Finance:Financial risk management

Short description: Practice of protecting economic value in a firm by managing exposure to financial risk

Institutions American Risk and Insurance Association Association of Insurance and Risk Managers in Industry and Commerce Global Association of Risk Professionals Global Risk Institute Institute of Risk Management Professional Risk Managers' International Association Risk and Insurance Management Society Certifications Certified Risk Analyst (CRA) Certified Risk Management Professional (RIMS-CRMP) Certified Risk Professional (MIRM designation) Chartered Enterprise Risk Analyst (CERA; Society of Actuaries) Chartered Enterprise Risk Actuary (CERA; Institute and Faculty of Actuaries) Financial Risk Manager (FRM) Professional Risk Manager (PRM)

Financial risk management is the practice of protecting economic value in a firm by managing exposure to financial risk - principally operational risk, credit risk and market risk, with more specific variants as listed aside. As for risk management more generally, financial risk management requires identifying the sources of risk, measuring these, and crafting plans to mitigate them. See Finance § Risk management for an overview.

Financial risk management as a "science" can be said to have been born with modern portfolio theory, particularly as initiated by Professor Harry Markowitz in 1952 with his article, "Portfolio Selection"; see Mathematical finance § Risk and portfolio management: the P world.

The discipline can be qualitative and quantitative; as a specialization of risk management, however, financial risk management focuses more on when and how to hedge, often using financial instruments to manage costly exposures to risk.

• In the banking sector worldwide, the Basel Accords are generally adopted by internationally active banks for tracking, reporting and exposing operational, credit and market risks.
• Within non-financial corporates, the scope is broadened to overlap enterprise risk management, and financial risk management then addresses risks to the firm's overall strategic objectives.
• In investment management risk is managed through diversification and related optimization; while further specific techniques are then applied to the portfolio or to individual stocks as appropriate.

In all cases, the last "line of defence" against risk is capital, "as it ensures that a firm can continue as a going concern even if substantial and unexpected losses are incurred".

Economic perspective

Neoclassical finance theory - i.e., financial economics - prescribes that a firm should take on a project if it increases shareholder value. Finance theory also shows that firm managers cannot create value for shareholders or investors by taking on projects that shareholders could do for themselves at the same cost; see Theory of the firm and Fisher separation theorem.

There is therefore a fundamental debate relating to "Risk Management" and shareholder value. The discussion essentially weighs the value of risk management in a market versus the cost of bankruptcy in that market: per the Modigliani and Miller framework, hedging is irrelevant since diversified shareholders are assumed to not care about firm-specific risks, whereas, on the other hand hedging is seen to create value in that it reduces the probability of financial distress.

When applied to financial risk management, this implies that firm managers should not hedge risks that investors can hedge for themselves at the same cost. This notion is captured in the so-called "hedging irrelevance proposition": "In a perfect market, the firm cannot create value by hedging a risk when the price of bearing that risk within the firm is the same as the price of bearing it outside of the firm."

In practice, however, financial markets are not likely to be perfect markets. This suggests that firm managers likely have many opportunities to create value for shareholders using financial risk management, wherein they have to determine which risks are cheaper for the firm to manage than the shareholders. Here, market risks that result in unique risks for the firm are commonly the best candidates for financial risk management.

Application

As outlined, businesses are exposed, in the main, to market, credit and operational risk. A broad distinction exists though, between financial institutions and non-financial firms - and correspondingly, the application of risk management will differ. Respectively: For Banks and Fund Managers, "credit and market risks are taken intentionally with the objective of earning returns, while operational risks are a byproduct to be controlled". For non-financial firms, the priorities are reversed, as "the focus is on the risks associated with the business" - ie the production and marketing of the services and products in which expertise is held - and their impact on revenue, costs and cash flow, "while market and credit risks are usually of secondary importance as they are a byproduct of the main business agenda". (See related discussion re valuing financial services firms as compared to other firms.) In all cases, as above, risk capital is the last "line of defence".

Banking

The 5% Value at Risk of a hypothetical profit-and-loss probability density function

Banks and other wholesale institutions face various financial risks in conducting their business, and how well these risks are managed and understood is a key driver behind profitability, as well as of the quantum of capital they are required to hold. Financial risk management in banking has thus grown markedly in importance since the Financial crisis of 2007–2008. (This has given rise to dedicated degrees and professional certifications.)

