Foundations of Investment Banking Risk

Introduction and context

Investment banking connects issuers of capital, investors, financial institutions, corporations and governments. Its activities include underwriting securities, advising on mergers and acquisitions, arranging finance, market-making, brokerage, securities financing, derivatives dealing, asset management and research. These activities create economic value, but they also expose the institution to losses arising from changes in prices, borrower failure, funding stress, process breakdowns, legal disputes and failures of judgment.

Risk management in investment banking is therefore broader than preventing trading losses. It is the disciplined process of identifying uncertainty, measuring its possible effects, selecting responses, allocating capital and liquidity, and monitoring whether controls remain effective. A risk that begins in one business line may be transmitted through the balance sheet, collateral arrangements, payment systems, reputation or the wider financial system.

This chapter establishes the conceptual foundation for analysing those risks. It distinguishes major risk categories, explains how investment-bank business models transmit risk, and introduces the risk identification–assessment–mitigation–monitoring cycle.

Learning objectives

By the end of this chapter, a learner should be able to:

1. Explain the principal business models and activities of an investment bank.
2. Interpret a simplified investment-bank balance sheet and identify important risk linkages.
3. Distinguish market, credit, counterparty, liquidity, operational, legal, conduct, model, reputational and systemic risk.
4. Explain how risks are transmitted across products, legal entities, markets and institutions.
5. Apply a structured risk-management cycle to a practical investment-banking scenario.
6. Evaluate the role of governance, capital, liquidity, data, technology and professional judgment in risk control.

1. The investment-bank business model

Intermediation and fee-based activities

An investment bank performs several related but distinct functions.

Origination and underwriting help companies and governments raise capital through equity, bonds and other securities. The bank may act as an agent, receiving a fee for arranging the issue, or it may underwrite the securities and temporarily assume the risk that investors will not purchase them. Underwriting creates inventory, market-price and funding exposure.

Advisory services include mergers and acquisitions, restructurings, valuations and strategic financing advice. These activities are mainly fee-based, but they create legal, conduct, conflict-of-interest and reputational risks. Advice can be challenged if it was negligent, misleading or inadequately disclosed.

Sales and trading connect clients with markets. A dealer may quote prices, execute transactions and hold positions to facilitate client activity. Positions in bonds, equities, foreign exchange, commodities, interest rates and derivatives can generate trading revenue, but their values change with market conditions.

Securities financing includes repurchase agreements, securities lending and margin lending. These transactions are collateralised in many cases, but collateral value, eligibility, liquidity and enforceability remain important risks.

Asset and wealth management earns management or performance fees for managing client assets. The assets may not belong to the bank, yet the bank remains exposed to operational, fiduciary, conduct and reputational risks.

Clearing and custody services involve holding assets, processing transactions and supporting settlement. The bank may face settlement, safeguarding, cyber and counterparty exposures even where it does not take a directional market position.

Principal risk-taking versus agency models

A bank operating primarily as an agent earns fees while arranging transactions for clients. A principal-oriented business commits its own capital, holds inventory or enters contracts in its own name. The principal model can produce higher revenue but generally creates greater exposure to market, credit, liquidity and balance-sheet risks.

The distinction is not absolute. An apparently low-risk agency transaction may create contingent obligations, operational dependencies or reputational exposure. Conversely, a principal transaction may be hedged, collateralised or centrally cleared. Risk analysis must therefore examine the legal contract, cash flows, collateral, funding and operational process rather than rely only on the product label.

Business-model risk

Business-model risk is the possibility that the institution’s strategy, revenue structure or competitive position becomes unsustainable. Examples include excessive dependence on volatile trading income, concentration in one client sector, underpricing of underwriting commitments, dependence on short-term wholesale funding, or a compensation system that rewards revenue without adequately charging for risk.

Senior management must understand the risk appetite of each business line and the way revenue, capital, liquidity and control costs interact. A business can be profitable on an accounting basis while destroying value after stress losses, funding costs and required capital are considered.

