Module 5.1 Flashcards
(134 cards)
1
Q
need to be able to appreciate the risks in buying and selling securities to understand their own or their respective clients’ risk profile.
A
Brokers/ dealers
2
Q
in their exercise of their supervisory authority over brokers/ dealers, need to understand risks to get a big picture overview and perspective of the risk implications of business decisions taken.
A
associated persons
3
Q
in their duty of providing independent oversight and check over the business activities of brokers/ dealers, should be familiar with the risk consequences of their respective business activities.
A
Compliance
4
Q
in the course of the performance of their duty to buy and sell securities need to understand the risk of the securities they are selling and the suitability and appropriateness of these securities to be sold to their respective clients especially in their performance of the level of care they are expected to exercise for their clients.
A
salesman
5
Q
simple working definition of risk provided by ISO 31000
A
Effect of uncertainty on objectives
6
Q
the distance away from the predictable value or expected value.
A
risk
7
Q
most popular measures of risk
A
standard deviation or volatility
8
Q
statistical measure that measures the spread or deviation away from the average.
A
Standard deviation
The farther you are from the predictable variable (expected value or average), the higher the standard deviation or risk
9
Q
T or F. Risk is associated with certainty
A
F. Risk is uncertainty
10
Q
as the “state, even partial, of deficiency information related to, understanding or knowledge of an event, its consequence or likelihood”.
A
Uncertainty
11
Q
This uncertainty exists in two dimensions:
A
- Likelihood that the adverse event will happen
- Consequence or impact of the adverse event
12
Q
refers to the “chance of something happening”.
A
Likelihood
The higher the likelihood that the adverse event will happen, the higher the level of risk is
13
Q
Likelihood:
- Quality:
- Quantity:
A
- Quality: not possible to certainty
- Quantity: probability
14
Q
refers to the “outcome of a risk event”
A
Consequence
15
Q
Consequence:
- Quali:
- Quanti:
A
- Quali: minor to extreme
- Quanti: losses
16
Q
Risk = Consequence x Likelihood
Results framework
A
see page 9 module
17
Q
compensation for the time value of money and for credit risk the investor is taking on the borrower or issuer of the fixed income security.
A
Interest
18
Q
T or F. Investing in a short-term fixed income security is always riskier than investing in a long-term fixed income security.
A
F. not all the time. General rule is still the longer the tenor, the higher the risk
19
Q
three levels of risk that organizations face
A
Level 1: Known Risk
Level 2: Developing Risk
Level 3: Black Swan Risk
20
Q
are risks that an organization are aware of and can identify and plan for
A
Known risks
21
Q
are risks that an organization are aware of but the full extent and implications are not completely clear.
A
Developing risks
22
Q
are risks that are unforeseen and hard to predict or avoid. It is an popular term in risk management to describe low probability but significantly high impact risk events that could threaten the ability of the organization to continue or operate as a going concern.
A
Black swan risks
23
Q
T or F. black swans are high-impact, hard to predict but rare events; difficult to quantify probability and psychological biases of people as the role of uncertainty
A
T
24
Q
Black swan risks are risks that are:
A. High probability, low impact
B. Low probability, low impact
C. High probability, high impact
D. Low probability, high impact
A
D. Low probability, high impact
25
Risk can be broadly categorized into two different types:
- financial risk
- non-financial risk.
26
are risks that are associated with financing and investments. These risks are associated with transactions that have a direct financial impact.
Financial risks
27
Financial Risks
1. Market risk
2. Credit risk
3. Liquidity risk
4. Refinancing risk
28
To understand the nature and sources of financial risks, it will be helpful to look at the ___________ of a typical company.
balance sheet
29
Funds that come from sources with contractual obligations to repay
Liabilities
30
Funds that come from owners or sources with discretionary payments
Equity
31
is the risk that the investment will not be as profitable as the investor expected because of fluctuations in the market. It involves the risk that prices or rates will significantly change due to economic forces
Market risk
32
Market risk can be categorized into:
interest rate risk, foreign exchange risk, equity price risk and commodity price risk.
33
JG Summit, the investment holding firm of the family of tycoon John Gokongwei, incurred a net loss of PHP 694 million last year, a reversal of the PHP 8.61 billion net profit reported in 2007. The mark-to-market losses were brought about by the combined effects of the following factors: lower market value of its financial assets and fuel hedges volatility of global financial and commodity markets, and the lower value of the peso.
a. Market risk
b. Credit risk
c. Liquidity risk
d. Refinancing risk
a. Market risk
34
is the exposure of a company’s earnings and financial condition to fluctuation or adverse movements in interest rates.
