings published by the Operational Risk eXchange Association (ORX), the not-for-profit financial industry association dedicated to advancing the measurement and management of operational risk.

Given the potential impact of operational risk, the FSB’s concern is not surprising. As the FSB Report states: “Operational risk covers a myriad of risks across the enterprise, including people risk, outsourcing risk, internal and external fraud, money laundering, technology risk, etc.” furthermore, it includes both the direct losses of an incident as well as the consequential losses, such as those arising from market exposure. If the definition of operational risk seems like it covers a lot of ground, it does. The FSB not only acknowledges the current challenge managing operational risk but emphasises that challenge will only become greater as banks expand their offerings in search of new revenue sources.

The Report focuses on operational risk, which is defined under Basel II as “the risk of loss resulting from inadequate or failed internal processes, people and systems, as well as from external events”. That quote is from the Financial Stability Board (FSB)’s November 2012 progress report to the G20. These events underscore the need for supervisors to increase focus on operational risk management.” UBS rogue trader, MF Global, Global Payments, LIBOR manipulation, HSBC AML events, JP Morgan synthetic credit transaction losses, Standard Chartered AML events, and Knight Capital). “Operational risk is the common link between several headline events (e.g. By Ken Hartlage, Head of Corporate Development at Information Mosaic