2. The investment-bank balance sheet as a risk map

A simplified balance sheet is represented by the accounting identity:

Assets include cash, securities inventory, loans, margin receivables, derivative receivables and collateral posted. Liabilities include deposits where applicable, repurchase agreements, securities-lending obligations, unsecured wholesale borrowing, derivative payables and other payables. Equity absorbs losses after liabilities have been considered.

The identity is an accounting relationship, not a guarantee of solvency. The economic value of assets can decline, liabilities can mature or become unavailable for rollover, and legal restrictions can prevent assets in one entity from being used to meet obligations in another.

Leverage and loss absorption

A simple gross leverage ratio can be expressed as:

Total assets and equity must be measured on a consistent accounting basis. This ratio is a simplified indicator: it does not recognise differences in asset risk, collateral quality, netting enforceability or liquidity. A bank with assets of 1,000 monetary units and equity of 50 monetary units has gross leverage of 20 times. A 5% decline in asset value, if not offset by gains elsewhere, equals 50 monetary units and would eliminate the stated equity before considering taxes, costs or accounting adjustments.

Risk-weighted capital measures address some differences in asset risk, but they depend on regulatory definitions and models. Neither leverage nor risk-weighted capital alone captures all risks. Liquidity, intraday settlement requirements, legal-entity constraints and operational resilience also matter.

Balance-sheet transmission channels

Risk can move through the balance sheet in several ways:

• A fall in the market value of trading inventory reduces assets and may generate margin calls.
• A borrower default reduces the value of loans or receivables.
• A counterparty downgrade can increase collateral requirements and replacement cost.
• A funding-market disruption can prevent rollover of short-term liabilities.
• A dispute over netting or collateral can make reported protection unavailable when needed.
• A cyber incident can interrupt payments, trading and access to liquidity simultaneously.

The balance sheet should therefore be read dynamically. Risk managers ask not only what the institution owns and owes today, but also how positions, collateral, cash flows and capital will change under stress.

3. Major categories of investment-banking risk

Risk categories are analytical tools. In practice they overlap. A single event may involve several categories at once.

Market risk

Market risk is the possibility of loss from adverse movements in market variables such as interest rates, credit spreads, equity prices, foreign-exchange rates, commodity prices, volatility and basis relationships. A bond portfolio may lose value when yields rise; an unhedged foreign-currency position may lose value when exchange rates move; an options portfolio may be affected by volatility and the passage of time.

Market risk may be directional, basis-related, volatility-related or liquidity-adjusted. Hedging reduces exposure but does not eliminate it: the hedge may be imperfect, the relationship may break down, or the hedge counterparty may fail.

A common sensitivity measure is the change in portfolio value for a small change in a risk factor:

Here, ∆V is the change in portfolio value and ∆x is the change in the market variable. This approximation is useful for small changes and reasonably linear instruments. It becomes unreliable for large movements or portfolios containing significant options or other nonlinear positions.

Value at Risk (VaR) estimates a loss threshold over a specified horizon and confidence level. For example, one-day 99% VaR of 10 million monetary units means that, under the model and assumptions, losses are expected to exceed 10 million on approximately 1% of comparable days. VaR is not the maximum possible loss, does not predict the size of losses beyond the threshold, and depends strongly on data, correlations and model design. Stress testing and scenario analysis are essential complements.

Credit risk

Credit risk is the possibility that a borrower or issuer fails to perform according to contractual obligations. It arises in loans, bonds, underwriting commitments, margin loans, receivables and certain derivatives.

Expected credit loss is often conceptualised as:

Probability of default (PD) is the likelihood of default over the relevant horizon; loss given default (LGD) is the proportion of exposure not recovered after default; and exposure at default (EAD) is the amount exposed when default occurs. The simple multiplication is most appropriate when the quantities are defined consistently for the same obligor, horizon and state of default. Portfolio correlations, recovery uncertainty, wrong-way risk and changes in exposure can make a more detailed model necessary.

Credit risk concerns the issuer or borrower. Counterparty credit risk, discussed below, concerns the failure of a trading or financing counterparty before all contractual cash flows have been exchanged. The two concepts overlap but should not be treated as identical.

