Risk Management

1️⃣ What is Risk Management?

  • Definition:
    Risk Management = Identifying, assessing, and controlling risks that may affect achievement of an organisation’s objectives.
  • Objective:
    Minimise losses
    Maximise opportunities / returns

Risk Management = Think in advance + Prepare + Control


2️⃣ Types of Risks in Banking & Finance

2.1 Credit Risk

  • Meaning:
    Risk of loss if borrower fails to repay loan or meet contractual obligations.
  • Examples (Banking):
    • Loan default
    • EMI not paid
    • NPA formation
  • Mitigation:
    • Credit appraisal (CIBIL, income, financials)
    • Collateral / security
    • Diversification of loan portfolio

2.2 Market Risk

  • Meaning:
    Risk of loss due to changes in market prices, such as:
    • Interest rates
    • Foreign exchange rates
    • Equity / commodity prices
  • Examples (Banking):
    • Fall in bond price when interest rates rise
    • Loss in forex position due to INR depreciation
  • Mitigation:
    • Hedging using derivatives
    • Asset allocation
    • Diversification

🔹 Hedging – Very Important Concept

Hedging = Protection / Insurance against price movement risk.

Common Hedging Strategies:

  • Diversification
    ➡ Spread investments across assets / sectors
    ➡ Example: Invest in IT + Pharma + FMCG instead of only IT.
  • Using Derivatives:
    1. Futures Contracts
      • Agreement to buy/sell in future at fixed price
      • Example: Airline locks fuel price using oil futures.
    2. Options Contracts
      • Right (not obligation) to buy/sell at specific price.
      • Call Option – Right to buy
      • Put Option – Right to sell
      • Example: Investor buys put option to protect against fall in stock price.
    3. Forwards
      • Customised future contract (OTC, not exchange-traded).
      • Example: Bank and exporter fix USD-INR rate for future date.
    4. Swaps
      • Exchange of cash flows
      • Example: Interest Rate Swap – fixed rate ↔ floating rate.

Mnemonic – Derivatives Types:

FOPS = Futures, Options, Forwards, Swaps


2.3 Operational Risk

  • Meaning:
    Risk of loss from failed internal processes, people, systems, or external events.
  • Examples:
    • System failure
    • Fraud by staff
    • Wrong posting of entries
    • Cyber-attack
  • Mitigation:
    • ✔ Strong internal controls
    • Segregation of duties (maker–checker)
    • IT security, backups
    • Employee training, SOPs

2.4 Liquidity Risk

  • Meaning:
    Risk that bank/organisation cannot meet short-term obligations because it can’t convert assets into cash quickly.
  • Examples (Banking):
    • Bank has long-term loans but must repay short-term deposits.
    • Sudden deposit withdrawal.
  • Mitigation:
    • ✔ Maintain adequate liquid assets (CRR, SLR, HQLA)
    • Gap analysis, Liquidity Coverage Ratio (LCR)
    • Contingency funding plan

2.5 Interest Rate Risk

  • Meaning:
    Risk of loss due to interest rate changes impacting assets/liabilities.
  • Examples:
    • Bank holding fixed-rate bonds loses when market interest rate increases.
    • Mismatch between rate-sensitive loans and deposits.
  • Mitigation:
    • ✔ Interest rate swaps, futures, options
    • Duration management
    • Asset-Liability Management (ALM)

2.6 Foreign Exchange (Forex) Risk

  • Meaning:
    Risk of loss due to movement in exchange rates.
  • Examples:
    • Importer must pay USD; if USD/INR rises, cost increases.
    • Bank holding USD assets loses when USD falls.
  • Mitigation:
    • Currency hedging (forwards, options, swaps)
    • Matching assets & liabilities in same currency
    • ✔ Diversification in currency exposure

2.7 Reputational Risk

  • Meaning:
    Risk of damage to organisation’s image, leading to loss of customers / investors.
  • Causes:
    • AML / fraud incidents
    • Mis-selling
    • Poor customer service
  • Mitigation:
    • ✔ Ethical practices
    • ✔ Transparent communication
    • ✔ Quick and effective crisis management

3️⃣ Risk Management Framework – Step by Step

3.1 Risk Identification

  • Meaning: Find all possible risks.
  • Methods:
    ✔ Brainstorming
    ✔ Risk workshops
    ✔ Internal audits
    ✔ Study past incidents / loss data

3.2 Risk Assessment

Assess = How likely + How big?

