Prepare for your exam certification with our 8020 Certified PRMIA
Free PRMIA 8020 Exam 2025 Practice Materials Collection
PRMIA 8020 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
NEW QUESTION # 33
ISO 27000 relates to what topic / area?
- A. Information Security Systems.
- B. Environmental, social, and governance (ESG) investing.
- C. Auditing of financial controls.
- D. International Risk Management.
Answer: A
Explanation:
Step 1: Definition of ISO 27000
ISO 27000 is a global standard for information security management systems (ISMS), issued by the International Organization for Standardization (ISO).
It provides a framework for protecting sensitive information through policies, controls, and risk management practices.
Step 2: Why Option B Is Correct
ISO 27001 (part of ISO 27000 series) is one of the most widely recognized certifications for information security governance.
It sets guidelines on risk assessment, incident response, and data protection.
Step 3: Why the Other Options Are Incorrect
Option A ("ESG investing")
Incorrect because ISO 27000 deals with cybersecurity, not environmental, social, and governance (ESG) issues.
Option C ("International Risk Management")
Incorrect because ISO 27000 focuses on information security, not general risk management.
Option D ("Auditing of financial controls")
Incorrect because financial auditing standards (e.g., SOX, COSO) are separate from information security standards.
PRMIA Risk Reference Used:
ISO 27000 Series Documentation - Defines cybersecurity risk management practices.
PRMIA IT Risk Governance Framework - Reference ISO 27001 as a cybersecurity standard.
NEW QUESTION # 34
For the Barings case study, what external event may have accelerated the discovery of the loss event?
- A. The Kobe earthquake of January 17th 1995.
- B. The collapse of Lehman Brothers into bankruptcy in 2002.
- C. The collapse of Lehman Brothers into bankruptcy m 2008.
- D. The Singapore earthquake of January 17th 1995.
Answer: A
Explanation:
Background of the Barings Case Study
The Barings Bank collapse occurred due to unauthorized derivatives trading by Nick Leeson in Singapore.
Leeson concealed losses, and his trading positions became unmanageable.
How the Kobe Earthquake Affected Barings
On January 17, 1995, the Kobe earthquake caused extreme market volatility.
Leeson's unauthorized trades were highly exposed to the Nikkei 225 index, and the earthquake triggered heavy losses.
The event accelerated the exposure of Leeson's fraudulent activities, leading to Barings' collapse.
Why Answer D is Correct
The Kobe earthquake created market turmoil, forcing Barings to confront its financial position, ultimately revealing the hidden losses.
Why Other Answers Are Incorrect
Option
Explanation:
A . The collapse of Lehman Brothers into bankruptcy in 2002.
Incorrect - Lehman Brothers collapsed in 2008, not 2002.
B . The Singapore earthquake of January 17th, 1995.
Incorrect - No significant earthquake occurred in Singapore on that date.
C . The collapse of Lehman Brothers into bankruptcy in 2008.
Incorrect - Barings collapsed in 1995, not related to Lehman Brothers' 2008 failure.
PRMIA Reference for Verification
PRMIA Case Study on Barings Bank Collapse
Basel Committee Principles on Risk Oversight and Fraud Prevention
NEW QUESTION # 35
For the WorldCom case, what was one of the causes of the failure?
- A. Unauthorized trading in derivatives.
- B. The lack of a CRO during the final IPO.
- C. A rapid pace of acquisitions and poor integration of acquired companies.
- D. Risk models that did not reflect loosened underwriting standards of mortgage originators.
Answer: C
Explanation:
Step 1: Understanding the WorldCom Case
WorldCom was one of the largest U.S. telecom companies before its collapse in 2002 due to fraudulent accounting practices and poor risk management.
The company expanded aggressively through acquisitions but failed to integrate them properly, leading to financial mismanagement and accounting fraud.
Step 2: Why Option C is Correct
WorldCom acquired over 60 companies in a short period without proper integration.
This masked financial problems and led to $11 billion in fraudulent accounting adjustments.
PRMIA and risk management frameworks stress that poor integration after rapid acquisitions increases operational and financial risks.
