A Week to Remember

This week has been full of activity that will shape the nature of enterprise risk management ("ERM") programs in the months and years to come.  First, the logjam in the U.S. Senate finally broke with the start of floor debate on financial regulatory reform.  At the same time, hearings into the dealings at investment banks during the height of the financial crisis surfaced some interesting points on the need for more integrated risk management across financial institutions.

There were also several risk management industry conferences with significant keynote addresses.  A great summary of these events can be found on the OpenPages blog.  OpenPages is a strategic partner with Wheelhouse Advisors and provides a technology platform that enables the integration of risk management practices within companies.  As companies look to ready themselves for regulatory reform and strengthen their ERM programs, they will certainly need solutions like OpenPages to become more resilient to the rapidly changing risk and regulatory landscape.

No doubt that this will certainly be a week to remember for the evolving state of ERM and regulatory reform.

Lack of Resources Hinders Risk Management Improvements

A survey listing the top challenges for improving risk management practices was released today at the Risk and Insurance Management Society Annual Conference in Boston.  Not surprisingly, the number one challenge for most companies is the availability of qualified resources.  With limited budgets and smaller talent pools coming out of the economic recession, these companies are struggling to elevate the effectiveness of their risk management programs. Here is what Business Insurance magazine reported today.

The lack of staff dedicated to risk management ranked highest on a respondents' list of challenges to improving the practice of risk management in their organizations, with 44% citing that lack as a challenge, according to “Excellence in Risk Management VII: Elevating the Practice of Strategic Risk Management.” Having other areas with greater priority than risk management was cited as a challenge by 43% of the respondents. Demonstrating the value of risk management ranked third, at 34%. Lack of financial resources dedicated to risk management, and senior management commitment rounded out the Top 5, cited by 33% and 32% respectively.

Companies will need to be creative in finding solutions to these challenges.  Wheelhouse Advisors can help.  With deep expertise at a reasonable cost, Wheelhouse Advisors provides a compelling alternative to engaging larger consulting firms or hiring full-time staff.  Email us at NavigateSuccessfully@WheelhouseAdvisors.com to learn more.

Reckless Drivers at Lehman Brothers

Today, the U.S. House Financial Services Committee will conduct a hearing to examine the failure of Lehman Brothers. One of the panelists slated to testify is the bankruptcy court appointed examiner, Anton R. Valukas.  Mr. Valukas will testify that like many financial services firms, Lehman Brothers had a robust risk management program.  However, Lehman Brothers' fatal flaw was the fact that it routinely overrode the risk controls and limits to achieve greater short-term profits.  Here is what Mr. Valukas found.

We conducted an extensive investigation to learn how Lehman managed, monitored and limited its exposure to risk. Lehman had adequate corporate governance procedures in place. It had quantitative risk models that accurately calculated risk and that accurately warned that Lehman was taking on significant levels of risk in excess of the limits generated by the models. Lehman’s procedures included reporting of the limits, and exceedances of the limits, to senior management and the Board.

But we found that Lehman was significantly and persistently in excess of its own risk limits. Lehman management decided to disregard the guidance provided by Lehman’s risk management systems. Rather than adjust business decisions to adapt to risk limit excesses, management decided to adjust the risk limits to adapt to business goals.

Much like a reckless driver who consistently exceeds speed limits and other traffic laws, Lehman Brothers eventually crashed.  In the short-term, the reckless driver may get to his/her destination quicker.  However, it is at the risk of not only his/her own life, but also the lives of everyone else in the way.

Reputation Is Everything

In last month's issue of Operational Risk & Regulation magazine, Goldman Sachs' operational risk management program and its focus on reputational risk was profiled.  The article focused on Goldman Sachs' use of scenario analysis in anticipating the magnitude of reputational risk events.  Scenario analysis exercises such as these are very useful tools to increase the risk awareness within an organization.  Here is a summary of Goldman Sachs' approach.

Goldman Sachs is using scenario analysis to study reputational risk, employing operational risk expertise within its broader risk management framework, according to its global co-heads of operational risk management, Spyro Karetsos and Mark D'Arcy.  The bank says it embraces events, even those creating more reputational risk exposure than financial risk exposure, into its framework.  "Franchise value is highly important within the organisation and managing reputational risk is a by-product of that," says Karetsos, who is based in New York. "While it is not our responsibility to quantify reputational risk, there is an internal process that measures our exposure to those risks that are difficult to quantify, one of which is reputational risk."

The timeliness of this story is ironic given the potential massive impact to the bank's reputation as a result of the fraud charges levied by the Securities and Exchange Commission on Friday.  Once the announcement was made, the bank lost close to $12.5 billion in shareholder value by the end of the trading day.  Whether that loss can be overcome remains to be seen.  However, it does prove that in business, reputation is everything.

Study Finds Most ERM Programs Still Immature

A recent study by researchers at North Carolina State University demonstrates the increasing need for more robust Enterprise Risk Management ("ERM") programs at the largest U.S. corporations.  The study points out that despite the recent financial crisis and resulting impact, most companies describe their ERM programs as "immature".  Here are a few of the study's findings.

1. Over 63% of respondents believe that the volume and complexity of risks have changed “Extensively” or “A Great Deal” in the last five years. This is relatively unchanged from the 62.2% who responded similarly in the 2009 report. Thus, most believe the world of risk is rapidly evolving in complex ways.


