A sound loss database records occurrence, discovery, and accounting dates; the business and event category; gross loss; recoveries; causes; and remediation. Distinguish booked losses from near misses and potential exposures. Record linked events consistently so a lawsuit paid in installments does not become several unrelated incidents.
Gross losses and recoveries should remain separately visible. An insurance payment can reduce net cost without proving the underlying process is safe. Reconcile the database to accounting, document reporting thresholds, and retain a review trail for classifications and changes. Prompt reporting supports action before the final financial amount is known.
Collection thresholds are policy choices subject to the applicable framework, not universal dollar amounts. A high threshold omits frequent small events; a changing threshold can create a false trend. Delayed discovery, litigation reserves, inflation, acquisitions, and inconsistent treatment of recoveries also distort comparisons. External loss data broadens the sample but must be assessed for business relevance and collection bias.
A risk and control self-assessment (RCSA) starts with the process and its objectives. Identify what can go wrong before controls, assess likelihood and impact, evaluate control design and operation, and...
Common mistakes
- Interpreting heatmap ranks as loss percentages. A move from 16 to 6 does not measure a 62.5% risk reduction.
- Multiplying without independence. For an AND path, use a conditional probability when dependence exists.
- Adding OR paths exactly. The sum double-counts overlap; use the union or complementary probability.
Bottom line
- Loss records need consistent dates, gross loss, recoveries, and event links.
- RCSA ranks guide decisions but do not measure expected loss.
- Indicator purpose distinguishes risk, performance, and control.
- Fault trees require explicit dependence and overlap assumptions.
Exam shortcut
Before calculating a fault tree, mark every probability as unconditional or conditional and identify common causes. For mitigation questions, follow the failure mechanism through prevention, detection, and recovery. For a report, select the information its audience needs to act: operators need tasks, committees need challenge, and the board needs material exposure and decisions.
The full lesson (about 3,241 words, 22 min read) adds 3 worked examples, all 6 common mistakes, a self-check, free in the app.
Learning objectives
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22
- 23
- 24
Browse all free FRM Part II lessons or jump into free FRM Part II practice questions.