Counterparty and settlement risk

Counterparty risk is the risk that the other party to a contract defaults while the bank has a positive replacement value. Derivatives may have low current exposure but substantial potential future exposure if market conditions move. Collateral, margining, netting agreements, central clearing and credit limits reduce exposure, subject to enforceability and operational effectiveness.

Settlement risk is the possibility that one party delivers cash or securities but does not receive the expected countervalue. Time-zone differences, payment-system failure, fraud and operational errors can create substantial exposures. A transaction may be legally valid yet still generate intraday liquidity pressure during settlement.

Liquidity and funding risk

Liquidity risk has two related dimensions. Funding liquidity risk is the inability to meet obligations when due. Market liquidity risk is the inability to sell or hedge a position quickly without a material price concession.

Liquidity risk is nonlinear. A small price movement may trigger margin calls, which require asset sales; sales may depress prices, creating further margin calls. A bank can be solvent on an accounting basis but fail because it cannot obtain cash in time.

Important controls include high-quality liquid assets, diversified funding, maturity analysis, collateral inventories, committed facilities, intraday monitoring and a tested contingency funding plan. Liquidity stress tests should consider simultaneous market losses, collateral calls, ratings downgrades, client withdrawals and reduced market access.

Operational risk

Operational risk is the possibility of loss resulting from inadequate or failed internal processes, people and systems, or from external events. Examples include incorrect trade capture, failed reconciliations, unauthorised trading, cyberattacks, technology outages, processing backlogs, third-party failure and physical disruption.

Operational risk is not merely an administrative concern. A settlement-system failure can create market and counterparty exposures; inaccurate reference data can misvalue a portfolio; and a cyberattack can impair liquidity, regulatory reporting and client confidence simultaneously. Controls include segregation of duties, access management, reconciliations, change control, incident reporting, business continuity and disaster recovery testing.

Legal and regulatory risk

Legal risk is the possibility of loss because a contract is unenforceable, a transaction violates law, or a claim produces liability. Key questions include whether the bank has authority to enter the transaction, whether terms are clear, whether netting and collateral rights are enforceable in relevant jurisdictions, and whether required disclosures and approvals were made.

Regulatory risk includes changes in rules, supervisory interpretation, licensing requirements, capital standards, reporting obligations and sanctions regimes. Legal opinions and compliance approvals reduce uncertainty but do not substitute for continuing monitoring.

Conduct risk

Conduct risk is the possibility that behaviour harms clients, markets or the integrity of the institution. Mis-selling, misleading communications, inappropriate conflicts management, market manipulation, misuse of confidential information, unfair allocation of securities and inadequate suitability assessments are examples.

Conduct risk is shaped by incentives and culture. A formal policy may be ineffective if compensation, promotion and management attention reward revenue while ignoring client outcomes. Effective controls include surveillance, personal-account dealing rules, information barriers, conflicts registers, training, complaints analysis and credible disciplinary processes.

Model risk

Model risk is the possibility that a model is wrong, misused or applied outside its design conditions. Models are used for valuation, risk measurement, pricing, capital, credit assessment, liquidity forecasting and stress testing.

Sources of model risk include unsuitable assumptions, poor data, coding errors, omitted risk factors, unstable relationships and incorrect implementation. Validation should assess conceptual soundness, data quality, mathematical implementation, performance, limitations and governance. Independent review, benchmarking, sensitivity analysis, back-testing and controlled model changes are important safeguards.

Reputational risk

Reputational risk is the possibility that stakeholder confidence declines because of actual or perceived misconduct, losses, service failures or association with controversial activities. It is difficult to quantify because the effect may appear through lost clients, higher funding costs, employee departures, regulatory scrutiny or reduced access to markets.

Reputational risk is often a consequence of other risks rather than an isolated event. A technically legal transaction may nevertheless damage trust if stakeholders believe the bank exploited information asymmetry or failed to manage conflicts.

