CISI Risk in Financial Services key terms

The chance that an outcome differs from what was expected, usually framed as the possibility of loss or harm arising from uncertainty about future events and exposures.

A state in which the range or likelihood of future outcomes is unknown, so probabilities cannot be reliably assigned; distinct from measurable risk where outcomes can be estimated statistically.

The structured process of identifying, assessing, measuring, monitoring, controlling and reporting risks so that an organisation stays within its agreed tolerance and can pursue its objectives.

The amount and type of risk an organisation is willing to accept in pursuit of its strategic objectives, expressed in qualitative statements and often quantified through limits and tolerances.

The maximum deviation from the desired risk level that an organisation is prepared to accept in a specific area, translating broad appetite into practical boundaries for day-to-day business activity.

The maximum level of risk an organisation can absorb before its financial soundness, capital adequacy or continued operation is threatened, regardless of what it would prefer to accept.

A specific, measurable ceiling placed on an exposure or activity, such as a position size or counterparty amount, that must not be exceeded without formal approval.

The level of risk present in an activity before any controls, mitigants or management actions are applied, providing a baseline against which the value of controls can be judged.

The risk that remains after existing controls and mitigants have been applied; it is compared with tolerance to decide whether further action is needed.

A structured record listing identified risks together with their owners, likelihood and impact assessments, existing controls and agreed actions, used to track and report risk across the organisation.

The named individual accountable for managing a particular risk, including approving its assessment, ensuring controls operate and escalating when exposure moves outside agreed tolerance.

The process of judging the likelihood and impact of an identified risk, often combining qualitative judgement with quantitative modelling, to prioritise it for treatment.

Action taken to reduce the likelihood or impact of a risk, such as strengthening controls, diversifying exposures, buying insurance or using hedging instruments.

Shifting the financial consequences of a risk to another party, for example through insurance, guarantees, securitisation or derivative contracts, while often retaining some residual exposure.

A treatment approach that removes the activity generating a risk altogether, eliminating the exposure but also forgoing any return or strategic benefit the activity would have produced.

A governance model in which business units own and manage risk, a separate risk and compliance function oversees it, and internal audit provides independent assurance to the board.

The system of rules, practices and processes by which a firm is directed and controlled, covering board responsibilities, accountability to stakeholders and the framework for setting and overseeing strategy.

The governing body elected to oversee the firm's strategy and management, responsible for approving risk appetite, appointing senior executives and ensuring effective controls and accountability.

A board or executive committee that oversees the firm's risk profile, reviews risk appetite and framework effectiveness, and advises the board on risk matters and emerging threats.

A board committee, normally composed of independent non-executive directors, that oversees financial reporting, internal controls, risk management arrangements and the relationship with external auditors.

An independent function that provides objective assurance on the effectiveness of governance, risk management and internal controls, reporting typically to the audit committee rather than to management.

The shared values, attitudes and behaviours within an organisation that determine how risks are identified, discussed, escalated and managed in practice, including willingness to challenge.

The signals sent by senior leadership through their decisions and behaviour about the importance of ethics, compliance and risk management, which strongly shape conduct throughout the organisation.

Rules imposed on financial firms to protect the stability of the financial system and the interests of depositors and policyholders, covering capital, liquidity, governance and risk management standards.

The risk that a firm's behaviour or business practices cause unfair outcomes for customers or damage market integrity, arising from mis-selling, poor disclosure, conflicts of interest or inappropriate incentives.

A regulatory principle requiring firms to deliver fair outcomes for customers across product design, marketing, advice, servicing and complaints, rather than merely following prescribed rules mechanically.

The risk of legal or regulatory sanctions, financial loss or reputational damage from failing to comply with applicable laws, regulations, rules and standards of good practice.

The process of disguising the origin of proceeds of crime so they appear legitimate, typically through placement, layering and integration stages, which firms must detect and report.

The due diligence process by which a firm verifies a client's identity, understands their business and assesses money-laundering risk before and during the relationship.

The risk of loss because a borrower or counterparty fails to meet its obligations in full and on time, whether through default, delay or deterioration in creditworthiness.

A failure by an obligor to meet a contractual payment or other obligation when due, or an event such as bankruptcy or restructuring that indicates the obligor is unlikely to pay in full.

The estimated likelihood that a borrower or counterparty will default within a defined horizon, typically one year, used as a core input to credit pricing and capital calculations.

The proportion of an exposure expected to be lost if the borrower defaults, after allowing for recoveries from collateral, guarantees and workout processes; it equals one minus the recovery rate.

The estimated amount outstanding and owed to the firm at the moment a borrower defaults, including drawn balances and a proportion of undrawn commitments that may be drawn down.

The average loss a lender anticipates over a period from a credit exposure, commonly calculated as probability of default multiplied by loss given default multiplied by exposure at default.

The risk arising from excessive exposure to a single counterparty, sector, product or geography, so that a single adverse event could cause disproportionately large losses.

An asset pledged by a borrower to secure a loan, which the lender may realise if the borrower defaults, reducing loss given default but carrying valuation and legal risks.

The risk that the other party to a transaction, particularly a derivative or securities financing trade, fails to meet its obligations before final settlement, distinct from ordinary lending risk.

The risk of loss from movements in market prices such as interest rates, foreign exchange rates, equity prices and commodity prices, affecting trading books and asset values.

The risk that changes in interest rates reduce a firm's earnings or the value of its assets and liabilities, arising from repricing mismatches and changes in the yield curve.

The risk that movements in currency exchange rates alter the value of assets, liabilities, earnings or cash flows denominated in a currency other than the reporting currency.

A statistical measure of how much a price or return fluctuates over time, often expressed as standard deviation; higher volatility widens the range of possible outcomes and raises market risk.

A statistical estimate of the maximum loss expected on a portfolio over a stated horizon at a given confidence level, widely used but silent on losses beyond that threshold.

Analysis of how a portfolio or institution would perform under severe but plausible adverse scenarios, used to complement statistical models and reveal vulnerabilities beyond normal assumptions.

Taking an offsetting position or using a derivative instrument to reduce exposure to an adverse price, rate or currency movement, usually at the cost of limiting potential gains.

The risk that a firm cannot meet its payment obligations as they fall due, or can only do so by selling assets at a discount, covering both funding and market liquidity dimensions.

The risk of loss from inadequate or failed internal processes, people and systems, or from external events, including fraud, cyber incidents, legal matters and business disruption.

The risk that negative perception among customers, investors, regulators or the public damages a firm's standing, revenue and franchise value, often arising as a consequence of other risk events.

The requirement that a firm holds sufficient regulatory capital relative to the risks it carries, so that unexpected losses can be absorbed without threatening depositors or system stability.

The minimum amount of capital a firm must hold as calculated under prescribed rules, based on its risk-weighted assets and intended to absorb unexpected losses.