Financial risk management
Financial risk management is the practice of protecting economic value in a firm by using financial instruments to manage exposure to financial risk - principally operational risk, credit risk and market risk, with more specific variants as listed aside. Similar to general risk management, financial risk management requires identifying its sources, measuring it, and plans to address them.[1] See Finance § Risk management. Financial risk management as a "science" can be said to have been born [2] with modern portfolio theory, particularly as initiated by Professor Harry Markowitz in 1952 with his article, "Portfolio Selection";[3] see Mathematical finance § Risk and portfolio management: the P world.
Categories of |
Financial risk |
---|
![]() |
Credit risk |
Market risk |
Liquidity risk |
Investment risk |
Business risk |
Profit risk |
Non-financial risk |
Financial risk management can be qualitative and quantitative. As a specialization of risk management, financial risk management focuses on when and how to hedge using financial instruments to manage costly exposures to risk.[4]
- In the banking sector worldwide, the Basel Accords are generally adopted by internationally active banks for tracking, reporting and exposing operational, credit and market risks.[5][6]
- Within non-financial corporates,[7] the scope is broadened to overlap enterprise risk management, and financial risk management then addresses risks to the firm's overall strategic objectives.
- In investment management risk is managed through diversification and related optimization; while further specific techniques are then applied to the portfolio or to individual stocks as appropriate.
In all cases, the last "line of defence" against risk is capital, "as it ensures that a firm can continue as a going concern even if substantial and unexpected losses are incurred".[8]
Economic perspective
Neoclassical finance theory - i.e., financial economics - prescribes that a firm should take on a project if it increases shareholder value. Finance theory also shows that firm managers cannot create value for shareholders or investors by taking on projects that shareholders could do for themselves at the same cost. See Theory of the firm and Fisher separation theorem.
There is therefore a fundamental debate [9] relating to "Risk Management" and shareholder value. The discussion essentially weighs the value of risk management in a market versus the cost of bankruptcy in that market: per the Modigliani and Miller framework, hedging is irrelevant since diversified shareholders are assumed to not care about firm-specific risks, whereas, on the other hand hedging is seen to create value in that it reduces the probability of financial distress.
When applied to financial risk management, this implies that firm managers should not hedge risks that investors can hedge for themselves at the same cost. This notion is captured in the so-called "hedging irrelevance proposition": [10] "In a perfect market, the firm cannot create value by hedging a risk when the price of bearing that risk within the firm is the same as the price of bearing it outside of the firm."
In practice, however, financial markets are not likely to be perfect markets. [11] [12] [13] [14] This suggests that firm managers likely have many opportunities to create value for shareholders using financial risk management, wherein they have to determine which risks are cheaper for the firm to manage than the shareholders. Here, market risks that result in unique risks for the firm are commonly the best candidates for financial risk management. [15]
Application
As outlined, businesses are exposed, in the main, to market, credit and operational risk. A broad distinction [8] exists though, between financial institutions and non-financial firms - and correspondingly, the application of risk management will differ. Respectively:[8] For Banks and Fund Managers, "credit and market risks are taken intentionally with the objective of earning returns, while operational risks are a byproduct to be controlled". For non-financial firms, the priorities are reversed, as "the focus is on the risks associated with the business" - ie the production and marketing of the services and products in which expertise is held - and their impact on revenue, costs and cash flow, "while market and credit risks are usually of secondary importance as they are a byproduct of the main business agenda". In all cases, as above, risk capital is the last "line of defence".
Banking
Specific banking frameworks± |
---|
Market risk |
Credit risk |
|
Counterparty credit risk |
Operational risk |
Banks and other wholesale institutions face various financial risks in conducting their business, and how well these risks are managed and understood is a key driver behind profitability, as well as of the quantum of capital they are required to hold. The major focus is on credit and market risk, and especially through regulatory capital, includes operational risk. Credit risk is inherent in the business of banking, but additionally, these institutions are exposed to counterparty credit risk. (Both are to some extent offset by margining and collateral; the management is of the net-position.) Large banks are also exposed to Macroeconomic systematic risk - risks related to the aggregate economy the bank is operating in[16] (see Too big to fail). Financial risk management in banking has grown markedly in importance, since the Financial crisis of 2007–2008. [17] (This has given rise [17] to dedicated degrees and professional certifications.)