Step 3: Why the Other Options Are Incorrect
Option A ("Risk models and mortgage underwriting") → Incorrect because this describes the 2008 financial crisis, not WorldCom.
Option B ("Lack of a CRO during IPO") → Incorrect because WorldCom was well-established before its fraud-CRO absence was not the main issue.
Option D ("Unauthorized derivatives trading") → Incorrect because WorldCom's failure was due to fraudulent accounting, not derivatives.
PRMIA Risk Reference Used:
PRMIA Corporate Governance Guidelines - Discusses risks of poor post-merger integration.
SEC Investigation on WorldCom (2002) - Identified fraudulent accounting due to failed acquisitions.
NEW QUESTION # 36
In Operational Resilience, which of the following is not an important measure of whether a Business Service can be considered Critical?
- A. Whether a disruption to the provision of the service could cause material customer detriment.
- B. Whether a disruption to the provision of the service could exceed risk appetite.
- C. Whether a disruption to the provision of the service could threaten a firm's viability.
- D. Whether a disruption to the provision of the service could harm market integrity.
Answer: B
Explanation:
Step 1: Definition of a Critical Business Service in Operational Resilience A Critical Business Service is one whose failure could result in severe harm to customers, financial markets, or the firm's viability.
Regulators (e.g., Bank of England, Basel Committee, PRMIA) define three primary factors for identifying critical services:
Customer impact
Market integrity impact
Firm viability impact
Step 2: Why Option C Is Incorrect
Risk appetite is an internal business decision, not an external measure of criticality.
A service can be critical even if its disruption stays within risk appetite.
Criticality is based on external impacts, not just internal risk limits.
Step 3: Why the Other Options Are Correct
Option A ("Material customer detriment") → Correct as customer harm defines critical services.
Option B ("Harm to market integrity") → Correct as market stability is a regulatory priority.
Option D ("Threaten firm viability") → Correct as critical services often determine business survival.
PRMIA Risk Reference Used:
PRMIA Operational Resilience Framework - Defines criteria for critical business services.
Basel Committee Operational Risk Guidelines - Highlights customer, market, and firm viability as resilience factors.
Final Conclusion:
Risk appetite is an internal benchmark, not a measure of critical service designation, making Option C the correct answer.
NEW QUESTION # 37
For the FTX case study, what was the "backdoor" used for?
- A. It allowed a stable coin to be removed from the ledger and added to the balance sheet.
- B. It allowed a rapid pace of acquisitions but poor integration of acquired companies.
- C. It allowed trading firm Alameda to borrow S65 billion of clients' money from the exchange without their permission.
- D. It allowed currency traders to smooth profits and conceal losses for over two years.
Answer: C
Explanation:
The FTX collapse involved fraudulent fund mismanagement, where FTX executives created a "backdoor" to allow Alameda Research (FTX's sister trading firm) to borrow client funds without their consent.
Step 1: The "Backdoor" in FTX
The backdoor was a hidden code in FTX's system, allegedly created by Sam Bankman-Fried, which allowed Alameda to access customer deposits without triggering alerts to auditors or compliance teams.
Alameda used these funds for risky trading strategies and investments, leading to the eventual collapse of FTX when a liquidity crunch exposed the missing funds.
Step 2: Why the Other Options Are Incorrect
Option A ("allowed a stablecoin to be removed from the ledger and added to the balance sheet") Incorrect because FTX's fraud involved misuse of customer funds, not just a stablecoin misclassification.
Option C ("allowed currency traders to smooth profits and conceal losses for over two years") Incorrect because this sounds more like LIBOR-rigging scandals, whereas FTX misappropriated client funds.
Option D ("allowed a rapid pace of acquisitions but poor integration of acquired companies") Incorrect because FTX's collapse was due to financial fraud, not poor acquisition strategy.
PRMIA Risk Reference Used:
PRMIA Financial Crime Risk Management - Discusses insider risk and fraudulent misappropriation of funds.
FTX Collapse Reports - SEC, CFTC, and DOJ filings confirm that Alameda had unauthorized access to client funds.