(A) Risk Matrix

  • Two Axis Tool:
    • Likelihood (Low / Medium / High)
    • Impact (Low / Medium / High)
  • Risks plotted as:
    • Green – Low risk
    • ⚠️ Yellow – Medium risk
    • 🔴 Red – High risk
  • Example: Cyber-attack with high likelihood + high impact → Red zone.

(B) Scenario Analysis

  • “What if” technique
  • Steps:
    1. Choose a risk (e.g. economic slowdown)
    2. Build scenarios (10% drop, 20% drop in sales)
    3. Check impact on profit, capital, liquidity
  • Widely used for stress testing in banks.

(C) Qualitative vs Quantitative

TypeBasisExample
QualitativeNon-numeric, judgement-based“High / Medium / Low” risk rating
QuantitativeNumbers, probability, valueExpected loss = Probability × Impact

Example (Quantitative):

  • 20% chance of loss of ₹10 lakhExpected loss = ₹2 lakh

3.3 Risk Control (Treatment)

Main strategies: Avoid, Reduce, Transfer, Accept

StrategyMeaningExample
AvoidChange plan to avoid riskBank avoids lending to banned sectors
MitigateReduce probability/impactExtra security checks in Internet banking
TransferShift risk to othersInsurance, outsourcing, hedging
AcceptBear minor riskSmall FX variation tolerated

Mnemonic – ARTA:

Avoid, Reduce, Transfer, Accept


3.4 Risk Monitoring

  • Continuous tracking of:
    • KRIs (Key Risk Indicators)
    • Loss events
    • Policy breaches
  • Tools:
    ✔ Dashboards
    ✔ Regular risk reports
    ✔ Internal audits

Examples of KRIs (Banking):

  • NPA Ratio
  • Loan default rate
  • Capital Adequacy Ratio (CAR)
  • Number of fraud cases

3.5 Risk Reporting

  • Purpose: Inform management / Board / regulators.
  • Format:
    • MIS reports
    • Dashboard charts
    • ALCO reports (for ALM)
    • Regulatory reports to RBI / SEBI etc.

4️⃣ Risk Management Tools

4.1 Risk Matrix

➡ Already covered – used for prioritisation of risks.


4.2 Scenario Analysis & Stress Testing

  • Scenario Analysis → normal + extreme conditions
  • Stress Testingextreme but plausible shocks
    • Example:
      • 3% increase in interest rate
      • 30% fall in stock market
      • Large deposit withdrawal

Basel norms require regular stress tests for banks.


4.3 Hedging (Recap)

  • Hedging = Insurance for Market / FX / Interest Rate Risk.
  • Tools: Futures, Options, Forwards, Swaps, Diversification

4.4 Risk Register

  • Definition:
    A live document recording all major risks and how they are being handled.
  • Typical Columns:
    • Risk ID
    • Risk Description
    • Category (credit/market/operational…)
    • Likelihood (H/M/L)
    • Impact (H/M/L)
    • Risk Score (= L × I)
    • Risk Owner
    • Mitigation Plan
    • Status (Active / Closed / Monitoring)

4.5 Treasury Risk Measures (Bank Treasury)

  1. Value at Risk (VaR)
    • Meaning: Maximum possible loss in a portfolio over a period, at a given confidence level.
    • Example: VaR = ₹1 crore at 99% for 1 day → loss will not exceed ₹1 crore on 99% of days.
  2. Duration & Duration Gap
    • Duration: Sensitivity of bond price to interest rate change.
    • Duration Gap: Duration of Assets – Duration of Liabilities
    • Used for interest rate risk in banking book.

5️⃣ Risk Management in Banks & Treasury

5.1 Basel Accords (I, II, III) – Overview

  • Global regulatory framework for banks’ risk management.
  • Key focus areas:
    • Capital Adequacy (protects against credit, market, operational risk)
    • Stress Testing
    • Risk Disclosure & Governance
  • Basel III:
    • Higher quantity and quality of capital (CET1)
    • Capital buffers
    • Liquidity standards:
      • LCR – Liquidity Coverage Ratio
      • NSFR – Net Stable Funding Ratio

5.2 Treasury Risks

  • Market Risk:
    • Price / yield change in G-Secs, corporate bonds, forex.
  • Credit Risk:
    • Counterparty fails in inter-bank / derivative deals.
  • Liquidity Risk:
    • Mismatch between short-term borrowing and long-term investments.
  • Interest Rate Risk:
    • Mismatch in rate-sensitive assets & liabilities.