The major focus here is on credit and market risk, and especially through regulatory capital, includes operational risk. Credit risk is inherent in the business of banking, but additionally, these institutions are exposed to counterparty credit risk. Both are to some extent offset by margining and collateral; and the management is of the net-position. Large banks are also exposed to Macroeconomic systematic risk - risks related to the aggregate economy the bank is operating in (see Too big to fail).

The discipline is, as outlined, simultaneously concerned with (i) managing, and as necessary hedging, the various positions held by the institution - both trading positions and long term exposures; and (ii) calculating and monitoring the resultant economic capital, as well as the regulatory capital under Basel III — which covers also leverage and liquidity — with regulatory capital as a floor. The calculations here are mathematically sophisticated, and within the domain of quantitative finance.

Broadly, calculations are built for (i) on the "Greeks", the sensitivity of the price of a derivative to a change in its underlying parameters, as well as on the various other measures of exposure to market factors, such as DV01 for the sensitivity of a bond or swap to interest rates; and for (ii) on value at risk, or "VaR", an estimate of how much the investment or area in question might lose with a given probability in a set time period, with the bank holding "economic"- or “risk capital” correspondingly.

The regulatory capital quantum is calculated via specified formulae: risk weighting the exposures per highly standardized asset-categorizations, applying the aside frameworks, and the resultant capital — at least 12.9% of these Risk-weighted assets (RWA) — must then be held in specific "tiers" and is measured correspondingly via the various capital ratios. In certain cases, banks are allowed to use their own estimated risk parameters here; these "internal ratings-based models" typically result in less required capital, but at the same time are subject to strict minimum conditions and disclosure requirements. As mentioned, additional to the capital covering RWA, the aggregate balance sheet will require capital for leverage and liquidity; this is monitored via the LR, LCR, and NSFR ratios.

The financial crisis exposed holes in the mechanisms used for hedging (see Fundamental Review of the Trading Book § Background, Tail risk § Role of the global financial crisis (2007-2008), Value at risk § Criticism, and Basel III § Criticism). As such, the methodologies employed have had to evolve, both from a modelling point of view, and in parallel, from a regulatory point of view.

Regarding the modelling, changes corresponding to the above are: (i) For the daily direct analysis of the positions at the desk level, as a standard, measurement of the Greeks now inheres the volatility surface — through local- or stochastic volatility models — while re interest rates, discounting and analytics are under a "multi-curve framework". Derivative pricing now embeds counterparty and other considerations through the CVA and XVA "valuation adjustments". (ii) For Value at Risk, the traditional parametric and "Historical" approaches, are now supplemented with the more sophisticated Conditional value at risk / expected shortfall, Tail value at risk, and Extreme value theory. For the underlying mathematics, these may utilize mixture models, PCA, volatility clustering, copulas, and other techniques. Extensions to VaR include Liquidity at risk, Earnings at risk, Cash flow at risk, and Liquidity-adjusted VaR. For both (i) and (ii), model risk is addressed through regular validation of the models used by the bank's various divisions; for VaR models, backtesting is especially employed.

Regulatory changes, are also twofold. The first change, entails an increased emphasis on bank stress tests. These tests, essentially a simulation of the balance-sheet for a given scenario, are typically linked to the macroeconomics, and provide an indicator of how sensitive the bank is to changes in economic conditions, whether it is sufficiently capitalized, and of its ability to respond to market events. The second set of changes, sometimes called "Basel IV", entails the modification of several regulatory capital standards. In particular FRTB addresses market risk, and SA-CCR addresses counterparty risk; other modifications are being phased in from 2023.

