風險管理為辨識、衡量、監控、及控制風險的過程，本研究除了對於這四項作業風險管理的核心內容予以逐項探討外，另分析近年來國內外作業風險個案發生的原因，介紹巴塞爾銀行監理委員會與先進國家的作業風險監理指南，及作業風險管理實務調查報告並進行分析。 作業風險的特徵為分布範圍很廣、類型多樣化、難以預測、且可能造成銀行重大損失。國內外曾發生的作業風險個案顯示，作業風險的重要性不亞於市場及信用風險，銀行應積極強化作業風險管理，透過落實公司治理與內部控制的執行，將有助於降低作業風險，建立作業風險損失資料庫將是量化作業風險所不可或缺的。國際的作業風險管理趨勢顯示，雖然目前各國對於作業風險的管理已有進展，但仍不及其他領域的風險管理成熟。銀行應建立作業風險管理架構，成立專責部門負責作業風險管理，量化作業風險為目前國外大型銀行的趨勢，惟尚未出現一些標準的模型；結合使用質化與量化風險評估工具可達較佳的管理效果，高階管理人員積極參與及支持作業風險管理活動，經由調整銀行風險文化及創造適當的誘因以執行風險控制策略，則為有效管理作業風險的關鍵。 在作業風險的管理策略方面，對於無法控制或部分可控的風險，實務上可採行保險、委外、透過資本市場等方式來移轉風險，或是以緊急應變及持續營運計畫來降低作業風險所帶來的衝擊。先進國家的監理機關及銀行，無論在作業風險管理上的經驗、方法、及技術，均明顯較我國進步。由於各國的經濟金融情況不同，不同銀行間也有明顯的差異，在參考先進國家的做法時，監理機關及銀行仍應根據我國的實際情況加以調整，重點在於銀行應在成本—效益的考量下，視金融機構的營運規模、業務性質、及風險概況發展適合本身的作業風險管理制度。 / Risk management is a process of indentify, assess, monitor and control/mitigate of risks. The study discuss these four core elements in operational risk management. Analysing the reason of operational risk management failure by introducing the loss events in which domestic and overseas financial institutions. Besides, in order to assist financial institutions in understanding the international trends in reinforcing operational risk management. The study introduce the papers of survey of industry practice in the management operational risk and the supervision guideline for operational risk management in the USA, the UK, Japan, and Hong Kong. Operational risks is everywhere in the business environment. As such, they will vary significantly from organization to organization. The most important types of operational risk involve breakdowns in internal controls and corporate governance. The loss event database is the most helpful tool. In general, qualitative assessment is simpler but no use for capital allocation. The best results have been obtained in applying both qualitative and quantitative techniques. Operational risk management must have the support and involvement of senior managers. They can send the message that operational risks are important, that they deserve attention, and management will allocate resources accordingly. In addition, a separate head office operational risk function has emerged, responsible for developing the operational risk management framework, consolidating information, consulting with the business units, and monitoring the enterprise-wide effectiveness of operational risk management. The risk management strategies execute to uncontrollable or part of controllable risks, except use risk capital to retain some amount of risk, some way for transferring risk involve hedging, insurance, outsouring, use financial derivatives to offset losses. Contingency planning aims to prevent a business disaster from occurring when a very rare event strikes the institution. It should be noted that risk profiles vary among financial institutions, indicating that the most effective method of risk management also may differ among institutions. Financial institution should endeavor to develop operational risk management system after considering its cost-benefit according to their own scale, nature, and risk profile.

