Description:
Basel III regulation intent is to increase the resiliency of banks through effective risk management practices that can reduce significant idiosyncratic operational losses. A systemic risk event that leads to significant losses in a bank holding company (BHC) can expose them to become insolvent and cause significant volatility and unpredictable negative impact on the United States economy. The viral spread of operational losses through global markets by interconnected multinational banks can be compared to viruses spread through interconnected countries and the significant losses incurred; this can be referred to as idiosyncratic viral loss theory. This idiosyncratic viral loss theory discusses systemic operational losses that are evident in human error, fraud, and legal expenses that are aligned to systemic operational risk. The occurrences of significant losses that are idiosyncratic in nature and that are linked to failed internal processes, people, systems, and external events are defined by the Basel Committee on Banking Supervision as operational risk losses; these losses’ idiosyncratic nature makes them comparable to viruses. This study employs the Compliance and Ethics Group's (OCEG's) standard that integrates governance, risk management, internal control, assurance, and compliance (GRC capability model) into one functional goal to improve quality and principled performance through measurable tools that may enhance effectiveness and efficiency practices. This study concerns senior manager activities that can be effective towards meeting effective risk management practices posed by the Basel III regulation for BHCs, which may reduce the spread of significant losses in the banks. Through the use of a qualitative e-Delphi study, 10 banking finance experts were convened to build consensus on effective risk management practices. Data were collected from three electronic questionnaires submitted through Qualtrics. Data were analyzed using theoretical triangulation, coding, and thematic analysis. Four important considerations were identified that could bolster effective risk management practices: (a) a comprehensive enterprise-wide risk; (b) controlling fraud; (c) going beyond the minimum risk assessment requirements set forth by the banking regulators; (d) independent risk identification and management. These considerations towards effective risk management practices may help reduce systemic operational losses viral spread in banks.