The Future of Operational Risk

Operational risk is at an inflection point

Operational risk is important and increasing. But, operational risk management is difficult. This intensification is happening at such a rapid pace that risk managers need to adapt faster than ever before.

Operational risk management is at an inflection point and needs a rethink.

What needs to change?

There are many challenges facing operational risk management, including:

• Reinventing and clarifying the mandate for operational risk management
• Generating good quality, useful risk information
• The potential for advanced analytics to improve capabilities
• Improving the effectiveness and efficiency of controls
• Increasing skill levels
• Improving organisational risk culture

Five building blocks to support reinventing operational risk management

The study identified five areas that need strengthening if operational risk management is to be reinvented. Strengthening these building blocks could elevate the function to a level where it doesn't just cope with the challenges ahead, but delivers real value to the underlying business.

1. Improve risk management information
2. Embed advanced analytics
3. Strengthen risk
4. Foster a strong risk culture
5. Bolster people and skills

Our survey clearly showed that operational risk is expected to increase. Given the scale and complexity of emerging operational risks like cyber and outsourcing, it's the operational risk profile that will change the most. Furthermore, our survey reinforced the idea that managing operational risk is difficult.

Progress has been made over the past 20 years. CROs expressed satisfaction with the work that has been done in the last few years, specifically on the “core” frameworks (e.g. risk identification and assessment, capital modelling). Yet, there is also clear frustration. These frameworks alone are not enough to allow their companies to tackle the risk management challenges that lie ahead.

Operational risk management needs to step forward and step up. It needs to engage with the business. It must ensure better coordination between different functions – such as operational risk, compliance and IT. The survey highlights five specific building blocks that must be strengthened:

• Risk management information
• Advanced analytics
• Risk controls
• Risk culture
• Operational risk management skills

Just reinforcing one or two of these five building blocks will not be enough. Action is needed on all five to ensure that firms can reinvent operational risk management when they need it most.

Fill in the form below to download the report.