Skip to content
DP
Risk Foundationsbeginner

Operational Risk

Operational risk is the risk of loss from inadequate or failed internal processes, people, and systems, or from external events. The Basel definition explicitly includes legal risk but excludes strategic and reputational risk. It spans rare catastrophic events (fraud, a major cyber-attack, a natural disaster) and frequent small ones (settlement errors, mispriced trades). Because the loss distribution is highly skewed, with a long heavy tail, operational risk is modelled with loss databases and scenario analysis rather than with the price-history methods used for market risk.

Why it matters

Operational risk is everything that can go wrong inside the machine rather than in the market: a rogue trader, a fat-finger error, a hacked system, a flood that closes the office. Most days it is a trickle of small mistakes; very rarely it is a catastrophe that sinks the firm. Because the big losses are rare and one-off, you cannot just read them off a price chart, so banks pool loss events and imagine scenarios instead. Barings Bank died of operational risk, not market risk.

Formulas

Operational loss as frequency times severity
Lop=∑i=1NXi,N∼frequency,  Xi∼severityL_{\text{op}} = \sum_{i=1}^{N} X_i, \quad N \sim \text{frequency}, \; X_i \sim \text{severity}
A loss-distribution approach: NN is the number of loss events over a period and each XiX_i is a loss amount. The aggregate LopL_{\text{op}} has a long right tail driven by rare, large XiX_i.

Worked examples

Scenario

Why was the 1995 collapse of Barings Bank an operational-risk event rather than a market-risk one?

Solution

A single trader, Nick Leeson, ran unauthorized Nikkei 225 futures positions and hid the losses in an error account because he controlled both the front office (trading) and the back office (settlement), a failed internal control. By 27 February 1995 the losses reached about GBP 827M, roughly 2.6 times the bank's capital, and the 233-year-old bank was sold to ING for GBP 1. The Nikkei did move against the positions, but the root cause was the broken process and absent oversight (a people and process failure), which is operational risk. Segregation of the front and back office would have caught it.

Common mistakes

  • ✗Operational risk includes reputational and strategic risk. The Basel definition explicitly excludes strategic and reputational risk, though it does include legal risk.
  • ✗Operational risk is too soft to quantify. Banks use loss-event databases, scenario analysis, and capital models; it is quantified differently from market risk, not left unquantified.
  • ✗Operational losses are always small and frequent. The distribution is heavy-tailed: most events are minor, but rare catastrophic events (rogue trading, cyber, disaster) drive most of the capital requirement.
  • ✗Buying insurance removes operational risk entirely. Insurance transfers some operational losses, but coverage limits, exclusions, and the residual mean material operational risk usually remains.

Revision bullets

  • •Operational risk = loss from failed processes, people, systems, or external events
  • •Basel: includes legal risk, excludes strategic and reputational risk
  • •Heavy-tailed: frequent small losses plus rare catastrophic ones
  • •Modelled with loss databases and scenario analysis, not price histories
  • •Barings (1995) is the classic operational-risk failure

Quick check

Under the Basel definition, operational risk explicitly includes which of the following?

Why is operational risk usually modelled with loss databases and scenario analysis rather than price histories?

Connected topics

Risk TreatmentRisk TaxonomyMarket RiskCredit Risk

Sources

  1. BCBS — Basel II operational risk
    Basel Committee on Banking Supervision. International Convergence of Capital Measurement and Capital Standards (Basel II). Bank for International Settlements, 2006.
    Source of the formal operational-risk definition (includes legal, excludes strategic and reputational risk).
  2. Jorion (2007), Ch. 20
    Jorion, P. Value at Risk: The New Benchmark for Managing Financial Risk. 3rd ed. McGraw-Hill, 2007.
    Discusses operational risk, its heavy-tailed loss distribution, and the loss-distribution approach.
How to cite this page
Dr. Phil's Quant Lab. (2026). Operational Risk. Derivatives Atlas. https://phucnguyenvan.com/concept/frm-operational-risk
← Back to the atlasSee in the network →