![Risk.net](https://www.risk.net/sites/default/files/styles/print_logo/public/2018-09/print-logo.png?itok=1TpHrpuP)
Consultancy of the Year: Deloitte
Big-four consultancy shines on Basel SMA, cyber risk and model risk
![OpRisk Awards 2018 - Dan Frank](/sites/default/files/styles/landscape_750_463/public/2018-06/Dan-Frank---web.jpg.webp?h=392c4052&itok=8VjXDPAZ)
The introduction of the Basel Committee’s standardised measurement approach (SMA) to operational risk is still more than three years away, but it represents a fundamental change to what is still a relatively new discipline. Deloitte, already recognised as one of the best consultancies in this particular field, is heavily focused on both the challenges and opportunities arising from the SMA.
“This shift has major implications for banks’ internal loss data, but it could also be used to derive business value and risk management insight. Investment that institutions have made in operational risk loss databases can be leveraged in the new environment. With historical data on internal losses, banks will be better positioned to capitalise on advanced capabilities like big data analytics, machine learning, correlation and root-cause analysis,” says Nitish Idnani, managing director in regulatory and operational risk at Deloitte.
Historical loss data can be used to predict future risks and help banks to identify patterns that could reduce losses in the future, he suggests. Strong risk management should be considered a source of competitive strength rather than purely a back-office requirement.
“Forward-looking institutions have the opportunity to view risk as an enabler to power enhanced performance. Boards can enable, and encourage, this shift in mindset without giving up their stewardship role or losing their focus on the long-term stability and performance of the institution,” Idnani explains.
Deloitte’s expertise across multiple areas – ranging from op risk capital to cyber risk and data privacy – has put it in a strong position in the operational risk industry. Cyber risk is an area where the firm is seeing rising demand for its expertise, and while there may be no such thing as ‘perfect’ security, strength of systems, vigilance and resilience are considered critical.
Forward-looking institutions have the opportunity to view risk as an enabler to power enhanced performance
Nitish Idnani, Deloitte
“Being secure means an organisation has implemented administrative, technical and physical capabilities and solutions to help prevent a cyber-security incident,” says Dan Frank, principal in cyber risk at Deloitte.
“We advise organisations to also be vigilant, meaning they have implemented capabilities to detect when they have had a cyber incident as quickly as possible to help minimise its potential impact. Being resilient means an organisation has implemented capabilities to mitigate the impact of a cyber incident, not solely as a cyber security function but as a business,” he continues.
![OpRisk Awards 2018 - Nitish Idnani](/sites/default/files/styles/medium/public/2018-06/Nitish-Idnani---web.jpg.webp?h=419fc192&itok=KLyiJw8b)
Deloitte’s specialism in cyber risk provided a strong platform to serve clients ahead of the European Union’s General Data Protection Regulation, which came into force last month. “A pragmatic, risk-based approach has always been a fundamental aspect of our approach to cyber risk — and we have treated GDPR no differently,” says Frank.
“Perhaps the most important thing in the event of a GDPR-related incident or inquiry is to be able to demonstrate that controls were designed, implemented and intended to prevent the incident from occurring, and that controls and resolution monitoring were assessed periodically,” he adds.
Deloitte’s approach to operational risk is deliberately forward-looking, aiming to incorporate technology to identify increasing risks beyond pre-defined thresholds.
“It is about combining traditional operational risk management tools with a deep understanding of our clients’ businesses and new technology to get to continuous risk monitoring, and driving the necessary management action to reduce unacceptable risks and support the achievement of business strategies,” says Idnani.
Model risk
Elsewhere, Deloitte’s SR 11-07 programme provides support to financial institutions in model risk management (MRM), which has helped to mitigate model risk across divisions.
“Financial institution clients have navigated the strictest MRM regulatory environments, reduced their model risk levels, and achieved efficiency, scale and sustainability in their MRM lifecycle,” says Clifford Goss, partner in financial services industry regulatory and operational risk at Deloitte.
![OpRisk Awards 2018 - Cliff Goss](/sites/default/files/styles/medium/public/2018-06/Cliff-Goss---web.jpg.webp?h=55359d8e&itok=xyYXYHkp)
“In particular, Deloitte has helped financial institutions [to] manage resource challenges in model development and model validation by delivering large, end-to-end projects and offering a variety of staffing arrangements, such as co-sourcing, managed services and staff augmentation,” Goss explains.
Deloitte has also been closely involved with banks in their work relating to the European Central Bank’s Targeted Review of Internal Models (Trim), which aims to improve consistency in modelling and reduce the variability of risk-weighted assets.
“Banks are increasingly using methodologies such as robotic process analysis, text mining and machine learning in their model development, governance and validation processes. Beyond increasing efficiency, robotics and other tools can also support banks in meeting supervisory expectations, including those resulting from the Trim,” says Thomas Moosbrucker, partner at Deloitte in Germany.
Only users who have a paid subscription or are part of a corporate subscription are able to print or copy content.
To access these options, along with all other subscription benefits, please contact info@risk.net or view our subscription options here: http://subscriptions.risk.net/subscribe
You are currently unable to print this content. Please contact info@risk.net to find out more.
You are currently unable to copy this content. Please contact info@risk.net to find out more.
Copyright Infopro Digital Limited. All rights reserved.
As outlined in our terms and conditions, https://www.infopro-digital.com/terms-and-conditions/subscriptions/ (point 2.4), printing is limited to a single copy.
If you would like to purchase additional rights please email info@risk.net
Copyright Infopro Digital Limited. All rights reserved.
You may share this content using our article tools. As outlined in our terms and conditions, https://www.infopro-digital.com/terms-and-conditions/subscriptions/ (clause 2.4), an Authorised User may only make one copy of the materials for their own personal use. You must also comply with the restrictions in clause 2.5.
If you would like to purchase additional rights please email info@risk.net
More on Awards
Joining the dots: banks leverage tech advancements for the future of regulatory reporting
The continued evolution of regulatory frameworks is creating mounting challenges for capital markets firms in achieving comprehensive and cost-effectiveawa compliance reporting. Regnology discusses how firms are starting to use a synthesis of emerging…
Markets Technology Awards 2024 winners' review
Vendors spy opportunity in demystifying and democratising – opening up markets and methods to new users
Derivatives house of the year: JP Morgan
Risk Awards 2024: Response to regional banking crisis went far beyond First Republic
Risk Awards 2024: The winners
JP Morgan wins derivatives house, lifetime award for El Karoui, Barclays wins rates
Best product for capital markets: Murex
Asia Risk Awards 2023
Technology vendor of the year: Murex
Asia Risk Awards 2023
Best structured products support system: Murex
Asia Risk Awards 2023
Energy Risk Asia Awards 2023: the winners
Winning firms demonstrate resiliency and robust risk management amid testing times