To operationalize the above, Investment banks, particularly, employ dedicated "Risk Groups", i.e. Middle office teams monitoring the firm's risk-exposure to, and the profitability and structure of, its various businesses, products, asset classes, desks, and / or geographies. By increasing order of aggregation:

1. Financial institutions will set limit values for each of the Greeks, or other measures, that their traders must not exceed, and traders will then hedge, offset, or reduce periodically if not daily; see the techniques listed below.
2. Desks, or areas, will similarly be limited as to their VaR quantum (total or incremental, and under various calculation regimes), corresponding to their allocated economic capital; a loss which exceeds the VaR threshold is termed a "VaR breach". Allocated regulatory capital is similarly monitored.
3. Each area's (or desk's) concentration risk will be checked against thresholds set for various types of risk, and / or re a single counterparty, sector or geography.
4. Leverage will be monitored, at very least re regulatory requirements (LR), as leveraged positions could lose large amounts for a relatively small move in the price of the underlying.
5. Relatedly, liquidity risk is monitored: LCR measures the ability of the bank to survive a short-term stress, covering its total net cash outflows over the next 30 days with "high quality liquid assets"; NSFR assesses its ability to finance assets and commitments within a year. Any "gaps", also, must be managed.

Periodically, these all are estimated under a given stress scenario — regulatory and, often, internal — and risk capital, together with these limits if indicated, is correspondingly revisited (or optimized ). Here, more generally, these tests provide estimates for scenarios beyond the VaR thresholds, thus “preparing for anything that might happen, rather than worrying about precise likelihoods". The approaches taken center either on a hypothetical or historical scenario, and may apply increasingly sophisticated mathematics to the analysis.

A key practice, incorporating and assimilating the above, is to assess the Risk-adjusted return on capital, RAROC, of each area (or product). Here, economic return is divided by allocated-capital; and this result is then compared to the target-return for the area — usually, at least the equity holders' expected returns on the bank stock — and identified under-performance can then be addressed. (See similar below re. DuPont analysis.) The numerator, risk-adjusted return, is achieved trading-return less a term and risk appropriate funding cost as charged by Treasury to the business-unit under the bank's funds transfer pricing (FTP) framework; direct costs are (sometimes) also subtracted. The denominator is the area's allocated capital, as above, increasing as a function of position risk. RAROC is calculated both ex post as discussed, used for performance evaluation (and related bonus calculations), and ex ante - i.e. expected return less expected loss - to decide whether a particular business unit should be expanded or contracted.

Other teams, overlapping the above Groups, are then also involved in risk management. Corporate Treasury is responsible for monitoring overall funding and capital structure; it shares responsibility for monitoring liquidity risk, and for maintaining the FTP framework. Middle Office maintains the following functions also: Product Control is primarily responsible for insuring traders mark their books to fair value — a key protection against rogue traders — and for "explaining" the daily P&L; the "unexplained" component, of particular interest to risk managers. Credit Risk monitors the bank's debt-clients on an ongoing basis, re both exposure and performance. In the Front Office, specialized XVA-desks are tasked with centrally monitoring and managing overall CVA and XVA exposure, typically with oversight from the appropriate Group.

Corporate finance

Contribution analytics: Profit and Loss for units sold at current fixed costs.

The same, for varying (scenario-based) Revenue levels, at current Fixed and Total costs.

In corporate finance, and financial management more generally, financial risk management, as above, is concerned with business risk - risks to the business’ value, within the context of its business strategy and capital structure. The scope here - ie in non-financial firms - is thus broadened (re banking) to overlap enterprise risk management, and financial risk management then addresses risks to the firm's overall strategic objectives, incorporating various (all) financial aspects of the exposures and opportunities arising from business decisions, and their link to the firm’s appetite for risk, as well as their impact on share price. In many organizations, risk executives are therefore involved in strategy formulation: "the choice of which risks to undertake through the allocation of its scarce resources is the key tool available to management."

Re the standard framework, then, the discipline largely focuses on operations, i.e. business risk, as outlined. Here, the management is ongoing — see following description — and is coupled with the use of insurance, managing the net-exposure as above: credit risk is usually addressed via provisioning and credit insurance; likewise, where this treatment is deemed appropriate, specifically identified operational risks are also insured. Market risk, in this context, is concerned mainly with changes in commodity prices, interest rates, and foreign exchange rates, and any adverse impact due to these on cash flow and profitability, and hence share price.