Final Conclusion:
FTX's backdoor enabled Alameda to take $65 billion in client funds without permission, making Option B the correct answer.
NEW QUESTION # 38
Managing financial crime is a part of risk and compliance for many firms. Which of the following is a useful control to help reduce this risk?
- A. Local regulations that allow a bank to not report transactions by family members of the board.
- B. Development of scenarios and red flags that are used to monitor transactions and identify suspicious customers and activities.
- C. Having the business be a cash only business and not report any transactions.
- D. The requirements to trace all transactions when they are entered into spreadsheets.
Answer: B
Explanation:
Financial Crime Risk Management
Managing financial crime requires implementing controls, monitoring, and reporting systems to detect and prevent illegal activities.
Developing red flags and monitoring scenarios allows firms to detect suspicious transactions related to money laundering, fraud, and terrorist financing.
Why Answer C is Correct
PRMIA emphasizes that effective risk management requires proactive monitoring of transactions using red flags, transaction patterns, and anomaly detection systems.
This is aligned with Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) regulatory requirements.
Why Other Answers Are Incorrect
Option
Explanation:
A . Having the business be a cash-only business and not report any transactions.
Incorrect - Cash-only businesses with no reporting are high-risk for financial crime.
B . The requirements to trace all transactions when they are entered into spreadsheets.
Incorrect - While transaction tracing is important, spreadsheets alone are not an effective control mechanism for financial crime.
D . Local regulations that allow a bank to not report transactions by family members of the board.
Incorrect - This would violate AML and financial crime regulations, increasing corruption risk.
PRMIA Reference for Verification
PRMIA Financial Crime and AML Risk Guidelines
Basel Committee on Financial Crime and Money Laundering
NEW QUESTION # 39
Team supervisors are key in the development and maintenance of the risk culture because they are:
- A. Visible to regulators and can describe the firm's risk culture to their board.
- B. Visible to regulators and can describe the firm's risk culture to inspection teams.
- C. More experienced than the employees that report to them.
- D. Connected with every employee, every day, and can ensure desired behaviors are followed by all.
Answer: D
Explanation:
Team supervisors play a critical role in shaping and maintaining an organization's risk culture. PRMIA's Risk Governance Framework and Risk Culture Principles emphasize that supervisors act as the link between risk policies and frontline employees, ensuring that risk-aware behaviors are consistently followed.
Step 1: Role of Supervisors in Risk Culture Development
Supervisors engage with employees daily, providing guidance on risk-based decision-making.
They reinforce risk policies, standards, and expectations set by senior management.
Supervisors identify behavioral trends that may indicate risk culture weaknesses.
Step 2: Supervisors as Enforcers of Risk Culture
PRMIA's Risk Culture Framework stresses that risk culture must be embedded into daily operations through supervisor-led enforcement.
Supervisors monitor, correct non-compliant behaviors, and provide ongoing risk awareness training.
Their proximity to employees allows them to detect early warning signs of risk issues.
Step 3: Why the Other Options Are Incorrect
Option A: "More experienced than the employees that report to them."
Experience alone does not establish or maintain a risk culture.
A risk culture is about behaviors and practices, not just expertise.
Option B: "Visible to regulators and can describe the firm's risk culture to inspection teams." While supervisors may interact with regulators, their primary role is to engage with employees daily rather than acting as spokespersons.
Option D: "Visible to regulators and can describe the firm's risk culture to their board." Boards typically rely on Chief Risk Officers (CROs) or senior executives to communicate risk culture, not direct supervisors.
PRMIA Risk Reference Used:
PRMIA Risk Culture Framework - Highlights the role of supervisors in ensuring risk-aware behaviors.
PRMIA Risk Governance Framework - Stresses that frontline supervisors must enforce risk management policies.
PRMIA Risk Awareness Guidelines - Reinforces daily interaction as a key factor in maintaining a strong risk culture.
Final Conclusion:
Supervisors directly influence employees' behaviors and ensure that risk culture is consistently followed, making Option C the correct answer.
NEW QUESTION # 40
Which of the below is accurate about a risk assessment workshop?