Systemic risk

Systemic risk is the possibility that distress at one institution, market or infrastructure provider spreads through financial connections and impairs the wider system. Channels include common asset holdings, interbank exposures, derivatives, payment systems, collateral chains, fire sales and loss of confidence.

Systemic risk differs from ordinary firm-specific risk because the social consequences can exceed the private loss of the initiating institution. Macroprudential measures, central clearing, resolution planning, recovery plans, capital and liquidity buffers, and supervisory information-sharing seek to reduce these externalities. Central clearing can reduce bilateral exposures but may concentrate risk in clearing houses and create new liquidity demands; it is not a universal elimination of risk.

4. Risk transmission and interconnectedness

Risk transmission describes how an initial shock becomes a broader loss. Consider an investment bank holding corporate bonds. A deterioration in the issuer’s outlook may reduce bond prices (market risk), increase expected default loss (credit risk), trigger a margin call from a financing counterparty (liquidity risk), and generate losses if the hedge is imperfect (market and counterparty risk). If the bank’s systems cannot process collateral movements, operational risk intensifies the event. Public disclosure may then create reputational pressure and higher funding costs.

Transmission also occurs across legal entities. Client assets, collateral and cash may be segregated or subject to restrictions. A parent company may not be able to transfer liquidity freely to a subsidiary during stress. Risk reporting must therefore reflect legal-entity, jurisdictional and contractual boundaries.

Concentration is a major amplifier. Concentration may involve one borrower, sector, country, currency, funding source, market infrastructure, technology vendor or risk factor. Diversification is valuable only when exposures are not highly correlated under stress. Historical correlations often rise during crises, so risk managers should test common shocks rather than assume normal diversification.

5. The risk-management cycle

A professional risk framework is continuous rather than a one-time checklist.

Step 1: Identify

Identification begins with strategy, products, clients, legal entities and processes. Techniques include risk-and-control self-assessments, process mapping, transaction inventories, horizon scanning, incident analysis, interviews, control testing and scenario workshops. The output should describe the source, event, consequence, affected stakeholders, existing controls and potential transmission channels.

A useful risk statement has the form: “Because of [source], [event] may occur, causing [consequence].” For example: “Because short-term secured funding is concentrated among a small group of lenders, simultaneous withdrawal of facilities may prevent the bank from meeting collateral calls.”

Step 2: Assess

Assessment combines qualitative judgment and quantitative analysis. A basic risk matrix considers likelihood and impact, but a matrix should not conceal uncertainty or create false precision. Quantitative tools include sensitivities, scenario analysis, stress tests, credit exposure measures, liquidity-gap analysis, loss databases and capital impact analysis.

Assessment should consider inherent risk before controls and residual risk after controls. It should also assess velocity, persistence, detectability, correlation and the quality of available data. Low-frequency, high-impact events deserve attention even when their historical frequency is limited.

Step 3: Mitigate

Mitigation may reduce probability, impact or both. Methods include avoiding a transaction, reducing position size, diversifying exposures, obtaining collateral, using contractual netting, hedging, setting limits, holding capital and liquidity, improving processes, transferring risk through insurance, or preparing recovery and resolution actions.

Mitigation has costs and residual risks. Collateral reduces credit exposure but may create margin-call and liquidity risk. Hedging reduces market exposure but introduces basis and counterparty risk. Outsourcing may reduce operating costs while increasing third-party dependency. The appropriate response depends on risk appetite, economics, legal enforceability and the speed of the threat.

Step 4: Monitor and report

Monitoring compares actual exposure and control performance with approved limits and risk appetite. Measures may include position sensitivities, stressed losses, counterparty exposure, collateral calls, liquidity buffers, limit utilisation, settlement fails, system availability, complaints, conduct alerts and model exceptions.

Escalation thresholds should be defined in advance. Reports must reach people with authority to act and should distinguish current exposure from potential exposure. Effective reporting is timely, accurate, comprehensible and sufficiently granular to reveal concentrations.

