operational-risk

What this skill does

# Operational Risk

## Purpose
Guide the identification, measurement, and management of operational risk in securities trading and brokerage operations. Covers trade error handling, settlement fail management, loss event classification, key risk indicators (KRIs), incident management processes, business continuity planning, and operational risk frameworks. Enables building or evaluating operational risk programs that reduce losses and satisfy regulatory expectations.

## Layer
11 — Trading Operations (Order Lifecycle & Execution)

## Direction
both

## When to Use
- Building or evaluating an operational risk framework for a trading desk, broker-dealer, or investment adviser
- Designing trade error detection, correction, and escalation procedures
- Investigating trade breaks and establishing reconciliation workflows
- Classifying loss events under Basel or internal taxonomy for reporting and trend analysis
- Developing or refining key risk indicators (KRIs) and dashboards for trading operations
- Responding to operational incidents (system outages, data feed failures, order routing errors)
- Conducting root cause analysis after a trade error, settlement fail, or system incident
- Planning or testing business continuity and disaster recovery procedures for trading operations
- Preparing for regulatory examinations that cover operational risk controls (FINRA, SEC, OCC)
- Assessing technology risk related to order management systems, market data feeds, or connectivity
- Designing corrective action tracking and post-incident review processes

## Core Concepts

### Operational Risk Framework
Operational risk is the risk of loss resulting from inadequate or failed internal processes, people, and systems, or from external events. The Basel Committee's framework identifies seven event-type categories, all of which apply to securities firms:

1. **Internal fraud.** Losses due to acts intended to defraud, misappropriate property, or circumvent regulations, the law, or company policy by internal parties. In trading operations, this includes unauthorized trading, intentional mismarking of positions, fictitious trade booking, and front-running.
2. **External fraud.** Losses due to acts by third parties intended to defraud, misappropriate property, or circumvent the law. This includes account takeover, phishing attacks targeting trade credentials, wire fraud in settlement instructions, and market manipulation by counterparties.
3. **Employment practices and workplace safety.** Losses arising from employment actions, health and safety issues, or diversity and discrimination events. In trading operations, this includes inadequate training of operations staff, key-person dependency risk, and excessive workload leading to errors.
4. **Clients, products, and business practices.** Losses arising from negligence or failure to meet professional obligations, or from the design of products. This includes suitability failures, improper trade execution, best execution violations, and failure to follow client instructions.
5. **Damage to physical assets.** Losses from natural disasters or other events damaging physical assets. For trading operations, this includes data center damage, trading floor destruction, and infrastructure failure from weather events or civil disruption.
6. **Business disruption and system failures.** Losses arising from disruptions to business or system failures. This is a dominant risk category for trading operations and includes order management system outages, market data feed failures, network connectivity losses, exchange gateway failures, and clearing system downtime.
7. **Execution, delivery, and process management.** Losses from failed transaction processing or process management. This is typically the largest loss category for trading operations and includes trade errors, settlement fails, reconciliation breaks, failed corporate action processing, incorrect margin calculations, and data entry errors.

**Risk identification** involves cataloging all operational risk exposures through process mapping, risk and control self-assessments (RCSAs), loss event analysis, scenario analysis, and audit findings. **Risk assessment** scores each risk on likelihood and impact dimensions, typically using a 5x5 heat map. **Risk monitoring** tracks KRIs, loss events, and control effectiveness. **Risk mitigation** applies controls (preventive and detective), process redesign, technology solutions, insurance, and business continuity planning.

### Trade Errors
A trade error occurs when a transaction is executed incorrectly due to human mistake, system malfunction, or miscommunication. Common trade error types include:

- **Wrong security.** The wrong CUSIP, ISIN, or ticker is entered, resulting in a purchase or sale of an unintended security. Often caused by similar ticker symbols (e.g., entering "AAPL" instead of "APLE") or selecting the wrong line item from a dropdown.
- **Wrong quantity.** The number of shares, bonds, or contracts is incorrect. A frequent subcategory is the "fat finger" error where an extra digit is entered (e.g., 10,000 shares instead of 1,000).
- **Wrong side.** A buy is entered as a sell, or vice versa, resulting in a position that is the opposite of intended. The net exposure error is twice the intended trade size.
- **Wrong account.** The trade is executed in the wrong client account or in the firm's proprietary account instead of a client account. This creates suitability, allocation, and potential conflict-of-interest issues.
- **Duplicate orders.** The same order is submitted more than once due to system timeout and resubmission, double-clicking, or failure of deduplication logic. The firm ends up with twice the intended position.
- **Wrong price type or limit.** A market order is placed instead of a limit order, or the limit price is set incorrectly, resulting in execution at an unintended price.
- **Stale or cancelled order execution.** An order that should have been cancelled is executed because the cancellation was not processed in time or was lost in transit.

**Error detection methods.** Errors are detected through: real-time position monitoring (unexpected position changes trigger alerts), pre-trade validation rules (quantity limits, security restrictions, account eligibility checks), post-trade reconciliation (comparing expected vs. actual positions), client complaints, clearing firm or counterparty rejection notices, and P&L attribution (unexplained P&L often signals an error).

**Error correction procedures.** Once detected, errors must be corrected promptly:

- **Cancel and rebook.** The erroneous trade is cancelled and the correct trade is booked. If the error is caught before settlement, the cancel/rebook may occur on the same trade date. If caught after settlement, an as-of trade is used to adjust the position retroactively.
- **Error account.** Most broker-dealers maintain one or more error accounts (also called difference accounts) where erroneous trades are transferred pending resolution. The error account isolates the incorrect position from client accounts and tracks the resulting P&L. Error account activity is subject to supervisory review and must be documented.
- **Error P&L allocation.** Losses from trade errors are absorbed by the firm and may not be passed to clients. Gains from trade errors present a more nuanced situation — regulatory guidance and firm policy dictate whether the gain reverts to the client's account or remains in the error account. FINRA has stated that firms should not systematically benefit from trade errors at clients' expense.
- **Root cause analysis.** Every trade error should trigger a root cause analysis to determine whether the error was caused by a process deficiency, a technology issue, inadequate training, or an individual's mistake. Root cause findings feed into the operational risk framework's risk identification and mitigation cycle.

### Trade Breaks and Reconciliation
A trade