Devido à grande volatilidade e ao dinamismo do mercado financeiro, a gestão do risco operacional é fator preponderante para a sobrevivência de qualquer negócio. A lógica existente na disciplina de mercado pressupõe que este possui mecanismos coercitivos de maneira a induzir os gestores a administrar prudentemente os negócios. Ou seja, a sua eficiência depende da atuação ativa dos participantes do mercado no sentido de beneficiar ou recompensar as instituições mais bem geridas e penalizar as empresas mal administradas. Tradicionalmente, os bancos divulgam dados acerca das exposições ao risco de crédito e de mercado, a fim de auxiliar a compreensão do seu perfil de risco. Entretanto, também estão expostos a outros tipos de riscos, tais como o risco operacional, o qual pode prejudicar significativamente o desempenho futuro, podendo levá-los até a falência. Logo, verifica-se a importância da divulgação dessas informações para a disciplina de mercado. Buscando proteger o sistema financeiro dos resultados negativos advindos dos riscos inerentes às suas atividades, o Comitê da Basiléia publicou o Novo Acordo de Capital, previsto para entrar em vigor no final de 2006, sendo que nesta data as instituições financeiras deverão obedecer a certos padrões mínimos no gerenciamento de seus riscos, entre eles o operacional. Esta dissertação tem por objetivo analisar a avaliação e gerenciamento do risco operacional em uma instituição financeira nacional de grande porte, detectando instrumento de medida e análise e o estágio de desenvolvimento quanto ao gerenciamento do risco operacional. Para tanto, utilizou-se a metodologia de Estudo de Caso e as evidências foram obtidas por documentação, registros em arquivos, entrevistas e observação direta. Os resultados sugerem que o banco pesquisado encontra-se em estágio intermediário na administração dos riscos operacionais, contudo, está desenvolvendo técnicas e processos tanto para se adequar às exigências dos órgãos supervisores, quanto para a melhoria de seus resultados. / Due to the great volatility and to the dynamism of the finance market, the management of the operational risk is a preponderant factor for the survival of any business. The logic that is in the market discipline, implies that it has coercive mechanisms that induces the managers to manage carefully theirs business. In other words, the efficiency depends on the active performance of the participants of the market, on the sense of benefiting or to reward the institutions that are good managed and to penalize the bad managed one. Traditionally, the banks give data concerning the exposure to the credit market risks, in order to assist the comprehension of their risk profile. However, they are also exposed to other kinds of risks, such as the operational risk, which can injure significantly the future performance and could even conduct them to the bankruptcy. Soon, they can verify the importance of the divulgation of these information for the market discipline. Seeking to protect the financial system from negative results of the inherent risks to its activities, Basel Committee published the New Capital Accord, foreseen to go into effect at the end of 2006, and in this date the financial institutions should obey some minimum standards in the management of their risks, among them the operational. The goal of this dissertation is to analyze the evaluation and management of the operational risk in large financial institution, detecting measure and analysis instrument and the stage of development regarding the management of the operational risk. For that, the methodology of Study of Case was used and the evidences were obtained by documentation, records in files, interviews and direct observation. The results suggest that the searched bank is on an intermediary stage in the administration of the operational risks, however, it is developing techniques and processes to adapt to the supervisors\' demanding and to the improvement of its results.

Devido à grande volatilidade e ao dinamismo do mercado financeiro, a gestão do risco operacional é fator preponderante para a sobrevivência de qualquer negócio. A lógica existente na disciplina de mercado pressupõe que este possui mecanismos coercitivos de maneira a induzir os gestores a administrar prudentemente os negócios. Ou seja, a sua eficiência depende da atuação ativa dos participantes do mercado no sentido de beneficiar ou recompensar as instituições mais bem geridas e penalizar as empresas mal administradas. Tradicionalmente, os bancos divulgam dados acerca das exposições ao risco de crédito e de mercado, a fim de auxiliar a compreensão do seu perfil de risco. Entretanto, também estão expostos a outros tipos de riscos, tais como o risco operacional, o qual pode prejudicar significativamente o desempenho futuro, podendo levá-los até a falência. Logo, verifica-se a importância da divulgação dessas informações para a disciplina de mercado. Buscando proteger o sistema financeiro dos resultados negativos advindos dos riscos inerentes às suas atividades, o Comitê da Basiléia publicou o Novo Acordo de Capital, previsto para entrar em vigor no final de 2006, sendo que nesta data as instituições financeiras deverão obedecer a certos padrões mínimos no gerenciamento de seus riscos, entre eles o operacional. Esta dissertação tem por objetivo analisar a avaliação e gerenciamento do risco operacional em uma instituição financeira nacional de grande porte, detectando instrumento de medida e análise e o estágio de desenvolvimento quanto ao gerenciamento do risco operacional. Para tanto, utilizou-se a metodologia de Estudo de Caso e as evidências foram obtidas por documentação, registros em arquivos, entrevistas e observação direta. Os resultados sugerem que o banco pesquisado encontra-se em estágio intermediário na administração dos riscos operacionais, contudo, está desenvolvendo técnicas e processos tanto para se adequar às exigências dos órgãos supervisores, quanto para a melhoria de seus resultados. / Due to the great volatility and to the dynamism of the finance market, the management of the operational risk is a preponderant factor for the survival of any business. The logic that is in the market discipline, implies that it has coercive mechanisms that induces the managers to manage carefully theirs business. In other words, the efficiency depends on the active performance of the participants of the market, on the sense of benefiting or to reward the institutions that are good managed and to penalize the bad managed one. Traditionally, the banks give data concerning the exposure to the credit market risks, in order to assist the comprehension of their risk profile. However, they are also exposed to other kinds of risks, such as the operational risk, which can injure significantly the future performance and could even conduct them to the bankruptcy. Soon, they can verify the importance of the divulgation of these information for the market discipline. Seeking to protect the financial system from negative results of the inherent risks to its activities, Basel Committee published the New Capital Accord, foreseen to go into effect at the end of 2006, and in this date the financial institutions should obey some minimum standards in the management of their risks, among them the operational. The goal of this dissertation is to analyze the evaluation and management of the operational risk in large financial institution, detecting measure and analysis instrument and the stage of development regarding the management of the operational risk. For that, the methodology of Study of Case was used and the evidences were obtained by documentation, records in files, interviews and direct observation. The results suggest that the searched bank is on an intermediary stage in the administration of the operational risks, however, it is developing techniques and processes to adapt to the supervisors\' demanding and to the improvement of its results.

