medium · FRM Part 2 Operational Risk
A business unit identifies a critical 'data integrity' risk during its annual Risk and Control Self-Assessment (RCSA). The inherent risk score is 16 (on a scale of 1 to 25). The unit head cites a 'four-eyes' review process as a key control, estimated at 80% effectiveness based on self-attestation. However, independent testing indicates the control design is sound but its operating effectiveness is only 40% due to inconsistent execution.
Using the independent testing data, what is the most accurate residual risk score?
- 9.6
- 3.2
- 12.8
- 6.4
Sign up free to see the explanation and track your rank →
More FRM Part 2 Operational Risk practice
- Which of the following describes the 'One Big Loss' principle for heavy-tailed (subexponen
- In the Bow-Tie analysis framework, where do 'Preventive Controls' sit relative to the oper
- A customer consistently deposits $9,800 in cash at three dif… — This behavior is a classic
- The Standardized Measurement Approach (SMA) formula is composed of two primary factors: th
- What is the regulatory treatment for 'Boundary Events' regarding capital requirements unde
- In the Standardized Measurement Approach (SMA), the Business Indicator (BI) serves as a pr
- Under a proper governance framework, 'Model Limitations' must be:
- If the bank had a poor loss history (LC > BIC), what is the impact on its capital?