The discipline [18][19] [5][6] is, as outlined, simultaneously concerned with (i) managing, and as necessary hedging, the various positions held by the institution — both trading positions and long term exposures; and (ii) calculating and monitoring the resultant economic capital, as well as regulatory capital under Basel III. The calculations here are mathematically sophisticated, and within the domain of quantitative finance. Broadly, calculations [19] for (i) are built on the "Greeks", and the other measures of exposure to market factors, such as DV01 for sensitivity to interest rates; and for (ii) on Value at Risk, or "VaR", an estimate of how much the investment in question might lose with a given probability in a set time period, and the bank holds economic “risk capital” correspondingly. The regulatory capital quantum is calculated via specified formulae: risk weighting the exposures per highly standardized asset-categorizations, and the resultant capital - at least 12.9% of these Risk-weighted assets - must then be held in specific "tiers" and is measured correspondingly.
As the financial crisis exposed holes in the mechanisms used for hedging — see FRTB and Tail risk § Role of the global financial crisis (2007-2008) — the methodologies employed have had to evolve:
- A core technique continues to be Value at Risk — applying the traditional parametric and "Historical" approaches — but now supplemented [19] with the more sophisticated Conditional value at risk / expected shortfall and Extreme value theory (and PFE and EE for regulatory). For the underlying mathematics, these may utilize mixture models, PCA, volatility clustering, and other techniques.[20]
- Additional to these, [19] are various forms of stress test and scenario analytics — typically linked to the macroeconomics — and related economic capital optimization.
- For the daily direct analysis of the positions at the desk level, as a standard, measurement of the Greeks now inheres the volatility surface — through local- or stochastic volatility models — while for interest rates, discounting and analytics are under a "multi-curve framework".
- Model risk is addressed through regular validation of the models used by the bank's various divisions; for VaR models, backtesting.
Re implementation, Investment banks, particularly, employ dedicated "Risk Groups", i.e. Middle office teams monitoring the firm's risk exposure to, and the profitability and structure of, its various businesses, products, asset classes, desks, and / or geographies. By increasing order of aggregation: Financial institutions will typically [18] set limit values for each of the Greeks or other measures that their traders must not exceed, and traders will then hedge, offset, or reduce periodically if not daily - see below; Desks, or areas, will similarly be limited as to their VaR quantum (total or incremental, and under various calculation regimes), corresponding to their allocated economic capital; And their concentration risk will be checked against thresholds set for various types of risk; Finally, leverage will be monitored, at very least re regulatory requirements. Periodically, these all are re-estimated for a given stress scenario, [21] and risk capital - together with these limits - is correspondingly revisited. (Achieving this requires that banks maintain a significant investment in sophisticated systems, risk software, and related staff.)
Middle office also maintains the following functions, often overlapping these Groups: Corporate Treasury is responsible for monitoring funding, capital structure, and liquidity risk, and for the FTP framework allowing for comparable performance evaluation among business units; Product Control is primarily responsible for insuring traders mark their books to fair value and for "explaining" the daily P&L; Credit Risk monitors the bank's debt-clients on an ongoing basis, re both exposure and performance. See Financial analyst § Middle office.
Corporate finance
In corporate finance and financial management, financial risk management, as above, is concerned more generally with business risk - risks to the business’ value, within the context of its business strategy and capital structure. [22] The scope here - ie in non-financial firms [8] - is thus broadened [7] [23] [24] (re banking) to overlap enterprise risk management, and financial risk management then addresses risks to the firm's overall strategic objectives, incorporating various (all) financial aspects [25] of the exposures and opportunities arising from business decisions, and their link to the firm’s appetite for risk, as well as their impact on share price. In many organizations, risk executives are therefore involved in strategy formulation: "the choice of which risks to undertake through the allocation of its scarce resources is the key tool available to management." [26]
Re the standard framework, [25] the discipline largely focuses on business and operations, as outlined. Here, the management is ongoing — see further description below — typically within FP&A or corporate treasury. This is coupled with the use of insurance: credit risk is usually addressed via provisioning and credit insurance, and specifically identified operational risks are likewise insured against [24] where this treatment is deemed appropriate. Market risk, in this context, [8] is concerned mainly with changes in commodity prices, interest rates, and foreign exchange rates, and any adverse impact due to these on cash flow and profitability, and hence share price.