Step 5: Learn and adapt

Incidents, near misses, audit findings, breaches and stress exercises should produce corrective actions with owners and deadlines. The cycle returns to identification when products, markets, regulations, technology or strategy changes. Risk management fails when lessons are recorded but not embedded in decisions, incentives and controls.

6. Governance and the three lines of responsibility

The board sets risk appetite and oversees whether management maintains an effective control environment. Senior management converts appetite into limits, policies, resources and incentives. The first line—business and operations—owns risks and operates controls. The second line—risk management and compliance—sets frameworks, challenges decisions and monitors exposures. The third line—internal audit—provides independent assurance on governance and control effectiveness.

Independence must be practical, not merely organisational. Risk officers need access to information, authority to challenge revenue-generating units and a direct escalation route. At the same time, business managers cannot outsource accountability: the existence of a risk department does not transfer ownership of risk.

Risk appetite should be expressed through qualitative boundaries and quantitative limits. Examples include maximum exposures, stress-loss tolerances, liquidity survival horizons, counterparty limits, concentration limits and prohibited activities. Limits are useful only when data is timely, breaches are escalated and exceptions are governed.

7. Applied case: a leveraged underwriting and financing position

The following is an illustrative case, not a report of a particular institution.

Background

Harbor Investment Bank agrees to underwrite 600 million monetary units of bonds for a highly leveraged energy company. The bank expects to distribute the bonds to investors within two weeks. To finance temporary inventory, it uses short-term repurchase funding. It also enters an interest-rate hedge and obtains collateral from the issuer under a separate agreement.

Problem

Before distribution, energy prices fall sharply. The issuer’s credit spread widens, investors demand a higher yield, and the bonds decline in value. The repurchase lenders increase the haircut and request additional collateral. The interest-rate hedge generates a gain, but it does not offset the credit-spread loss. A system defect delays the collateral call process.

Analysis

The initial event creates several linked risks:

• Market risk: the bond price falls as credit spreads widen.
• Credit risk: the issuer’s probability of default increases.
• Liquidity risk: higher haircuts require additional cash or eligible collateral.
• Counterparty risk: financing providers may reduce or withdraw funding.
• Basis risk: the interest-rate hedge does not hedge the issuer’s credit spread.
• Operational risk: the collateral-processing defect delays action.
• Model risk: valuation and stress assumptions may understate spread volatility.
• Reputational and conduct risk: investors may question whether risks were properly disclosed.

Approach and solution

The bank should establish a cross-functional incident team, verify valuations independently, calculate current and stressed exposure, and confirm the enforceability and eligibility of collateral. It should seek additional collateral or financing, reduce the position where economically possible, review hedge effectiveness and escalate the matter under underwriting and liquidity limits. Senior management should evaluate whether distribution remains realistic and whether a controlled loss is preferable to prolonged inventory funding.

The bank should also investigate the process failure, correct the system, test collateral workflows, review the underwriting approval and compare actual stress outcomes with model assumptions. Communication with clients, regulators and financing counterparties should be accurate, timely and coordinated.

Outcome

Assume the bank sells the bonds at 94% of face value. The sale proceeds are 564 million monetary units, producing a gross loss of 36 million before hedge gains, financing costs, fees and tax. The calculation is:

The result is not the total economic loss. Hedge gains may offset part of it, while funding costs, collateral opportunity costs, operational remediation and reputational effects may add to the loss. The example demonstrates why product-level profit analysis is inadequate: underwriting, market, liquidity, operational and governance risks must be assessed together.

Learning points

1. Underwriting commitments create risk even before securities are distributed.
2. A hedge is effective only against the risk factor it actually covers.
3. Collateral reduces exposure only when it is valuable, available, enforceable and operationally transferable.
4. Liquidity stress can turn a manageable valuation loss into a crisis.
5. Incident response must address both immediate containment and control redesign.

8. Technology, data and contemporary developments

Investment banks increasingly depend on automated pricing, electronic trading, cloud infrastructure, artificial intelligence and large-scale data platforms. These tools can improve speed, surveillance and anomaly detection, but they create new dependencies. Poor training data, opaque algorithms, cyber vulnerabilities, model drift and automated feedback loops can amplify losses.

