Securities (Level 4, Unit 3) Free Practice Test Set Two

Correct: In the United States, central counterparties (CCPs) or clearing houses mitigate counterparty risk through a process called novation. This legal process replaces the original bilateral contract between the insurer and the broker with two new contracts: one between the insurer and the CCP, and one between the broker and the CCP. By becoming the buyer to every seller and the seller to every buyer, the CCP centralizes credit risk and ensures that the failure of a single market participant does not lead to a systemic collapse of the hedging program.

Incorrect: Relying on federal guarantees for market losses is incorrect because the Securities Investor Protection Corporation (SIPC) protects against the failure of a broker-dealer, not against market volatility or general investment losses. The strategy of eliminating initial margin is inaccurate, as clearing houses actually enforce rigorous initial and variation margin requirements to ensure they have sufficient collateral to cover potential defaults. Choosing to shift liability back to the original broker is not how central clearing works; the principle of novation specifically terminates the original bilateral legal obligation and replaces it with an obligation to the clearing house itself.

Takeaway: Clearing houses reduce counterparty risk by using novation to become the central legal counterparty and enforcing strict collateral management standards.

Correct: The 2016 findings regarding HSBC’s monitorship emphasized that the primary operational risk challenge was the complexity of harmonizing disparate systems and regional practices. Large global institutions often face significant friction when attempting to impose standardized ‘Global Standards’ on legacy infrastructures, leading to inconsistent monitoring and persistent control gaps.

Incorrect: Focusing on the Liquidity Coverage Ratio describes a failure in liquidity risk management rather than the operational and compliance control failures identified in the 2016 case. The strategy of requiring Board-level approval for daily underwriting tasks misinterprets the role of corporate governance, which should focus on high-level oversight and risk appetite rather than transaction-level management. Opting for total risk transfer through reinsurance is a method of managing financial exposure but does not address the underlying systemic failures in internal compliance monitoring and operational resilience.

Takeaway: Standardizing compliance controls across global operations requires overcoming significant technical and cultural barriers to prevent fragmented oversight and systemic failures.

Correct: The Net Stable Funding Ratio (NSFR) is a regulatory standard designed to ensure that a firm maintains a reliable profile of available stable funding relative to the assets it funds. By increasing retail deposits and issuing longer-dated debt, the firm increases its Available Stable Funding (ASF), which is the numerator of the NSFR. This directly addresses the structural mismatch by ensuring long-term assets are backed by stable, non-volatile funding sources over a one-year horizon.

Incorrect: Focusing on Level 1 assets for 30-day outflows describes the Liquidity Coverage Ratio (LCR) rather than the long-term structural focus of the NSFR. The strategy of investing in long-term private equity placements would actually increase the Required Stable Funding (RSF) because illiquid assets require more stable backing, thus worsening the ratio. Choosing to rely on overnight repurchase agreements introduces significant rollover risk and decreases the amount of stable funding available, which contradicts the objective of maintaining a sustainable funding profile.

Takeaway: The NSFR promotes long-term resilience by requiring firms to fund illiquid assets with reliable, stable sources of capital.

Correct: Impact tolerances are the core of an operational resilience framework. They represent the maximum tolerable level of disruption to a critical operation, measured by time or other relevant metrics, before the disruption causes significant harm to customers, the firm’s safety and soundness, or US financial stability.

Incorrect: Defining tolerances only as dollar amounts of operational loss relates more to risk appetite for financial loss rather than the continuity of service delivery. Focusing on a zero-failure rate for non-critical internal processes misallocates resources away from the essential services that policyholders rely on during a crisis. Opting to focus on the probability of specific threats occurring is a risk assessment activity that does not address the firm’s ability to operate through a disruption once it has already happened.

Takeaway: Operational resilience focuses on setting time-bound impact tolerances to ensure critical services continue during severe disruptions.

Correct: Standard deviation is a fundamental statistical measure used in United States financial risk management to quantify the amount of variation or dispersion in a set of values. A low standard deviation indicates that the data points tend to be close to the mean, while a high standard deviation indicates that the data points are spread out over a wider range. In the context of risk, it serves as the primary metric for volatility, reflecting the degree of uncertainty regarding the actual return compared to the expected mean return.