Correspondingly, the practice here covers two perspectives; these are shared with corporate finance more generally:
- Both risk management and corporate finance share the goal of enhancing, or at least preserving, firm value; and here,[7][25] businesses devote much time and effort to (short term) liquidity-, cash flow- and performance monitoring, and to model-based analytics more generally,[27][28] and specifically re business-operations, to understanding their break even dynamics, contribution margin and operating leverage, and to the careful monitoring of revenue. Risk management then also overlaps short term cash- and treasury management, especially as impacted by capital and funding as above; see also Treasurer § Corporate treasurers and Asset and liability management. In some large firms, analysts may employ more sophisticated stochastic models, [28][29] in, for example, financing activity prediction problems, and for risk analysis ahead of a major investment.
- Firm exposure to long term market (and business) risk is a direct result of previous capital investment decisions. Where applicable here [8][25] — usually in large corporates and under guidance from their investment bankers — risk analysts will manage and hedge their exposures using traded financial instruments to create commodity-, cash flow- and foreign exchange hedges (the latter, is over and above the per transaction "forward cover" that importers and exporters purchase from their bank; see also below). Because company specific, "over-the-counter" (OTC) contracts tend to be costly to create and monitor — i.e. using financial engineering and / or structured products — ”standard” derivatives that trade on well-established exchanges are often preferred. These include [9][25] options, futures contracts, forward contracts, and swaps; the "second generation" exotic derivatives usually trade OTC. Complementary to this hedging, periodically, Treasury may also adjust the capital structure so as to accommodate increased business risk.
Multinational Corporations are faced with additional challenges, particularly as relates to foreign exchange risk, and the scope of financial risk management modifies dramatically in the international realm; here dependent on time horizon, and risk sub-type — transactions exposure, [30] accounting exposure,[31] and economic exposure. [32] — so the corporate will manage its risk differently.
It is common for large corporations to have dedicated risk management teams, reporting to the CRO; often these overlap with the internal audit function. For small firms, it is impractical to have a formal risk management function, but these typically apply the above practices — at least the first set — informally, as part of the financial management function; see Financial analyst § Corporate and other.
Note that hedging-related transactions will attract their own accounting treatment, and corporates (and banks) may then require changes to systems, processes and documentation; [33] see Hedge accounting, Mark-to-market accounting, Hedge relationship (finance), FASB 133, IAS 39, IFRS 9.
Investment management

Fund managers, [34] classically, define the risk of a portfolio as its variance (or standard deviation), and through diversification the portfolio is optimized so as to achieve the lowest risk for a given targeted return, or equivalently the highest return for a given level of risk; these risk-efficient portfolios form the "Efficient frontier" (see Markowitz model). The logic here is that returns from different assets are highly unlikely to be perfectly correlated, and in fact the correlation may sometimes be negative. In this way, market risk particularly, and other financial risks such as inflation risk, can at least partially be moderated by forms of diversification.
A key issue in diversification, however, is that the (assumed) relationships are (implicitly) forward looking. As observed in the late-2000s recession historic relationships can break down, resulting in losses to market participants believing that diversification would provide sufficient protection (in that market, including funds that had been explicitly set up to avoid being affected in this way[35]). A related issue is that diversification has costs: as correlations are not constant it may be necessary to regularly rebalance the portfolio, incurring transaction costs; and as the fund manager diversifies, so this problem compounds. See Modern portfolio theory § Criticisms.
