1️⃣ What is Risk Management?
- Definition:
Risk Management = Identifying, assessing, and controlling risks that may affect achievement of an organisation’s objectives. - Objective:
✔ Minimise losses
✔ Maximise opportunities / returns
Risk Management = Think in advance + Prepare + Control
2️⃣ Types of Risks in Banking & Finance
2.1 Credit Risk
- Meaning:
Risk of loss if borrower fails to repay loan or meet contractual obligations. - Examples (Banking):
- Loan default
- EMI not paid
- NPA formation
- Mitigation:
- ✔ Credit appraisal (CIBIL, income, financials)
- ✔ Collateral / security
- ✔ Diversification of loan portfolio
2.2 Market Risk
- Meaning:
Risk of loss due to changes in market prices, such as:- Interest rates
- Foreign exchange rates
- Equity / commodity prices
- Examples (Banking):
- Fall in bond price when interest rates rise
- Loss in forex position due to INR depreciation
- Mitigation:
- ✔ Hedging using derivatives
- ✔ Asset allocation
- ✔ Diversification
🔹 Hedging – Very Important Concept
Hedging = Protection / Insurance against price movement risk.
Common Hedging Strategies:
- Diversification
➡ Spread investments across assets / sectors
➡ Example: Invest in IT + Pharma + FMCG instead of only IT. - Using Derivatives:
- Futures Contracts
- Agreement to buy/sell in future at fixed price
- Example: Airline locks fuel price using oil futures.
- Options Contracts
- Right (not obligation) to buy/sell at specific price.
- Call Option – Right to buy
- Put Option – Right to sell
- Example: Investor buys put option to protect against fall in stock price.
- Forwards
- Customised future contract (OTC, not exchange-traded).
- Example: Bank and exporter fix USD-INR rate for future date.
- Swaps
- Exchange of cash flows
- Example: Interest Rate Swap – fixed rate ↔ floating rate.
- Futures Contracts
Mnemonic – Derivatives Types:
FOPS = Futures, Options, Forwards, Swaps
2.3 Operational Risk
- Meaning:
Risk of loss from failed internal processes, people, systems, or external events. - Examples:
- System failure
- Fraud by staff
- Wrong posting of entries
- Cyber-attack
- Mitigation:
- ✔ Strong internal controls
- ✔ Segregation of duties (maker–checker)
- ✔ IT security, backups
- ✔ Employee training, SOPs
2.4 Liquidity Risk
- Meaning:
Risk that bank/organisation cannot meet short-term obligations because it can’t convert assets into cash quickly. - Examples (Banking):
- Bank has long-term loans but must repay short-term deposits.
- Sudden deposit withdrawal.
- Mitigation:
- ✔ Maintain adequate liquid assets (CRR, SLR, HQLA)
- ✔ Gap analysis, Liquidity Coverage Ratio (LCR)
- ✔ Contingency funding plan
2.5 Interest Rate Risk
- Meaning:
Risk of loss due to interest rate changes impacting assets/liabilities. - Examples:
- Bank holding fixed-rate bonds loses when market interest rate increases.
- Mismatch between rate-sensitive loans and deposits.
- Mitigation:
- ✔ Interest rate swaps, futures, options
- ✔ Duration management
- ✔ Asset-Liability Management (ALM)
2.6 Foreign Exchange (Forex) Risk
- Meaning:
Risk of loss due to movement in exchange rates. - Examples:
- Importer must pay USD; if USD/INR rises, cost increases.
- Bank holding USD assets loses when USD falls.
- Mitigation:
- ✔ Currency hedging (forwards, options, swaps)
- ✔ Matching assets & liabilities in same currency
- ✔ Diversification in currency exposure
2.7 Reputational Risk
- Meaning:
Risk of damage to organisation’s image, leading to loss of customers / investors. - Causes:
- AML / fraud incidents
- Mis-selling
- Poor customer service
- Mitigation:
- ✔ Ethical practices
- ✔ Transparent communication
- ✔ Quick and effective crisis management
3️⃣ Risk Management Framework – Step by Step
3.1 Risk Identification
- Meaning: Find all possible risks.
- Methods:
✔ Brainstorming
✔ Risk workshops
✔ Internal audits
✔ Study past incidents / loss data
3.2 Risk Assessment
Assess = How likely + How big?
