Operational Risk

IntermediateRisk Management2 min read

Quick Definition

The risk of loss resulting from inadequate or failed internal processes, people, systems, or external events within a financial institution or business.

What Is Operational Risk?

Operational risk encompasses losses from failed internal processes, human errors, system failures, or external events. It's one of the three major risk categories alongside market risk and credit risk.

Categories of Operational Risk:

CategoryExamples
People RiskEmployee fraud, key person departure, human error
Process RiskFailed trade settlement, accounting errors
Systems RiskIT outages, cybersecurity breaches, data loss
External EventsNatural disasters, regulatory changes, pandemic

Notable Operational Risk Failures:

EventTypeLoss
Knight Capital (2012)Software glitch$440M in 45 minutes
Barings Bank (1995)Rogue trader (Nick Leeson)$1.3B — bank collapsed
Equifax (2017)Cybersecurity breach$1.4B+ in costs
FTX (2022)Governance/control failure$8B+ customer losses

For Individual Investors:

  • Broker Risk: Your brokerage could face operational failures
  • Mitigation: Use SIPC-insured brokers, diversify across brokerages for large portfolios
  • Cybersecurity: Use strong passwords, 2FA on all financial accounts
  • Record Keeping: Maintain independent records of your holdings

Basel Framework: Banks measure operational risk under Basel III accords and must hold capital reserves against potential operational losses.

Operational Risk Example

  • 1Knight Capital lost $440M in 45 minutes due to a software deployment error — pure operational risk
  • 2FTX collapse: operational risk from lack of internal controls and governance