Charta is on Google Play: practise on the go. Get the app
Charta

Show how quantitative factor-based models gauge operational risk, and how the Swiss cheese model and bowtie tool get applied.

FRM® Part II · Operational Risk and Resilience · Risk Measurement and Assessment · FRM2.ORR.4.d

The idea

Factor-based models explain operational loss or capital through measurable drivers such as transaction volume, staff turnover, system incidents and control scores, typically through a regression or scoring formula. Management can then see how a change in drivers moves the estimate. Their limits are the need for reliable factor data and the assumption of stable relationships. Two qualitative tools support the analysis. The Swiss cheese model sees defences as layers with holes, which are latent conditions and active failures, and a loss occurs when the holes align, so the review looks at every layer. The bowtie puts a central event in the middle, with causes and preventive barriers on the left and consequences and mitigating barriers on the right. Neither tool gives a probability by itself.

A practice question

From the question bank, with the reason each wrong option is wrong.

According to the Swiss cheese model applied to operational risk, a loss event occurs when:

  1. a single control fails, because each layer is designed to be a complete and independent barrier.Why not: Treats one control failure as sufficient; the model's point is that several imperfect layers must fail together.
  2. the likelihood and impact ratings of a risk both exceed the firm's appetite.Why not: Describes a heatmap breach, not the layered-defence failure mechanism.
  3. an external shock exceeds the firm's economic capital for operational risk.Why not: Confuses the model with a capital adequacy test.
  4. weaknesses in several layers of defence line up so that a hazard passes through all of them. - correct

Each defensive layer has holes (latent conditions and active failures). Harm occurs only if holes in successive layers align, so strengthening any one layer, or adding layers, reduces losses.

A harder one

A bank estimates annual operational loss for a unit with a factor model: loss (USD million) = 0.20 + 0.15 x transactions (million) + 0.08 x staff turnover (percentage points) - 0.05 x control score (1 to 10, higher is better). A unit has 8 million transactions, staff turnover of 12% and a control score of 6. What is the predicted loss?

  1. USD 1.86 millionWhy not: Leaves out the intercept of 0.20.
  2. USD 2.06 million - correct
  3. USD 2.66 millionWhy not: Adds the control score term instead of subtracting it, treating better controls as increasing loss.
  4. USD 1.11 millionWhy not: Enters turnover as 0.12 instead of 12 percentage points, shrinking its term to almost nothing.

Loss = 0.20 + 0.15 x 8 + 0.08 x 12 - 0.05 x 6 = 0.20 + 1.20 + 0.96 - 0.30 = 2.06. Factor models link losses to measurable drivers, so management can see how changes in each driver move the estimate.

The hardest tier

A review of a duplicated payment finds: a scheduler defect introduced 18 months earlier, an operator who overrode a duplicate-check warning, and a reconciliation that was suspended for two weeks. Which conclusion best applies the Swiss cheese model?

  1. The operator's override is the root cause, since it was the last action before the loss and the only human decision involved.Why not: Focuses on the active failure at the sharp end and ignores the latent conditions that allowed it to cause a loss.
  2. The loss arose from aligned weaknesses in several layers; fix the latent defect and suspended control, not just the override. - correct
  3. The scheduler defect alone is the root cause, because it existed first, so the other items are irrelevant.Why not: Selects one hole as sole cause; the model says losses need holes in several layers to align.
  4. The event shows controls cannot work, so adding further layers of defence would be pointless.Why not: Draws the opposite conclusion; adding or repairing layers is the way to reduce alignment of holes.

Swiss cheese analysis distinguishes active failures (the override) from latent conditions (the defect, the suspended reconciliation). Fixing latent weaknesses across layers gives more protection than blaming the individual at the end.

In the app: 6 practice questions on this outcome, spaced review that brings it back before you forget it.

Start free →

More in Risk Measurement and Assessment