(A) Risk Matrix
- Two Axis Tool:
- Likelihood (Low / Medium / High)
- Impact (Low / Medium / High)
- Risks plotted as:
- ✅ Green – Low risk
- ⚠️ Yellow – Medium risk
- 🔴 Red – High risk
- Example: Cyber-attack with high likelihood + high impact → Red zone.
(B) Scenario Analysis
- “What if” technique
- Steps:
- Choose a risk (e.g. economic slowdown)
- Build scenarios (10% drop, 20% drop in sales)
- Check impact on profit, capital, liquidity
- Widely used for stress testing in banks.
(C) Qualitative vs Quantitative
| Type | Basis | Example |
|---|---|---|
| Qualitative | Non-numeric, judgement-based | “High / Medium / Low” risk rating |
| Quantitative | Numbers, probability, value | Expected loss = Probability × Impact |
Example (Quantitative):
- 20% chance of loss of ₹10 lakh → Expected loss = ₹2 lakh
3.3 Risk Control (Treatment)
Main strategies: Avoid, Reduce, Transfer, Accept
| Strategy | Meaning | Example |
|---|---|---|
| Avoid | Change plan to avoid risk | Bank avoids lending to banned sectors |
| Mitigate | Reduce probability/impact | Extra security checks in Internet banking |
| Transfer | Shift risk to others | Insurance, outsourcing, hedging |
| Accept | Bear minor risk | Small FX variation tolerated |
Mnemonic – ARTA:
Avoid, Reduce, Transfer, Accept
3.4 Risk Monitoring
- Continuous tracking of:
- KRIs (Key Risk Indicators)
- Loss events
- Policy breaches
- Tools:
✔ Dashboards
✔ Regular risk reports
✔ Internal audits
Examples of KRIs (Banking):
- NPA Ratio
- Loan default rate
- Capital Adequacy Ratio (CAR)
- Number of fraud cases
3.5 Risk Reporting
- Purpose: Inform management / Board / regulators.
- Format:
- MIS reports
- Dashboard charts
- ALCO reports (for ALM)
- Regulatory reports to RBI / SEBI etc.
4️⃣ Risk Management Tools
4.1 Risk Matrix
➡ Already covered – used for prioritisation of risks.
4.2 Scenario Analysis & Stress Testing
- Scenario Analysis → normal + extreme conditions
- Stress Testing → extreme but plausible shocks
- Example:
- 3% increase in interest rate
- 30% fall in stock market
- Large deposit withdrawal
- Example:
Basel norms require regular stress tests for banks.
4.3 Hedging (Recap)
- Hedging = Insurance for Market / FX / Interest Rate Risk.
- Tools: Futures, Options, Forwards, Swaps, Diversification
4.4 Risk Register
- Definition:
A live document recording all major risks and how they are being handled. - Typical Columns:
- Risk ID
- Risk Description
- Category (credit/market/operational…)
- Likelihood (H/M/L)
- Impact (H/M/L)
- Risk Score (= L × I)
- Risk Owner
- Mitigation Plan
- Status (Active / Closed / Monitoring)
4.5 Treasury Risk Measures (Bank Treasury)
- Value at Risk (VaR)
- Meaning: Maximum possible loss in a portfolio over a period, at a given confidence level.
- Example: VaR = ₹1 crore at 99% for 1 day → loss will not exceed ₹1 crore on 99% of days.
- Duration & Duration Gap
- Duration: Sensitivity of bond price to interest rate change.
- Duration Gap: Duration of Assets – Duration of Liabilities
- Used for interest rate risk in banking book.
5️⃣ Risk Management in Banks & Treasury
5.1 Basel Accords (I, II, III) – Overview
- Global regulatory framework for banks’ risk management.
- Key focus areas:
- Capital Adequacy (protects against credit, market, operational risk)
- Stress Testing
- Risk Disclosure & Governance
- Basel III:
- Higher quantity and quality of capital (CET1)
- Capital buffers
- Liquidity standards:
- LCR – Liquidity Coverage Ratio
- NSFR – Net Stable Funding Ratio
5.2 Treasury Risks
- Market Risk:
- Price / yield change in G-Secs, corporate bonds, forex.
- Credit Risk:
- Counterparty fails in inter-bank / derivative deals.
- Liquidity Risk:
- Mismatch between short-term borrowing and long-term investments.
- Interest Rate Risk:
- Mismatch in rate-sensitive assets & liabilities.