Interest rate risk
35
As interest rates increase, their respective cost of borrowing also increases. This is also known as ______________.
cash flow interest rate risk
36
if bonds are purchased and market interest rates subsequently rise, the price of bonds that carry fixed interest rate will decline to entice future buyers of the bond as the fixed interest carried by the bond is now lower compared to market interest rates. This is also known as _____________________.
fair value interest rate risk
37
is the exposure of a company’s earnings and financial condition to movements in exchange rate.
Foreign exchange risk
38
A company with ownership of overseas subsidiaries also faces _____________ from changes in the reported domestic accounting results of foreign operations due to changes in foreign exchange rates.
revaluation risk
39
The Philippine Peso is among Asia’s worst performers in 2018. San Miguel Corp, SM Investments Corp and Ayala Corp are some of the leading groups with dollar-denominated obligations who need to refinance or repay in the next five years. The most at risk from the peso slump are construction and transportation companies, whose revenues are in Peso but they make large investments in dollars.
a. interest rate risk
b. foreign exchange risk
c. equity price risk
d. commodity price risk.
b. foreign exchange risk
40
is the exposure of a company’s earnings and financial conditions to adverse movements in equity prices. It is the risk that arises from security price volatility.
Equity price risk
41
is the exposure of a company’s earnings and financial condition to fluctuations in commodity prices.
Commodity price risk
42
Commodity price risk exposure usually arises from _____________________ or __________________.
commodity price-linked revenues; commodity price-linked expenses
43
is the risk that the borrower will fail to meet its obligations as they come due. This is largely dependent on the ability and willingness of the borrower to pay their obligations as they come due.
Credit risk
44
Credit risk can be understood in two main dimensions:
a. Probability of default
b. Loss given default
45
likelihood that the borrower will not be able to repay their obligations as it comes due. It is dependent on the characteristics of the borrower or counterparty. The higher the probability of default,
the higher the credit risk of the borrower.
Probability of default.
46
the amount of loss that will be incurred if the borrower defaults. It can be measured as 100% minus the recovery rate, which is the amount that a creditor can claim from the borrower or counterparty in the event of default.
Loss given default.
47
Credit ratings of five Philippine banks are in danger after they were exposed to the biggest default in Philippine corporate history as it could mean higher credit costs and reduction in profit according to Moody’s.
a. interest rate risk
b. foreign exchange risk
c. credit risk
d. commodity price risk.
c. credit risk
48
is the risk arising from the inability of the company to pay its obligation as they come due. describes the ability of the company to convert its assets to cash to meet short-term obligations
Liquidity risk
49
Liquidity risk arises from two factors:
a. Inability to sell or liquidate assets to meet obligations
b. Inability to obtain adequate funding through new borrowings
50
is the inability of the company to replace existing funding to repay existing maturing obligations.
Refinancing risk
51
Hanjin Philippines - the biggest investor in the Subic Bay Freeport Zone filed for bankruptcy on 8 Jan 2019. The company has become financially distressed due to its heavy debt. With revenues falling behind, it cannot support its operations anymore under the burden of heavy debt.
a. interest rate risk
b. liquidity risk
c. credit risk
d. commodity price risk
b. liquidity risk
52
are risks that do not have a direct financial impact
Non-financial risks
53
Examples of non-financial risks are:
1. Operational risk
2. Legal and Compliance risk
3. Strategic risk
4. Reputational risk
54
is the risk of loss resulting from inadequate or failed internal processes, people and systems or from external events.
Operational risk
55
Causes of operational risk
1. People risk
2. Process risk
3. Systems risk
4. External events risk
56
is the risk that people do not follow the organization’s procedures, practices and/or rules. It is the risk that people deviate from expected behaviors.
People risk
57
There are two types of people risks:
- Non-deliberate deviations:
- Deliberate deviations:
58
these are deviations from expected behaviors or set of rules that are not intended
Non-deliberate deviations:
59
these are deviations from expected behaviors or set of rules intended to result in personal or financial gain
Deliberate deviations:
60
The bank has been hit by internal fraud that a senior official perpetrated causing it to lose at least PHP 900 million. The senior official funnelled disbursed loans into fictitious accounts created in the name of a legitimate client. The funds in the fake account, controlled by the rogue officer, were then siphoned off electronically to other accounts in other financial institutions and into the pockets of the suspect.
a. Operational risk
b. Legal and Compliance risk
c. Strategic risk
d. Reputational risk
a. Operational risk
61
is the risk arising from a faulty overall design and application of business processes.
Process risk
62
There are three types of process risks:
a. Model risk
b. Transaction risk
c. Operational control risk
63
This is the risk of incurring consequences, including financial losses, as a result of making decisions based on models that are incorrect or misused.
Model risk.
64
This is the risk that occurs due to failure in execution of transactions.
Transaction risk.