2. Organizations continue to experience significant operational surprises. Thirty-nine percent of respondents admit they were caught off guard by an operational surprise “Extensively” or “A Great Deal” in the last five years. Another 35% noted that they had been “Moderately” affected by an operational surprise. Together, these findings suggest that weaknesses in existing risk identification and monitoring processes may exist, given that unexpected risk events have significantly affected many organizations.


3. About half (47.5%) of respondents self describe the organization’s risk culture as one that is either “strongly risk averse” or “risk averse.” Given their admission of a highly complex and voluminous risk environment and the risk averse nature of the organization’s culture, one might expect these organizations to be moving rapidly towards more robust risk oversight processes.


4. Ironically, 48.7% of respondents describe the sophistication of their risk oversight processes as immature to minimally mature. Forty-seven percent do not have their business functions establishing or updating assessments of risk exposures on any formal basis. Almost 70% noted that management does not report the entity’s top risk exposures to the board of directors. These trends are relatively unchanged from those noted in the 2009 report.


5. Almost 57% of our respondents have no formal enterprise-wide approach to risk oversight, as compared to 61.8% in our 2009 report with no formal ERM processes in place. Only a small number (11%) of respondents believe they have a complete formal enterprise-wide risk management process in place as compared to 9% in the 2009 report. Thus, there has been only a slight movement towards an ERM approach since our 2009 report.

How mature is your company's ERM program?  Not sure?  Wheelhouse Advisors can help with a quick diagnostic review of your ERM program.  Visit us at www.WheelhouseAdvisors.com to learn more.

Out of Control

Yesterday, the U.S. Senate Subcommittee on Investigations conducted hearings to examine the largest bank failure in U.S. history and its role in the 2008 financial crisis.  The failure of Washington Mutual ("WaMu") was largely the result of years of increasing involvement in the mortgage-backed securities market.  Over a four year period, WaMu increased their securitizations of subprime mortgages from about $4.5 billion in 2003 to $29 billion in 2006.  Altogether, from 2000 to 2007, they securitized at least $77 billion in subprime loans.  At the same time, WaMu allowed its lending practices and controls to erode in the pursuit of greater loan production and short-term profits.  Here is a summary of the investigators' findings.

(1)   High Risk Lending Strategy. Washington Mutual (“WaMu”) executives embarked upon a high risk lending strategy and increased sales of high risk home loans to Wall Street, because they projected that high risk home loans, which generally charged higher rates of interest, would be more profitable for the bank than low risk home loans.

(2)   Shoddy Lending Practices. WaMu and its affiliate, Long Beach Mortgage Company (“Long Beach”), used shoddy lending practices riddled with credit, compliance, and operational deficiencies to make tens of thousands of high risk home loans that too often contained excessive risk, fraudulent information, or errors.

(3)   Steering Borrowers to High Risk Loans. WaMu and Long Beach too often steered borrowers into home loans they could not afford, allowing and encouraging them to make low initial payments that would be followed by much higher payments, and presumed that rising home prices would enable those borrowers to refinance their loans or sell their homes before the payments shot up.

(4)   Polluting the Financial System. WaMu and Long Beach securitized over $77 billion in subprime home loans and billions more in other high risk home loans, used Wall Street firms to sell the securities to investors worldwide, and polluted the financial system with mortgage backed securities which later incurred high rates of delinquency and loss.

(5)   Securitizing Delinquency-Prone and Fraudulent Loans. At times, WaMu selected and securitized loans that it had identified as likely to go delinquent, without disclosing its analysis to investors who bought the securities, and also securitized loans tainted by fraudulent information, without notifying purchasers of the fraud that was discovered.

(6)   Destructive Compensation. WaMu’s compensation system rewarded loan officers and loan processors for originating large volumes of high risk loans, paid extra to loan officers who overcharged borrowers or added stiff prepayment penalties, and gave executives millions of dollars even when its high risk lending strategy placed the bank in financial jeopardy.

These findings are not surprising in the aftermath of the financial disaster.  However, without significant oversight and change in the operations of financial institutions, a similar scenario will likely occur in the not too distant future.

What Makes a Risk Manager Effective?

An interview published in today's Wall Street Journal discusses the importance of risk management as a business discipline and the need for more formal training for professionals who dedicate themselves to the discipline. Gideon Pell, Chief Risk Officer at New York Life Insurance, provides his perspective on the increasing demand for risk management professionals.  He also offers some great insight on what makes a risk manager truly effective in an organization.  Here's what he had to say.

It's obvious that we're living in an uncertain economy. The idea of having a disciplined approach to risk management, to be able to look at risks holistically across the organization, to make sure you're not missing significant risks, is even more critical today than it was two or three years ago.

One lesson that we've learned from the last couple of years is that the institutions that failed had a lot of risk managers who were very smart and very quantitative but it didn't help them save their organizations. If you're not able to influence the organization that you're in, you're not going to be effective at your job. To be an effective risk manager, you have to have a good understanding of the business. You've got to have sound judgment and you have to be able to communicate effectively up and down the organization.

Mr. Pell is spot-on in his assessment of what makes an effective risk manager.  The challenge for many companies is developing talent to master both the quantitative and qualitative.  Risk managers must be practical and business focused in their approach to be successful.  For help designing a talent development plan, email us at NavigateSuccessfully@WheelhouseAdvisors.com.