- A. Although workshops will take on their own form; it is best to prepare thoroughly ahead of time.
- B. Risk management should not attend the workshop so that proper discussion can take place.
- C. Compliance experts should not attend the workshop so that proper discussion can take place.
- D. The workshop should be run spontaneously so that proper discussion can take place.
Answer: A
Explanation:
Step 1: What Is a Risk Assessment Workshop?
A risk assessment workshop is a structured session where key stakeholders identify, evaluate, and prioritize risks.
Effective workshops require preparation, clear objectives, and structured discussions to ensure meaningful risk analysis.
Step 2: Why Option B is Correct
PRMIA and best practices recommend thorough preparation, including:
Setting objectives
Defining risk categories
Ensuring participation from risk, compliance, and business units
Providing risk assessment tools/templates
Step 3: Why the Other Options Are Incorrect
Option A ("Run spontaneously") → Incorrect because lack of preparation leads to poor discussions and missed risks.
Option C ("Risk management should not attend") → Incorrect because risk managers provide key expertise to guide discussions.
Option D ("Compliance experts should not attend") → Incorrect because compliance provides regulatory insights essential to risk assessment.
PRMIA Risk Reference Used:
PRMIA Risk Assessment Framework - Recommends structured, well-prepared workshops.
ISO 31000 Risk Management Standard - Supports proactive workshop planning.
Final Conclusion:
Risk assessment workshops should be well-prepared to ensure meaningful discussions and effective risk identification, making Option B the correct answer.
NEW QUESTION # 41
Governance can be defined as which of the following?
- A. Governance is a structure specifying the policies, principles, and procedures for making decisions about corporate direction.
- B. Governance is a structure specifying the ways in which reporting is made to the primary regulator.
- C. Governance is being replaced by management in all firms that are regulated.
- D. Governance is a structure specifying the daily operation of a firm.
Answer: A
Explanation:
Definition of Governance
Governance refers to the framework of policies, principles, and processes used to guide corporate decision-making and strategic direction.
It ensures accountability, transparency, and risk oversight within an organization.
Key Elements of Governance
Risk oversight - Ensuring risks are properly identified and managed.
Accountability structures - Defining roles and responsibilities.
Decision-making frameworks - Establishing policies for long-term corporate success.
Why Other Answers Are Incorrect
Option
Explanation:
A . Governance is a structure specifying the daily operation of a firm.
Incorrect - Governance focuses on high-level corporate oversight, not day-to-day operations.
B . Governance is a structure specifying the ways in which reporting is made to the primary regulator.
Incorrect - Governance is broader than just regulatory reporting.
C . Governance is being replaced by management in all firms that are regulated.
Incorrect - Governance and management are separate but complementary; governance provides oversight, while management executes strategy.
PRMIA Reference for Verification
PRMIA 10 Principles of Good Governance
NEW QUESTION # 42
Which of the following are the most relevant ways a firm can ensure they are in line with consumer protection?
- A. This risk cannot be managed.
- B. Engage with consumers once there are enough complaints.
- C. Treat customers fairly, place customer interests ahead of its own and keep promises to customers
- D. Add a consumer protection section to all reports.
Answer: C
Explanation:
Definition of Consumer Protection in Risk Management
Consumer protection ensures ethical business practices, transparency, and regulatory compliance.
It builds trust with customers and reduces legal and reputational risks.
Key Principles of Consumer Protection
Treating customers fairly → Ensures honest and ethical financial services.
Prioritizing customer interests → Prevents conflicts of interest and unfair treatment.
Honoring commitments → Strengthens customer confidence and regulatory trust.
Why Answer C is Correct
Following these principles ensures regulatory compliance, customer satisfaction, and risk mitigation.
Why Other Answers Are Incorrect
Option
Explanation:
A . Engage with consumers once there are enough complaints.
Incorrect - Proactive engagement is essential; waiting for complaints is a reactive and poor risk management approach.
B . Add a consumer protection section to all reports.
Incorrect - Documentation alone does not ensure fair treatment; actions matter more.