Operational risk losses are heavy tailed and are likely to be asymmetric and extremely dependent among business lines/event types. The analysis of dependence via copula models has been focussed on the bivariate case mainly. In the vast majority of instances symmetric elliptical copulas are employed to model dependence for severities. This thesis proposes a new methodology to assess, in a multivariate way, the asymmetry and extreme dependence between severities, and to calculate the capital for operational risk. This methodology simultaneously uses (i) several parametric distributions and an alternative mixture distribution (the Lognormal for the body of losses and the generalised Pareto Distribution for the tail) using a technique from extreme value theory, (ii) the multivariate skew t-copula applied for the first time across severities and (iii) Bayesian theory. The former to model severities, I test simultaneously several parametric distributions and the mixture distribution for each business line. This procedure enables me to achieve multiple combinations of the severity distribution and to find which fits most closely. The second to effectively model asymmetry and extreme dependence in high dimensions. The third to estimate the copula model, given the high multivariate component (i.e. eight business lines and seven event types) and the incorporation of mixture distributions it is highly difficult to implement maximum likelihood. Therefore, I use a Bayesian inference framework and Markov chain Monte Carlo simulation to evaluate the posterior distribution to estimate and make inferences of the parameters of the skew t-copula model. The research analyses an updated operational loss data set, SAS® Operational Risk Global Data (SAS OpRisk Global Data), to model operational risk at international financial institutions. I then evaluate the impact of this multivariate, asymmetric and extreme dependence on estimating the total regulatory capital, among other established multivariate copulas. My empirical findings are consistent with other studies reporting thin and medium-tailed loss distributions. My approach substantially outperforms symmetric elliptical copulas, demonstrating that modelling dependence via the skew t-copula provides a more efficient allocation of capital charges of up to 56% smaller than that indicated by the standard Basel model.

Submitted by Joana Azevedo (joanad@id.uff.br) on 2017-08-21T14:48:04Z No. of bitstreams: 1 Dissert Marco Antonio Alexandre da Silva.pdf: 1978085 bytes, checksum: 23a5060649b84bab98ba6561b2554b1d (MD5) / Approved for entry into archive by Biblioteca da Escola de Engenharia (bee@ndc.uff.br) on 2017-09-04T13:40:49Z (GMT) No. of bitstreams: 1 Dissert Marco Antonio Alexandre da Silva.pdf: 1978085 bytes, checksum: 23a5060649b84bab98ba6561b2554b1d (MD5) / Made available in DSpace on 2017-09-04T13:40:49Z (GMT). No. of bitstreams: 1 Dissert Marco Antonio Alexandre da Silva.pdf: 1978085 bytes, checksum: 23a5060649b84bab98ba6561b2554b1d (MD5) Previous issue date: 2017-04-11 / A preocupação com os processos de gestão de riscos operacionais vem crescendo a cada dia porque a exposição a qualquer falha ou a ausência de controles internos podem potencialmente significar custos adicionais para a instituição financeira, tanto quanto perdas financeiras das áreas operacionais e de negócios. Este fato determina que qualquer sistema de controles deva ser eficiente e garanta a confiabilidade dos processos internos de forma contínua. E, desta forma, qualquer modelo de gestão de riscos operacionais deve ser usado como um instrumento que assegure que os principais riscos tenham sido devidamente identificados e controlados. Partindo do questionamento quanto ao grau de concordância dos especialistas pesquisados, frente a um modelo que pudesse contribuir para o desenvolvimento das suas atividades, este estudo propôs e testou um modelo de mapeamento de risco operacional utilizando ferramentas básicas da qualidade. Desta feita, suportado por uma abrangente pesquisa bibliográfica, exploratória e qualitativa, este modelo contou com processos e requisitos devidamente suportados por estudos nesta área. Em seguida, um instrumento de pesquisa foi desenvolvido e aplicado a um grupo de especialistas em mapeamento de riscos operacionais, por intermédio de questionário. Os resultados revelaram que todas as premissas dos requisitos do modelo de mapeamento de risco operacional proposto têm um grau de concordância de 96% dos especialistas pesquisados. Espera-se que este estudo contribua significativamente para a atividade de mapeamento do risco operacional, já que se propõe a auxiliar o especialista nas suas atividades. / Concern about operational risk management processes is growing every day because exposure to any failure or absence of internal controls can potentially mean additional costs to financial institutions as well as financial losses from the operating and business areas. This fact determines that any control system must be efficient and guarantee the reliability of the internal processes in a continuous way. And so any operational risk management model should be used as an instrument to ensure that key risks have been properly identified and controlled. Starting from the questioning about the degree of agreement of the researched specialists against a model that could contribute to the development of their activities, this study proposed and tested a model of operational risk mapping using basic quality tools. This time, supported by a comprehensive bibliographical research, exploratory and qualitative, this model had processes and requirements duly supported by studies in this area. Next, a research instrument was developed and applied to a group of specialists in mapping operational risks, through a questionnaire. The results revealed that all the premises of the requirements of the proposed operational risk mapping model have a degree of agreement of 96% of the specialists surveyed. It is expected that this study contributes significantly to the operational risk mapping activity, since it is proposed to assist the specialist in his activities.