Addressing these issues, more sophisticated approaches have been developed in recent times, both to defining risk, and to the optimization itself; see Post-modern portfolio theory and Financial economics § Portfolio theory. Further, modern financial risk modeling employs a variety of techniques — including value at risk, historical simulation, stress tests, and extreme value theory — to analyze the portfolio and to forecast the likely losses incurred for a variety of risks and scenarios. Relatedly, [36] managers also seek to understand any tracking error, i.e. underperformance vs a "benchmark", and here often use attribution analysis preemptively so as to diagnose the source early, and to take corrective action.
Additional to these (improved) diversification and optimization measures, and given these analytics, Fund Managers will apply specific risk hedging techniques as appropriate;[34] these may relate to the portfolio as a whole or to individual stocks.
- Fund managers may engage in portfolio insurance, a hedging strategy developed to limit the losses an investor might face from a declining index of stocks without having to sell the stocks themselves. This strategy involves selling Stock market index futures during periods of price declines. The proceeds from the sale of the futures help to offset paper losses of the owned portfolio. Alternatively, and more commonly, [37] they will buy a put on a Stock market index option so as to hedge. In both cases the logic is that the (diversified) portfolio is likely highly correlated with the stock index it is part of; thus if stock prices decline, the larger index will likewise decline, while the derivative holder will profit.
- Fund managers, or traders, may also wish to hedge a specific stock's price. Here, they may likewise buy a single-stock put, or sell a single-stock future. An alternative is to engage in a "Long/short" strategy: if the trader believes that a share should increase in value (e.g. as it is underpriced given recent news) but is concerned about its overall industry correcting, then she may hedge out the industry-related risk by short selling shares from a direct, yet weaker, competitor.
- Bond portfolios are typically managed via Interest rate immunization or cashflow matching. Immunization is a strategy that ensures that a change in interest rates will not affect the value of a fixed-income portfolio (See Bond valuation § Present value approach: an increase in rates results in a decreased instrument value). Immunization is often used to ensure that the value of a pension fund's assets (or an asset manager's fund) increase or decrease in an exactly opposite fashion to their liabilities, thus leaving the value of the pension fund's surplus (or firm's equity) unchanged, regardless of changes in the interest rate. Cashflow matching is similarly a process of hedging in which a company or other entity matches its cash outflows (i.e., financial obligations) with its cash inflows over a given time horizon.
- For derivative portfolios, and positions, "the Greeks" are a vital risk management tool - these measure sensitivity to a small change in a given underlying parameter so that the portfolio can be rebalanced accordingly by including additional derivatives with offsetting characteristics.
See also
- Asset liability management
- Cash flow hedge
- Cash management
- Corporate governance
- Climate-related asset stranding
- Credit risk
- Default (finance)
- Enterprise risk management
- Finance § Risk management
- Financial risk
- Financial engineering
- Foreign exchange hedge
- Interest rate risk
- Insurance
- Investment risk
- Liquidity risk
- Market risk
- Operational risk
- Risk adjusted return on capital
- Risk modeling
- Risk pool
- Risk register
- Security management
- Settlement risk
- Treasury management
- Valuation risk
- Value at risk
- Volatility risk
Institutions
- American Risk and Insurance Association
- Association of Insurance and Risk Managers in Industry and Commerce
- Global Association of Risk Professionals
- Institute of Risk Management
- Professional Risk Managers' International Association
- Risk and Insurance Management Society
Certifications
- Certified Risk Analyst (CRA)
- Certified Risk Manager (CRM)
- Chartered Enterprise Risk Analyst (CERA; Society of Actuaries credential)
- Chartered Enterprise Risk Actuary (CERA; Institute and Faculty of Actuaries credential)
- Financial Risk Manager (FRM)
- International Diploma in Risk Management (MIRM; ERM focused)
- Professional Risk Manager (PRM)
Bibliography
- Crockford, Neil (1986). An Introduction to Risk Management (2nd ed.). Woodhead-Faulkner. ISBN 0-85941-332-2.
- Charles, Tapiero (2004). Risk and Financial Management: Mathematical and Computational Methods. John Wiley & Son. ISBN 0-470-84908-8.
- Conti, Cesare & Mauri, Arnaldo (2008). "Corporate Financial Risk Management: Governance and Disclosure post IFRS 7", Icfai Journal of Financial Risk Management, ISSN 0972-916X, Vol. V, n. 2, pp. 20–27.
