Aligning operational risk management (ORM) with strategy could enable strategic change, improve business performance and enhance customers' experience for financial institutions. However, only half of firms surveyed with less than $250bn in assets leverage ORM to challenge business models, according to a report by KPMG and the Risk Management Association (RMA).
According to the Operational Risk Management Excellence Survey, larger institutions appear more advanced in aligning ORM with strategy, with 90% at or above $250bn in assets leveraging ORM to challenge business models.
"Aligning ORM with business strategy enables financial institutions to identify, assess and mitigate risks, while adding business value," said KPMG's principal in operations and compliance risk services, Phillip Bray. "We've observed that, for many institutions, the first priority is to resolve regulatory issues and then take a broader look at how ORM is integrated into strategy."
"While prioritizing compliance is understandable in this challenging regulatory landscape, institutions that cannot evolve their ORM from a check-the-box approach to one that informs the organization as a whole are not realizing the full value of their operational risk spend," said RMA chief administrative officer and director of operational risk Edward J DeMarco, Jr. "They are also missing opportunities that could be transformational to their businesses."
Other Key Findings
- Digital Transformation Spend Lacking: 20% at or above $250bn and 27% under $250bn are dedicating a portion of annual budgets to digital transformation, including automation and data and analytics.
- Regulatory Checklists: Larger and smaller institutions agreed the following areas are most important to regulators:
- Operational risk aggregation / profile (92%)
- Operational risk appetite (88 %
- Information / cyber security (85%)
- Risk control self assessments (85%)
- Operational risk monitoring (81%)
- Vendor risk management (77%)
- Data Reporting: 27% and 21%, respectively, of larger and smaller firms have dashboards to report risk exposures and their impacts on business strategy and performance. This is down from 80%for larger firms in 2014.