Internal Controls in Treasury:
- ✔ Limits on deal size, open position
- ✔ Stop-loss limits
- ✔ Separation of Front Office (deals), Mid Office (risk), Back Office (settlement)
5.3 Asset-Liability Management (ALM) & ALCO
- ALM:
Managing liquidity and interest rate risk by matching assets and liabilities. - ALCO (Asset-Liability Committee):
- Senior-level committee in bank
- Decides interest rate policy, liquidity strategy, maturity profile
- Works closely with Treasury.
6️⃣ Key Terms
- Risk Appetite:
Level of risk organisation is willing to accept. - Risk Tolerance:
Acceptable variation from expected risk level. - Risk Exposure:
Extent to which entity is vulnerable to a risk. - Residual Risk:
Risk remaining after applying controls/mitigation.
🔥 Most Important
- Definition:
➡ Risk = possibility of loss; Risk Management = identify + assess + control. - Main Types (Banking):
➡ Credit, Market, Operational, Liquidity, Interest Rate, Forex, Reputational - 3 Stages in Risk Process:
➡ Identify → Assess → Control → (Monitor & Report) - Risk Treatment Mnemonic – ARTA:
➡ Avoid, Reduce, Transfer, Accept - Risk Matrix = Likelihood vs Impact
- Qualitative vs Quantitative Risk Assessment
- VaR – potential portfolio loss at given confidence level & time.
- Duration Gap used for interest rate risk.
- Basel III = capital adequacy + liquidity + stress testing.
- ALM & ALCO – key for liquidity & interest rate risk management in banks.
- KRIs – early warning signals like NPA ratio, CAR, default rate.
- Hedging tools: Futures, Options, Forwards, Swaps (FOPS).
📊 Visual Summary
| Area | Key Point | Example / Tool |
|---|---|---|
| Definition | RM = Identify + Assess + Control risk | Bank credit policy |
| Credit Risk | Borrower default | NPA formation |
| Market Risk | Price/Rate changes | Bond price fall |
| Operational Risk | Process/System failure | Fraud / system crash |
| Liquidity Risk | Cannot meet obligations | Deposit run |
| Interest Rate Risk | Rate change impact | Fixed bond loss |
| Forex Risk | FX rate movement | USD/INR volatility |
| Tools | Risk Matrix, Scenario, VaR, Duration, Risk Register | |
| Mitigation | ARTA – Avoid, Reduce, Transfer, Accept | Insurance, Hedging |
| Basel III | Capital + Liquidity + Stress Test | LCR, NSFR |
| ALM / ALCO | Manage liquidity & rate risk | Gap analysis |
| Treasury Controls | Limits, stop-loss, segregation | Front/Mid/Back Office |
⏳ 2-Minute Quick Revision Sheet
✅ Core Concepts
- Risk: Chance of loss or adverse outcome.
- Risk Management: Identify ➡ Assess ➡ Control ➡ Monitor ➡ Report. (ACMR)
✅ Main Risk Types (Banking)
- Credit Risk – borrower default → NPA
- Market Risk – price, interest rate, FX movements
- Operational Risk – people, process, system failures
- Liquidity Risk – can’t meet short-term obligations
- Interest Rate Risk – mismatch in rate-sensitive items
- Forex Risk – currency movement
- Reputational Risk – loss of trust
Mnemonic:
C-MO-LIR-FR = Credit, Market, Operational, Liquidity, Interest Rate, Forex, Reputational
✅ Risk Management Steps
- Risk Identification – list risks
- Risk Assessment – Likelihood + Impact (Risk Matrix)
- Risk Control – ARTA: Avoid, Reduce, Transfer, Accept
- Risk Monitoring – KRIs, dashboards
- Risk Reporting – MIS to management / regulators
✅ Assessment Tools
- Risk Matrix: Likelihood vs Impact → Green / Yellow / Red
- Scenario Analysis: Best / Worst / Most-likely
- Quantitative: Expected loss = Probability × Impact
- VaR: Max loss with given confidence
- Duration Gap: Interest rate sensitivity of assets vs liabilities
- Risk Register: Table of all major risks & actions
✅ Banking & Treasury Focus
- Basel III: Capital, liquidity (LCR/NSFR), stress testing.
- ALM: Manage liquidity + interest rate risk.
- ALCO: Committee for ALM & pricing.
- Treasury Risks: Market, credit, liquidity, interest rate.
- Controls: Limits, stop-loss, segregation of duties.
