What are some of the properties of Bottom-Up KRIs?
Correct Answer: D
Definition of Bottom-Up KRIs Bottom-Up Key Risk Indicators (KRIs) are identified at the operational level, focusing on localized risks within business units. They are tied to actual internal loss events and reported frequently (daily, weekly, or monthly) to capture ongoing trends. Key Properties of Bottom-Up KRIs Selected by local management → Ensures relevance to specific business areas. Tied to internal loss events → Helps in tracking risk patterns within specific legal entities, countries, or business units. Reported frequently → Allows for timely risk detection and mitigation. Why Answer D is Correct Bottom-up KRIs focus on localized risk exposure and are monitored frequently to track operational changes. Why Other Answers Are Incorrect Option Explanation: A . Seated by senior management: tied to internal loss events at the legal entity, country, business, and/or product level, reported daily, weekly, or monthly. Incorrect - Senior management sets top-down KRIs, while bottom-up KRIs are managed locally. B . Selected by local management, based on key controls or weaknesses identified by audit reports, reported quarterly. Incorrect - While audit reports are useful, bottom-up KRIs are based on loss events, not just audit findings. Quarterly reporting is too infrequent. C . Are not used due to changes in regulations. Incorrect - Bottom-up KRIs remain essential despite regulatory changes. PRMIA Reference for Verification PRMIA Risk Indicator Best Practices Basel Committee's Risk Measurement and Reporting Guidelines
Question 12
In relation to the template for writing policy documents, which one of the following pairings of requirements is correct? A well designed policy will include:
Correct Answer: C
Step 1: Key Elements of a Well-Designed Policy Document A well-designed policy should include: Scope - Who the policy applies to. Exception Handling - How and where exceptions should be requested. Accountability - Who is responsible for enforcement. Step 2: Why Option C is Correct A policy must clearly define exceptions and the process for requesting them. It should also define areas where the policy does not apply to avoid confusion. Step 3: Why the Other Options Are Incorrect Option A ("List of exceptions for board members' families") → Incorrect because policies should apply consistently to all stakeholders. Option B ("List of acceptable fonts and margin types") → Incorrect because formatting is secondary to content clarity. Option D ("To whom the policy applies and an additional management report") → Incorrect because policy scope should not include unnecessary reports. PRMIA Risk Reference Used: PRMIA Policy Writing Guidelines - Defines policy structure and exception handling. ISO 19600 Compliance Management Standard - Supports clear, well-documented policies. Final Conclusion: A well-designed policy clearly defines exceptions and their handling process, making Option C the correct answer.
Question 13
Two of the four key resources that are regarded as critical to maintain confidence and calibrate Risk Appetite to are?
Correct Answer: B
Key Resources for Calibrating Risk Appetite Risk appetite defines how much risk an organization is willing to accept to achieve its objectives. Two of the most critical resources for maintaining confidence and setting risk appetite are net earnings and capital. Why Net Earnings and Capital are Critical Net earnings reflect profitability and financial stability, influencing risk-taking capacity. Capital ensures that the institution can absorb losses and meet regulatory requirements. Basel III emphasizes capital adequacy as a core measure of financial resilience. Why Answer B is Correct Net earnings support operational stability, while capital determines how much risk an institution can bear. Both are used to define and calibrate risk appetite levels. Why Other Answers Are Incorrect Option Explanation: A . Capital expenditure and liquidity. Incorrect - Capital expenditure is an investment measure, not a direct risk appetite determinant. C . Strong regulatory assessment and net earnings. Incorrect - Regulatory assessments are important but do not directly set risk appetite. D . Quality human resources and reputation. Incorrect - HR and reputation are important for governance but do not directly influence risk capital and earnings stability. PRMIA Reference for Verification PRMIA Risk Appetite Framework Basel III Capital and Earnings Management Guidelines
Question 14
Ideally, the facilitator of a risk assessment workshop should:
Correct Answer: C
Step 1: Role of a Risk Assessment Facilitator The facilitator's main role is to guide discussions without bias, ensuring objective risk identification. PRMIA's Risk Governance Framework highlights neutral facilitation as key to effective risk workshops. Step 2: Why Option C Is Correct Objectivity ensures unbiased risk assessment. Expressing personal opinions can influence risk ratings, leading to distorted outcomes. Step 3: Why the Other Options Are Incorrect Option A ("Guide the workshop toward a pre-determined conclusion") Incorrect because risk workshops should discover risks, not confirm pre-set beliefs. Option B ("Attendees can override results") Incorrect as risk results should be evidence-based, not subject to override. Option D ("Attend via video connection") Incorrect as facilitators must engage actively, making remote facilitation less effective. PRMIA Risk Reference Used: PRMIA Risk Governance Framework - Stresses objectivity in risk assessment facilitation. PRMIA Risk Identification Best Practices - Encourages unbiased workshops. Final Conclusion: Facilitators must remain neutral and objective, making Option C the correct answer.
Question 15
In the Basel III standardized approach for operational risk, what is the Business Indicator?
Correct Answer: D
Step 1: Definition of the Business Indicator (BI) in Basel III The Business Indicator (BI) is a financial-statement-based metric used in Basel III's Standardized Approach for Operational Risk. It replaces previous approaches by using financial figures (e.g., revenue, fees, interest income) to estimate operational risk exposure. Step 2: Why Option D Is Correct The BI uses financial-statement data to calculate operational risk capital requirements. It acts as a proxy for a bank's operational risk exposure by linking operational risk to its financial size and complexity. Step 3: Why the Other Options Are Incorrect Option A ("Proxy for near-miss events") → Incorrect because BI is based on financial data, not near-miss risk events. Option B ("Non-financial-statement-based proxy") → Incorrect because BI is explicitly derived from financial statements. Option C ("Scaling factor based on historical losses") → Incorrect because BI does not use historical losses directly-it relies on financial-statement inputs. PRMIA Risk Reference Used: Basel III Operational Risk Framework - Defines the Business Indicator as a financial-statement-based metric. PRMIA Operational Risk Guidelines - Explains the BI's role in capital calculations.