OPERATIONAL RISK MANAGEMENT & MODELLING FROM WYNYARD GROUP & EVMTECH

Transcription

1 WYNYARDGROUP.COM OPERATIONAL RISK MANAGEMENT & MODELLING FROM WYNYARD GROUP & EVMTECH Wynyard Group and EVMTech s combined solution provides an end-to-end risk management process that enables organisations to implement robust and custom measurement frameworks through high-performance modelling and configurable, intuitive risk management. The overall result is a fully quantifiable risk framework for dealing with potential losses and capital requirements. Risk# is a data analysis, risk modelling, and risk aggregation platform designed to develop stochastic models that can be maintained centrally while enabling their efficient deployment to end-users across business units or legal entities. Combined with Wynyard s highly configurable and robust operational risk management solution, organisations can adopt the Advanced Measurement Approach and efficiently manage and audit the full spectrum of risks. KEY BENEFITS: Combine all relevant data into a single risk framework Identify potential impacts to inform better decision-making End-to-end risk management, reporting and monitoring Efficient development and deployment of custom models Apply the Advanced Measurement Approach in a user-friendly way Address regulatory compliance and capital requirements including Basel II and III regulations Compute and allocate regulatory and economic capital models Save time with advanced risk modelling and highperformance computational capability RISK & THREAT ASSESSMENT

2 KEY FEATURES RISK# Intuitive Dashboards Personalised views provide concise visualisation and managers can easily examine areas of concern. Reduce information overload and improve system adoption Easily identify the most critical risks and outstanding actions Methods: flexible workflow and business logic Fully configured methods create a workflow that matches the client s own business requirements. Build in the business taxonomy, processes and logic Embed risk culture and increase the quality of data captured Multiple dimension risk aggregation Risks are automatically aggregated and multiple dimensions can be easily configured. Apply different scales and profiles to each level in the organisation Tailored rules, alerts and s Rules and alerts can be applied to every screen at a field level to trigger simple or complex notifications. On-event and scheduled messages s and data-driven alerts Policy management and surveys Define and manage policies and regulatory compliance within the same integrated database. Automated surveys that match the organisation s policies Employee and third party attestation Flexible data model Wynyard s data structure allows any number of additional objects and fields to be created. Add items such as KRIs, scenarios, assets and threats as required; or configure the system at the outset with the ability to disable until necessary Integrated auditing Audit capability enables auditors to view relevant up to date Risks and Compliance information. Full execution of test plans and electronic workpapers Record audit findings, create actions, and track progress Data Management and Processing Advanced data processing uses tables in combination with a wide range of SQL-type table operations. Simple import/export functionality with standard database applications and Excel A flexible and accurate approach to data processing and analysis Data Inference Risk# provides a comprehensive library of parametric frequency and severity distributions. Loss data and scenario data fitting Different optimization functions supported such as likelihood function or Kolmogorov Smirnov function Stochastic Modelling Risk# covers a comprehensive range of operations on distributions, required for compounding frequency and severity, combining ILD, ELD and scenario distribution, and aggregating distribution by assuming dependence models. Monte Carlo simulation and numerical computations Insurance mitigation modelling and netting functionality Capital computation with allocation of capital to risk factors Compliance and Reporting Auditing and reports support internal and regulatory validation requirements and implementations are approved according to applicable standards. Comprehensive logs and functionality to re-run log files for audit or model validation Flexible report generation with automatic report updates Change tracking Highlight those code parts that are impacted by changes to data or model assumptions and recalculate only the impacted parts of the model. Tracking functionality for model parameter changes Develop and deploy models centrally to several end-user groups Flexibility A high level of flexibility enables linking to various libraries and platforms. Introduce user-defined functions and classes in standard C# language, link to C# libraries and generate C# code for developed models Link to Excel, R and Mathematica and call the respective functions within the Risk# platform User Convenience Superior performance combined with flexible functionality enables greater usability and system adoption. Support of advanced code writing without extensive programming knowledge User-friendly scripting functionality and GUI

