Operational risk is a result of failure of operating system in a bank due to certain
reasons such as fraudulent activities, natural disasters, human errors or omissions, use of
highly automated technology, the growth of e-commerce, large-scale mergers and
acquisitions and the emergence of banks as very large volume service providers. Operational risk
has proved to be an important cause of huge financial losses in banks and
financial institutions, the most recent one being the loss suffered by Societe Generale of
7.1 bn. The financial industry, which has developed standard methods to measure
and manage market risk and credit risk, is now focusing on operational risk.
Operational Risk (OR), which was initially understood as every type of
unquantifiable risk faced by a bank, has now been specifically defined by regulators and recognized
by banks to be critical in shaping their risk profile. This recognition has led to an
increased emphasis on the importance of sound operational risk management in banks and
financial institutions. However, management of operational risks is not a new idea. What is
new is the organization of the components of operational risk in a coherent and
structured framework to facilitate efficient management of the same.
In fact, Basel has defined operational risk as "the risk of loss resulting from
inadequate or failed internal processes, people and systems or from external
events". This definition of operational risk alone hints that the scope of this risk class may be the first
challenge. It demands understanding of the nature of various risk types within each business
lines. Basel definition of operational risk seeks to identify why a loss happened and at
the broadest level includes the breakdown of operating system in a bank. In fact,
Moody's estimated that the 20 largest publicized `risk events' in the past decade cost the
banking sector a cumulative $23.5 bn. Major loss events, directly due to internal process
failure such as Barings (1995, $1.3 bn), Allfirst (2002, $750 mn) and NAB (2004, A$360
mn) are today classified as OR events, even though the ultimate nature of the loss is
related to market risk. |