✅ One-Line Memory Hooks
- RM Formula: Think Risk → Measure Risk → Control Risk
- Hedging Tools: FOPS – Futures, Options, Forwards, Swaps
- Treatment: ARTA – Avoid, Reduce, Transfer, Accept
- VaR: How much can I lose at worst (with X% confidence)?
Risk Management – MCQ
What is the primary objective of risk management?
A. To eliminate all risks
B. To minimize potential losses and maximize opportunities
C. To avoid regulatory compliance
D. To maximize revenue
Answer: B. To minimize potential losses and maximize opportunities
Which of the following is a type of financial risk?
A. Credit Risk
B. Operational Risk
C. Market Risk
D. All of the above
Answer: D
What is ‘credit risk’?
A. Risk of loss due to fluctuations in market prices
B. Risk that a borrower will default on a loan
C. Risk of loss from operational failure
D. Risk of insufficient liquidity
Answer: B. Risk that a borrower will default on a loan
Which of the following is associated with ‘market risk’?
A. Changes in stock prices
B. The failure of internal processes
C. Inability to pay short-term liabilities
D. Poor management decisions
Answer: A. Changes in stock prices
What is the first step in the risk management process?
A. Risk reporting
B. Risk control
C. Risk identification
D. Risk monitoring
Answer: C. Risk identification
Which technique is used to assess the potential impact and likelihood of a risk?
A. Stress Testing
B. Scenario Analysis
C. Risk Matrix
D. Value at Risk (VaR)
Answer: C. Risk Matrix
What is ‘risk control’?
A. Identifying risks in the organization
B. Developing strategies to mitigate identified risks
C. Monitoring ongoing risks
D. Reporting risks to management
Answer: B. Developing strategies to mitigate identified risks
What does ‘operational risk’ refer to?
A. Risk of market price fluctuations
B. Risk due to failures in internal processes or systems
C. Risk of not meeting liquidity requirements
D. Risk from incorrect financial reporting
Answer: B. Risk due to failures in internal processes or systems
Which type of risk arises from the changes in interest rates?
A. Credit Risk
B. Operational Risk
C. Liquidity Risk
D. Interest Rate Risk
Answer: D. Interest Rate Risk
Liquidity risk occurs when an organization:
A. Cannot meet its short-term financial obligations
B. Faces fluctuations in interest rates
C. Has insufficient credit to lend
D. Experiences credit default by customers
Answer: A. Cannot meet its short-term financial obligations
What is ‘Value at Risk’ (VaR)?
A. A measure of potential loss in a portfolio over a set period
B. A measure of operational failures in a company
C. A method of diversifying investments to reduce risks
D. A report on customer creditworthiness
Answer: A. A measure of potential loss in a portfolio over a set period
Which of the following is used to manage interest rate risk?
A. Currency swaps
B. Derivatives like swaps, options, and futures
C. Market segmentation
D. Internal controls
Answer: B. Derivatives like swaps, options, and futures
What is the purpose of hedging in risk management?
A. To eliminate all types of risks
B. To offset potential losses from other investments or exposures
C. To increase market exposure
D. To maximize operational efficiency
Answer: B. To offset potential losses from other investments or exposures
What does ‘stress testing’ involve in risk management?
A. Monitoring liquidity positions
B. Assessing the impact of extreme but plausible risk events on the organization
C. Diversifying assets to reduce risk exposure
D. Managing daily cash flows
Answer: B. Assessing the impact of extreme but plausible risk events on the organization
Which of the following is a global standard for risk management in banks?
A. Basel III
B. IFRS
C. SLR
D. RBI Guidelines
Answer: A. Basel III
What is the main objective of the Basel III regulations?
A. To reduce the number of financial institutions
B. To ensure financial institutions hold adequate capital to absorb shocks
C. To increase profit margins for banks
D. To minimize government intervention in banking
Answer: B. To ensure financial institutions hold adequate capital to absorb shocks
What is ‘Capital Adequacy Ratio’ (CAR)?
A. The ratio of a bank’s total assets to its liabilities
B. The percentage of capital a bank holds against its risk-weighted assets
C. The ratio of customer deposits to the total loan portfolio
D. The percentage of funds invested in government securities
Answer: B. The percentage of capital a bank holds against its risk-weighted assets
In treasury management, what does ‘market risk’ typically include?
