From Operational Event to Financial Scenario
Operational risk scenarios describe how a failure in a process, people, systems, or an external event could produce financial consequences. The purpose is not to predict the exact details of a future incident. It is to create a coherent, quantified account of how an event could develop, what costs it could generate, and how those costs could affect the organization’s capital position.
A useful scenario connects the initiating event to its consequences. For example, an incorrect system update might disrupt payment processing, delay customer transactions, require manual workarounds, and lead to remediation costs. Each link should be plausible, and each financial estimate should have a defined basis. Scenario components should be separated so that direct losses, remediation, and business interruption are not accidentally counted twice.
A practical estimate commonly distinguishes four categories:
- Direct losses: amounts lost or paid because the event occurred, such as unrecoverable duplicate payments or customer compensation.
- Remediation costs: costs of investigation, legal support, system repair, control changes, and other response activities.
- Business interruption: lost contribution while services are disrupted, together with incremental costs needed to operate during the disruption.
- Capital effects: the scenario’s effect on capital resources, capital requirements, or a stated capital coverage measure.
These categories require careful boundaries. A refund may be a direct loss, while the expense of investigating the refund claims is remediation. Lost revenue is not automatically the same as lost contribution: avoidable variable costs may not be incurred when activity falls. If the scenario uses contribution at risk, the interruption estimate should use that contribution measure rather than subtracting avoided costs a second time.
A Structured Scenario Method
Before calculating, state the event, exposure period, affected operations, and key assumptions. Then estimate each loss component using a separate calculation. The following sequence keeps the narrative and arithmetic aligned.
Describe the operational cause, the affected process or service, and how the event produces financial consequences.
Calculate the gross amount at risk, then subtract only recoveries that the scenario assumes are collectible.
Identify response costs and calculate any interruption loss over the stated disruption period.
Remove overlap, state tax and recovery assumptions, and compare the resulting effect with the specified capital measures.
Estimating Business Interruption
Suppose the organization has daily contribution at risk \(C\) during an interruption lasting \(n\) days. A workaround preserves a fraction \(r\) of that contribution, where \(0 \leq r \leq 1\). If the workaround also incurs incremental daily costs \(w\), then the interruption effect is:
The formula assumes contribution at risk is measured per day, the preserved fraction applies throughout the interruption, and the incremental workaround cost is incurred each day. It does not apply unchanged if contribution varies by day, the workaround changes over time, or the stated contribution measure already includes the workaround costs.
The justification is direct. Without a workaround, the contribution exposed over \(n\) days is \(nC\). The workaround preserves \(nrC\), leaving lost contribution \(nC-nrC=nC(1-r)\). The incremental costs are \(w\) per day for \(n\) days, or \(nw\). Adding these distinct effects gives the formula. This calculation estimates an economic effect; it should not be replaced by lost gross revenue unless the scenario has also accounted for the costs avoided when revenue is lost.
Worked Example: Duplicate Payments and Service Disruption
A hypothetical insurer’s payment-file control fails, causing 240 duplicate payments averaging $1,250 each. The scenario assumes 35% of the duplicate amount is recovered. Customer interest of $18,000 is paid, investigation and customer-response costs are $72,000, and system restoration costs are $45,000. Payment processing is disrupted for three days. Daily contribution at risk is $80,000, a workaround preserves 75% of contribution, and overtime costs $9,000 per day. Estimate the total scenario loss, with no tax effect.
Method: separate the duplicate-payment loss, other direct costs, remediation, and interruption. The gross duplicate payments are:
The assumed recovery is \(0.35 \times \$300{,}000=\$105{,}000\). Therefore, the unrecovered duplicate-payment loss is \(\$300{,}000-\$105{,}000=\$195{,}000\).
Customer interest is a separate direct cost of $18,000. Investigation and customer-response costs are $72,000, and system restoration costs are $45,000. The interruption calculation is:
Adding the non-overlapping components gives \(\$195{,}000+\$18{,}000+\$72{,}000+\$45{,}000+\$87{,}000=\$417{,}000\). The estimate is $417,000. A check by category gives $213,000 of direct losses including customer interest, $117,000 of remediation and restoration, and $87,000 of interruption, which also totals $417,000. The method avoids treating the recoverable portion of the duplicate payments as a loss or omitting interruption costs.
Worked Interruption Estimate and a Common Trap
Interruption estimates are particularly sensitive to time units and to the distinction between contribution preserved and costs incurred to preserve it. Both terms in the formula are daily quantities, so both must be multiplied by the number of disruption days.
Worked Example: Four-Day Service Disruption
A hypothetical claims platform is unavailable for four days. Daily contribution at risk is $50,000. A workaround preserves 70% of contribution, while overtime costs $12,000 per day. The organization also incurs $28,000 in incident-response costs and pays $16,000 in customer compensation. Estimate the total scenario effect, assuming these amounts do not overlap.
Method: calculate lost contribution and incremental operating costs separately. The unpreserved share of contribution is \(1-0.70=0.30\). Lost contribution is:
Overtime is incurred on each of the four days:
Thus, the total interruption effect is \(\$60{,}000+\$48{,}000=\$108{,}000\). Adding incident-response costs and customer compensation gives \(\$108{,}000+\$28{,}000+\$16{,}000=\$152{,}000\).
