Skip to content
DP
Risk Foundationsbeginner

A Taxonomy of Financial Risks

Financial firms organize their exposures under a few broad headings. The standard top-level categories are market risk (losses from moves in prices, rates, FX, or commodities), credit risk (losses when a counterparty fails to pay), liquidity risk (the inability to fund or to trade out of a position at a fair price), and operational risk (losses from failed processes, people, systems, or external events). This umbrella is the map the rest of the course fills in, with each branch later getting its own measures and tools. Real losses often involve several categories at once, so the taxonomy is a starting frame rather than a set of watertight boxes.

Why it matters

Think of it as the departments of a hospital for money. Market risk is the ward for things that move with prices. Credit risk is for borrowers who might not pay you back. Liquidity risk is being unable to get cash or to sell when you need to. Operational risk is everything from a rogue trader to a server outage. Most big crises send a patient through several wards at once, but you still need the signs on the doors to know where to start.

Formulas

Total risk as a combination of categories
σtotal2≠σmkt2+σcr2+σliq2+σop2  in general\sigma_{\text{total}}^2 \ne \sigma_{\text{mkt}}^2 + \sigma_{\text{cr}}^2 + \sigma_{\text{liq}}^2 + \sigma_{\text{op}}^2 \;\text{in general}
The categories are not independent: they correlate, especially in a crisis, so total risk is not the simple sum of the parts. Aggregation must account for the links between branches.

Worked examples

Scenario

Classify each loss: (a) a bond falls when yields rise; (b) a borrower defaults; (c) you cannot sell a position without crashing its price; (d) a payment is sent twice due to a software bug.

Solution

(a) market risk (interest-rate move), (b) credit risk (counterparty default), (c) liquidity risk (no buyer at a fair price), (d) operational risk (process or system failure). Note how a forced fire-sale during a default wave can chain (b) into (a) into (c), which is exactly why the categories are a map, not sealed boxes.

Scenario

Trace the 2007-2008 crisis through the taxonomy to see how one event moves across categories.

Solution

It began as credit risk: subprime borrowers defaulted at high rates. That became market risk as the mortgage-backed securities and CDOs built on those loans were repriced sharply lower. The repricing then became liquidity risk, because firms that had funded long-dated, illiquid assets with short-term borrowing could not roll their funding and were forced to sell into a market with no buyers at fair value, the fire-sale dynamic that climaxed with the Lehman Brothers bankruptcy in September 2008. One shock, credit then market then liquidity, which is why aggregate risk is not the sum of standalone categories.

Common mistakes

  • ✗The risk categories are mutually exclusive. A single event often spans several categories; a defaulting counterparty can trigger credit, liquidity, and market losses together.
  • ✗Market risk is the only risk that matters for a bank. For most banks credit risk is the largest exposure, and liquidity and operational risks have caused some of the worst failures.
  • ✗Operational risk is too vague to manage. Operational risk has its own loss-data, scenario, and capital frameworks; vagueness is a reason to measure it carefully, not to ignore it.
  • ✗Total risk is just the sum of the category risks. The branches are correlated, so risks must be aggregated with their dependencies rather than simply added.

Revision bullets

  • •Top-level umbrella: market, credit, liquidity, operational risk
  • •Market = price/rate/FX/commodity moves
  • •Credit = counterparty fails to pay (incl. sovereign, settlement subtypes)
  • •Liquidity = cannot fund or trade out at fair value; operational = process/people/systems/external
  • •Categories overlap and correlate, especially in crises

Quick check

A counterparty fails to make a contractually owed payment. Which top-level risk category is this?

Why is total firm risk generally NOT the simple sum of market, credit, liquidity, and operational risk?

Connected topics

Market RiskCredit RiskOperational RiskLiquidity Risk

Sources

  1. Jorion (2007), Ch. 1
    Jorion, P. Value at Risk: The New Benchmark for Managing Financial Risk. 3rd ed. McGraw-Hill, 2007.
    Classifies financial risk into market, credit, liquidity, and operational categories.
  2. GARP FRM Part I — Foundations
    Global Association of Risk Professionals. FRM Exam Part I: Foundations of Risk Management. GARP, 2023.
    Defines the standard risk taxonomy and notes the interaction among categories.
How to cite this page
Dr. Phil's Quant Lab. (2026). A Taxonomy of Financial Risks. Derivatives Atlas. https://phucnguyenvan.com/concept/frm-risk-taxonomy
← Back to the atlasSee in the network →