Correspondingly, the practice here covers two perspectives; these are shared with corporate finance more generally:

1. Both risk management and corporate finance share the goal of enhancing, or at least preserving, firm value. Here, businesses devote much time and effort to (short term) liquidity-, cash flow- and performance monitoring, and Risk Management then also overlaps cash- and treasury management, especially as impacted by capital and funding as above. More specifically re business-operations, management emphasizes their break even dynamics, contribution margin and operating leverage, and the corresponding monitoring and management of revenue, of costs, and of other budget elements. The DuPont analysis entails a "decomposition" of the firm's return on equity, ROE, allowing management to identify and address specific areas of concern, preempting any underperformance vs shareholders' required return. In larger firms, specialist Risk Analysts complement this work with model-based analytics more broadly; in some cases, employing sophisticated stochastic models, in, for example, financing activity prediction problems, and for risk analysis ahead of a major investment.
2. Firm exposure to long term market (and business) risk is a direct result of previous capital investment decisions. Where applicable here — usually in large corporates and under guidance from their investment bankers — risk analysts will manage and hedge their exposures using traded financial instruments to create commodity-, interest rate- and foreign exchange hedges (see further below). Because company specific, "over-the-counter" (OTC) contracts tend to be costly to create and monitor — i.e. using financial engineering and / or structured products — ”standard” derivatives that trade on well-established exchanges are often preferred. These comprise options, futures, forwards, and swaps; the "second generation" exotic derivatives usually trade OTC. Complementary to this hedging, periodically, Treasury may also adjust the capital structure, reducing financial leverage - i.e. debt-funding - so as to accommodate increased business risk; they may also suspend dividends.

Multinational corporations are faced with additional challenges, particularly as relates to foreign exchange risk, and the scope of financial risk management modifies significantly in the international realm. Here, dependent on time horizon and risk sub-type — transactions exposure (essentially that discussed above), accounting exposure, and economic exposure — so the corporate will manage its risk differently. Note that the forex risk-management discussed here and above, is additional to the per transaction "forward cover" that importers and exporters purchase from their bank (alongside other trade finance mechanisms).

It is common for large corporations to have dedicated risk management teams — typically within FP&A or corporate treasury — reporting to the CRO; often these overlap the internal audit function (see Three lines of defence). For small firms, it is impractical to have a formal risk management function, but these typically apply the above practices, at least the first set, informally, as part of the financial management function; see discussion under Financial analyst. Correspondingly, the discipline relies on a range of software, from spreadsheets (invariably as a starting point, and frequently in total ) through commercial EPM and BI tools, often BusinessObjects (SAP), OBI EE (Oracle), Cognos (IBM), and Power BI (Microsoft).

Hedging-related transactions will attract their own accounting treatment, and corporates (and banks) may then require changes to systems, processes and documentation; see Hedge accounting, Mark-to-market accounting, Hedge relationship, Cash flow hedge, IFRS 7, IFRS 9, IFRS 13, FASB 133, IAS 39, FAS 130.

Investment management

Further information: Finance:Portfolio optimization and Finance:Active management

Efficient Frontier. The hyperbola is sometimes referred to as the "Markowitz bullet", and its upward sloped portion is the efficient frontier if no risk-free asset is available. With a risk-free asset, the straight capital allocation line is the efficient frontier.

Here maximizing return and minimizing risk such that the portfolio is Pareto efficient (Pareto-optimal points in red).

Fund managers, classically, define the risk of a portfolio as its variance (or standard deviation), and through diversification the portfolio is optimized so as to achieve the lowest risk for a given targeted return, or equivalently the highest return for a given level of risk; these risk-efficient portfolios form the "Efficient frontier" (see Markowitz model). The logic here is that returns from different assets are highly unlikely to be perfectly correlated, and in fact the correlation may sometimes be negative. In this way, market risk particularly, and other financial risks such as inflation risk (see below) can at least partially be moderated by forms of diversification.

A key issue in diversification, however, is that the (assumed) relationships are (implicitly) forward looking. As observed in the late-2000s recession historic relationships can break down, resulting in losses to market participants believing that diversification would provide sufficient protection (in that market, including funds that had been explicitly set up to avoid being affected in this way). A related issue is that diversification has costs: as correlations are not constant it may be necessary to regularly rebalance the portfolio, incurring transaction costs, negatively impacting investment performance; and as the fund manager diversifies, so this problem compounds (and a large fund may also exert market impact). See Modern portfolio theory § Criticisms.