Incorrect: Identifying the most frequent value describes the mode, which helps identify commonality but fails to measure the spread or risk of the entire distribution. Using the middle value of a distribution refers to the median, which provides a measure of central tendency but does not account for the magnitude of deviations from that center. Relying on the simple arithmetic average describes the mean, which establishes a central point but provides no information about the volatility or the likelihood of extreme outliers.

Takeaway: Standard deviation quantifies volatility by measuring how much individual data points vary from the mean of the distribution.

Correct: Halting issuance and performing a retrospective assessment is the necessary immediate step to prevent further unauthorized risk accumulation. This approach ensures that existing exposures are identified and managed according to the firm’s risk management framework and regulatory expectations for maintaining robust internal controls and adhering to established underwriting standards.

Incorrect: Adjusting the incentive structure is a valid long-term corrective action but fails to address the immediate operational failure or the risk already sitting on the books. Simply issuing a memorandum is an insufficient control response to a systemic bypass of mandatory risk protocols and does not remediate the existing breach. Opting to transfer risk through reinsurance without first assessing the underlying data quality and compliance status may lead to legal disputes with reinsurers and fails to address the root cause of the internal control failure.

Takeaway: Operational risk management requires immediate cessation of non-compliant activities and a thorough remediation of existing unauthorized exposures to maintain regulatory standards.

Correct: Under the Dodd-Frank Act and U.S. market practice, CCPs mitigate risk through novation, where the clearinghouse interposes itself between the original buyer and seller. This process allows the insurance company to net multiple positions across different clearing members, significantly reducing the overall credit exposure to a single, highly regulated entity rather than multiple individual counterparties.

Incorrect: The strategy of assuming the CCP removes the need for a liquidity risk management function is flawed because margin calls actually increase the need for liquid assets and robust cash flow monitoring. Simply relying on the CCP for operational risk management does not exempt the insurer from its own internal control and audit responsibilities under U.S. regulatory standards. Choosing to believe that a CCP provides a sovereign guarantee is a misconception, as CCPs rely on a private default waterfall consisting of margin and member contributions rather than government backing.

Takeaway: CCPs reduce counterparty risk through novation and multilateral netting while requiring robust liquidity management for margin obligations.

Correct: In the United States, regulatory standards for financial institutions emphasize the importance of an independent risk management function. This function acts as a second line of defense, providing objective oversight and challenging the assumptions and activities of the first line, such as the Treasury department. This independence ensures that liquidity risks are evaluated without the conflict of interest that arises from daily operational or profit-generating responsibilities.

Incorrect: The strategy of executing daily market transactions and managing bank accounts is an operational role belonging to the Treasury department rather than an oversight function. Choosing to establish the risk appetite without Board involvement fails to meet corporate governance standards where the Board must ultimately approve the firm’s risk limits. Focusing only on historical data is an incomplete approach because it ignores the critical requirement for forward-looking stress testing and scenario analysis to ensure resilience during market disruptions.

Takeaway: An independent liquidity risk management function ensures objective oversight and challenge of a firm’s funding and liquidity positions.

Correct: In the United States regulatory framework, particularly under standards set by the Federal Reserve and the OCC, the second-line risk function must be independent of the first-line business units. Reporting directly to the Chief Risk Officer ensures that the liquidity risk team can provide an objective, unbiased challenge to the assumptions used by the treasury and investment departments without being influenced by their operational or profit-driven goals.

Incorrect: The strategy of embedding risk monitoring within the treasury department fails to provide the necessary independence, as the department would essentially be monitoring its own performance and assumptions. Relying solely on the internal audit department is inappropriate because audit is a third-line function focused on retrospective compliance rather than the active, forward-looking management required for liquidity. Choosing to delegate limit-setting to revenue-generating units creates a significant conflict of interest, as these units may prioritize growth and returns over the firm’s liquidity safety and resilience.

Takeaway: Effective liquidity risk management requires a second-line function independent of treasury and business units to provide objective challenge and oversight.

Correct: Implementing automated straight-through processing (STP) minimizes manual intervention and the risk of human error, which is critical for meeting the rapid settlement cycles required for variation margin. Maintaining a buffer of U.S. Treasury securities ensures the firm has access to high-quality liquid assets (HQLA) that are universally accepted by U.S. clearinghouses and regulators, thereby mitigating liquidity risk during market stress.

