
Answer-first summary for fast verification
Answer: The analyst should classify the misuse of confidential information under the Level 2 category of Suitability, Disclosure, and Fiduciary.
**Correct Answer: C** **Explanation:** According to the Basel operational risk taxonomy: - **Option C is correct**: The misuse of confidential customer information by managers in the wealth management group should be classified under Level 2 category "Suitability, Disclosure, and Fiduciary" within the Level 1 category "Clients, Products, and Business Practices." - **Option A is incorrect**: The forged signature event should be classified under Level 1 category "Internal Fraud" (not "Clients, Products, and Business Practices"). - **Option B is incorrect**: Level 3 categories are used to describe individual activities, not categories of activities. The proper classification for the failure to deliver sufficient collateral would be Level 1: "Execution, Delivery and Process Management" and Level 2: "Transaction, Capture, Execution and Maintenance." - **Option D is incorrect**: The forged signature is classified under Level 1 "Internal Fraud" category, while the cyber-attack is classified under Level 1 "External Fraud" category - these are different Level 1 categories. **Basel Taxonomy Classification Summary:** 1. Forged signature → Level 1: Internal Fraud 2. Failure to deliver collateral → Level 1: Execution, Delivery and Process Management; Level 2: Transaction, Capture, Execution and Maintenance 3. Misuse of confidential information → Level 1: Clients, Products, and Business Practices; Level 2: Suitability, Disclosure, and Fiduciary 4. Cyber-attack → Level 1: External Fraud
Author: LeetQuiz .
Ultimate access to all questions.
An operational risk analyst at a large bank is preparing a year-end report of the bank's operational loss events. The analyst uses the Basel operational risk taxonomy to classify different events into Level 1, Level 2, and Level 3. As part of this process, the analyst considers the following four events that occurred during the year:
In classifying the four events and considering the Basel taxonomy in general, which of the following actions would be most appropriate for the analyst to take?
A
The analyst should classify the forged signature under the Level 1 category of Clients, Products, and Business Practices.
B
The analyst should classify the failure to deliver sufficient collateral under the Level 3 category of Improper Business or Market Practices.
C
The analyst should classify the misuse of confidential information under the Level 2 category of Suitability, Disclosure, and Fiduciary.
D
The analyst should classify both the forged signature and the cyber-attack under the same Level 1 event-type category.
No comments yet.