<img src="https://ws.zoominfo.com/pixel/pIUYSip8PKsGpxhxzC1V" width="1" height="1" style="display: none;">

Operational Risk Management

author Ncontracts
1 min read
Oct 31, 2018

Operational risk management is a continuous process by which a financial institution manages risks within its business functions. The risks addressed by operational risk management may come from faulty internal processes, human error or fraud, systems that do not work as they should, or events from outside the FI.

A bank or credit union may suffer loss due to an operational risk like catastrophic weather events, a cyberattack, fraud from internal or external sources, or a human error related to not following internal policies. Each of these risks is addressed through the operational risk management system.

Vendors contribute to operational risks because they take over some of the functions of the company. Their people interact with the company’s employees and possibly their customers. The company’s computer systems use data from the vendor as well.

Managing third-party service providers is an essential part of operational risk management, so there is some overlap with vendor risk management. When a vendor contracts out some of the work they are assigned by a bank to a fourth-party vendor, these risks also become a part of the overall operational risk.

The first step in operational risk management is to identify the risks using key risk indicators (KRIs). Once the risks are known, they need to be analyzed and assessed. With a full understanding of the current and long-term operational risks, high-level decision-makers must choose how to respond to those risks.

The risk control options chosen by the decision-makers are put into place. This can be done through changes in the systems and processes used in the financial institution. Training is another factor that can reduce operational risk. The final step in operational risk management is to evaluate the effectiveness of the changes. This cycle of management continues perpetually, starting over with identifying risks each time.

 

Related: Creating Reliable Risk Assessments

Subscribe to the Nsight Blog

All Topics Risk & Compliance Product Insight Banks Lending Compliance Credit Unions Risk Management Fair Lending Nfairlending Cluster: Risk Management Compliance Lending Compliance Management Integrated Risk Blog Nrisk Regulatory Compliance Management News & Updates HMDA Risk Mortgage Lenders Ncomply Vendor Management Business Resiliency CRA Lending Compliance Blog Vendor CFPB Ncontinuity Third-Party Vendor Management Business Continuity Cybersecurity Fintech NVendor Strategic Planning Ncyber Ntransmittal Audits & Findings Company Culture OCC Regulatory Updates Audit Nverify Regulatory Compliance Exams FDIC Compliance Management Findings Nfindings NCUA Contract Management Employee Intranet Contract FRB Business Continuity Management FFIEC Findings Management Ncontracts manager Third-Party Vendors Vendor Risk Enterprise Risk Management ABA Bank Access Control Audit Findings Board Portal Call Report Due Diligence Efficiency Employee Engagement Exam findings FIEC Inc. 5000 Internal Audit Management Nboardportal Verify Wealth Management
Risk Management Policies
Risk Management

Risk Management Policies

Nov 13, 2018 1 min read
Do Small Institutions Need Risk Management?
Risk Management

Do Small Institutions Need Risk Management?

May 2, 2019 3 min read
Credit Risk Management
Risk Management

Credit Risk Management

Nov 12, 2018 1 min read