The correct answer is D.

Risk appetite metrics, while important in the broader context of risk management, are not considered a type of information that is critical in operational risk requirements. Risk appetite metrics are used to measure the level of risk that an organization is willing to accept in pursuit of its objectives. They are typically defined by the organization’s board of directors and senior management and are used to guide the organization’s risk-taking activities. However, in the context of operational risk requirements, the focus is more on specific types of information that can help identify, assess, and manage operational risks. These include qualitative information on operational risk management, historical losses, and business indicator and subcomponents. Therefore, risk appetite metrics do not fall into this category.

Choice A is incorrect. Qualitative information on operational risk management is indeed considered critical in operational risk requirements. This type of information provides insights into the organization's culture, governance, and other non-quantifiable aspects that can significantly impact the level of operational risks.

Choice B is incorrect. Historical losses are also deemed critical in operational risk requirements as they provide a historical perspective on the frequency and severity of losses due to operational risks. They serve as a basis for estimating potential future losses.

Choice C is incorrect. Business indicators and subcomponents are crucial pieces of information in understanding and managing operational risks. They help identify areas within an organization that may be vulnerable to significant operational risks.

Things to Remember

• Risk appetite metrics are used to measure the level of risk that an organization is willing to accept in pursuit of its objectives.
• Qualitative information on operational risk management provides insights into the organization's culture, governance, and other non-quantifiable aspects.
• Historical losses help in understanding the frequency and severity of losses due to operational risks.