The Capital Buffer That Depended on a Model
Halcyon Trading Group, a CIRO member, holds regulatory capital that it reports to CIRO monthly. Its chief financial officer, Tomas, has for two years calculated a component of the capital formula using an internal model that assumes historical volatility of a derivatives book. The model was last validated in year one by an external firm; no revalidation has occurred since. In the current quarter, market volatility roughly tripled. Tomas did not update the model's volatility assumption because, he says, the model is 'approved' and changing inputs mid-quarter would create a restatement. The reported capital excess over the minimum is $2.1 million. A sensitivity run by a junior analyst shows that using current volatility, the excess falls to $300,000. The junior analyst's memo was sent to Tomas and to the head of risk, who was on leave. No one else saw it. The board's audit committee meets in three weeks.
1. Evaluate Tomas's reasoning and identify the governance and risk-management failures.
Read the worked answer
Tomas's reasoning inverts the purpose of the model. A model is an estimate of risk, not a fixed fact; treating 'approved' as 'frozen' converts a risk-measurement tool into a fiction. The restatement concern is real but subordinate: the obligation is to report capital accurately, and an inaccurate report is worse than a restatement. Avoiding a restatement by preserving a known-wrong input is a misstatement risk, not a reporting-integrity strategy.
Failures identified:
- Model risk management. A model validated once, two years ago, with no ongoing monitoring or revalidation, fails basic model-risk standards. Validation must be periodic and triggered by changed conditions-tripling volatility is a textbook trigger.
- Sensitivity ignored. The junior analyst produced evidence that capital excess falls from $2.1 million to $300,000. Once the firm has that information, it cannot un-know it. Continuing to report $2.1 million without disclosure is a knowing misstatement.
- Escalation breakdown. The memo went to Tomas and to an absent risk head, and stopped. There was no deputy, no alternate escalation path, and no requirement that material model sensitivity reach the CFO's supervisor or the board. This is a single-point-of-failure in the control chain.
- Segregation. The CFO both relies on the model and controls whether its assumptions change. Independent challenge-from risk, internal audit, or a model committee-is absent.
- Capital adequacy. With $300,000 excess, the firm is close to its minimum. CIRO early-warning and notification obligations may be engaged, and the firm may need to raise capital or reduce risk.
Tomas's conduct should be documented factually; intent matters for the disciplinary analysis but the control failures stand regardless.
2. What should happen before and at the audit committee meeting, and what should the board require going forward?
Read the worked answer
Before the meeting:
- Recompute capital using current volatility and report the corrected figure to the audit committee in advance, with both scenarios and the assumptions.
- Notify CIRO per applicable capital-deficiency and early-warning requirements; do not wait for the meeting. Delay while knowing the excess may be $300,000 is not defensible.
- Preserve the junior analyst's memo and any responses. Instruct that no one alters or withdraws it.
- Engage independent review of the model, or at minimum an internal challenge from someone outside the CFO's line.
- Contact the head of risk and ensure a deputy is designated immediately.
At the meeting, the committee should:
- Hear directly from the junior analyst, not only from management.
- Ask Tomas why the model was not revalidated and why the sensitivity was not escalated; minute the answers.
- Determine whether any public or regulatory disclosure obligations are triggered.
- Decide whether interim capital action (raising capital, reducing the derivatives position) is needed before the next reporting cycle.
Going forward, the board should require:
- A model-risk policy with periodic revalidation, change triggers, and independent challenge.
- A documented escalation matrix with named alternates so an absent executive cannot strand a material issue.
- A standing audit-committee agenda item on model performance and sensitivity.
- Whistleblower protection and a clear duty for any employee to escalate material risk information around a blocker.
- A review of whether the CFO's control over model assumptions should be separated from the reporting function.