Featured Product

    BIS Paper Analyzes Operational and Cyber Risks in Financial Sector

    February 11, 2020

    BIS published a working paper that uses a unique cross-country dataset at the loss event level to document the evolution and characteristics of the operational risk of banks. The paper highlights that better supervision is associated with lower operational losses. It also provides an estimate of losses due to cyber events, which constitute a subset of operational loss events. Cyber losses are a small fraction of total operational losses, but can account for a significant share of total operational value-at-risk.

    Representing a significant portion of total bank risks, operational risks are second only to credit risks as a source of losses. Thus, measuring and understanding operational risks, including cyber risks, is critical for both banks and public authorities. The paper uses a unique cross-country dataset from ORX, which is a consortium of financial institutions. The sample contains over 700,000 operational loss events from 2002 until the end of 2017 for a group of 74 large banks with headquarters worldwide. The granularity of the dataset allowed the authors to study the evolution of operational risks through time, compute an operational and cyber value-at-risk for financial intermediaries, document the time lag between occurrence, discovery and recognition of losses, and investigate the link between operational losses, macroeconomic conditions, and regulatory characteristics.

    The results of the study show that, after a spike following the Great Financial Crisis, operational losses have fallen in recent years. The spike was largely due to losses arising from improper business practices in large banks that were incurred in the run-up to the crisis but recognized only later. Operational value-at-risk can vary substantially across banks—from 6% to 12% of total gross income—depending on the method used. These numbers are consistent with the actual capital requirements, but notably smaller than the basic indicator approach. The results provide some support for the shift to the standardized approach in Basel III.

    The analysis shows that it takes, on average, more than a year for operational losses to be discovered and recognized in the books. However, there is significant variation across regions and event types. For instance, improper business practices and internal fraud events take longer to be discovered. Operational losses are not independent of macroeconomic conditions and regulatory characteristics. The paper shows that credit booms and periods of excessively accommodative monetary policy are followed by larger operational losses. Furthermore, it is to be noted that a higher quality of financial regulation and supervision is also associated with lower cyber losses. Despite representing a relatively minor share of operational losses, cyber losses can account for up to a third of total operational value-at-risk.

     

    Related Links

    Keywords: International, Banking, Operational Risk, Value-at-Risk, Cyber Risk, Standardized Approach, Research, BIS

    Featured Experts
    Related Articles
    News

    APRA Plans to Assess Climate Risks and Develop Prudential Guidance

    APRA published a letter that outlines its plans to undertake a climate change vulnerability assessment and develop a prudential practice guide focused on climate-related financial risks.

    February 24, 2020 WebPage Regulatory News
    News

    FDIC Publishes Guide to Help with Third-Party Risk Management

    The technology lab of FDIC (FDiTech) published a new guide to help financial technology, or fintech, companies and others partner with banks.

    February 24, 2020 WebPage Regulatory News
    News

    APRA to Transition to Annual Stress Testing of Large Banks in 2020

    APRA published key findings of the stress testing assessment conducted on authorized deposit-taking institutions.

    February 21, 2020 WebPage Regulatory News
    News

    IAIS Statement on Monitoring Period of Insurance Capital Standard

    IAIS published a statement from its Secretary General Jonathan Dixon on the Insurance Capital Standard (ICS) monitoring period.

    February 21, 2020 WebPage Regulatory News
    News

    EC Consults on Review of Non-Financial Reporting Directive

    EC is launched a consultation on the review of the Non-Financial Reporting Directive or NFRD (Directive 2014/95/EU, as part of its strategy to strengthen sustainable investment in Europe.

    February 20, 2020 WebPage Regulatory News
    News

    EIOPA Consults on Standards for Supervisory Reporting Under PEPP Rule

    EIOPA is consulting on the implementing technical standards for supervisory reporting and cooperation, as mandated by the Pan-European Personal Pension Product (PEPP) Regulation (Regulation 2019/1238).

    February 20, 2020 WebPage Regulatory News
    News

    EIOPA Publishes Statement on Adverse Interest Rate Environment

    EIOPA published a supervisory statement on the impact of the ultra-low or negative interest rate environment on the insurance sector in EU.

    February 20, 2020 WebPage Regulatory News
    News

    ECB Report on Transfer of Liquidity from EONIA Products to €STR

    ECB published a report on the transfer of liquidity from the cash and derivatives products of the Euro Overnight Index Average (EONIA) to the Euro Short-Term Rate (€STR).

    February 19, 2020 WebPage Regulatory News
    News

    ESRB Publishes Report on Systemic Cyberattacks

    ESRB published a report that explores systemic implications of cyber incidents, such as cyberattacks.

    February 19, 2020 WebPage Regulatory News
    News

    FSB Chair Sets Out Key Deliverables for G20 Presidency of Saudi Arabia

    FSB published a letter from the Chair Randal K. Quarles to the G20 finance ministers and Central Bank governors ahead of the meetings in Riyadh on February 22-23.

    February 19, 2020 WebPage Regulatory News
    RESULTS 1 - 10 OF 4720