|
This
English translation of a German book is a
little-known gem among books on operational risk management. It shouldn't be the
first book you read on the subject, but it very likely should be the second.
Read a book like Risk (2002) to "see
the forest." Then read this book "for the trees."
It is a short
book, but it offers a wealth of information. The focus is on qualitative aspects
of operational risk management — what can go wrong in a financial institution,
how to anticipate it, and what to do to avoid it. No other book offers the
informed, practical insights that this one does.
What I really like
about the book is how actionable the advice is. There aren't "pie-in-the-sky"
strategy statements. Instead, there is advice to perform an initial self
assessment. It tells you specifically what to look at, things like:
an
organizational chart
an
IT architecture overview with data flows
transaction
volumes
maximum
processing capacity
internal
audit reports
overtime
reports over the last six months
etc.
etc. etc.
There is detailed information on types of operational risk. Some of the material
is common sense. Some is more esoteric. What is nice is the fact that it is all
pulled together for you. The book tells you what needs to be addressed, so you
can get right to work.
|
|
|
|
Introduction
1 Definition and Dimensions of
Operational Risk
2 Risk Identification and
Quantification
3 Management of Operational Risk
4 Concluding Remarks
App. 1 Operational Risk: Diagnosis
App. 2 Operational Risk: Error Trees
App. 3 Transaction Volume
App. 4 Loss Factor Categorization
|
|
Quantitative
techniques are discussed briefly, and the presentation is excellent. Without
delving into mathematics, the book offers nice overviews of standard modeling
techniques proposed by the Basle committee and other institutions.
There are excellent appendices. One of these is an
extensive list of questions broken down by function. Here are just a few
examples from the section on systems:
Is a list of
business-critical systems available?
Is a deputy
available in case decisions regarding recovery measures need to be taken?
Is a detailed
recovery procedure available which describes the necessary steps after a system
breakdown?
Are critical
systems doubled?
Are critical
systems connected to two independent power systems?
etc.
I highly recommend the book. It is a veritable
roadmap that you will turn to time and time again. If you want more extensive
information on quantitative techniques, supplement with Cruz (2002).
|