Incorrect: The strategy of negotiating extended settlement windows for illiquid assets like real estate is fundamentally flawed because variation margin calls in the U.S. derivatives market typically require daily or even intraday settlement in cash or highly liquid securities. Delegating the entire calculation process to a counterparty introduces significant operational risk and a lack of oversight, as the firm would be unable to independently verify if the margin calls are accurate. Opting for lower-rated corporate instruments as the primary collateral source is generally ineffective because these assets are subject to high haircuts and may be rejected by clearinghouses during periods of market instability.

Takeaway: Effective collateral management requires automated processing and high-quality liquid assets to ensure timely margin settlement and operational resilience.

Correct: Implementing tiered limits based on credit ratings ensures that exposure is proportional to the risk profile of the counterparty. Establishing an automated escalation process for breaches provides an immediate operational control, preventing unauthorized exposure and ensuring timely management intervention in line with US risk management standards.

Incorrect: Relying on static limits reviewed only during annual audits fails to address the dynamic nature of credit quality and market conditions. The strategy of allowing portfolio managers to override limits during high volatility creates a conflict of interest and weakens the firm’s risk posture. Basing limits on Treasury recovery rates is flawed because corporate and reinsurance counterparties carry significantly higher default risks than US government debt.

Takeaway: Effective credit limit management requires risk-sensitive tiers and automated escalation to maintain operational control over counterparty exposures.

Correct: Under the Dodd-Frank Act, the use of central counterparties (CCPs) and clearing houses is a key regulatory requirement designed to reduce systemic risk and counterparty exposure in the swaps market. By clearing through a CCP and adhering to strict margin and collateral standards, the insurance company ensures that the failure of a single counterparty does not lead to a total loss of the credit protection, thereby enhancing operational resilience.

Incorrect: Relying solely on external credit ratings is insufficient because ratings can be lagging indicators and do not replace the need for independent internal credit assessment and real-time monitoring. The strategy of concentrating transactions with a single primary dealer creates a significant concentration risk and a single point of failure, which contradicts sound risk diversification principles. Opting for a static maturity ladder fails to account for the dynamic nature of market volatility and the potential for early termination or credit events that require active liquidity management.

Takeaway: Managing credit derivative risk in the U.S. requires central clearing and rigorous collateralization to mitigate counterparty exposure and ensure regulatory compliance.

Correct: Scenario analysis is a modern measurement technique specifically designed to evaluate high-impact, low-frequency events by using expert workshops and external data to model hypothetical risks. This approach allows US insurers to quantify potential losses from events that are not captured in their internal historical data, such as massive cyber-attacks or unprecedented regulatory shifts, aligning with modern risk management expectations.

Incorrect: Focusing only on self-assessments tends to highlight known process weaknesses and control gaps rather than modeling the financial impact of extreme external shocks. Utilizing performance indicators provides valuable real-time monitoring of current risk levels but does not provide a quantitative estimate of potential future catastrophic losses. Relying solely on industry loss data comparisons provides a historical view of what happened to others but may not reflect the specific operational vulnerabilities or unique business model of the individual insurance firm.

Takeaway: Scenario analysis is the primary forward-looking tool for measuring high-impact, low-frequency operational risks where historical data is insufficient or non-existent.

Correct: The misalignment of incentives and verification controls creates an environment where internal fraud and unauthorized policy alterations can occur undetected. This mirrors the 2016 Wells Fargo case where aggressive sales targets and weak oversight led to systemic conduct risk.

Correct: In the United States insurance industry, effective governance requires a clear segregation of duties between the ‘first line’ (business operations/risk-taking) and the ‘second line’ (risk oversight). By ensuring that those who set and execute underwriting guidelines are not the same individuals validating breaches, the firm prevents conflicts of interest. The Board Risk Committee provides the necessary high-level oversight to ensure that the Chief Risk Officer and risk functions remain independent and empowered to challenge the business units.

Incorrect: The strategy of consolidating monitoring within business units fails because it removes the independent check-and-balance necessary to identify systemic failures or intentional policy overrides. Choosing to give the Chief Financial Officer control over both policy and audit reviews creates a significant conflict of interest that compromises the independence of the internal audit function. Opting for external auditors to set the risk appetite is inappropriate because the Board of Directors holds the non-delegable fiduciary responsibility for defining the firm’s risk strategy and tolerance levels.

Takeaway: Effective operational risk management requires a clear segregation of duties and independent oversight to prevent conflicts of interest and ensure accountability.