D . This risk cannot be managed.
Incorrect - Consumer protection risks can and should be actively managed.
PRMIA Reference for Verification
PRMIA Consumer Protection & Fair Treatment Standards
Financial Conduct Authority (FCA) Consumer Duty Guidelines
NEW QUESTION # 43
How can a chief risk officer encourage the governing body and executive management team to create a stronger risk culture?
- A. Having a vision of achievable but not excessive ambition.
- B. Discourage personal accountability to avoid a blame culture.
- C. Establish a set of objectives that the board and executive team must adhere to.
- D. Balance rewarding success in profitability goals with punishment when there is a failure to achieve goals.
Answer: A
Explanation:
A Chief Risk Officer (CRO) plays a crucial role in shaping and strengthening the risk culture within an organization. PRMIA defines risk culture as the shared values, beliefs, knowledge, and understanding about risk that drive behaviors within an institution.
Setting a Clear Vision
The CRO should communicate a vision of risk management that aligns with organizational goals while ensuring that risk-taking remains within acceptable limits.
The vision should be achievable and realistic, rather than overly ambitious, which could incentivize reckless risk-taking.
Embedding Risk Awareness into Decision-Making
A strong risk culture ensures that risk considerations are embedded into business decision-making rather than treated as a separate compliance exercise.
This is supported by PRMIA's Enterprise Risk Management (ERM) Framework, which stresses integrating risk management into strategy and operations.
Avoiding a Blame Culture
A risk-aware organization promotes accountability without fear, enabling employees to report risks without retribution.
Option B (Discourage personal accountability to avoid a blame culture) is incorrect because personal accountability is essential for a healthy risk culture.
Avoiding a Strict, Prescriptive Approach
A set of rigid objectives that must be followed by the executive team (Option C) does not foster a dynamic, evolving risk culture.
Instead, risk culture should be flexible and adaptive to emerging risks.
Balancing Incentives and Consequences
While balancing rewards with penalties (Option D) is part of governance, a strong risk culture is not built solely through fear of punishment.
PRMIA emphasizes positive reinforcement, such as linking risk management behaviors to performance evaluations and incentives.
PRMIA Reference for Verification
PRMIA Risk Governance Framework - Discusses the role of leadership in shaping risk culture.
PRMIA Standards on Enterprise Risk Management (ERM) - Covers best practices for embedding risk culture within organizations.
NEW QUESTION # 44
In the Basel III standardized approach for operational risk, what is the Business Indicator?
- A. It is a proxy for operational risks that relate to near-miss events.
- B. It is a scaling factor that is based on a bank's average historical losses.
- C. It is a non-financial-statement-based proxy for operational risk.
- D. It is a financial-statement-based proxy for operational risk.
Answer: D
Explanation:
Step 1: Definition of the Business Indicator (BI) in Basel III
The Business Indicator (BI) is a financial-statement-based metric used in Basel III's Standardized Approach for Operational Risk.
It replaces previous approaches by using financial figures (e.g., revenue, fees, interest income) to estimate operational risk exposure.
Step 2: Why Option D Is Correct
The BI uses financial-statement data to calculate operational risk capital requirements.
It acts as a proxy for a bank's operational risk exposure by linking operational risk to its financial size and complexity.
Step 3: Why the Other Options Are Incorrect
Option A ("Proxy for near-miss events") → Incorrect because BI is based on financial data, not near-miss risk events.
Option B ("Non-financial-statement-based proxy") → Incorrect because BI is explicitly derived from financial statements.
Option C ("Scaling factor based on historical losses") → Incorrect because BI does not use historical losses directly-it relies on financial-statement inputs.
PRMIA Risk Reference Used:
Basel III Operational Risk Framework - Defines the Business Indicator as a financial-statement-based metric.
PRMIA Operational Risk Guidelines - Explains the BI's role in capital calculations.
NEW QUESTION # 45
Which of the Basel Accords, published in 2004, introduced operational risk as a risk subjected to a capital charge?
