Operational Risk Management, 2nd Edition

CHAPTER 13Reporting

In this chapter, we investigate reporting tools that empower the operational risk function with the opportunity to contribute to the business decision making at the firm. We consider loss data reporting in some depth and also discuss reporting on the other elements in the framework, including risk and control self-assessment, key risk indicators, and scenario analysis. Examples of fictional data are used to demonstrate how risk analysis can be applied to raw data in order to provide relevant reporting conclusions that can drive business decision making.

ROLE OF REPORTING

An operational risk framework is designed to identify, assess, monitor, control, and mitigate operational risk. All of the elements of the framework contribute to these goals, but without effective reporting even the best of programs will be ineffective in changing the risk culture of the firm. The place of reporting in the operational risk framework is illustrated in Figure 13.1.

The reporting of operational risk is key to the program's success. There are many ways to ensure that the reporting of each element drives action and to protect against the danger of producing reporting that receives a “so what?” response.

Generally, an operational risk department will be looking to report on several things, including:

• Operational risk event (loss) data for the previous period
• Remediation action being taken
• Key risk indicators (KRIs)

  FIGURE 13.1 The Role of Reporting in the Operational Risk ...