Operational Risk And Resilience

Well publicised failures in risk management have appeared with shocking frequency over the past few years. Affected firms can suffer significant commercial damage or even bankruptcy as a result. Only now is there a growing realisation that risk management is a key management responsibility. This book will help turn your firm into a 'risk aware' organization which will be able to avoid catastrophic loss. It will also enable senior management to make better strategic and operational decisions, thanks to an informed understanding of business hazards. Case studies from a wide cross section of different firms and markets are used to explain how to define, analyse and control operational risk. An insightful guide to one of the key topics of modern strategic and operational management, written by a team of expert risk management professionals Learn about the application of operational risk management to a wide range of market sectors, including commercial, retail and investment banking, investment management, insurance, the energy industry, telecommunications, manufacturing and logistics Case studies and worked examples from around the world, including North America, Western Europe, South East Asia and Latin America

� Published in association with IBM � Effective and comprehensive solutions This book describes how to develop a holistic framework for measuring, controlling, detecting, and responding to operational risk in all its manifestations. It provides the reader with a viable route to addressing this increasingly important issue in an effective and comprehensive manner.

CERT® Resilience Management Model (CERT-RMM) is an innovative and transformative way to manage operational resilience in complex, risk-evolving environments. CERT-RMM distills years of research into best practices for managing the security and survivability of people, information, technology, and facilities. It integrates these best practices into a unified, capability-focused maturity model that encompasses security, business continuity, and IT operations. By using CERT-RMM, organizations can escape silo-driven approaches to managing operational risk and align to achieve strategic resilience management goals. This book both introduces CERT-RMM and presents the model in its entirety. It begins with essential background for all professionals, whether they have previously used process improvement models or not. Next, it explains CERT-RMM’s Generic Goals and Practices and discusses various approaches for using the model. Short essays by a number of contributors illustrate how CERT-RMM can be applied for different purposes or can be used to improve an existing program. Finally, the book provides a complete baseline understanding of all 26 process areas included in CERT-RMM. Part One summarizes the value of a process improvement approach to managing resilience, explains CERT-RMM’s conventions and core principles, describes the model architecturally, and shows how itsupports relationships tightly linked to your objectives. Part Two focuses on using CERT-RMM to establish a foundation for sustaining operational resilience management processes in complex environments where risks rapidly emerge and change. Part Three details all 26 CERT-RMM process areas, from asset definition through vulnerability resolution. For each, complete descriptions of goals and practices are presented, with realistic examples. Part Four contains appendices, including Targeted Improvement Roadmaps, a glossary, and other reference materials. This book will be valuable to anyone seeking to improve the mission assurance of high-value services, including leaders of large enterprise or organizational units, security or business continuity specialists, managers of large IT operations, and those using methodologies such as ISO 27000, COBIT, ITIL, or CMMI.

OpRisk Awards 2020 Book of the Year Winner! The Authoritative Guide to the Best Practices in Operational Risk Management Operational Risk Management offers a comprehensive guide that contains a review of the most up-to-date and effective operational risk management practices in the financial services industry. The book provides an essential overview of the current methods and best practices applied in financial companies and also contains advanced tools and techniques developed by the most mature firms in the field. The author explores the range of operational risks such as information security, fraud or reputation damage and details how to put in place an effective program based on the four main risk management activities: risk identification, risk assessment, risk mitigation and risk monitoring. The book also examines some specific types of operational risks that rank high on many firms' risk registers. Drawing on the author's extensive experience working with and advising financial companies, Operational Risk Management is written both for those new to the discipline and for experienced operational risk managers who want to strengthen and consolidate their knowledge.

Technology failures, data loss, issues with providers of outsourced services, misconduct and mis-selling are just some of the top risks that keep financial firms up at night. In this context effective operational risk management is, simply, a commercial necessity. The management of operational risk, defined by the Basel Accord as arising from failures of processes, people, systems or external events, has developed considerably since its early years. Continued regulatory focus and catastrophic industry events have led to operational risk becoming a crucial topic on senior management's agenda. This book is a practical guide for practitioners which focuses on how to establish effective solutions and avoid common pitfalls. Filled with frameworks, examples and diagrams, this book offers clear advice on key practices including conducting risk assessments, assessing change initiatives, designing key risk indicators, establishing scenario analysis, drafting appetite statements and carrying out risk reporting. Operational Risk Management in Financial Services also features results from polls taken by risk practitioners which provide a snapshot of current practices and allow the reader to benchmark themselves against other firms. This is the essential guide for professionals looking to derive value out of operational risk management, rather than applying a compliance 'tick box' approach.

Major operational incidents in payment systems suggest the need to improve their resiliency. Meanwhile, as payment infrastructures become more digitalized, integrated, and interdependent, they require an even higher degree of resilience. Moreover, risks that could trigger major disruptions have become more acute given the rise in power outages, cyber incidents, and natural disasters. International experiences suggest the need to strengthen reliability objectives, redundancies, assessment of critical service providers, endpoint security, and alternative arrangements