Internal Controls in Treasury:

  • ✔ Limits on deal size, open position
  • Stop-loss limits
  • ✔ Separation of Front Office (deals), Mid Office (risk), Back Office (settlement)

5.3 Asset-Liability Management (ALM) & ALCO

  • ALM:
    Managing liquidity and interest rate risk by matching assets and liabilities.
  • ALCO (Asset-Liability Committee):
    • Senior-level committee in bank
    • Decides interest rate policy, liquidity strategy, maturity profile
    • Works closely with Treasury.

6️⃣ Key Terms

  • Risk Appetite:
    Level of risk organisation is willing to accept.
  • Risk Tolerance:
    Acceptable variation from expected risk level.
  • Risk Exposure:
    Extent to which entity is vulnerable to a risk.
  • Residual Risk:
    Risk remaining after applying controls/mitigation.

🔥 Most Important

  1. Definition:
    Risk = possibility of loss; Risk Management = identify + assess + control.
  2. Main Types (Banking):
    Credit, Market, Operational, Liquidity, Interest Rate, Forex, Reputational
  3. 3 Stages in Risk Process:
    Identify → Assess → Control → (Monitor & Report)
  4. Risk Treatment Mnemonic – ARTA:
    Avoid, Reduce, Transfer, Accept
  5. Risk Matrix = Likelihood vs Impact
  6. Qualitative vs Quantitative Risk Assessment
  7. VaR – potential portfolio loss at given confidence level & time.
  8. Duration Gap used for interest rate risk.
  9. Basel III = capital adequacy + liquidity + stress testing.
  10. ALM & ALCO – key for liquidity & interest rate risk management in banks.
  11. KRIs – early warning signals like NPA ratio, CAR, default rate.
  12. Hedging tools: Futures, Options, Forwards, Swaps (FOPS).

📊 Visual Summary

AreaKey PointExample / Tool
DefinitionRM = Identify + Assess + Control riskBank credit policy
Credit RiskBorrower defaultNPA formation
Market RiskPrice/Rate changesBond price fall
Operational RiskProcess/System failureFraud / system crash
Liquidity RiskCannot meet obligationsDeposit run
Interest Rate RiskRate change impactFixed bond loss
Forex RiskFX rate movementUSD/INR volatility
ToolsRisk Matrix, Scenario, VaR, Duration, Risk Register
MitigationARTA – Avoid, Reduce, Transfer, AcceptInsurance, Hedging
Basel IIICapital + Liquidity + Stress TestLCR, NSFR
ALM / ALCOManage liquidity & rate riskGap analysis
Treasury ControlsLimits, stop-loss, segregationFront/Mid/Back Office

⏳ 2-Minute Quick Revision Sheet

✅ Core Concepts

  • Risk: Chance of loss or adverse outcome.
  • Risk Management: Identify ➡ Assess ➡ Control ➡ Monitor ➡ Report. (ACMR)

✅ Main Risk Types (Banking)

  • Credit Risk – borrower default → NPA
  • Market Risk – price, interest rate, FX movements
  • Operational Risk – people, process, system failures
  • Liquidity Risk – can’t meet short-term obligations
  • Interest Rate Risk – mismatch in rate-sensitive items
  • Forex Risk – currency movement
  • Reputational Risk – loss of trust

Mnemonic:

C-MO-LIR-FR = Credit, Market, Operational, Liquidity, Interest Rate, Forex, Reputational


✅ Risk Management Steps

  1. Risk Identification – list risks
  2. Risk Assessment – Likelihood + Impact (Risk Matrix)
  3. Risk ControlARTA: Avoid, Reduce, Transfer, Accept
  4. Risk Monitoring – KRIs, dashboards
  5. Risk Reporting – MIS to management / regulators

✅ Assessment Tools

  • Risk Matrix: Likelihood vs Impact → Green / Yellow / Red
  • Scenario Analysis: Best / Worst / Most-likely
  • Quantitative: Expected loss = Probability × Impact
  • VaR: Max loss with given confidence
  • Duration Gap: Interest rate sensitivity of assets vs liabilities
  • Risk Register: Table of all major risks & actions

✅ Banking & Treasury Focus

  • Basel III: Capital, liquidity (LCR/NSFR), stress testing.
  • ALM: Manage liquidity + interest rate risk.
  • ALCO: Committee for ALM & pricing.
  • Treasury Risks: Market, credit, liquidity, interest rate.
  • Controls: Limits, stop-loss, segregation of duties.

