Operational Risk Management: Principles,
Practice and Preparedness Among Indian Banks
- Study Guide
1. Introduction
Operational risk includes losses caused by failed processes, people, systems or
external events. Basel includes legal risk but excludes strategic and reputational risk.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
2. Need for Operational Risk Management
Growth in cyberattacks, fraud, technology failures and regulatory penalties has made
operational risk a major concern.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
3. Basel Framework
Evolution from Basel II to Basel III and the Standardised Approach for operational risk
capital.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
4. Governance
Role of the Board, Risk Management Committee and Operational Risk Committee.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
5. Risk Culture
Importance of ethics, training, accountability and leadership.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
6. Operational Risk Management Framework
Key components including governance, policies, reporting and measurement.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
7. Three Lines of Defence
Business units, independent risk management and internal audit.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
8. Risk Appetite
Board-approved risk appetite and tolerance statements.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
9. Risk Identification
Internal loss data, external events, process mapping and assessments.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
10. RCSA and KRIs
Risk and Control Self-Assessment and Key Risk Indicators.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
11. Scenario Analysis
Stress testing, scenario workshops and resilience testing.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
12. Monitoring and Reporting
Reporting to senior management and the board.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
13. Controls
Internal controls, segregation of duties, outsourcing and insurance.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
14. ICT & Business Continuity
Technology governance, cyber risk and business continuity planning.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
15. Disclosure
Pillar III disclosures and supervisory review.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
16. Findings
Indian banks widely implement ORMF and RCSA but have weaker disclosure on
external loss data and scenario analysis.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
17. Best Practices
Governance, culture, technology, continuous monitoring and training.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
18. Revision Summary
Key definitions, Basel principles and examination notes.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.
Explain concepts with examples, compare regulatory expectations with industry
practice, and emphasise how operational risk is identified, assessed, monitored,
controlled and reported. Discuss governance responsibilities, risk culture, internal
controls, business continuity, ICT resilience, scenario analysis, RCSA, KRIs, loss
databases and disclosure practices in simple language.