Unit 3 – Operational Risk Management (Detailed Notes)
1. Meaning of Operational Risk
Operational Risk refers to the risk of loss resulting from inadequate or failed internal processes, people,
systems, or from external events. This definition is as per Basel II norms.
Operational risk is different from credit and market risk because it arises mainly from day-to-day banking
operations rather than lending or market movements.
Examples include: - Fraud by employees or outsiders - System failure or cyber-attack - Human errors - Legal
and compliance failures - Natural disasters
Operational risk is present in all banking activities and cannot be completely eliminated, only managed.
2. Scope of Operational Risk
The scope of operational risk in banks is very wide and covers all functional areas.
Operational risk includes risks arising from: - Internal processes (errors, delays, non-compliance) - People
(fraud, negligence, lack of training) - Systems (IT failure, cyber risk) - External events (natural calamities,
regulatory changes)
Areas covered under operational risk: - Branch operations - Treasury and forex operations - Digital banking
and payment systems - Customer service and grievance handling - Legal and compliance functions
Thus, operational risk affects profitability, reputation, and customer confidence in banks.
3. Types of Risks Associated with Operational Risk
(a) Forex Risk
Forex risk arises due to fluctuations in foreign exchange rates affecting banks’ foreign currency assets
and liabilities.
Examples: - Loss due to adverse movement in USD-INR rates - Improper hedging of forex exposure
Forex risk is common in: - Export-import financing - Foreign currency loans - Treasury operations
1
(b) Bank Risk
Bank risk refers to risks arising from internal weaknesses of the bank, such as: - Poor internal controls -
Weak governance - Inadequate staff training - Inefficient systems
Such risks may lead to operational losses, regulatory penalties, and reputational damage.
(c) Country Risk
Country risk arises when a bank is exposed to borrowers or operations in a foreign country.
It includes risks due to: - Political instability - Economic crisis - Changes in government policy - Restrictions
on fund repatriation
Country risk can result in non-recovery of funds from overseas operations.
(d) Counterparty Risk
Counterparty risk is the risk that the other party in a financial transaction may fail to fulfill its
obligations.
Examples: - Failure of another bank in interbank transactions - Default by trading partner in derivatives or
forex contracts
This risk increases during financial stress periods.
(e) Interest Rate Risk
Interest rate risk arises due to adverse movements in interest rates affecting banks’ income and asset
values.
Examples: - Increase in interest rates reduces bond prices - Mismatch between interest-sensitive assets and
liabilities
Interest rate risk affects net interest margin (NIM) and profitability.
(f) Inadequate Insurance Risk
Inadequate insurance risk arises when the insurance cover is insufficient to cover potential losses.
Example: - A bank branch holds cash of Rs. 1 crore, but insurance cover is available only for Rs. 50 lakhs. -
In case of theft or fire, the bank suffers uncovered losses.
2
This highlights the importance of adequate insurance planning in banks.
4. Framework for Operational Risk Management
Banks follow a structured framework to manage operational risk effectively.
(a) Risk Identification and Assessment
• Identification of potential risk events
• Assessment of likelihood and impact
• Use of tools such as risk registers and loss data
(b) Control Environment
• Strong internal controls
• Segregation of duties
• Authorization and approval mechanisms
• Compliance with laws and RBI guidelines
A sound control environment reduces the probability of operational losses.
(c) Monitoring and Reporting
• Continuous monitoring of risk indicators
• Regular reporting to senior management
• Internal audit and compliance reviews
This ensures early detection of weaknesses.
(d) Measurement of Operational Risk
Banks measure operational risk using: - Historical loss data - Key Risk Indicators (KRIs) - Scenario analysis
Under Basel II, banks may use: - Basic Indicator Approach - Standardized Approach - Advanced
Measurement Approach
(e) Decision-Making
• Management takes corrective actions based on risk reports
• Decisions related to process improvement, technology upgrade, or outsourcing
Effective decision-making minimizes future losses.
3
(f) Incentivizing Behaviour
• Linking performance incentives with risk management
• Discouraging excessive risk-taking
• Promoting ethical behavior among employees
This creates a risk-aware culture within the bank.
(g) Policy Framework
• Formulation of operational risk management policy
• Clear roles and responsibilities
• Periodic review and updates
A well-defined policy ensures consistency and regulatory compliance.
5. Conclusion
Operational Risk Management is a critical function in modern banking. With increasing digitization and
complexity of banking operations, effective identification, control, and monitoring of operational risks is
essential to ensure stability, profitability, and customer confidence.
Important Exam Keywords
Operational Risk, Basel II, Internal Processes, Control Environment, Counterparty Risk, Country Risk, Forex
Risk, Interest Rate Risk, Insurance Risk, Risk Identification, Monitoring, KRIs