✅ One-Line Memory Hooks

  • RM Formula: Think Risk → Measure Risk → Control Risk
  • Hedging Tools: FOPS – Futures, Options, Forwards, Swaps
  • Treatment: ARTA – Avoid, Reduce, Transfer, Accept
  • VaR: How much can I lose at worst (with X% confidence)?

Risk Management – MCQ

What is the primary objective of risk management?
A. To eliminate all risks
B. To minimize potential losses and maximize opportunities
C. To avoid regulatory compliance
D. To maximize revenue

Answer: B. To minimize potential losses and maximize opportunities

Which of the following is a type of financial risk?
A. Credit Risk
B. Operational Risk
C. Market Risk
D. All of the above

Answer: D

What is ‘credit risk’?
A. Risk of loss due to fluctuations in market prices
B. Risk that a borrower will default on a loan
C. Risk of loss from operational failure
D. Risk of insufficient liquidity

Answer: B. Risk that a borrower will default on a loan

Which of the following is associated with ‘market risk’?
A. Changes in stock prices
B. The failure of internal processes
C. Inability to pay short-term liabilities
D. Poor management decisions

Answer: A. Changes in stock prices


What is the first step in the risk management process?
A. Risk reporting
B. Risk control
C. Risk identification
D. Risk monitoring

Answer: C. Risk identification

Which technique is used to assess the potential impact and likelihood of a risk?
A. Stress Testing
B. Scenario Analysis
C. Risk Matrix
D. Value at Risk (VaR)

Answer: C. Risk Matrix

What is ‘risk control’?
A. Identifying risks in the organization
B. Developing strategies to mitigate identified risks
C. Monitoring ongoing risks
D. Reporting risks to management

Answer: B. Developing strategies to mitigate identified risks

What does ‘operational risk’ refer to?
A. Risk of market price fluctuations
B. Risk due to failures in internal processes or systems
C. Risk of not meeting liquidity requirements
D. Risk from incorrect financial reporting

Answer: B. Risk due to failures in internal processes or systems

Which type of risk arises from the changes in interest rates?
A. Credit Risk
B. Operational Risk
C. Liquidity Risk
D. Interest Rate Risk

Answer: D. Interest Rate Risk

Liquidity risk occurs when an organization:
A. Cannot meet its short-term financial obligations
B. Faces fluctuations in interest rates
C. Has insufficient credit to lend
D. Experiences credit default by customers

Answer: A. Cannot meet its short-term financial obligations


What is ‘Value at Risk’ (VaR)?
A. A measure of potential loss in a portfolio over a set period
B. A measure of operational failures in a company
C. A method of diversifying investments to reduce risks
D. A report on customer creditworthiness

Answer: A. A measure of potential loss in a portfolio over a set period

Which of the following is used to manage interest rate risk?
A. Currency swaps
B. Derivatives like swaps, options, and futures
C. Market segmentation
D. Internal controls

Answer: B. Derivatives like swaps, options, and futures

What is the purpose of hedging in risk management?
A. To eliminate all types of risks
B. To offset potential losses from other investments or exposures
C. To increase market exposure
D. To maximize operational efficiency

Answer: B. To offset potential losses from other investments or exposures

What does ‘stress testing’ involve in risk management?
A. Monitoring liquidity positions
B. Assessing the impact of extreme but plausible risk events on the organization
C. Diversifying assets to reduce risk exposure
D. Managing daily cash flows

Answer: B. Assessing the impact of extreme but plausible risk events on the organization


Which of the following is a global standard for risk management in banks?
A. Basel III
B. IFRS
C. SLR
D. RBI Guidelines

Answer: A. Basel III

What is the main objective of the Basel III regulations?
A. To reduce the number of financial institutions
B. To ensure financial institutions hold adequate capital to absorb shocks
C. To increase profit margins for banks
D. To minimize government intervention in banking

Answer: B. To ensure financial institutions hold adequate capital to absorb shocks

What is ‘Capital Adequacy Ratio’ (CAR)?
A. The ratio of a bank’s total assets to its liabilities
B. The percentage of capital a bank holds against its risk-weighted assets
C. The ratio of customer deposits to the total loan portfolio
D. The percentage of funds invested in government securities

Answer: B. The percentage of capital a bank holds against its risk-weighted assets


