Operational Risk

Operational Risk

Core Concepts

Operational Risk Framework

Operational risk is the risk of loss resulting from inadequate or failed internal processes, people, and systems, or from external events. The Basel Committee's seven event-type categories map to trading operations as follows:

Risk identification involves cataloging all operational risk exposures through process mapping, risk and control self-assessments (RCSAs), loss event analysis, scenario analysis, and audit findings. Risk assessment scores each risk on likelihood and impact dimensions, typically using a 5x5 heat map. Risk monitoring tracks KRIs, loss events, and control effectiveness. Risk mitigation applies controls (preventive and detective), process redesign, technology solutions, insurance, and business continuity planning.

Trade Errors

A trade error occurs when a transaction is executed incorrectly due to human mistake, system malfunction, or miscommunication. Common trade error types include:

• Wrong security. The wrong CUSIP, ISIN, or ticker is entered, resulting in a purchase or sale of an unintended security. Often caused by similar ticker symbols (e.g., entering "AAPL" instead of "APLE") or selecting the wrong line item from a dropdown.
• Wrong quantity. The number of shares, bonds, or contracts is incorrect. A frequent subcategory is the "fat finger" error where an extra digit is entered (e.g., 10,000 shares instead of 1,000).
• Wrong side. A buy is entered as a sell, or vice versa, resulting in a position that is the opposite of intended. The net exposure error is twice the intended trade size.
• Wrong account. The trade is executed in the wrong client account or in the firm's proprietary account instead of a client account. This creates suitability, allocation, and potential conflict-of-interest issues.
• Duplicate orders. The same order is submitted more than once due to system timeout and resubmission, double-clicking, or failure of deduplication logic. The firm ends up with twice the intended position.
• Wrong price type or limit. A market order is placed instead of a limit order, or the limit price is set incorrectly, resulting in execution at an unintended price.
• Stale or cancelled order execution. An order that should have been cancelled is executed because the cancellation was not processed in time or was lost in transit.

Error detection methods. Errors are detected through: real-time position monitoring (unexpected position changes trigger alerts), pre-trade validation rules (quantity limits, security restrictions, account eligibility checks), post-trade reconciliation (comparing expected vs. actual positions), client complaints, clearing firm or counterparty rejection notices, and P&L attribution (unexplained P&L often signals an error).

Error correction procedures. Once detected, errors must be corrected promptly:

• Cancel and rebook. The erroneous trade is cancelled and the correct trade is booked. If the error is caught before settlement, the cancel/rebook may occur on the same trade date. If caught after settlement, an as-of trade is used to adjust the position retroactively.
• Error account. Most broker-dealers maintain one or more error accounts (also called difference accounts) where erroneous trades are transferred pending resolution. The error account isolates the incorrect position from client accounts and tracks the resulting P&L. Error account activity is subject to supervisory review and must be documented.
• Error P&L allocation. Losses from trade errors are absorbed by the firm and may not be passed to clients. Gains from trade errors present a more nuanced situation — regulatory guidance and firm policy dictate whether the gain reverts to the client's account or remains in the error account. FINRA has stated that firms should not systematically benefit from trade errors at clients' expense.
• Root cause analysis. Every trade error should trigger a root cause analysis to determine whether the error was caused by a process deficiency, a technology issue, inadequate training, or an individual's mistake. Root cause findings feed into the operational risk framework's risk identification and mitigation cycle.

Trade Breaks and Reconciliation

A trade break occurs when two records of the same transaction do not match. Breaks arise at multiple points in the trade lifecycle:

• Front-to-back breaks. The order management system (OMS) record does not match the execution management system (EMS) fill, or the trade record in the front-office system does not match the middle-office booking. Causes include partial fills that are not properly aggregated, manual booking errors, and system integration failures.
• Firm-to-counterparty breaks. The firm's trade record does not match the counterparty's record. Detected through trade matching and confirmation processes (e.g., DTCC CTM, Omgeo, SWIFT matching). Common causes are quantity discrepancies, price differences (especially for OTC trades with negotiated prices), settlement date mismatches, and incorrect settlement instruction details (SSI mismatches).
• Firm-to-custodian breaks. The firm's position records do not match the custodian's records. Detected through daily or intra-day position reconciliation. Causes include unbooked trades, corporate action processing differences, failed settlements not reflected in one system, and timing differences in trade date vs. settlement date accounting.
• Cash breaks. The firm's cash ledger does not match the bank or custodian's cash statement. Causes include unbooked cash movements, fee deductions not recorded, interest accrual differences, and foreign exchange conversion discrepancies.

Reconciliation process. Firms conduct three primary types of reconciliation:

1. Position reconciliation. Compares the firm's securities positions to the custodian's, clearing firm's, or depository's records. Performed daily for actively traded accounts.
2. Transaction reconciliation. Matches individual transactions between the firm's records and external records (counterparty confirmations, clearing statements, custodian statements). Ensures every trade is captured in both systems.
3. Cash reconciliation. Compares the firm's cash balances and movements to bank and custodian statements. Identifies unrecorded debits, credits, or fee charges.