
Ultimate access to all questions.
The CRO of a regional mortgage lender has asked an enterprise risk manager to develop a set of policies and procedures for the firm's operational risk reporting. The manager considers appropriate policies for the governance of the firm's risk reporting framework and also assesses how the firm should structure its risk reports for different stakeholder groups and organizational functions. Which of the following would be most appropriate for the manager to recommend?
A
The firm should report a more detailed and extensive set of key risk indicators to the board of directors than it does to business line managers to support the board's strategic risk review.
B
The operational risk committee should be responsible for executing all necessary changes to the firm's risk exposures after risk reports are reviewed.
C
The central operational risk function should be responsible for aggregating information from each of the business units about operational risk exposures.
D
The firm should emphasize forward-looking risk indicators and avoid the use of backward-looking indicators in its risk reporting.