- A. Basel II
- B. Basel III
- C. Basel I
- D. Basel IV
Answer: A
Explanation:
Introduction of Operational Risk in Basel Accords
Basel I (1988) → Focused only on credit risk and market risk; operational risk was not yet included.
Basel II (2004) → Introduced operational risk as a separate category, subject to capital requirements.
Basel III (2010) → Strengthened capital and liquidity requirements but did not introduce operational risk.
Basel IV (2017, still evolving) → Adjusts Basel III reforms but does not introduce operational risk as a new category.
Why Answer B is Correct
Basel II (2004) was the first to introduce operational risk as a risk requiring a capital charge.
Why Other Answers Are Incorrect
Option
Explanation:
A . Basel I
Incorrect - Basel I focused on credit risk and market risk, with no capital requirements for operational risk.
C . Basel III
Incorrect - Basel III strengthened Basel II but did not introduce operational risk.
D . Basel IV
Incorrect - Basel IV refines Basel III but does not introduce operational risk as a new capital charge.
PRMIA Reference for Verification
Basel II (2004) Operational Risk Framework
PRMIA Operational Risk Management Guidelines
NEW QUESTION # 46
Two of the four key resources that are regarded as critical to maintain confidence and calibrate Risk Appetite to are?
- A. Strong regulatory assessment and net earnings.
- B. Quality human resources and reputation.
- C. Net earnings and capital.
- D. Capital expenditure and liquidity.
Answer: C
Explanation:
Key Resources for Calibrating Risk Appetite
Risk appetite defines how much risk an organization is willing to accept to achieve its objectives.
Two of the most critical resources for maintaining confidence and setting risk appetite are net earnings and capital.
Why Net Earnings and Capital are Critical
Net earnings reflect profitability and financial stability, influencing risk-taking capacity.
Capital ensures that the institution can absorb losses and meet regulatory requirements.
Basel III emphasizes capital adequacy as a core measure of financial resilience.
Why Answer B is Correct
Net earnings support operational stability, while capital determines how much risk an institution can bear.
Both are used to define and calibrate risk appetite levels.
Why Other Answers Are Incorrect
Option
Explanation:
A . Capital expenditure and liquidity.
Incorrect - Capital expenditure is an investment measure, not a direct risk appetite determinant.
C . Strong regulatory assessment and net earnings.
Incorrect - Regulatory assessments are important but do not directly set risk appetite.
D . Quality human resources and reputation.
Incorrect - HR and reputation are important for governance but do not directly influence risk capital and earnings stability.
PRMIA Reference for Verification
PRMIA Risk Appetite Framework
Basel III Capital and Earnings Management Guidelines
NEW QUESTION # 47
The The Task Force on Climate-related Financial Disclosures (TCFD) was founded by which body?
- A. The World Bank (WB).
- B. The United Nations (UN).
- C. The Financial Stability Board (FSB).
- D. The European Commission (EC).
Answer: C
Explanation:
Step 1: What is the TCFD?
The Task Force on Climate-related Financial Disclosures (TCFD) was established to develop climate-related financial risk disclosure recommendations to help investors, lenders, and regulators make informed decisions.
Step 2: Who Founded the TCFD?
The Financial Stability Board (FSB), an international organization that monitors and makes recommendations about the global financial system, founded the TCFD in 2015.
The FSB recognized climate risk as a financial stability issue and launched the TCFD to standardize reporting.
Step 3: Why the Other Options Are Incorrect
Option A ("World Bank") → Incorrect because the World Bank supports climate initiatives but did not create the TCFD.
Option B ("United Nations") → Incorrect because the UN has climate programs like the UNFCCC, but not the TCFD.
Option D ("European Commission") → Incorrect because the EC develops its own sustainability regulations (e.g., SFDR, CSRD), separate from the TCFD.
PRMIA Risk Reference Used:
PRMIA Climate Risk Guidelines - Cites FSB's role in founding the TCFD.
FSB Official Reports (2015) - Confirms that the FSB established the TCFD.
Final Conclusion:
The FSB founded the TCFD in 2015, making Option C the correct answer.
NEW QUESTION # 48
Internal loss data (ILD) consists of what kind of data?