AI systems require clear ownership, documented use cases, data governance, access controls, validation, monitoring and human escalation. Generative systems should not be allowed to create client communications, valuations or regulatory submissions without appropriate review. Explainability is especially important where a model affects credit decisions, client treatment or regulatory reporting.

Contemporary risk management also addresses climate-related financial risk, geopolitical shocks, cyber resilience, third-party concentration, digital assets and faster settlement cycles. These are not always separate risk categories; they can change the severity, speed or correlation of traditional risks.

9. Limitations and professional judgment

No framework eliminates uncertainty. Historical data may omit unprecedented events; stress scenarios may be too narrow; risk categories may create silos; and aggregation may double-count or omit exposures. Quantitative precision can produce misplaced confidence, particularly when liquidity, legal enforceability and human behaviour are difficult to model.

Professional judgment should be disciplined rather than intuitive. A sound decision records assumptions, uncertainty, alternatives, escalation criteria and the reasons for accepting residual risk. Independent challenge is valuable, but challenge must be informed by business knowledge and timely data.

Ethical risk management requires attention to clients, employees, markets and society, not only shareholders. Protecting confidential information, treating clients fairly, avoiding manipulation and reporting exposures honestly are fundamental obligations. A bank that meets a narrow legal test while undermining market integrity may still create unacceptable conduct and reputational risk.

Chapter Summary

Investment banks create value through intermediation, underwriting, advisory, trading, financing, custody and asset management. These activities produce different combinations of fee, market, credit, counterparty, liquidity, operational, legal, conduct, model, reputational and systemic risk.

The balance sheet provides a useful map of risk transmission. Assets, liabilities and equity interact dynamically through valuation changes, collateral calls, funding rollover and loss absorption. Leverage is informative but incomplete; capital, liquidity, legal structure, operational resilience and stress behaviour must also be considered.

Risks are interconnected. A single shock can move from market prices to credit quality, collateral, liquidity, operations, reputation and systemic confidence. The central management discipline is a continuous cycle: identify risks, assess likelihood and impact, mitigate them in accordance with risk appetite, monitor exposures and controls, and learn from events and near misses. Strong governance assigns ownership, preserves independent challenge and ensures that risk information reaches decision-makers in time.

Key Terms

Risk appetite: The amount and type of risk an institution is willing to accept in pursuit of its objectives.

Market risk: Loss caused by adverse changes in market prices, rates, spreads, volatility or other market variables.

Credit risk: Loss arising from a borrower or issuer failing to meet contractual obligations.

Counterparty risk: The risk that a trading or financing counterparty fails before all contract payments are exchanged.

Settlement risk: The risk that one party delivers value but does not receive the expected countervalue.

Liquidity risk: The inability to meet obligations or transact without an unacceptable price concession.

Operational risk: Loss arising from failed processes, people, systems or external events.

Legal risk: Loss arising from unenforceable contracts, legal liability or breach of law.

Conduct risk: Harm caused by inappropriate behaviour toward clients, markets or the public.

Model risk: Loss caused by incorrect models, data, assumptions, implementation or use.

Reputational risk: Loss caused by reduced stakeholder confidence.

Systemic risk: Risk that distress spreads through the financial system.

Leverage: The relationship between assets or exposures and equity or capital.

Collateral: Assets pledged to secure an obligation.

Haircut: A reduction applied to collateral value for risk-management purposes.

Hedging: Taking an offsetting position to reduce exposure to a risk factor.

Stress testing: Analysing outcomes under severe but plausible scenarios.

Residual risk: Risk remaining after controls and mitigation.

Three lines model: A governance structure distinguishing business ownership, risk oversight and independent assurance.

Wrong-way risk: The risk that exposure increases when the counterparty’s credit quality deteriorates.

Review Questions

5 Short Answer Questions

1. What are the principal differences between an agent business model and a principal business model?
2. Why is the balance-sheet identity not, by itself, a measure of solvency?
3. Distinguish credit risk from counterparty risk.
4. Name two ways in which collateral can reduce risk and two ways in which it can create new risk.
5. What is the purpose of the monitoring stage in the risk-management cycle?