65
This risk arises from the failure of established controls to work as intended
Operational control risk
66
is the risk of failure arising from deficiencies in a company’s infrastructure and information technology systems. Risks associated with information technology systems are identified with deficiency or inadequacy in software quality, IT security, interruption of day-to-day operations and outsourcing.
Systems risk
67
is the risk associated with events outside the company’s control.
External events risk
68
Operational Risk Events
a. Internal Fraud
b. External Fraud
c. Employment Practices and Worker Safety
d. Clients, Products and Business Practices
e. Damage to physical assets
f. Business disruption and system failures
g. Execution, delivery and process management
69
is an operational risk event that arises due to acts intended to defraud, misappropriate property or circumvent regulations, the law or company policy, excluding diversity/ discrimination events, which involves at least one internal part
Internal fraud
70
is an operational risk event that arises due to acts intended to defraud, misappropriate property or circumvent the law, which involves a third party
External fraud
71
Operational risk events that arise from human resource related policies, such as employment practices and workplace safety
Employment Practices and Worker Safety
72
These arise from intentional or negligent failure to meet a professional obligation to specific clients (including fiduciary and suitability requirements), or from the nature or design of a product
Clients, Products and BusinessPractices
73
These arise from due to natural disasters or other events.
Damage to physical assuming
74
These arise from the disruption of business or system failures
Business disruption and system failures
75
These arise from failures in transactionprocessing, process management and relations with trade counterparties and vendors
Execution, delivery and process management
76
is the possibility that lawsuits, adverse judgments or faulty contracts can disrupt or adversely affect the operations or conditions of the organization. It can also refer to the exposure to fines, penalties or punitive damages resulting from the supervisory actions as well as private settlements.
Legal risk
77
is the risk of legal or regulatory sanctions, material financial loss, or loss to reputation that an organization may suffer as a result of its failure to comply with laws, regulations, rules, related self-regulatory organizational standards, code of conduct applicable to its activities and internet policies.
Compliance risk
78
A Philippine Regulatory Agency penalized millions of pesos on two (2) ride-hailing companies for violating the Agency’s order to keep operations separate until the merger of both was approved.
a. Strategic Risk
b. Legal and Compliance Risk
c. Reputational Risk
d. People Risk
b. Legal and Compliance Risk
79
is the risk of loss in earnings, capital or reputation arising from changes in the business environment, adverse strategic decisions, and improper implementation of decisions or lack of responsiveness to an industry, political, economic or technological changes.
Strategic risk
80
T or F. Strategic risk arises from failure to properly formulate or implement strategies leading to significant damage to an organization’s financial position, reputation, competitiveness or business development prospects.
T
81
is the risk that may arise from negative publicity regarding an institution’s business practices.
Reputational risk
82
Risk management is defined by ISO 31000 as:
“Coordinated activities to direct and control an organization with regard to risk”
83
Risk management is everyone’s responsibility. As one saying goes:
“everyone in an organization is a risk manager”.
84
This model aims to remind everyone that each department or unit has a role to play in risk management
three lines of defense models
85
three lines of defense model
First Line: Business Lines/ Operation
Second Line: Risk Management and Compliance
Third Line: Internal Audit
86
It has the primary ownership, responsibility and accountability of risk. They originate risk for the organization and are therefore, in the best position to manage risk.
The first line of defense is the business unit.
87
They are expected to exercise oversight and control on the first line of defense. They are also responsible for developing and implementing the risk management framework.
The second line of defense is risk management and compliance.
88
which reviews the effectiveness of internal control and risk management practices of both the first and second line of defense.
The third line of defense is internal audit
89
Risk management can be viewed as a set of activities that includes:
1. Communication and consultation
2. Establishing the context
3. Identifying risk
4. Analyzing risk
5. Evaluating risk
6. Treating risk
7. Monitoring and reviewing risk
90
the objective of risk management is not to avoid risk. Instead, the objective of risk management is to ___________________.
direct and control risk
91
aims to make risks more manageable and acceptable in line with the capacity of the individual or the organization
Risk management
92
What are the objectives of risk management?
1. Increase the likelihood of achieving business objectives
2. Encourage proactive management of risks
3. Compliance with laws and regulations
4. Efficient allocation of resources
5. Enhance competitive advantage
93
Risk management aims to increase the likelihood of the organization reaching its business objectives by designing and executing strategies that will manage risks.
Increase the likelihood of achieving business objectives
94
The lack of formal process to manage risk makes the organization vulnerable to unwanted risk exposure and weakens the ability of the organization to respond to risks.
Encourage proactive management of risks
95
Failure to comply with laws and regulations is an important risk exposure that would ordinarily be captured in the organization’s risk management practices. Thus, having a strong risk management framework and process reduces the likelihood or instances of violation of laws and regulations.
Compliance with laws and regulations
96
A way to do this is to embed risk management considerations in performance measurements. How an organization rewards or allocates capital says a lot about the values of the organization more than the official value statement or organizational credo.