Addressing these issues, more sophisticated approaches have been developed in recent times, both to defining risk, and to the optimization itself. (Respective examples: (tail) risk parity, focuses on allocation of risk, rather than allocation of capital; the Black–Litterman model modifies the "Markowitz optimization", to incorporate the views of the portfolio manager. ) Relatedly, modern financial risk modeling employs a variety of techniques — including value at risk, historical simulation, stress tests, and extreme value theory — to analyze the portfolio and to forecast the likely losses incurred for a variety of risks and scenarios.

Here, guided by the analytics, Fund Managers (and traders) will apply specific risk hedging techniques. As appropriate, these may relate to the portfolio as a whole or to individual holdings:

• Fund managers may engage in portfolio insurance, a hedging strategy developed to limit the losses an investor might face from a declining index of stocks without having to sell the stocks themselves. This strategy involves selling Stock market index futures during periods of price declines. The proceeds from the sale of the futures help to offset paper losses of the owned portfolio. Alternatively, and more commonly, they will buy a put on a Stock market index option so as to hedge. In both cases the logic is that the (diversified) portfolio is likely highly correlated with the stock index it is part of; thus if stock prices decline, the larger index will likewise decline, and the derivative holder will profit. (Inflation, which affects all securities, can to some extent be hedged using inflation-linked bonds; diversification here is achieved by including tangible assets and commodities in the portfolio.)
• Fund managers, or traders, may also wish to hedge a specific stock's price. Here, they may likewise buy a single-stock put, or sell a single-stock future. Alternative strategies may rely on assumed relationships between related stocks, employing, for example, a "Long/short" strategy.
• Bond portfolios, when e.g. a component of an Asset-allocation fund or other diversified portfolio, are typically managed similar to equity above: the Fund Manager will hedge her bond allocation with bond index futures or options. In other contexts, the concern may be the net-obligation or net-cashflow. Here the fund manager employs Interest rate immunization or cashflow matching. Immunization is a strategy that ensures that a change in interest rates will not affect the value of a fixed-income portfolio (an increase in rates results in a decreased instrument value). It is often used to ensure that the value of a pension fund's assets (or an asset manager's fund) increase or decrease in an exactly opposite fashion to their liabilities, thus leaving the value of the pension fund's surplus (or firm's equity) unchanged, regardless of changes in the interest rate. Cashflow matching is similarly a process of hedging in which a company or other entity matches its cash outflows - i.e., financial obligations - with its cash inflows over a given time horizon.
• For individual bonds and other fixed income securities, specific credit and interest rate risks can be hedged using interest rate- and credit derivatives. Sensitivities re interest rates are measured using duration and convexity for bonds, and DV01 and key rate durations generally, and an offsetting derivative-position is purchased. For credit risk, analysts use models such as Jarrow–Turnbull and KMV to estimate the probability of default, hedging where appropriate. (At a portfolio level — often for credit-VaR — they may also use a transition matrix of Bond credit ratings to estimate the probability and impact of a "credit migration", aggregating the bond-by-bond result.) Interest rate- and credit risk together, may be hedged via a Total return swap. See Fixed income analysis
• For derivative portfolios, and positions, the Greeks are a vital risk management tool: as above, these measure sensitivity to a small change in a given underlying price, rate, or parameter, and the portfolio is then rebalanced accordingly by including additional derivatives with offsetting characteristics, or by purchasing or selling specified units of the underlying security.

In parallel with the above optimization and hedging, managers — active and passive — also monitor and manage tracking error, i.e. underperformance vs a "benchmark". Here they will (may) use attribution analysis preemptively so as to diagnose the source early, and to take corrective action. They will similarly use style analysis to address style drift. See also Fixed-income attribution.

Given the sophistication and complexity of these analyses and techniques, Fund Managers typically rely on sophisticated software (as do banks, above). Widely used platforms are provided by BlackRock (Aladdin), Eikon, Finastra, Murex, Numerix, MPI and Morningstar.

