IFMP Risk Management Certification (RMC), Pakistan key terms

The effect of uncertainty on an organisation's objectives, which can be positive or negative. It is usually described in terms of likelihood and impact so that it can be assessed, prioritised and managed.

A risk that offers only the possibility of loss or no loss, with no chance of gain. Fire, fraud and liability exposures are examples, and they are typically handled through insurance or control measures.

The level of risk that exists before any controls, mitigations or risk responses are applied. It gives a baseline for judging whether the controls an organisation later puts in place are actually worthwhile.

The risk that remains after controls and mitigation measures have been applied. Comparing it with inherent risk shows how much protection the current control environment actually delivers.

A structured record listing each identified risk together with its owner, cause, potential impact, likelihood rating, current controls and agreed response. It is a core working tool for monitoring and reporting risk.

The set of structures, accountabilities and processes by which the board and senior management direct and oversee risk-taking. It defines who decides, who monitors and who is answerable for risk outcomes.

A model that separates risk-taking from risk oversight. Business units own and manage risk, an independent risk and compliance function oversees it, and internal audit provides assurance to the board and its committees.

The shared values, attitudes and behaviours that determine how people across an organisation actually identify, discuss and act on risk. It shapes whether risk limits are respected when commercial pressure builds.

The amount and type of risk an organisation is willing to accept in pursuit of its objectives. It sets boundaries on risk-taking and guides decisions about which risks to pursue, limit or avoid.

A formal document that expresses the organisation's appetite in qualitative and quantitative terms, often by risk category. It sets escalation thresholds, governance and the way appetite will be monitored and reported.

The maximum risk an organisation can absorb before its capital, liquidity, reputation or operations are seriously threatened. It is a hard constraint that exists independently of what management would prefer to accept.

A specific, measurable amount of risk an organisation is willing to accept within a given category, consistent with its overall appetite. Tolerances are often expressed as limits, thresholds or trigger points.

A forward-looking metric that signals whether a risk is rising or falling by tracking exposure, control quality or the business environment. Good indicators give early warning and are monitored against warning and escalation thresholds.

The risk of loss from movements in market prices, including interest rates, exchange rates, equity prices, commodity prices and credit spreads. It affects trading books and, through asset-liability positions, the banking book too.

The risk of loss from changes in interest rates, affecting net interest income and the economic value of assets and liabilities. Repricing mismatches, yield-curve shifts and basis movements are the main sources.

The risk of loss from movements in currency rates affecting positions, earnings and capital. It arises from foreign-currency assets and liabilities, cross-currency transactions and translation of overseas profits.

The risk that two related positions or prices do not move together as expected, so a hedge fails to offset the underlying exposure fully. It commonly appears where hedges use instruments that differ from the exposure.

The risk of loss when a borrower or counterparty fails to meet its obligations as they fall due. It covers default, delay, deterioration in credit quality and country or concentration effects.

An estimate, often abbreviated PD, of the likelihood that a borrower or counterparty will default within a defined period, usually one year. It is a core input to credit pricing, provisioning and regulatory capital calculations.

The share of an exposure that is expected to be lost if a borrower defaults, after allowing for recoveries from collateral and other assets. It is often expressed as a percentage of exposure at default.

The average credit loss an institution anticipates over a given horizon, commonly calculated as probability of default multiplied by loss given default multiplied by exposure at default. It is covered through pricing and provisions.

The risk of loss from inadequate or failed internal processes, people and systems, or from external events. It spans fraud, errors, technology failures, cyber attacks, legal penalties, outages and damage to physical assets.

An actual operational risk incident that results in financial loss, regulatory breach, customer harm or reputational damage. Institutions record loss events to quantify, monitor and learn from the operational exposures they face.

The process of planning and maintaining arrangements so that critical operations and services can continue, or be restored quickly, during a disruption. It includes impact analysis, recovery priorities, backups, alternate sites and regular testing.

The risk of loss arising from decisions based on models that are wrong, misapplied or built on poor assumptions and data. It is typically managed through validation, documentation, governance and ongoing performance monitoring.

The risk that an institution cannot meet its obligations as they fall due without incurring unacceptable losses. It combines the ability to raise funds and the ability to sell assets at a fair price.

The risk that an institution cannot raise or roll over the cash and funding needed to settle obligations when due. It is driven by maturity mismatches, funding concentration and loss of confidence among depositors and wholesale lenders.

The risk that an asset cannot be sold quickly at or near its fair value because the market is thin, stressed or frozen. It widens spreads and makes fire sales costly during periods of volatility.

A Basel III measure that divides high-quality liquid assets by net cash outflows over a 30-day stress period. It requires banks to hold enough liquid resources to survive a short, severe stress event.

An estimate, commonly shortened to VaR, of the worst loss a portfolio is expected to suffer over a stated holding period at a given confidence level. It is simple to communicate but says nothing about losses beyond the threshold.

The average loss expected in the worst cases beyond the VaR threshold, at a stated confidence level. It is often called conditional VaR and, unlike VaR, reflects the severity of tail losses.

The process of assessing how a portfolio, institution or system would perform under severe but plausible adverse conditions. It uses hypothetical or historical shocks and complements statistical measures such as value at risk.

A structured technique that imagines plausible future events, such as a currency crisis or sudden rate rise, and estimates their combined impact. It helps explore risks that historical data and statistical models may not capture.

A validation process that compares a model's predicted results, such as VaR estimates, with actual outcomes over time. Persistent breaches suggest the model underestimates risk and needs recalibration or replacement.

An integrated, organisation-wide approach to identifying, assessing and managing risk across all business lines and risk types. It links risk to strategy, capital and performance rather than treating risks as isolated issues.

The international post-2008 capital, leverage and liquidity framework for banks, covering minimum capital, buffers, the leverage ratio and liquidity standards. It is implemented locally by supervisors, so national rules may differ in detail.

A bank's own assessment of the capital needed to cover its risks under normal and stressed conditions, plus its plan to maintain that capital. It is reviewed by the supervisor as part of risk-based supervision.

Binding supervisory rules that set minimum standards for capital, asset quality, liquidity, provisioning and risk management. In Pakistan, these are issued and enforced by the State Bank of Pakistan.