Importance of Data Quality in Risk Management
The overall risk management of a firm is largely based on statistical measures. This is because most of the models used for managing and mitigating risks are based on advanced statistics. These statistical models are based on gathering large volumes of complex data, rigorously processing it via running complex statistical operations, and using the resultant […]
Importance of Team Building in Corporates
Employees are the assets of every organization and its success is directly proportional to the hard work every employee puts in. Individuals must work in a little different and smarter way than the others and always feel motivated to give their best. Effort by a single team member goes unnoticed and every team member should […]
Types of Team Members in a High Performance Team
Types of Team Members in a High-Performance Team The key to the success of the High-Performance Teams is determined by the composition of the members of the team. The team members represent diverse functional, cultural and social backgrounds, who collaborate to achieve specific goals under pre-defined deadlines and resource limitations. The team members can be […]
Crisis Management – Meaning, Need and its Features
What is Crisis ? A sudden and unexpected event leading to major unrest amongst the individuals at the workplace is called as organization crisis. In other words, crisis is defined as any emergency situation which disturbs the employees as well as leads to instability in the organization. Crisis affects an individual, group, organization or society […]
Basel Approaches in Operational Risk Management
The Bank of International Settlements (BIS) has created the Basel norms so that the operational risk measurement and mitigation are standardized across all financial institutions. However, the approach suggested by BIS has not been constant. Over the years, it has been evolving to become more complex and sophisticated. Over the course of time, three approaches […]
The Basel guidelines are the gold standard when it comes to identifying and managing operational risks. This is the reason why every organization tries to align its risk management practices with those recommended by the Bank of International Settlements. The guidelines provided are quite exhaustive.
The Bank of International Settlements has recommended that every operational risk can be classified into one of the seven categories.
In this article, we will have a closer look at those seven categories as well as how this categorization helps in better risk management.
For instance, an internal party may intentionally want to misappropriate property owned by the company. In other cases, they can simply be taking more risks by trying to circumvent the systems which have been built.
Instead, they may intend to defraud the company by swindling money from them or by getting the company to break the law. In such cases, there are no internal parties involved in the fraudulent activity.
The company may not have condoned the behavior of its erring employee. However, it will be held responsible and may have to pay monetary damages.
Companies may also have operational risks arising from non-compliance with policies regarding the health and safety of workers.
As a result, they may have to pay damages to the injured or otherwise aggrieved personnel.
For instance, consulting companies like Arthur Andersen were penalized for fraud when their employees were found to be in cahoots with the perpetrators of the Enron fraud.
Similarly, a company may have to face operational risk because of non-compliance with its duties towards the client.
Investment banks have been penalized for wrongfully advising their clients to buy certain securities when they were themselves in the process of selling out those securities.
Companies manufacturing products may also face lawsuits if they sell defective products which do not work as intended.
However, these assets may get destroyed in riots, terrorist attacks, or even acts of God.
Since building these assets requires a significant capital outlay, the losses may also be significant. This is the reason why effective operational risk management is necessary in such cases.
It is important to note that physical information technology assets such as servers and computers are also included in this category even though there is a separate category for physical assets.
If a company faces any outage or data theft that arises because of the improper functioning of its business systems, it could face severe losses. These losses could be related to lost business revenue. However, they could also be related to lawsuits that may arise because of the data which has been compromised.
For instance, a company may be under obligation to manufacture and deliver a certain quantity of goods.
However, it may not be able to follow through on its promise because of the inability to procure raw material because of a labor strike.
Alternatively, it may have wrongly estimated the time required to complete the task and may have overcommitted. This too can lead to losses in the form of fines, penalties, demurrages, and lost reputation. It is for this reason that these scenarios should also be included in the list of operational risks and attempts should be made to avoid them or mitigate them if they do arise.
This framework is extremely useful for companies trying to identify their operational risks. Since all risks can be classified in these seven buckets, they serve as the topic for brainstorming.
Also, this makes the risk identification process standardized across companies.
Your email address will not be published. Required fields are marked *