In treasury management, what does ‘market risk’ typically include?
A. Fluctuations in asset values due to interest rates, currency exchange, and commodity prices
B. Losses due to operational failures
C. Non-compliance with regulatory requirements
D. Default by counterparties in financial transactions

Answer: A. Fluctuations in asset values due to interest rates, currency exchange, and commodity prices

What is the main purpose of Asset-Liability Management (ALM) in risk management?
A. To ensure compliance with financial reporting standards
B. To optimize the use of funds and minimize financial risks
C. To assess the creditworthiness of customers
D. To evaluate market price fluctuations

Answer: B. To optimize the use of funds and minimize financial risks

What is ‘liquidity risk’ in treasury management?
A. The risk of not being able to convert assets into cash
B. The risk of losing market share in the industry
C. The risk of high levels of debt
D. The risk of adverse market price movements

Answer: A. The risk of not being able to convert assets into cash


Which step in the risk management process involves continuously tracking and updating risk management strategies?
A. Risk Identification
B. Risk Control
C. Risk Monitoring
D. Risk Reporting

Answer: C. Risk Monitoring

What is the purpose of a ‘Risk Register’?
A. To record daily operational transactions
B. To document all identified risks, their likelihood, impact, and mitigation strategies
C. To track employee performance
D. To monitor regulatory compliance

Answer: B. To document all identified risks, their likelihood, impact, and mitigation strategies

What is the primary goal of diversification in risk management?
A. To concentrate risks in a few high-return areas
B. To spread investments across different assets to reduce exposure to a single risk
C. To eliminate all risks
D. To monitor market trends more effectively

Answer: B. To spread investments across different assets to reduce exposure to a single risk

Which of the following is NOT a risk mitigation strategy?
A. Risk avoidance
B. Risk retention
C. Risk elimination
D. Risk transfer

Answer: C. Risk elimination

What is ‘residual risk’ in risk management?
A. The risk that remains after mitigation measures have been applied
B. The total risk from an unmitigated event
C. The risk that can be avoided through insurance
D. The risk from external events only

Answer: A. The risk that remains after mitigation measures have been applied

What is the purpose of ‘stress testing’ in risk management?
A. To simulate extreme market conditions and assess their impact on financial health
B. To evaluate customer satisfaction
C. To measure the efficiency of internal processes
D. To determine potential profits from various risk scenarios

Answer: A. To simulate extreme market conditions and assess their impact on financial health

Which of the following is a key regulatory framework for banks focused on risk management?
A. Basel III
B. IFRS
C. Dodd-Frank Act
D. All of the above

Answer: D

What does the Basel III framework primarily focus on?
A. Improving the efficiency of financial transactions
B. Ensuring banks have sufficient capital to absorb financial shocks
C. Regulating employee compensation in banks
D. Setting interest rate limits for loans

Answer: B. Ensuring banks have sufficient capital to absorb financial shocks

What is the role of ‘Risk Reporting’ in risk management?
A. To monitor the implementation of internal policies
B. To communicate risks to management and stakeholders
C. To track employee performance
D. To assess customer complaints

Answer: B. To communicate risks to management and stakeholders

Which document is used to categorize and manage identified risks?
A. Risk Register
B. Profit and Loss Statement
C. Balance Sheet
D. Cash Flow Statement

Answer: A. Risk Register

Which of the following best describes the primary purpose of Asset-Liability Management (ALM)?
A. To ensure that a bank can meet its short-term liabilities without compromising long-term profitability
B. To monitor customer complaints
C. To maximize asset depreciation
D. To manage insurance claims

Answer: A. To ensure that a bank can meet its short-term liabilities without compromising long-term profitability

In treasury management, what is meant by ‘interest rate risk’?
A. The risk associated with the fluctuation in the value of foreign currencies
B. The risk of changes in interest rates impacting the value of assets or liabilities
C. The risk of default on loans
D. The risk of insufficient liquidity in the market

Answer: B. The risk of changes in interest rates impacting the value of assets or liabilities

What is the purpose of the ‘Risk Matrix’ in risk management?
A. To track the company’s profits and losses
B. To evaluate the probability and impact of identified risks
C. To measure customer satisfaction levels
D. To assess employee performance

Answer: B. To evaluate the probability and impact of identified risks

What does ‘Duration Gap’ refer to in risk management?
A. The difference in the maturity periods of assets and liabilities
B. The time taken to recover from a financial loss
C. The risk of default by borrowers
D. The gap between market trends and financial regulations

Answer: A. The difference in the maturity periods of assets and liabilities