Correct: Distribution analysis is essential in operational risk management because loss data is rarely normally distributed. It allows firms to identify and model the ‘tail’ of the distribution, where rare but catastrophic events (like major data breaches or fraud) occur. Understanding these fat-tail risks is crucial for setting realistic risk appetite limits and ensuring the firm holds sufficient capital for extreme scenarios.

Incorrect: Applying a standard normal distribution is fundamentally flawed for operational risk because it underestimates the likelihood and impact of extreme events. Relying exclusively on quantitative historical data is insufficient because it cannot account for unprecedented ‘black swan’ events or changes in the technological landscape. Focusing on the automatic alignment with Federal Reserve statutory accounting principles confuses a statistical modeling tool with a regulatory reporting requirement, as distribution analysis is an analytical method rather than a compliance guarantee.

Takeaway: Distribution analysis helps firms understand the extreme impact of rare operational failures that standard averages often obscure.

Correct: Maturity ladders are a fundamental tool in liquidity risk management used to monitor a firm’s cash flow profile. By bucketing contractual and contingent cash inflows and outflows into specific time intervals (such as overnight, one week, or one month), the firm can identify periods where liquidity needs might exceed available sources, allowing for proactive funding management.

Incorrect: Focusing on the fair market value of securities relates to market risk and price volatility rather than the structural timing of cash flows. Analyzing the time until principal repayment for bond issuers is a component of credit risk and duration analysis, which does not address the firm’s internal liquidity position. Calculating risk-weighted assets for operational risk is a capital adequacy requirement under the Basel framework as implemented by U.S. regulators, which is distinct from the liquidity monitoring provided by maturity ladders.

Takeaway: Maturity ladders enable firms to identify and manage liquidity mismatches by bucketing cash flows into specific time intervals.

Correct: Relying solely on contractual cash receipts ignores the reality of behavioral and operational delays. In the United States insurance market, liquidity risk management must account for the difference between when cash is legally due and when it is actually available. If an insurer assumes cash will arrive exactly on the contract date, they may find themselves with insufficient liquid funds to cover sudden spikes in claims or policy surrenders, especially during periods of economic volatility when policyholder behavior becomes less predictable.

Incorrect: Focusing only on disclosure regulations like Reg BI is incorrect because those rules primarily govern the relationship and recommendations provided to clients rather than internal prudential liquidity modeling. The strategy of reclassifying premiums as non-admitted assets is a misunderstanding of statutory accounting, which focuses on the collectability and nature of the asset rather than the timing of the cash flow model. Opting to cite the Federal Insurance Office for an automatic enforcement action is inaccurate as the FIO primarily serves a monitoring and advisory role rather than acting as a primary prudential regulator with specific receipt-ratio mandates.

Takeaway: Liquidity risk management must distinguish between contractual and actual cash receipts to ensure sufficient funds are available for immediate obligations.

Correct: Implementing multi-factor authentication and dual-control procedures directly addresses the root cause of the incident, where compromised credentials allowed single-point-of-failure access to payment systems.

Incorrect: Relying solely on increasing insurance coverage manages the financial impact but fails to prevent the operational failure or address the underlying security vulnerability. The strategy of updating business continuity plans focuses on availability rather than the integrity and security of the payment process itself. Focusing only on general workstation password audits is insufficient because it does not target the specific high-privilege credentials used for specialized payment systems.

Takeaway: Robust authentication and dual-control protocols are essential for securing high-value payment systems against credential-based cyber attacks.

Correct: Distributing critical functions across different geographic locations and using multiple cloud providers effectively mitigates the risk of a single point of failure. This approach aligns with U.S. regulatory expectations from the Federal Reserve and the OCC regarding operational resilience, as it ensures that a localized disaster or a specific vendor outage does not result in a total cessation of business services.

Incorrect: The strategy of consolidating operations into a single facility creates a significant concentration risk where a single event could disrupt the entire firm’s capacity. Simply standardizing on one software system increases vulnerability to platform-specific bugs or provider-wide outages that could paralyze all departments simultaneously. Opting to increase capital reserves addresses the financial consequences of a failure but fails to improve the actual operational continuity or reduce the likelihood of service disruptions. Relying solely on a low-risk zone designation ignores the potential for unforeseen systemic failures that diversification is intended to guard against.

Takeaway: Operational diversification requires spreading critical processes across different locations and technology platforms to eliminate single points of failure and enhance resilience.