<p>This thesis attempts to describe the essential systems features of a complex real-world domain of operational risk (OR) in banking, by employing general systems theory (GST) as the guiding method. An implementational framework (SAFOR) is presented for operational risk management (ORM), the target of which is to manage and mitigate the risk-around-loss causes. Since reasoning about OR is often scenario based, the framework also includes methods for decision making in addition to Value at Risk (VaR) and Conditional Value at Risk (CVaR). Other computational models that yield prediction intervals are discussed as well. Because the banking industry is one of the most mature sectors when it comes to OR, and contains the most data points, the discussion in this thesis evolves around such institutions. The present state-of-the-art in OR management for banking is surveyed using a systemic-holistic approach and the model framework is presented against this discussion. Tools and concepts from systems theory and systems thinking are employed for assessing systems properties and gaining insights into the interaction of various components. This brings about a number of advantages. This is not in disagreement with current suggestions such as those of the Basle Committee (Basel II), which is doing an excellent job in proving the state-of-the-art in best practice for banking institutions. Rather, this thesis offers a complementary perspective, looking at essentially the same problems but in a broader context and with a differing view.</p><p>OR data has been hard to come by in banking. Confidentiality and difficulties in quantifying OR as well as the short time data has been gathered in a consistent way are some of the reasons for this. Therefore, no case study has been done. Instead, we have chosen to look into a published bank application of an advanced OR model. The application shows that the technique holds as validation of the SAFOR modules.</p>

This thesis attempts to describe the essential systems features of a complex real-world domain of operational risk (OR) in banking, by employing general systems theory (GST) as the guiding method. An implementational framework (SAFOR) is presented for operational risk management (ORM), the target of which is to manage and mitigate the risk-around-loss causes. Since reasoning about OR is often scenario based, the framework also includes methods for decision making in addition to Value at Risk (VaR) and Conditional Value at Risk (CVaR). Other computational models that yield prediction intervals are discussed as well. Because the banking industry is one of the most mature sectors when it comes to OR, and contains the most data points, the discussion in this thesis evolves around such institutions. The present state-of-the-art in OR management for banking is surveyed using a systemic-holistic approach and the model framework is presented against this discussion. Tools and concepts from systems theory and systems thinking are employed for assessing systems properties and gaining insights into the interaction of various components. This brings about a number of advantages. This is not in disagreement with current suggestions such as those of the Basle Committee (Basel II), which is doing an excellent job in proving the state-of-the-art in best practice for banking institutions. Rather, this thesis offers a complementary perspective, looking at essentially the same problems but in a broader context and with a differing view. OR data has been hard to come by in banking. Confidentiality and difficulties in quantifying OR as well as the short time data has been gathered in a consistent way are some of the reasons for this. Therefore, no case study has been done. Instead, we have chosen to look into a published bank application of an advanced OR model. The application shows that the technique holds as validation of the SAFOR modules.