- A. It consists of scenario data develeloped to calcuate the future operational loss incidents of a bank.
- B. It consists of near miss operational loss incidents of a bank.
- C. It consists of historical operational loss incidents of a bank.
- D. It consists of the Key Risk Indicators of a bank.
Answer: C
Explanation:
Definition of Internal Loss Data (ILD)
Internal Loss Data (ILD) refers to historical records of actual operational losses incurred by a bank.
These losses are used for risk assessment, capital calculations, and trend analysis under Basel III's Operational Risk Framework.
Key Characteristics of ILD
Captures actual past loss events, such as fraud, system failures, and compliance breaches.
Supports the identification of risk trends and weak control areas.
Used for operational risk capital modeling, along with external loss data and scenario analysis.
Why Other Answers Are Incorrect
Option
Explanation:
A . It consists of near miss operational loss incidents of a bank.
Incorrect - ILD captures actual losses, while near misses are reported separately.
C . It consists of the Key Risk Indicators of a bank.
Incorrect - KRIs are forward-looking risk metrics, while ILD focuses on historical data.
D . It consists of scenario data developed to calculate the future operational loss incidents of a bank.
Incorrect - ILD is historical, whereas scenario data is used for predictive analysis.
PRMIA Reference for Verification
Basel III & PRMIA Operational Risk Data Framework
PRMIA Risk Management Standards for ILD
NEW QUESTION # 49
The Internal Loss Multiplier (ILM) is part of the Basel III Standardized Approach. Which of these definitions best descibes it?
- A. It is a financial-statement-based proxy for operational risk.
- B. t is a scaling factor that is based on a bank's average historical losses.
- C. It is a non-financial factor that is based on a bank's average historical losses.
- D. It is uniform, and is used for indicating consistent incidents on an average return basis.
Answer: B
Explanation:
The Internal Loss Multiplier (ILM) is a key component of the Basel III Standardized Approach for Operational Risk. It is designed to adjust capital requirements based on a bank's historical loss experience.
Definition of ILM
ILM is a scaling factor that adjusts the operational risk capital requirement based on a bank's internal loss history.
It is derived using a formula that incorporates historical operational risk losses relative to a bank's revenue.
Why ILM Exists in Basel III
Basel III replaced the Advanced Measurement Approach (AMA) with a Standardized Approach that includes ILM to ensure that banks with high historical losses hold more capital for operational risk.
Why Other Answers Are Incorrect
Option
Explanation:
A . It is a financial-statement-based proxy for operational risk.
Incorrect - ILM is not a general financial statement proxy; it specifically adjusts capital based on past operational losses.
B . It is a non-financial factor that is based on a bank's average historical losses.
Incorrect - ILM is financial in nature because it directly influences capital requirements.
D . It is uniform, and is used for indicating consistent incidents on an average return basis.
Incorrect - ILM is not uniform; it is bank-specific and varies based on loss history.
PRMIA Reference for Verification
PRMIA Operational Risk Standards
Basel III Standardized Approach for Operational Risk
NEW QUESTION # 50
For the Barings case study, segregation of duties was an issue. How did this present itself in this case?
- A. A risk manager was responsible for managing the back-office
- B. A trader was responsible for managing the front-office.
- C. A trader was responsible for managing the back-office.
- D. A trader was responsible for managing the expense account.
Answer: C
Explanation:
Background of the Barings Case Study
Nick Leeson, a trader at Barings Bank, caused the collapse of the institution due to unauthorized trading in derivatives.
A critical failure was the lack of segregation of duties, allowing Leeson to both execute trades (front-office) and oversee trade settlement (back-office).
How Segregation of Duties Failed
Proper segregation of duties ensures that no single individual has unchecked control over trading and settlement.
Leeson was responsible for both trading (front-office) and settlement (back-office), meaning he could hide losses without detection.
Why Answer A is Correct
A trader (Leeson) should never have been managing back-office functions.
His dual role allowed him to manipulate records and bypass controls, leading to $1.3 billion in losses and the bank's collapse.
