Introduction of Operational Risk in Basel Accords
Basel I (1988) → Focused only on credit risk and market risk; operational risk was not yet included.
Basel II (2004) → Introduced operational risk as a separate category, subject to capital requirements.
Basel III (2010) → Strengthened capital and liquidity requirements but did not introduce operational risk.
Basel IV (2017, still evolving) → Adjusts Basel III reforms but does not introduce operational risk as a new category.
Why Answer B is Correct
Basel II (2004) was the first to introduce operational risk as a risk requiring a capital charge.
Why Other Answers Are Incorrect
Option
Explanation:
A . Basel I
Incorrect - Basel I focused on credit risk and market risk, with no capital requirements for operational risk.
C . Basel III
Incorrect - Basel III strengthened Basel II but did not introduce operational risk.
D . Basel IV
Incorrect - Basel IV refines Basel III but does not introduce operational risk as a new capital charge.
PRMIA Reference for Verification
Basel II (2004) Operational Risk Framework
PRMIA Operational Risk Management Guidelines

Step 1: Understanding the WorldCom Case
WorldCom was one of the largest U.S. telecom companies before its collapse in 2002 due to fraudulent accounting practices and poor risk management.
The company expanded aggressively through acquisitions but failed to integrate them properly, leading to financial mismanagement and accounting fraud.
Step 2: Why Option C is Correct
WorldCom acquired over 60 companies in a short period without proper integration.
This masked financial problems and led to $11 billion in fraudulent accounting adjustments.
PRMIA and risk management frameworks stress that poor integration after rapid acquisitions increases operational and financial risks.
Step 3: Why the Other Options Are Incorrect
Option A ("Risk models and mortgage underwriting") → Incorrect because this describes the 2008 financial crisis, not WorldCom.
Option B ("Lack of a CRO during IPO") → Incorrect because WorldCom was well-established before its fraud-CRO absence was not the main issue.
Option D ("Unauthorized derivatives trading") → Incorrect because WorldCom's failure was due to fraudulent accounting, not derivatives.
PRMIA Risk Reference Used:
PRMIA Corporate Governance Guidelines - Discusses risks of poor post-merger integration.
SEC Investigation on WorldCom (2002) - Identified fraudulent accounting due to failed acquisitions.

Overview of the National Australia Bank (NAB) FX Options Case Study
Traders at National Australia Bank (NAB) engaged in unauthorized foreign exchange (FX) options trading.
They smoothed profits and concealed losses using fictitious transactions and manipulated reporting.
This led to a major financial scandal and loss of investor confidence.
Key Findings of the Investigation
Traders artificially smoothed profits to avoid drawing attention to large fluctuations.
Losses were concealed from internal risk controls by manipulating trade records.
The bank's risk management and governance controls failed to detect and prevent these activities.
Why Other Answers Are Incorrect
Option
Explanation:
A . Currency traders were allowed access to the risk system by the CEO.
Incorrect - No evidence suggests CEO involvement in granting system access.
B . Currency traders concealed losses using back-office knowledge.
Incorrect - While they concealed losses, they also smoothed profits to manipulate earnings trends.
D . Currency traders were able to complete a Management Buy Out (MBO).
Incorrect - This event was not related to a Management Buyout (MBO); it was a trading scandal.
PRMIA Reference for Verification
PRMIA Fraud and Risk Management Case Studies
Basel Principles on Market Risk and Internal Control Failures

Stafford Beer's Viable System Model (VSM)
VSM is a cybernetic model designed to analyze and improve organizational structures.
It consists of five core subsystems that define governance and operations.
Why Answer B is Correct
The VSM does not explicitly include "Input" as a key component.
The key elements of VSM include Governance, Process, and Output, but it does not define "Input" as a standalone concept.
Why Other Answers Are Incorrect
Option
Explanation:
A . Governance
Correct - Governance is part of VSM and deals with decision-making and oversight.
C . Process
Correct - Process represents the operational functions within VSM.
D . Output
Correct - Output refers to the results of the system's operations.
PRMIA Reference for Verification
PRMIA Governance and Cybernetic Systems Guidelines
Stafford Beer's Viable System Model Framework

Step 1: Understanding the TSB Case
The TSB outage in 2018 was caused by a failed IT migration from its old banking system to a new one.
The transition locked millions of customers out of their accounts for weeks, resulting in financial losses and reputational damage.
Step 2: Why Option C Is Correct
TSB attempted to move customer data to a new banking platform, but serious defects in the migration process led to service failures.
PRMIA and UK Financial Conduct Authority (FCA) reports confirmed that poor IT risk management was a key failure.
Step 3: Why the Other Options Are Incorrect
Option A ("Liquidity squeeze by hedge-fund")
Incorrect because TSB's failure was due to IT migration issues, not a liquidity crisis.
Option B ("Sub-standard risk pricing and risk management")
Incorrect because pricing models were not the cause-it was an IT system failure.
Option D ("IT models did not work if prices were discontinuous")
Incorrect as this issue is more common in high-frequency trading failures, not banking system outages.
PRMIA Risk Reference Used:
UK FCA Investigation on TSB Incident - Confirms IT migration failure as root cause.
PRMIA IT Risk Management Framework - Highlights risks of major IT transitions.
Final Conclusion:
The TSB outage was caused by a failed IT migration, making Option C the correct answer.