3 AN INTEGRATED SOLUTION THE PROCESS 1. Wynyard Risk Management is used as the central storage system and is fully configurable according to the framework areas applicable for each organisation. 2. Raw information from both internal and external systems is combined and expanded on by the users entering direct data into Wynyard Risk Management. 3. Risk and control information is assessed and made available alongside key information items required for statistical modelling in Risk# where users can perform: Database type operations Non-life modelling Regulatory and economic capital models Stochastic risk modelling and risk aggregation 4. Clean quantified data from Wynyard Risk Management is modelled in Risk# using a variety of methods, which can be customised specifically for each client, including the most complex regulatory and capital requirements. 5. Risk# models severity and frequency distributions, and provides an aggregated view of the capital management and allocation requirements 6. The results from both Wynyard Risk Management and Risk# can be visualised and reported as required. User configurable dashboards in Wynyard Risk Management provide user friendly and flexible display. THE SOLUTION FRAMEWORK INPUT & ASSESSMENT ANALYSIS CAPITAL ALLOCATION & MANAGEMENT INFORMATION COMPUTATION VISUALISATION REPORTING REGULATORY CRSA NETTING OF INSURANCE COMPLIANCE BEST PRACTICE PROCESS INPUT KRIS INTERNAL LOSES EXTERNAL LOSES RISK# AGGREGATION OF RISKS EC & RC COMPUTATION FINANCIAL SYSTEMS SCENARIOS CAPITAL ALLOCATION IT SYSTEMS HR SYSTEMS DATA INPUT WRM * EXTERNAL SYSTEMS ACTION TRACKING TREND ANALYSIS STAKEHOLDERS ALERT NOTIFICATION WRM * MANAGEMENT USER INPUT CONSOLIDATION INTERNAL STAFF CAUSAL ANALYSIS EVMTech *Wynyard Risk Management

4 INTEGRATED ARCHITECTURE THE AMA OPERATING MODEL Both Wynyard Risk Management and Risk# are built on.net technology and therefore standard functions are available throughout the platforms. The Wynyard Risk Management product uses a multi-tier architecture with logical separations for various parts of the application. Communication between the browser client and the application uses a number of communication protocols for exchanging various types of information and all traffic between the client and the application (both data entry and reporting) is authenticated; however clients wanting additional security via encryption can do so at a number of levels. Risk# is a thick client application with interface support to a data repository. The database interface is a lean one based on the exchange of CSV files between Risk# and WRM. Direct interface to the WRM database is available as a custom offering. The current generation of AMA models uses a hybrid approach by incorporating loss data (internal and external) with scenario data. BEICF information is often used to make appropriate adjustments to the model parameters (e.g. adjustment to frequency) or to the model results (e.g. adjustment to allocated capital). The modelling granularity is determined based on reporting needs, organisational structure, and data availability. The standard functionality of Risk# covers the observed range of modelling practices and the application architecture allows businesses bespoke needs to be integrated within the standard application functionality in an efficient and seamless manner. Model parameters for each unit of measure (UoM) are calibrated based on available data. Model parameters include frequency and severity parameters by data type and the parameters of the model used to combine the respective distributions. Subsequently risk aggregation is performed to compute gross regulatory and economic capital figures. Risk aggregation requires that a dependency structure is assumed and modelled accordingly. In case of comprehensive excess insurance policies, it is worth including the impact of insurance mitigation in the computation of the capital charge. From a use test point of view, allocation of the capital (gross or net of insurance mitigation) to the underlying business lines (or profit centres) becomes relevant. The choice of allocation scheme needs to balance between statistical soundness and risk management incentive setting requirements. LOGICAL SEPERATIONS (CAN BE SAME SERVER) AMA OPERATING MODEL Data Input Risk modeling Output and Reporting Business Use INTERFACE APPLICATION DATA EXCHANGE DATABASE RECOVERY FILES Internal Loss Data Data standards Cleansing Validation External Loss Data Relevance Informed selection Data... Scenario Data Compliances Accuracy/Objectivity Validation Qualitative Assessment CRSA Key risk indicators Key control indicators LDA models UoM/Scarcity Fitting/Robustness Scalling Tall modelling Credibility analysis Probabilistic models Tall modelling Combining with LDA Scorecards Integration into capital model EL level Effectiveness of controls Capital level Risk appetite Capital allocation by business line Risk diversion and correlation Effectivness of controls Reporting: Management Financial Regulatory Budgeting of EL Support management decision making Capital allocation Setting risk appetite Managing of risk within appeitie Insurance mitigation Incresed confidence of stakeholders Preventative measures Prioritization of change controls RISK# APPLICATION RISK# DATA REPOSITORY Figure: WRM / RISK# Integrated Architecture

5 ABOUT Wynyard Group is a market leader in critical threat assessment and advanced crime analytics software for government, financial services and critical national infrastructure providers. Wynyard s powerful software helps assess threat, surface hidden relationships, give new meaning to events and identify people of interest. Wynyard has customers worldwide including Fortune 500 companies and leading government security agencies. The company has offices in the United Kingdom, United States, Canada, United Arab Emirates, Australia and New Zealand. EVMTech is a risk management advisory and software company serving the financial services sector. EVMTech is widely recognised in the areas of operational risk and stress testing. The core expertise provided by EVMTech includes development and implementation of frameworks that meet regulatory and internal capital requirements of our clients. EVMTech software products provide advanced technology and rich functionality. CONTACT 313 Building 1 Dubai Internet City Dubai infoemea@wynyardgroup.com Toronto London Switzerland Arlington, VA Dubai Sydney Auckland Wellington Christchurch Wynyard Group offices EVMTech main office Wynyard & EVMTech customer locations WYNYARDGROUP.COM EVMTECH.COM