Correct: Integrating stress testing with behavioral modeling is the most robust approach because it addresses the dynamic relationship between market interest rates and policyholder actions. In the United States insurance market, ALM must account for the ’embedded options’ held by policyholders, such as the right to surrender a policy. By combining these factors, the firm can better predict liquidity needs and ensure that assets are available to cover liabilities under various economic conditions, satisfying both internal risk appetite and regulatory expectations for liquidity management.

Incorrect: The strategy of increasing high-yield bond allocations is flawed because it focuses on generating income rather than addressing the liquidity mismatch, potentially increasing credit risk during a downturn. Relying solely on historical data is insufficient as it fails to account for forward-looking ‘tail risks’ or shifts in consumer behavior that haven’t occurred in the recent past. Choosing to outsource the modeling function may reduce some internal processing errors but introduces significant third-party risk and does not solve the fundamental requirement for sophisticated, firm-specific behavioral analysis.

Takeaway: Effective ALM requires integrating market scenarios with behavioral modeling to ensure liquidity remains adequate during periods of high volatility.

Correct: Central clearing houses (CCPs) mitigate bilateral credit risk by acting as the buyer to every seller and the seller to every buyer. However, this creates a concentration point where the insurance firm becomes dependent on the CCP’s operational resilience, default funds, and risk management frameworks. In the United States, under the Dodd-Frank Act, this shift is intended to reduce systemic contagion but requires participants to monitor the CCP as a critical single point of failure.

Incorrect: The strategy of assuming a total waiver of margin requirements is incorrect because CCPs strictly enforce margin to protect the clearing system from defaults. Relying on the idea that clearing house bylaws automatically pre-empt state insurance investment restrictions is false, as US insurers must still comply with state-level solvency and investment laws. Opting for the use of illiquid assets like policy loans for intraday margin calls is inaccurate because CCPs typically require high-quality, liquid collateral like US Treasuries or cash to ensure immediate settlement.

Takeaway: Central clearing shifts bilateral counterparty risk to concentrated systemic risk, requiring robust monitoring of the clearing house’s operational resilience.

Correct: Mapping end-to-end interdependencies is a core component of operational resilience as it identifies the people, technology, and third-party service providers necessary for critical operations. By testing these maps against severe but plausible scenarios, the firm can identify points of failure and ensure it remains within its tolerance for disruption, which is a key expectation of U.S. federal banking and insurance regulators.

Incorrect: Focusing only on capital buffers addresses financial resilience rather than the operational ability to continue delivering services during a crisis. The strategy of demanding zero-downtime guarantees from vendors is unrealistic and fails to address the firm’s internal process vulnerabilities or the need for contingency workarounds. Opting for traditional disaster recovery plans is insufficient because these often focus on IT infrastructure in isolation without considering the broader business processes and human elements required to maintain critical operations.

Takeaway: Operational resilience involves mapping interdependencies and conducting scenario testing to ensure critical operations persist through severe disruptions.

Correct: Funding liquidity risk occurs when a firm cannot meet its cash flow needs, such as policy surrenders, because it cannot liquidate assets at fair value or access the repo market or other funding sources. In this scenario, the need to sell bonds at a significant discount to meet surrenders is a classic example of this risk.

Correct: In the United States, regulatory expectations following the Dodd-Frank Act emphasize reducing mechanistic reliance on external credit ratings. A robust risk management function must perform its own independent due diligence and internal credit assessments. This ensures that the firm understands the specific risks of its holdings and that those risks remain within the established risk appetite, rather than relying blindly on a third-party rating which may lag behind market realities.

Incorrect: The strategy of automatically liquidating assets based solely on a rating change can lead to fire sales and ignores the firm’s specific risk tolerance and prevailing market conditions. Relying exclusively on external ratings as the only source of truth fails to meet the requirement for independent risk assessment and internal oversight. Choosing to wait for multiple agencies to agree before acting creates a dangerous lag in risk response and could result in significant losses if the credit quality continues to decline rapidly.

Takeaway: Firms must supplement external credit ratings with internal due diligence to avoid mechanistic reliance and ensure alignment with their specific risk appetite.

Correct: Establishing a liquidity buffer of high-quality liquid assets (HQLA) and using straight-through processing (STP) is the most effective approach. Under United States regulations from the CFTC and SEC, variation margin for uncleared swaps must typically be exchanged on a T+1 basis. Automated processing reduces the operational risk of delayed settlement, while HQLA ensures that the firm can meet its liquidity obligations without forced sales of illiquid assets during market stress.