Why Other Answers Are Incorrect
Option
Explanation:
B . A trader was responsible for managing the front-office.
Incorrect - Traders are supposed to manage the front-office; the issue was their involvement in back-office functions.
C . A risk manager was responsible for managing the back-office.
Incorrect - The issue was lack of oversight on the trader, not risk managers handling back-office duties.
D . A trader was responsible for managing the expense account.
Incorrect - The main issue was the trader's control over trade settlement, not expense accounts.
PRMIA Reference for Verification
PRMIA Case Study on Barings Bank Collapse
Basel Principles on Segregation of Duties in Risk Management
NEW QUESTION # 51
In order for a KRI to be effective it must be:
- A. Quantitative and Qualitative. Consistent. Efficient & Repeatable.
- B. Qualitative, Consistent Efficient & Repeatable.
- C. Quantitative, Consistent and Comparable. Efficient & Repeatable
- D. Quantitative, Repeatable and Efficient.
Answer: A
Explanation:
Definition of an Effective Key Risk Indicator (KRI)
A KRI is a metric used to identify, measure, and monitor emerging risks.
To be effective, KRIs must be both quantitative and qualitative, allowing for a comprehensive risk view.
Key Characteristics of Effective KRIs
Quantitative - Uses numerical data for trend analysis.
Qualitative - Incorporates expert judgment and scenario-based insights.
Consistent - Maintains uniform definitions across reporting periods.
Efficient & Repeatable - Must be easily measured and consistently reported.
Why Other Answers Are Incorrect
Option
Explanation:
B . Qualitative, Consistent, Efficient & Repeatable.
Incorrect - Excludes quantitative aspects, which are essential for KRIs.
C . Quantitative, Consistent, Comparable, Efficient & Repeatable.
Incorrect - While comparison is useful, qualitative factors are missing, making this answer incomplete.
D . Quantitative, Repeatable and Efficient.
Incorrect - Lacks qualitative insights and consistency as key factors for KRIs.
PRMIA Reference for Verification
PRMIA Risk Indicator Guidelines
Basel Committee's Principles on Risk Data and KRI
NEW QUESTION # 52
How should Near Misses and Opportunity Costs be treated within Operational Risk?
- A. Ignored.
- B. Reported, Recorded and Analyzed, Used in calculation of Operational Risk Capital.
- C. Reported. Recorded and Analyzed. Not Used in calculation of Operational Risk Capital.
- D. Recorded and Analyzed. Used in calculation of Operational Risk Capital.
Answer: C
Explanation:
Near Misses in Operational Risk
A near miss is an event that could have led to a loss but was avoided or mitigated before actual financial impact occurred.
PRMIA emphasizes that near misses should be reported, recorded, and analyzed because they provide valuable insights into potential vulnerabilities in risk controls.
However, since they did not result in actual financial losses, they are not included in the calculation of Operational Risk Capital.
Opportunity Costs in Operational Risk
Opportunity costs refer to the loss of potential gains due to missed strategic opportunities.
These are not directly quantifiable as operational risk losses and are not included in Operational Risk Capital calculations.
PRMIA's Operational Risk Framework states that operational risk is about actual losses rather than theoretical costs.
Why Other Answers Are Incorrect
Option
Explanation:
A . Ignored.
Incorrect - Near misses and opportunity costs provide valuable insights into operational risk, so they should never be ignored.
B . Recorded and Analyzed. Used in calculation of Operational Risk Capital.
Incorrect - While they should be recorded and analyzed, they are not included in Operational Risk Capital calculations because they do not result in actual losses.
D . Reported, Recorded, and Analyzed, Used in calculation of Operational Risk Capital.
Incorrect - Reporting, recording, and analysis are correct, but they should not be included in capital calculations.
PRMIA Reference for Verification
PRMIA Operational Risk Management Standards - Defines near misses and opportunity costs.
Basel II & III Operational Risk Framework - Outlines the principles of operational risk capital calculations.
NEW QUESTION # 53
......
Pass PRMIA 8020 Actual Free Exam Q&As Updated Dump: https://freedumps.actual4exams.com/8020-real-braindumps.html