See also

Articles

• Outline of finance § Risk management

Discussion

• Asset and liability management
• Basel III
• Corporate governance
• Enterprise risk management
• Finance § Risk management
• Risk management § Finance

Lists

• economic crises
• asset bubbles
• stock market crashes and bear markets
• trading losses
• corporate collapses and scandals
• accounting scandals
• banking crises
  • bank runs
  • largest U.S. bank failures
  • bank failures in the United States (2008–present)

Bibliography

• Allen, Steve L. (2012). Financial Risk Management: A Practitioner's Guide to Managing Market and Credit Risk (2 ed.). John Wiley. ISBN 978-1118175453. 
• Baker, H. Kent; Filbeck, Greg (2015). Investment Risk Management. Oxford Academic. ISBN 978-0199331963. 
• Baranoff, Etti; Brockett, Patrick; Kahane, Yehuda (2009). Risk Management for Enterprises and Individuals. Saylor. ISBN 9780982361801. https://saylordotorg.github.io/text_risk-management-for-enterprises-and-individuals/. 
• Blunden, Tony; Thirlwell, John (2021). Mastering Risk Management. FT Publishing International. ISBN 978-1292331317. 
• Coleman, Thomas (2011). A Practical Guide to Risk Management. CFA Institute. ISBN 978-1-934667-41-5. https://www.cfainstitute.org/-/media/documents/book/rf-publication/2011/rf-v2011-n3-1-pdf.pdf. 
• Crockford, Neil (1986). An Introduction to Risk Management (2 ed.). Woodhead-Faulkner. ISBN 0-85941-332-2. 
• Crouhy, Michel; Galai, Dan; Mark, Robert (2013). The Essentials of Risk Management (2 ed.). McGraw-Hill Professional. ISBN 9780071818513. 
• Christoffersen, Peter (2011). Elements of Financial Risk Management (2 ed.). Academic Press. ISBN 978-0-12-374448-7. https://www.sciencedirect.com/book/9780121742324/elements-of-financial-risk-management#book-description. 
• Damodaran, Aswath (2007). Strategic Risk Taking: A Framework for Risk Management. FT Press. ISBN 978-0137043774. https://pages.stern.nyu.edu/~adamodar/New_Home_Page/valrisk/book.htm. 
• Farid, Jawwad Ahmed (2013). Models at Work: A Practitioner's Guide to Risk Management. Palgrave Macmillan. ISBN 978-1137371638. 
• Hampton, John (2011). The AMA Handbook of Financial Risk Management. American Management Association. ISBN 978-0814417447. 
• Hull, John (2023). Risk Management and Financial Institutions (6 ed.). John Wiley. ISBN 978-1-119-93248-2. https://www-2.rotman.utoronto.ca/~hull/riskman/index.html. 
• Lam, James (2003). Enterprise Risk Management: From Incentives to Controls. John Wiley. ISBN 978-0-471-43000-1. 
• McNeil, Alexander J.; Frey, Rüdiger; Embrechts, Paul (2015), Quantitative Risk Management. Concepts, Techniques and Tools, Princeton Series in Finance (revised ed.), Princeton, NJ: Princeton University Press, ISBN 9780691166278, https://press.princeton.edu/books/hardcover/9780691166278/quantitative-risk-management 
• Miller, Michael B. (2019). Quantitative Financial Risk Management. John Wiley. ISBN 9781119522201. 
• Roncalli, Thierry (2020). Handbook of Financial Risk Management. Chapman & Hall. ISBN 9781138501874. https://www.routledge.com/Handbook-of-Financial-Risk-Management/Roncalli/p/book/9781138501874. 
• Tapiero, Charles (2004). Risk and Financial Management: Mathematical and Computational Methods. John Wiley & Son. ISBN 0-470-84908-8. 
• van Deventer; Donald R.; Kenji Imai; Mark Mesler (2004). Advanced Financial Risk Management: Tools and Techniques for Integrated Credit Risk and Interest Rate Risk Management. John Wiley. ISBN 978-0-470-82126-8. 
• Wernz, Johannes (2021). Bank Management and Control: Strategy, Pricing, Capital and Risk Management (2 ed.). Springer. ISBN 978-3030428686. 

External links

• CERA - The Chartered Enterprise Risk Analyst Credential - Society of Actuaries (SOA)
• Financial Risk Manager Certification Program - Global Association of Risk Professionals (GARP)
• Professional Risk Manager Certification Program - Professional Risk Managers' International Association (PRMIA)
• Risk Journals Homepage