1
Day 2: External Expert Panel
10:30-10:40 Introduction of panelists and purpose of panel 10:40-11:15 Introductory remarks by panelists 11:15-11:45 Moderated discussion between panelists 11:45-12:00 Audience Q&A
Day 2: External Introductory remarks by panelists Expert Panel - - PowerPoint PPT Presentation
10:30-10:40 Introduction of panelists and purpose of panel 10:40-11:15 Day 2: External Introductory remarks by panelists Expert Panel 11:15-11:45 Moderated discussion between panelists 11:45-12:00 Audience Q&A 1 John McWilliams
1
Day 2: External Expert Panel
10:30-10:40 Introduction of panelists and purpose of panel 10:40-11:15 Introductory remarks by panelists 11:15-11:45 Moderated discussion between panelists 11:45-12:00 Audience Q&A
2
John McWilliams
Enterprise risk management
Kenneth Wee
Learnings from risk management in financial services Safety and operational risk management in oil and gas industry
Ned Morse
3
Enterprise risk management
4
Understanding the Distribution of Risk
5
Enterprise risk management maturity model
No formal framework for risk management Scattered silo based approach to risk management Strategies and policies in place and communicated. Risk appetite defined. Enterprise wide approach to risk management developed and communicated. Risk management and internal controls fully embedded in the operations. Risk-based decision making including prioritized allocation of resources
Key Characteristics
1.Risk Naive 2.Risk Aware 3.Risk Defined
6.Risk Decisions
Maturity Level
6
Learnings from risk management in financial services
7
Leading institutions manage risk through a governance process linking risk management to business planning
Risk Assessment and Inventory
To assess and track how a risk might manifest in your footprint
Risk Policy and Controls
Set roles, control the risk to within your desired Appetite
Risk Identification
Identify risks and comprehensively describe them, especially emerging risks
Risk Appetite
How much of each Risk are you willing to take as part of your business model
Learning & Stress testing
Ensure they can withstand certain extreme events
Business Planning
Bringing risk awareness into the next round of strategic planning
Risk Management Lifecyle
8
A comprehensive risk management strategy needs to target both everyday losses and infrequent events that can lead to large losses
Tail risk events and data
understanding how big events happen and increasing resiliency to those
severity of tail events
Sources of everyday data
records of operational risk losses
are required to create Risk Control Self-Assessments
Plentiful internal data for expected loss Long tail needs external data and scenario analysis Losses Time
Expected loss Unexpected loss
Probability Losses Average loss
Examples of risks with long tails: internal fraud, cyber risk, market illiquidity, concentration risk, unexpected correlations, wrong-way risk
9
Former CRO of Bear Stearns, June 2006
“Right now everything on my screen is flashing red. That doesn't make me nervous… The machine works.” Tail Risk can be hard to identify!
10
Model risk: How confident are you in the model and the data behind it? Disciplined model risk management is now in place at most large banks
Charged $98M by the SEC - "for their failure to take reasonable steps to ensure the models worked as intend and for contributing to the company's compliance failings"
Year
2018 2018
Liability modeling and assumptions were flawed and remained unresolved over years in the long-term care insurance which resulted in $15B additional reserves Flawed risk management models allowed a trader to accumulate huge short positions on CDX products distorting market prices. $6.2B loss incurred by the company and congressional hearings and investigations by the Federal Reserve, SEC, FBI followed
2012
When you use a model, do you know what its key assumptions are? Do you know its limitations? How much data was it built on? What manual adjustments does it contain (to data, coefficients, etc.?) Do you know when it needs re-calibrating?
11
An ideal scenario analysis process links risk factors to the value of business and mitigation strategies, to aid in capital allocation
climate change, fraud, cyber, counterparty risk
Mega Trends Environmental Scenarios…
rate, migration patterns, demographics
Risk Identification
1 2 3 4 5
temperatures, rainfall
MSAs and industry
… and Socioeconomic Scenarios Macroeconomic and Market Responses Modeled P&L & Balance Sheet
Housing Prices by county
Employment by sector
EBITDA 2020-40 in three scenarios
6
Value of different adaptation and mitigation strategies
12
What can we do to improve risk management throughout an industry?
Tone-from-the-top: risk governance is important Create KRIs and a link to compensation Publish best practices, conduct horizontals Encourage data collection and pooling Embed risk management into operational culture Taking a risk-based selective approach Invest in technology, front-to-back reporting Creating consistency in stress scenarios
13
Safety and operational risk management in
Dramatically improved safety at major West Coast refinery
Achieving 2 years without a recordable employee injury1
0.9 1.6 0.8 0.5 0.2 0.0 0.5 1.0 1.5 2.0 Year 6 Year 1Recordable injury rate2
Year 4 Year 2 Year 3 Year 5 Year 7 YTD1 0.0 0.00.5 considered world class performance3
Injury rate of employees
Behavior based culture change launched
Oil refinery 1
Reduction in number of injuries to contractors at major West Coast refinery
8 8 11 6 3 1 1 1 2 4 6 8 10 12 Year 5 2nd half Year 5 1st half Year 3 1st halfInjuries
Year 3 2nd half Year 6 1st half Year 4 1st half Year 4 2nd half Year 6 2nd halfBehavior based culture change launched Moving average
Injury levels of contractors
Oil refinery 1
Recordable injury rate
Yr 27 Yr 2 Yr 25 4.5 Yr 24 Yr 11 Yr 3 Yr 4 Yr 5 Yr 6 2.8 3.7 Yr 7 Yr 8 Yr 17 1.5 3.4 Yr 18 Yr 13 Yr 10 Yr 20 1.6 Yr 21 Yr 14 Yr 15 Yr 12 Yr 19 Yr 23 Yr 26 Yr 28 Yr 16Recordable injury rate at a refinery
Oil refinery 2
Behavior based culture change launched Employees
Employees + Contractors
Sustained decline in recordable injury rate in very large Gulf Coast refinery
50 100 150 200 250
Tier 1 LOC Tier 2 LOC
Oil Major
Yr 1 Yr 2 Yr 3 Yr 4 Yr 5 Yr 6 Yr 7 Yr 8Tier 1 and Tier 2 Loss of Containment (LOC) Count
Oil major able to drive down LOC events and spills (I)
5 10 15 20 25 30 35 40 45 50
Oil Major
Yr 1 Yr 2 Yr 3 Yr 4 Yr 5 Yr 6 Yr 7 Yr 8 Yr 9 Yr 10 Yr 11 Yr 12 Yr 13 Yr 14 Yr 15Petroleum Spill Volume to Land and Water
Oil major able to drive down LOC events and spills (II)
19