HKIB ECF-Operational Risk Core study materials
HKIB ECF-Operational Risk Core study resources

HKIB ECF-Operational Risk Core case studies

HKIB ECF-Operational Risk Core · Put your knowledge to work in context.

The Enhanced Competency Framework (ECF) on Operational Risk Management is one of the specialist streams within the HKIB's ECF family of banking qualifications, listed on the Institute's ECF overview alongside AML/CFT, Compliance, Cybersecurity, Credit Risk Management, Fintech, Green and Sustainable Finance, Private Wealth Management and Retail Wealth Management. HKIB describes itself as the first not-for-profit banking institute in Hong Kong, working as a professional training provider and qualification benchmark setter to build a competent and sustainable talent pool with the support of banks, regulators, financial institutions, academic institutions and professional bodies. The HKIB ECF-Operational Risk Core case studies are 5 cases and about 3,307 words.

1

Failed-Trade KRI Breach and the RCSA Rating Dispute

A Hong Kong retail bank's securities operations unit completed its Q3 RCSA with a self-assessed residual rating of Medium for 'trade processing and settlement'. In the last three weeks of the quarter, 3 of 40 matched-trade breaks remained unresolved beyond the two-day target, and the unit's failed-trade KRI moved from 0.8% to 2.6% against an amber threshold of 2.0%.

737 words, about 4 min
2

KYC Cloud Subcontracting and the 'Non-Material' Label

A Hong Kong-incorporated bank stores scanned KYC documents for 1.2 million customers with a cloud provider in Singapore. The outsourcing register classifies the arrangement as non-material because no customer-facing service depends on it.

638 words, about 3 min
3

Inflated Inventory, Undisclosed Loan: Credit or Operational Loss?

A corporate relationship manager approved a HKD 30 million overdraft for a trading company. The borrower's owner supplied inventory statements that later proved inflated; the company defaulted and the bank lost HKD 18 million.

651 words, about 3 min
4

Data Centre Failover Breach and the Manual Workaround

At 06:40 on a black rainstorm day, the primary data centre of a Hong Kong retail bank lost power. Automatic failover to the secondary site completed at 11:00, four hours twenty minutes after the outage and well beyond the two-hour recovery time objective for core banking.

634 words, about 3 min
5

Robo-Advisory Launch: Conditional Approval Under Vendor Dependency

A Hong Kong bank plans to launch a robo-advisory service for mass retail customers with a minimum investment of HKD 1,000. The investment engine is licensed from a US fintech and hosted in the US; the bank's staff cannot inspect the model logic, and the contract gives audit rights only over the vendor's own premises, not its cloud subcontractor.

647 words, about 3 min