A financial performance metric concept defining ratios and indicators used to summarize profitability, efficiency, and risk. It governs standardized calculations that enable consistent evaluation across periods, peers, or business units. It does not provide a complete picture without underlying accounting details and awareness of one-time effects and seasonality. It supports governance and decision-making by highlighting trends and potential issues requiring deeper analysis. The concept is generally stable, though preferred metrics and calculation conventions evolve over time.

Principle

Operational risk is organized around identification of process failure points, human error, system resilience and external threats; control frameworks, segregation of duties, incident management and loss data collection are central to limiting frequency and severity of loss events.

Demonstration

A trading desk experiences a systems outage that prevents order entry for several hours, generating missed trades and regulatory breaches; an employee commits fraud by manipulating client accounts; an outsourced service provider's failure causes payment disruptions.

Misapplication

Treating operational risk as purely insurable or as only a cost of doing business, relying exclusively on past loss data without forward-looking scenario analysis, or over-centralizing reporting so that near-misses are not escalated.

Consequence

Effective operational risk management produces stronger controls, business continuity planning, clear incident escalation, targeted insurance, remediation of root causes and cultural incentives that reduce both the incidence and impact of operational failures.

Reversal

The reversal yields an environment with weak controls, unattended process failures and concentration of key functions without redundancy, which increases the likelihood of systemic operational breakdowns and cascading losses.

Boundary

Covers process, people, system and external-event risks within financial operations; excludes pure strategic risk (bad business decisions) and normally excludes model risk and market/credit risks except where operational failures cause or amplify those losses.

Semantic Tension

Tension exists between labeling every loss that is not market/credit as operational versus distinguishing true operational root causes; another tension is between quantitative loss-history approaches and qualitative cultural or control-assessment approaches.

Synthesis

Operational risk is the potential for loss from failed processes, people, systems or external events; it requires controls, incident management, resilience planning and a culture that surfaces near-misses to prevent recurrence and limit severity.