Charta is on Google Play: practise on the go. Get the app
Charta

Define risk and set risk management against risk taking, showing how the two differ.

FRM® Part I · Foundations of Risk Management · The Building Blocks of Risk Management · FRM1.FR.1.a

The idea

Risk is uncertainty about outcomes that matter to an organization. It is the spread of possible results around what is expected, and it includes better outcomes as well as worse ones. Risk is not the same as loss. A loss that is certain is a cost, and a realized loss is the result of risk, not the risk itself. Risk taking is the deliberate acceptance of exposure in return for reward, and for a bank or fund it is the business itself. Risk management is the process of identifying, measuring, controlling and monitoring those exposures. Its purpose is that the risks taken are understood, intended, within the stated appetite and adequately compensated. Its aim is not to eliminate risk, since that would eliminate return, and hedging usually transforms a risk into a smaller or different one. On the exam, expect to separate actions that add exposure from actions that constrain it.

A practice question

From the question bank, with the reason each wrong option is wrong.

Which statement best defines risk in the sense used in risk management?

  1. Uncertainty about future outcomes that matter to an organization, including results better as well as worse than expected. - correct
  2. The probability that a loss occurs, measured only as the chance that a result falls below zero.Why not: Treats risk as the probability of a downside only; risk is the dispersion of outcomes, including favourable ones, and the size of the shortfall matters too.
  3. The amount the organization expects to lose over a period, which it has already budgeted in its plans and priced into products.Why not: Describes expected loss, which is anticipated and priced, rather than the uncertainty around expectations.
  4. Any event that has already produced a financial loss on the income statement.Why not: Confuses a realized loss with risk, which concerns uncertain future outcomes.

Risk is the uncertainty of outcomes relative to expectations or objectives, and it has an upside as well as a downside. Realized losses, budgeted losses and loss probabilities are each narrower ideas.

A harder one

A regional bank's board decides to expand into leveraged-loan lending to earn higher spreads and, at the same meeting, sets a limit on lending to any single borrower of 5% of capital. Which classification is correct?

  1. Both decisions are risk management, because both were approved by the board.Why not: Who approves an action does not define it; deliberately accepting exposure for return is risk taking.
  2. The expansion is risk management because it diversifies earnings; the limit is risk taking.Why not: Reverses the roles: adding new lending adds exposure, while a limit constrains exposure.
  3. The expansion is risk taking; the single-name limit is risk management. - correct
  4. Both decisions are risk taking, because any lending business creates credit exposure.Why not: A concentration limit is a control that restricts exposure; it does not create exposure.

Taking on exposure in pursuit of return is risk taking; setting limits, monitoring and controls so that exposure stays within appetite is risk management. Both are needed, and they are different activities.

The hardest tier

After a spike in market volatility, the chief risk officer of an investment bank proposes closing every trading position until conditions normalize. Which objection is most consistent with the distinction between risk management and risk taking?

  1. The proposal is sound, because a risk function's mandate is to minimize losses in all circumstances.Why not: Treats loss minimization as the mandate; the mandate is to keep risk aligned with appetite and compensated.
  2. Risk taking is how the bank earns its return; management aligns exposure with appetite, not zero. - correct
  3. The proposal is a risk taking decision, so only traders may make it; risk managers have no authority over positions.Why not: The distinction is about purpose, not who decides; risk managers set limits and can require exposure to be reduced.
  4. Closing positions would not reduce the bank's overall risk, because volatility affects only market risk.Why not: Closing positions does reduce market risk; the flaw is the objective of zero risk, not an ineffective action.

The CRO's proposal confuses management with elimination. A bank exists to take risk for reward; the risk function's task is to ensure the exposure is intended, within appetite and compensated, and to cut it when it is not.

In the app: 6 practice questions on this outcome, spaced review that brings it back before you forget it.

Start free →

More in The Building Blocks of Risk Management