5 Long Answer Questions

1. Explain how an investment bank’s underwriting, trading and securities-financing activities can interact to create a compound risk event.
2. Discuss the strengths and limitations of VaR, sensitivity analysis and stress testing as market-risk tools.
3. Explain the role of governance, risk appetite and the three lines of responsibility in investment-bank risk management.
4. Analyse the relationship between liquidity risk and market risk during a period of severe market stress.
5. Discuss why model risk and conduct risk cannot be managed solely through quantitative controls.

3 Analytical / Application Questions

1. A bank has equity of 40 million monetary units and total assets of 800 million monetary units. Calculate its simplified gross leverage ratio and explain one limitation of the measure.
2. Apply the risk-management cycle to a proposed derivatives transaction with a new overseas counterparty. Identify at least five risks and specify one mitigation and one monitoring indicator for each.
3. An underwriting desk reports a profitable bond transaction, but the position required emergency funding after spreads widened. Evaluate whether the transaction was economically successful, identifying the additional information required before reaching a conclusion.

Multiple Choice Questions with Answers

Question 1

Which activity most directly creates temporary inventory and market-price exposure for an investment bank?

A. Pure strategic consulting

B. Underwriting securities as principal

C. Maintaining a client complaints register

D. Conducting internal audit

Correct Answer: B. Underwriting securities as principal

Question 2

The accounting identity for a simplified balance sheet is:

A. Assets = Liabilities + Equity

B. Assets = Revenue − Expenses

C. Equity = Assets + Liabilities

D. Liabilities = Assets + Revenue

Correct Answer: A. Assets = Liabilities + Equity

Question 3

A portfolio’s sensitivity is approximately measured by:

A. ∆V × ∆x

B. ∆V ÷ ∆x

C. V ÷ x²

D. x ÷ V

Correct Answer: B. ∆V ÷ ∆x

Question 4

Which risk specifically concerns failure of a trading counterparty before all contractual cash flows are exchanged?

A. Conduct risk

B. Counterparty credit risk

C. Reputational risk

D. Business-model risk

Correct Answer: B. Counterparty credit risk

Question 5

A bank has a probability of default of 2%, loss given default of 40%, and exposure at default of 10 million monetary units. Using the simple expected-loss formula, expected loss is:

A. 8,000 monetary units

B. 80,000 monetary units

C. 800,000 monetary units

D. 8 million monetary units

Correct Answer: B. 80,000 monetary units

Question 6

Which statement about liquidity risk is most accurate?

A. A solvent institution can never experience liquidity failure

B. Liquidity risk concerns only equity prices

C. Margin calls and forced sales can amplify liquidity stress

D. Liquidity risk is eliminated by holding any collateral

Correct Answer: C. Margin calls and forced sales can amplify liquidity stress

Question 7

Which is an example of model risk?

A. A borrower intentionally misses a payment

B. A valuation model omits a material risk factor

C. A client changes investment objectives

D. A bond issuer pays on time

Correct Answer: B. A valuation model omits a material risk factor

Question 8

In the three lines model, business units primarily:

A. Own and manage the risks arising from their activities

B. Provide only external regulatory assurance

C. Set monetary policy for the economy

D. Replace the board’s oversight role

Correct Answer: A. Own and manage the risks arising from their activities

Question 9

What is the principal purpose of stress testing?

A. To prove that losses are impossible

B. To examine outcomes under severe but plausible scenarios

C. To replace all daily risk measures

D. To guarantee accurate market forecasts

Correct Answer: B. To examine outcomes under severe but plausible scenarios

Question 10

Which sequence best represents the core risk-management cycle?

A. Monitor, ignore, insure, close

B. Identify, assess, mitigate, monitor and learn

C. Trade, distribute, advertise, expand

D. Borrow, invest, speculate, report

Correct Answer: B. Identify, assess, mitigate, monitor and learn