Unlike credit and market risk, operational risk currently lacks an overarching theory to explain how and why losses occur. As a result, operational risk managers have been forced to use unsatisfactory tools and processes that fail to add sufficient commercial value.
In Ten Laws of Operational Risk: Understanding its Behaviours to Improve its Management, Michael Grimwade delivers an insightful discussion of the nature of operational risk and a groundbreaking redesign of the profession's existing tools. The author's Ten Laws are grounded on the business profiles of firms and the human and institutional behaviours that drive operational risk. They are underpinned by taxonomies for the causes; the inadequacies or failures that constitute both control failures and events; and the impacts of operational risks.
Drawing on twenty-five years of first-hand experience and research, this book explains the patterns and trends that are apparent in the historical data and offers solutions to the persistent problems inherent in risk appetite, RCSAs, scenario analysis, reputational risk, stress testing, capital modeling, and insurance. It also provides fresh insights into the everyday activities of risk managers with respect to predictive key risk and control indicators, root cause analysis, why controls fail, the risks posed by change, and product risk profiles.