Incorrect: The strategy of using policyholder premiums for margin calls is incorrect as it violates strict asset segregation and solvency requirements mandated by state insurance regulators and federal conduct standards. Opting for a seventy-two hour extension is not a viable solution because United States margin rules for uncleared swaps require much faster settlement, and manual processes introduce significant operational risk during periods of high volatility. Choosing to use illiquid private equity holdings is inappropriate because variation margin typically requires cash or highly liquid government securities to provide immediate risk mitigation for the counterparty.

Takeaway: Operational resilience in collateral management requires combining high-quality liquid assets with automated processing to meet strict United States regulatory settlement timelines.

Correct: Engaging stakeholders from underwriting and risk departments ensures that the change management process incorporates expert knowledge to align the new technology with established risk tolerances and business objectives. This collaborative approach is essential for operational resilience, as it ensures that the automated system accurately reflects the firm’s risk appetite and regulatory compliance requirements before it goes live.

Incorrect: Focusing only on stress testing addresses technical performance and capacity but ignores the critical issue of whether the system is making the correct risk-based decisions. Simply conducting seminars to reduce resistance treats the underwriters’ concerns as a behavioral issue rather than a legitimate technical and risk-based misalignment. The strategy of changing the guidelines to fit the software reverses the proper governance flow, where business requirements and risk appetite should drive technology, not vice versa.

Takeaway: Change management must prioritize the alignment of new systems with existing risk governance frameworks through active stakeholder participation.

Correct: The Net Stable Funding Ratio (NSFR) is a structural liquidity metric implemented by US federal regulators to ensure that long-term assets are funded with reliable, stable liabilities over a one-year time horizon. This complements the Liquidity Coverage Ratio (LCR), which is a short-term metric requiring institutions to maintain enough high-quality liquid assets to survive a significant 30-day stress scenario.

Incorrect: Confusing liquidity metrics with daily claims cash flow or state-level solvency margins misrepresents the federal nature of these standards. The strategy of associating the NSFR with equity marketability or interest rate risk management ignores its primary focus on funding stability. Choosing to suggest that these ratios govern reinsurance recoverables or bond exposure limits conflates liquidity standards with credit risk or concentration limits. Focusing only on short-term marketability fails to account for the one-year structural requirement inherent in the NSFR framework.

Takeaway: The NSFR addresses long-term structural funding risks, whereas the LCR focuses on short-term liquidity resilience during acute stress events.

Correct: A tiered authority matrix ensures that significant risks are reviewed by senior personnel with appropriate expertise, while internal audits provide a necessary feedback loop to ensure standards are consistently applied and documented. This dual approach addresses both the credit risk of poor selection and the operational risk of process failure, aligning with standard US insurance industry practices for risk governance.

Incorrect: Relying on fully automated systems for complex commercial policies can lead to systemic errors if the underlying model fails to account for unique risk factors or changing market conditions. The strategy of allowing undocumented deviations undermines the integrity of the risk selection process and creates significant regulatory and credit exposure by removing accountability. Choosing to outsource the entire decision-making process to agents introduces a severe conflict of interest, as agents are often incentivized by commission rather than the long-term solvency and risk quality of the carrier.

Takeaway: Effective underwriting standards require a balance of clear authority limits, rigorous documentation, and independent oversight to mitigate credit and operational risks.

Correct: Under United States regulatory frameworks such as the Dodd-Frank Act, the exchange of variation margin is a critical tool for mitigating counterparty risk in over-the-counter derivatives. Daily valuation ensures that collateral levels reflect current market conditions, which significantly reduces the potential loss if a counterparty defaults. This approach aligns with the Liquidity Risk Management Function’s goal of ensuring that the firm can meet its obligations even during periods of counterparty stress.

Incorrect: Relying solely on external ratings from NRSROs fails to meet United States regulatory expectations for independent credit assessment and ignores the inherent volatility of market-based exposures. The strategy of concentrating all trades with one counterparty creates significant concentration risk and ignores the fundamental risk management principle of diversification. Opting for a static annual review is inadequate because counterparty creditworthiness and market exposures can change rapidly between reporting periods, leaving the firm exposed to unmonitored risks.

Takeaway: Effective counterparty risk management requires dynamic collateralization and independent credit assessment rather than static reviews or sole reliance on external ratings.