This dissertation investigates the implications of using the Advanced Measurement Approaches (AMA) as a method to assess operational risk capital charges for banks and insurance companies within Basel II paradigms and with regard to U.S. regulations. Operational risk has become recognized as a major risk class because of huge operational losses experienced by many financial firms over the last past decade. Unlike market risk, credit risk, and insurance risk, for which firms and scholars have designed efficient methodologies, there are few tools to help analyze and quantify operational risk. The new Basel Revised Framework for International Convergence of Capital Measurement and Capital Standards (Basel II) gives substantial flexibility to internationally active banks to set up their own risk assessment models in the context of the Advanced Measurement Approaches. The AMA developed in this thesis uses actuarial loss models complemented by the extreme value theory to determine the empirical probability distribution function of the overall capital charge in terms of various classes of copulas. Publicly available operational risk loss data set is used for the empirical exercise.

Banks represent one of the most important parts of the economy in the world. As a result, decisions of bank management affect not just the direct bank stakeholders but the state of the economy and society as a whole. This became evident during the latest financial crisis in 2007 where the failure of one bank resulted in the domino falling that affected banks globally. The regulators increase their attention to the risks that bank face and their measures and requirements. Therefore, the research within the banking area has important consequences from both theoretical and practical side.   The purpose of this project is to investigate whether there is a relationship between dividends that Nordic banks pay and different types of risks such as market, credit (including default), liquidity and operational. The results of the research will contribute to the knowledge in finance and help different stakeholders to understand possible reasons for different dividends level.   The methodological position works as a foundation for the conduction of the research. The epistemological and ontological views applied in this project are positivism and objectivism. The deductive research approach and quantitative research strategy are used for the research and thus the collection and analysis of the archival data of 19 Nordic banks over five year time horizon. The research can therefore be described as a panel study.   Based on the previous research papers the following proxies for risks have been used in the research: market risk – capital requirement for market risk to total assets, credit risk – loan loss provisions to total assets, default risk – Altman Z-score, liquidity risk –liquidity coverage ratio, operational risk – economic capital (capital requirement) for operational risk to total asset.   Ordinary Least Square regression analysis is performed over the collected data in order to fulfil the purpose of the project. The tests results identify that there are no statistically significant relationship between dividends and market, credit, default and liquidity risks and the statistically significant negative relationship between the dividends and operational risk in Nordic banks. These findings contribute to a new knowledge within the finance and banking area in particular. Additionally, this project might be used as a foundation for the further research within the field. The findings are also useful for stakeholders in understanding banks risk level.

The financial crisis turmoil has exposed notable weakness in the risk management processes of the financial services industry. It has also led to a critical look at the scope of the various risk types as well as the classification of loss events. More importantly, the effects that incorrect risk classification might have on capital requirements are now also examined and taken into account. Boundary events between credit risk and operational risk continue to be a significant source of concern for regulators and the industry in general. The Basel Committee on Banking Supervision (BCBS) requires that boundary events should be treated as credit risk for the purposes of calculating minimum regulatory capital under the Basel II Framework. Such losses will, therefore, not be subject to any operational risk capital charges. However, for the purposes of internal operational risk management, banks are required to identify all material operational risk losses. Boundary events should be flagged separately within a bank’s internal operational risk database. The Basel II Framework does not provide any further guidelines as to what constitutes boundary events and, therefore, consistent guiding principles that banks can follow for accurately classifying and subsequently flagging such events do not exist. The potential exists that actual boundary events might be classified as purely credit risk, and correctly be included in the credit risk capital charge, but not be flagged separately within the bank’s internal operational risk database. Alternatively, boundary events might be classified as operational risk and, therefore, be subject to the operational risk capital charge, instead of the credit risk capital charge. The former instance might give rise to an operational risk manager not being completely informed of the operational risks that the business is facing. The emphasis should always be on the management of risks and for this reason it is important that a financial institution indicates and flags all boundary events in their operational risk systems. To remedy this lack of guidance on the boundary event issue, guidelines are provided that banks can utilise within their risk classification processes. The approach utilised is to consider mechanisms and tools for classification, guidance from the Operational Risk Data Exchange (ORX) and the BCBS, as well as the International Accounting Standards Board (IASB). By compiling and submitting questionnaires to five South African banks, an investigation is conducted in order to obtain a view of the current mechanisms, tools and approaches that South African Advanced Measurement Approach (AMA) banks currently utilise within their classification processes. The effectiveness of boundary event classification is assessed by analysing the percentage of losses classified as boundary. In addition, the degree of uniformity or disparity in the classification of typical boundary event scenarios is considered. This analysis is performed by providing respondents with a total of 16 typical boundary event risk descriptions, and requesting the respondents to classify each of the losses in the scenarios as credit risk, operational risk or boundary event type. / Thesis (M.Com. (Risk management))--North-West University, Potchefstroom Campus, 2012.