Who dares wins
The impact that the loss of customer data can have on a firm is staggering. Here in the UK, the loss of millions of government records - on a CD sent in the post, apparently - has awakened this country to the seriousness of such events. Indeed, it is one of several recent events that have helped wiped the shine off of prime minister Gordon Brown's early months in office and led to stunningly low poll ratings for government competency.
The US has been clued on to this potential risk for some time - in January 2007 the TJ Maxx chain of stores announced the loss of millions of customer records as a result of hacking over a period of almost three years. Even before that, ID theft and fraud have been hot topics in that country. As much as four years ago, friends of mine - a physician and her computer-savvy husband - had post snatched out of their letterbox and discovered only by chance they'd had vast loans and other commitments taken out in their names.
In Europe, this kind of theft has received less press, and it was not until the government's confession of CDs gone missing that the issue really gained momentum. Now everyone seems to be announcing that they've had data go missing, under the protective cover of the government's screw-up.
It's frustrating for me that so many UK financial institutions have announced data losses as part of this new confessional mood, including several building societies. Half the point of op risk is that firms should be looking at the kinds of losses other firms are experiencing and applying the lessons learned to their own organisations. Operational risk, done correctly, should be focused on prevention.
The problem of course is human nature - executives look at what happens at other firms and then convince themselves it couldn't happen in their own back garden - because they have better executives, better systems, better risk management and so on.
Complacency is hard to fight. No-one wants to be 'the boy who cries wolf', and often no-one wants to be the messenger bearing bad news - too often they are still shot. Therefore, speculating on what could go wrong seems political madness for many executives.
But for operational risk to move forward as a discipline, this basic human fear of failure needs to be countered with cultural change. Executives must dare to think creatively about disaster.
Ellen Davis
Only users who have a paid subscription or are part of a corporate subscription are able to print or copy content.
To access these options, along with all other subscription benefits, please contact info@risk.net or view our subscription options here: http://subscriptions.risk.net/subscribe
You are currently unable to print this content. Please contact info@risk.net to find out more.
You are currently unable to copy this content. Please contact info@risk.net to find out more.
Copyright Infopro Digital Limited. All rights reserved.
You may share this content using our article tools. Printing this content is for the sole use of the Authorised User (named subscriber), as outlined in our terms and conditions - https://www.infopro-insight.com/terms-conditions/insight-subscriptions/
If you would like to purchase additional rights please email info@risk.net
Copyright Infopro Digital Limited. All rights reserved.
You may share this content using our article tools. Copying this content is for the sole use of the Authorised User (named subscriber), as outlined in our terms and conditions - https://www.infopro-insight.com/terms-conditions/insight-subscriptions/
If you would like to purchase additional rights please email info@risk.net
More on Risk management
Op risk data: TD Bank takes US reg pill in purported drug-related AML fails
Also: SCB fraud bill rising fast; Postbank pain for Deutsche Bank. Data by ORX News
Clear warning on escape hatch for optimisation trades
CCPs fear Emir clearing mandate carve-out for portfolio rebalancing could be abused
One year on, regulators still want a cure for bank runs
Broad support for higher outflow assumptions on uninsured deposits, but that won’t save insolvent banks
Falling T2 balances bode well for eurozone’s stability
Impact of fragmentation would be less severe today than in 2010s, says Marcello Minenna
For a growing number of banks, synthetics are the real deal
More lenders want to use SRTs to offload credit risk, but old hands say they have a long road ahead
Did Fed’s stress capital buffer blunt CCAR?
Experts fear flagship test’s use as a capital top-up has undermined its role in risk management
How Ally found the key to GenAI at the bottom of a teacup
Risk-and-tech chemistry – plus Microsoft’s flexibility – has seen US lender leap from experiments to execution
Industry urges focus on initial margin instead of intraday VM
CPMI-Iosco says scheduled variation margin is better than ad hoc calls by clearing houses
Most read
- Breaking out of the cells: banks’ long goodbye to spreadsheets
- Too soon to say good riddance to banks’ public enemy number one
- Industry calls for major rethink of Basel III rules