A. Fluctuations in asset values due to interest rates, currency exchange, and commodity prices
B. Losses due to operational failures
C. Non-compliance with regulatory requirements
D. Default by counterparties in financial transactions
Answer: A. Fluctuations in asset values due to interest rates, currency exchange, and commodity prices
What is the main purpose of Asset-Liability Management (ALM) in risk management?
A. To ensure compliance with financial reporting standards
B. To optimize the use of funds and minimize financial risks
C. To assess the creditworthiness of customers
D. To evaluate market price fluctuations
Answer: B. To optimize the use of funds and minimize financial risks
What is ‘liquidity risk’ in treasury management?
A. The risk of not being able to convert assets into cash
B. The risk of losing market share in the industry
C. The risk of high levels of debt
D. The risk of adverse market price movements
Answer: A. The risk of not being able to convert assets into cash
Which step in the risk management process involves continuously tracking and updating risk management strategies?
A. Risk Identification
B. Risk Control
C. Risk Monitoring
D. Risk Reporting
Answer: C. Risk Monitoring
What is the purpose of a ‘Risk Register’?
A. To record daily operational transactions
B. To document all identified risks, their likelihood, impact, and mitigation strategies
C. To track employee performance
D. To monitor regulatory compliance
Answer: B. To document all identified risks, their likelihood, impact, and mitigation strategies
What is the primary goal of diversification in risk management?
A. To concentrate risks in a few high-return areas
B. To spread investments across different assets to reduce exposure to a single risk
C. To eliminate all risks
D. To monitor market trends more effectively
Answer: B. To spread investments across different assets to reduce exposure to a single risk
Which of the following is NOT a risk mitigation strategy?
A. Risk avoidance
B. Risk retention
C. Risk elimination
D. Risk transfer
Answer: C. Risk elimination
What is ‘residual risk’ in risk management?
A. The risk that remains after mitigation measures have been applied
B. The total risk from an unmitigated event
C. The risk that can be avoided through insurance
D. The risk from external events only
Answer: A. The risk that remains after mitigation measures have been applied
What is the purpose of ‘stress testing’ in risk management?
A. To simulate extreme market conditions and assess their impact on financial health
B. To evaluate customer satisfaction
C. To measure the efficiency of internal processes
D. To determine potential profits from various risk scenarios
Answer: A. To simulate extreme market conditions and assess their impact on financial health
Which of the following is a key regulatory framework for banks focused on risk management?
A. Basel III
B. IFRS
C. Dodd-Frank Act
D. All of the above
Answer: D
What does the Basel III framework primarily focus on?
A. Improving the efficiency of financial transactions
B. Ensuring banks have sufficient capital to absorb financial shocks
C. Regulating employee compensation in banks
D. Setting interest rate limits for loans
Answer: B. Ensuring banks have sufficient capital to absorb financial shocks
What is the role of ‘Risk Reporting’ in risk management?
A. To monitor the implementation of internal policies
B. To communicate risks to management and stakeholders
C. To track employee performance
D. To assess customer complaints
Answer: B. To communicate risks to management and stakeholders
Which document is used to categorize and manage identified risks?
A. Risk Register
B. Profit and Loss Statement
C. Balance Sheet
D. Cash Flow Statement
Answer: A. Risk Register
Which of the following best describes the primary purpose of Asset-Liability Management (ALM)?
A. To ensure that a bank can meet its short-term liabilities without compromising long-term profitability
B. To monitor customer complaints
C. To maximize asset depreciation
D. To manage insurance claims
Answer: A. To ensure that a bank can meet its short-term liabilities without compromising long-term profitability
In treasury management, what is meant by ‘interest rate risk’?
A. The risk associated with the fluctuation in the value of foreign currencies
B. The risk of changes in interest rates impacting the value of assets or liabilities
C. The risk of default on loans
D. The risk of insufficient liquidity in the market
Answer: B. The risk of changes in interest rates impacting the value of assets or liabilities
What is the purpose of the ‘Risk Matrix’ in risk management?
A. To track the company’s profits and losses
B. To evaluate the probability and impact of identified risks
C. To measure customer satisfaction levels
D. To assess employee performance
Answer: B. To evaluate the probability and impact of identified risks
What does ‘Duration Gap’ refer to in risk management?
A. The difference in the maturity periods of assets and liabilities
B. The time taken to recover from a financial loss
C. The risk of default by borrowers
D. The gap between market trends and financial regulations
Answer: A. The difference in the maturity periods of assets and liabilities