Efficient allocation of resources
97
Risk management is increasingly being seen as a source of significant competitive advantage. History has shown that organizations that withstood unforeseen crises are organizations with strong and sound risk management.
Enhance competitive advantage
98
is a structured process of identifying, analyzing, evaluating, mitigating and monitoring risk.
risk management process
99
Risk Management Process
1. Identification
2. Analysis
3. Evaluation
4. Mitigation
5. Monitoring and Review
100
is the process of finding, recognizing and describing risks.
Risk identification
101
Risk Identification
1. Risk source
2. Risk event and cause
3. Consequences
102
an element which alone or in combination has the intrinsic potential to give rise to risk
Risk source
103
is an occurrence or change of a particular set of circumstances. The event can be one or more occurrences, and can have several causes.
Risk event
104
is the outcome of an event affecting objectives. The event can lead to a range of consequences, which can be certain or uncertain and can have positive or negative impact on the objectives.
Risk consequence
105
is the process of understanding the nature of risk and determining the level of the risk
Risk analysis
106
Risk analysis involves the consideration of:
1. Causes and sources of risk
2. Positive and negative consequences of risk
3. Likelihood that the risk event happens
4. Factors that can affect the consequences and likelihood
107
When quantifying risk, three factors are typically analyzed and quantified in detail:
1. Likelihood
2. Consequence
3. Exposure
108
This is the chance that the risk event happens.
Likelihood
109
This is the potential gain or loss if the risk event happens.
Consequence
110
This is the total amount of potential loss or gain at the time the risk event occurs disregarding potential recoveries from collateral or other securities.
Exposure
111
is a Latin word for “after the fact”. Involves collection of data on historical losses
Ex-post Analysis
112
is a Latin phrase that means “before the event”. involves the use of flexible methodologies to think about hypothetical events.
Ex-ante Analysis
113
“a story that describes a possible future. It identifies some significant events, the main actors and their motivations and it conveys how the world functions”.
Scenario
114
involves identification of key risks on the organization’s business and adopts a forward looking view on these risks.
scenario analysis
115
Scenario analysis involves the following process:
1. Generate Scenarios
2. Impact Assessment
3. Implementing
116
In generating scenarios, there are generally three approaches:
In generating scenarios, there are generally three approaches:
● Bottom-up
● Top-down
● Consensus workshop
117
is the process of comparing the results of risk analysis with predetermined risk criteria to determine whether risk and/or its magnitude are acceptable or tolerable.
Risk evaluation
118
risk criteria are based on an organization’s ___________________.
risk appetite and tolerance
119
is the aggregate level and types of risk an organization is willing to assume within its risk capacity to achieve its strategic objectives and business plan.
Risk appetite
120
refers to the level of risk an organization can bear after the application of risk treatment mitigation strategies.
Risk tolerance,
121
involves selecting one or more options for modifying risks and implementing those options.
Risk treatment
122
Risk Treatment Options
1. Avoid risk
2. Take or increase risk
3. Transfer Risk
4. Change likelihood
5. Change consequence
6. Share the risk
123
deciding not to pursue or continue with the activity that generates risk.
Avoid Risk
124
This option is only taken if the company is confidence that it has the ability, expertise and willingness to tolerate and manage the residual risk arising from the business opportunity that generates the specific risk.
Take or Increase Risk
125
is a strategy that involves the contractual shifting of risk from one party to another.
Risk transfer
126
to reduce the chance or likelihood of a risk event from happening. This can be done through investments in preventive control to keep risk events from occurring.
Change likelihood
127
The purpose of the adoption of the Risk Based Capital Adequacy (RBCA) Rules of the SEC is to ______________________.
protect the firms, investors, and its clients
128
refers to the requirement to maintain sufficient liquid assets to cover the total risk exposure of the company.9 It is an approach to treat risk from the likelihood of happening as it ensures that companies have enough capital to cover its exposure to risks and that they are liquid enough to promptly settle obligations to clients.
RBCA
129
refers to a risk treatment strategy where the consequence of risk is modified. Note that the difference between this and the other risk treatment is that this treatment applies only after the risk occurs
Change consequence
130
There are many ways to change consequence such as:
● Changing the amount of loss if a risk event happen
● Changing the party who will bear the consequence of risk
131
is a risk treatment option where the consequence of risk is distributed among several participants.
Risk sharing
132
is the process of checking, supervising, critically observing or determining the status of the risk in order to enable change from the required or expected performance level.
Risk monitoring
133
is the process of determining the suitability, adequacy and effectiveness of the risk management process.
Risk review
134
is an important part of the risk monitoring and reviewing process. It involves documenting and communicating the results of the organization’s risk assessment and treatment measures to both internal and external stakeholders.
Risk reporting
