How are operational risk loss events classified under Basel, and what are the seven event types?

Question

AcadiFi · Accepted Answer

Operational risk loss event classification is a foundational FRM Part II topic. Basel defines seven event types, and correctly classifying losses is essential for both regulatory reporting and internal risk management. Here is a systematic classification framework.

```mermaid
graph TD
  A[Operational Loss Event Occurs] --> B{Was it caused by a person with intent to defraud?}
  B -->|Yes - Internal person| C[ET1: Internal Fraud]
  B -->|Yes - External person| D[ET2: External Fraud]
  B -->|No intent to defraud| E{Was an employee harmed or did they harm the firm through conduct?}
  E -->|Yes - workplace issue| F[ET3: Employment Practices & Workplace Safety]
  E -->|No| G{Did it affect clients or involve product design flaws?}
  G -->|Yes - client impact| H[ET4: Clients, Products & Business Practices]
  G -->|No| I{Was physical property damaged?}
  I -->|Yes| J[ET5: Damage to Physical Assets]
  I -->|No| K{Did systems or technology fail?}
  K -->|Yes| L[ET6: Business Disruption & System Failures]
  K -->|No| M[ET7: Execution, Delivery & Process Management]
  style A fill:#c9a84c,color:#0a0a0f
  style C fill:#8b2020,color:#fff
  style D fill:#8b2020,color:#fff
  style F fill:#1e3a5f,color:#fff
  style H fill:#1e3a5f,color:#fff
  style J fill:#2d1b4e,color:#fff
  style L fill:#2d1b4e,color:#fff
  style M fill:#1a3c2a,color:#fff
```

**The Seven Basel Event Types with Examples:**

**ET1 — Internal Fraud**
Intentional deception, misappropriation, or regulatory circumvention by an internal party.
- A trader at Hartwell Securities conceals $340 million in losses by booking fictitious offsetting trades
- An operations clerk embezzles $2.7 million by diverting wire transfers to personal accounts
- Key test: Was there **intent** by an insider?

**ET2 — External Fraud**
Theft, forgery, or fraud by an external party.
- Organized crime ring uses stolen customer credentials to drain 1,200 accounts totaling $8.5 million
- Fraudulent mortgage applications with forged income documents
- Cyber attack exfiltrating customer data (if motivated by financial gain)

**ET3 — Employment Practices & Workplace Safety**
Losses from employment law violations, workplace safety, or discrimination.
- Wrongful termination lawsuit settlement of $4.2 million
- OSHA violation fines for unsafe branch conditions
- Sexual harassment class action costing $18 million in legal fees and settlements

**ET4 — Clients, Products & Business Practices**
Losses from improper business practices, product design flaws, or fiduciary breaches.
- Redwood Advisors fined $125 million for systematically recommending unsuitable high-fee products to elderly clients
- Anti-money laundering failures resulting in $900 million regulatory penalty
- Mis-selling of payment protection insurance

**ET5 — Damage to Physical Assets**
Losses from natural disasters or external events damaging physical property.
- Hurricane damages Langford Bank's Miami data center: $45 million restoration cost
- Fire destroys branch office records
- Terrorism or vandalism damage

**ET6 — Business Disruption & System Failures**
Losses from technology failures, utility outages, or infrastructure breakdowns.
- Core banking system outage lasting 72 hours costs Hartwell $23 million in lost revenue and customer remediation
- Cloud provider failure bringing down online trading platform
- Telecommunications failure preventing settlement processing

**ET7 — Execution, Delivery & Process Management**
Losses from failed transaction processing, process management, or vendor relationships.
- Settlement error results in $6.8 million loss from incorrect trade booking
- Data entry mistake causes $1.3 million in incorrect customer payments
- Vendor fails to deliver required regulatory filing on time

**The Tricky Classifications (Common Exam Traps):**

| Scenario | Correct Classification | Why |
|---|---|---|
| Rogue trader hides losses | ET1 (Internal Fraud) | Intentional concealment |
| Honest trade booking error | ET7 (Execution/Delivery) | No intent to defraud |
| Cyber ransomware attack | ET2 (External Fraud) | External party, financial motive |
| System crash during trade | ET6 (System Failure) | Technology failure, no human intent |
| AML penalty from regulator | ET4 (Business Practices) | Fiduciary/regulatory breach |

**Exam Tip:** The key differentiator between ET1 and ET7 is **intent**. If an employee deliberately circumvented controls, it is internal fraud. If they made a genuine error in processing, it is execution/delivery failure.

Practice operational risk classification scenarios in our FRM Part II question bank on AcadiFi.

How are operational risk loss events classified under Basel, and what are the seven event types?

Master Part II with our FRM Course

Related Questions

Practice Questions