Common mistake. A wrong calculation is \(\$60{,}000+\$12{,}000=\$72{,}000\), because it includes overtime for only one day. The correction is to multiply the daily overtime cost by all four days: \(\$12{,}000 \times 4=\$48{,}000\), making interruption $108,000 and the total scenario effect $152,000. Another error would be to apply the 70% preserved fraction to overtime; it applies to contribution, not to the separately specified overtime cost.
Connecting a Scenario to Capital
A scenario loss does not determine a capital result without additional assumptions. A capital translation should state whether recoveries are recognized, whether a tax benefit is available, whether the loss reduces capital resources, and whether capital requirements change. The following example uses a simplified capital coverage measure: capital resources divided by capital requirement. It is an illustrative bridge, not a prescribed regulatory formula.
Worked Example: Capital Impact of a Control Failure
A hypothetical operational event produces $1,200,000 of direct loss, $180,000 of remediation costs, and $420,000 of business-interruption loss. An insurance recovery of $250,000 is assumed collectible and recognized. Assume the net loss is fully tax-deductible and a 25% tax benefit is recognized immediately. Before the event, capital resources are $68,000,000 and capital requirement is $50,000,000. The scenario also increases the requirement by $1,500,000. Calculate the post-scenario resources, coverage ratio, and excess resources above requirement.
Method: calculate the net pre-tax loss, apply the stated tax assumption, then update resources and requirement. The gross loss before insurance recovery is:
After the assumed recovery, the net pre-tax loss is \(\$1{,}800{,}000-\$250{,}000=\$1{,}550{,}000\). The tax benefit is \(0.25 \times \$1{,}550{,}000=\$387{,}500\), so the after-tax reduction in resources is \(\$1{,}550{,}000-\$387{,}500=\$1{,}162{,}500\).
Post-scenario capital resources are \(\$68{,}000{,}000-\$1{,}162{,}500=\$66{,}837{,}500\). The revised requirement is \(\$50{,}000{,}000+\$1{,}500{,}000=\$51{,}500{,}000\). The coverage ratio is:
Excess resources are \(\$66{,}837{,}500-\$51{,}500{,}000=\$15{,}337{,}500\). As a check, the pre-event ratio was \(\$68{,}000{,}000/\$50{,}000{,}000=136.0\%\); the scenario reduces the ratio to 129.8% because resources decline while the requirement rises. The calculation avoids subtracting the gross loss from resources while also counting the insurance recovery as a separate benefit twice.
Interpretation, Uncertainty, and Exam Traps
A scenario estimate is only as useful as its assumptions and boundaries. A plausible narrative can still produce a misleading number if it uses inconsistent exposure periods, assumes a recovery without support, or combines amounts that already include one another. For an advanced analysis, document the rationale for severity assumptions and identify which inputs have the greatest effect on the result. The estimate should be traceable from event description to capital effect.
Common errors include:
- Mixing units. Daily contribution and daily workaround costs must each be multiplied by the number of affected days.
- Applying a workaround percentage to the wrong item. A contribution-preservation assumption does not automatically reduce separate response or overtime costs.
- Double counting. If the interruption estimate already includes customer compensation or a cost is included in remediation, do not add it again as a separate line.
- Assuming all gross losses are permanent. State the amount and timing of recoveries rather than silently treating them as certain or immediate.
- Equating a loss with the capital effect. Tax treatment, recognition of recoveries, changes in capital requirements, and the chosen capital measure must be stated.
For a scenario used in management or capital discussions, report both the total and the build-up. A single number conceals whether the result is driven by the event’s direct severity, the length of disruption, the effectiveness of a workaround, or the assumed response costs. A clear decomposition makes the scenario easier to challenge and update.
Check Your Understanding
For each original scenario, calculate the requested amount using only the stated assumptions.
- A hypothetical processing error creates 80 duplicate claims payments of $900 each. The organization recovers 25% of the amount, incurs $21,000 in response costs, and faces a two-day interruption with daily contribution at risk of $30,000. A workaround preserves 60% of contribution and costs $4,000 per day. What is the total scenario loss? (Answer: $107,000)
- A service is interrupted for five days. Daily contribution at risk is $42,000, a workaround preserves 50%, incremental daily costs are $7,000, and separate remediation costs are $19,000. What is the total effect? (Answer: $159,000)
- A hypothetical event causes $640,000 of direct loss, of which 40% is recovered, plus $96,000 of remediation costs. A three-day interruption has daily contribution at risk of $55,000, preserves 80% of contribution, and incurs $5,000 per day in workaround costs. Calculate the total loss after recovery. (Answer: $528,000)
- Before a scenario, capital resources are $42,000,000 and capital requirement is $32,000,000. An after-tax scenario loss reduces resources by $720,000, while the requirement increases by $1,000,000. What is the post-scenario coverage ratio, to one decimal place, and excess resources? (Answer: 125.1%; $8,280,000)
- A hypothetical operational event has $500,000 of gross direct loss, with 30% recovered, $80,000 of remediation costs, and a four-day interruption. Daily contribution at risk is $60,000, 75% is preserved, and incremental daily costs are $10,000. If the net loss is fully deductible and a 25% tax benefit is recognized, what is the after-tax reduction in capital resources? (Answer: $397,500)