CRA Risk Appetite & Tolerance Frameworks 3 — Questions and Answers
Question 1: A risk appetite statement includes both qualitative and quantitative elements. What is the PRIMARY advantage of quantitative metrics in the statement?
- They replace the need for qualitative guidance
- They provide measurable thresholds that enable objective monitoring and reporting (Correct answer)
- They are easier for the board to understand than qualitative statements
- They eliminate subjectivity in all risk decisions
Correct answer: They provide measurable thresholds that enable objective monitoring and reporting
Quantitative metrics enable objective, consistent monitoring of risk levels against defined thresholds, making it possible to detect and report breaches systematically.
Question 2: Which risk appetite framework component links strategic objectives directly to acceptable risk levels for each business line?
- Risk register
- Risk tolerance cascade (Correct answer)
- Risk heat map
- Control self-assessment
Correct answer: Risk tolerance cascade
The risk tolerance cascade translates the enterprise-level risk appetite into specific, actionable limits for individual business lines aligned to their strategic objectives.
Question 3: A CRA candidate is told that 'risk appetite articulates how much risk an organization WANTS to take.' Which complementary concept describes the risk the organization IS currently taking?
- Risk capacity
- Risk exposure or risk profile (Correct answer)
- Risk tolerance
- Residual risk
Correct answer: Risk exposure or risk profile
The risk profile or risk exposure represents the actual current level of risk the organization is bearing, which is compared to appetite to identify gaps.
Question 4: Under COSO ERM, which of the following is NOT a recommended characteristic of a well-defined risk appetite?
- Aligned with strategy
- Expressed in measurable terms
- Static and unchanged year over year (Correct answer)
- Considers stakeholder expectations
Correct answer: Static and unchanged year over year
COSO ERM emphasizes that risk appetite should be dynamic and revisited as strategy and context evolve; being static is a deficiency, not a characteristic.
Question 5: When setting risk tolerance for liquidity risk, which metric is MOST commonly used as a threshold?
- Loan-to-deposit ratio ceiling
- Minimum liquidity coverage ratio (LCR) floor (Correct answer)
- Maximum credit default swap spread
- Minimum return on equity target
Correct answer: Minimum liquidity coverage ratio (LCR) floor
The Liquidity Coverage Ratio (LCR) floor is a standard regulatory and internal tolerance metric ensuring an institution can survive a 30-day stress period.
Question 6: An insurance company's risk appetite framework sets a maximum probability of ruin of 0.5% over a one-year horizon. This is an example of which type of risk appetite expression?
- Earnings-at-risk limit
- Economic capital constraint
- Probabilistic risk tolerance threshold (Correct answer)
- Value-at-risk floor
Correct answer: Probabilistic risk tolerance threshold
Expressing risk appetite as a maximum acceptable probability of ruin is a probabilistic threshold approach, defining how likely the organization can tolerate catastrophic loss.
Question 7: Which party bears ULTIMATE accountability for approving and overseeing adherence to the risk appetite framework in a corporate governance structure?
- Chief Risk Officer
- Internal Audit Committee
- Board of Directors (Correct answer)
- Business line heads
Correct answer: Board of Directors
The Board of Directors holds ultimate accountability for approving the risk appetite framework and ensuring the organization operates within it.
CRA Risk Appetite & Tolerance Frameworks 3
A risk appetite statement includes both qualitative and quantitative elements.
What is the PRIMARY advantage of quantitative metrics in the statement?