ANNEXURE B: Questionnaire A high level of anonymity will be maintained in this survey. Your name, institution and other personal details are not required. Feel free to answer the questions as they are; it is hoped that this research will help banking institutions in Southern Africa to understand and deal with operational risk management better.
SECTION A: Background, Risk and Operational Risk Management 1. Which is your main area of duty? Tick Below Risk Manager
Line Manager
Bank Internal Regulato Auditor r
Operationa Other l Risk (Specify) Manager
2. What banking experience do you have? 0-2 years
2-4 years
5-7 years
7-10 years
11-20 years
>20 years
3. In your line of duty how do you rank the following risks in order of importance? 1 i) Credit Risk ii) Liquidity Risk iii) Operational Risk iv) Market Risk v) Other…………… Scale: 1 – Low importance
2
to
3
4
5
5 – Very high importance
4. To what degree do you think the following contribute to operational efficiency in your institution? 1 i) People ii) Processes
2
3
4
5
iii) Systems iv) External factors ( natural disaster, political, other) V) Other…………… 5. To what degree do you think your bank is prone to a loss from operational risk? 1
2
3
4
5
6. To what degree do you think Op Risk can be mitigated/ controlled in banks? 1 Scale: 1 – Difficult to control to
2
3
5 – Easy to control
4
5
10. If you would like a coy of the results, please give your postal address/ personal and not work e-mail address at the end of the questionnaire SECTION B: A Structured approach, Basel II and the Sarbanes-Oxley Act of 2002 You may have knowledge of the above three approaches to operational risk (Op Risk) management. However for those who might no know part of them, I will define them below and what they basically intend to achieve in the efforts to manage Op Risk.
Structured approach: A comprehensive approach that identifies, assesses, and prioritizes operational risks and supports the development of strategies and solutions to manage them. It uses internal auditors, self-risk assessment procedures and other methods that are used to collect information about the position of the organization’s operations
Basel II: A framework that is used to assess and measure the banks capital as a insurance for operational risk losses; it therefore assign a capital charge (an amount to protect the bank in case the risk becomes real, and there is pressure on the banks soundness). Different mathematical modeling techniques are used and data from the past losses is used to estimate what might be an estimate expected risk from operations. Different countries can adopt the different levels to approach this management. E.g. AMA
The Sarbanes-Oxley Act of 2002:
This is an act enacted in the United States of America and passed into law by Congress. It came after the Enron case. This Act mainly states that, management, and especially top management ( the CEO, Finance Director), should sign contracts stating that in the event the institution suddenly makes a loss from events they were aware of or supposed to be aware of, they would be liable with maximum prison sentences. 11. Please tick the measure(s) you are already know. Structured approach
Basel II
SarbanesOxley
Other (Specify)
SECTION C: What should be part of an effective Operational Risk Management framework? 21. What do you think your bank/ Southern African banks should use as part of their operational risk management framework? Tick one or more columns as you will… Structured approach
Basel II
SarbanesOxley
Other (Specify)
22. In your opinion to what degree does your bank/ Southern African banks, have the resources to adopt the measures below. 1 i) Structured approach ii) Basel II iii) Sarbanes-Oxley iv) Other (Specify) Scale: 1 – Very few resources to
2
3
4
5
5 – More than adequate resources
23. In your opinion to what degree do you think the risk staff at your bank/ Southern African banks, to understand and are able to implement the following measures? 1 i) Structured approach ii) Basel II iii) Sarbanes-Oxley iv) Other (Specify)
2
3
4
5
Scale: 1 – Easy to understand & implement understand & implement
to
5 – Difficult to
28. To what degree do you think the following key stakeholders are supposed to actively managed operational risk 1 i) Bank Tellers ii) Internal Auditors iii) Risk Managers iv) Board of Directors iv) Supervisors(Line Managers) iv) Executive Management Scale: 1 – Less involved
2
to
3
4
5 – Very highly involved
5