- Hampton, John (2011). The AMA Handbook of Financial Risk Management. American Management Association. ISBN 978-0814417447.
- Lam, James (2003). Enterprise Risk Management: From Incentives to Controls. John Wiley. ISBN 978-0-471-43000-1.
- McNeil, Alexander J.; Frey, Rüdiger; Embrechts, Paul (2005), Quantitative Risk Management. Concepts, Techniques and Tools, Princeton Series in Finance, Princeton, NJ: Princeton University Press, ISBN 0-691-12255-5, MR 2175089, Zbl 1089.91037
- van Deventer; Donald R.; Kenji Imai; Mark Mesler (2004). Advanced Financial Risk Management: Tools and Techniques for Integrated Credit Risk and Interest Rate Risk Management. John Wiley. ISBN 978-0-470-82126-8.
References
- Peter F. Christoffersen (22 November 2011). Elements of Financial Risk Management. Academic Press. ISBN 978-0-12-374448-7.
- W. Kenton (2021). "Harry Markowitz", investopedia.com
- Markowitz, H.M. (March 1952). "Portfolio Selection". The Journal of Finance. 7 (1): 77–91. doi:10.2307/2975974. JSTOR 2975974.
- Allan M. Malz (13 September 2011). Financial Risk Management: Models, History, and Institutions. John Wiley & Sons. ISBN 978-1-118-02291-7.
- Van Deventer, Donald R., and Kenji Imai. Credit risk models and the Basel Accords. Singapore: John Wiley & Sons (Asia), 2003.
- Drumond, Ines. "Bank capital requirements, business cycle fluctuations and the Basel Accords: a synthesis." Journal of Economic Surveys 23.5 (2009): 798-830.
- John Hampton (2011). The AMA Handbook of Financial Risk Management. American Management Association. ISBN 978-0814417447
- See "Market Risk Management in Non-financial Firms", in Carol Alexander, Elizabeth Sheedy eds. (2015). The Professional Risk Managers’ Handbook 2015 Edition. PRMIA. ISBN 978-0976609704
- Jonathan Lewellen (2003). Financial Management - Risk Management. MIT OCW
- KRISHNAMURTI CHANDRASEKHAR; Krishnamurti & Viswanath (eds.) "; Vishwanath S. R. (2010-01-30). Advanced Corporate Finance. PHI Learning Pvt. Ltd. pp. 178–. ISBN 978-81-203-3611-7.
- John J. Hampton (1982). Modern Financial Theory: Perfect and Imperfect Markets. Reston Publishing Company. ISBN 978-0-8359-4553-0.
- Zahirul Hoque (2005). Handbook of Cost and Management Accounting. Spiramus Press Ltd. pp. 201–. ISBN 978-1-904905-01-1.
- Kirt C. Butler (28 August 2012). Multinational Finance: Evaluating Opportunities, Costs, and Risks of Operations. John Wiley & Sons. pp. 37–. ISBN 978-1-118-28276-2.
- Dietmar Franzen (6 December 2012). Design of Master Agreements for OTC Derivatives. Springer Science & Business Media. pp. 7–. ISBN 978-3-642-56932-6.
- Corporate Finance: Part I. Bookboon. pp. 32–. ISBN 978-87-7681-568-4.
- Bolt, Wilko; Haan, Leo de; Hoeberichts, Marco; Oordt, Maarten van; Swank, Job (September 2012). "Bank Profitability during Recessions" (PDF). Journal of Banking & Finance. 36 (9): 2552–64. doi:10.1016/j.jbankfin.2012.05.011.
- The Rise of the Chief Risk Officer, Institutional Investor (March 2017).
- Martin Haugh (2016). "Basic Concepts and Techniques of Risk Management". Columbia University
- Roy E. DeMeo (N.D.) "Quantitative Risk Management: VaR and Others". UNC Charlotte
- See for example III.A.3, in Carol Alexander, ed. (January 2005). The Professional Risk Managers' Handbook. PRMIA Publications. ISBN 978-0976609704
- Basel Committee on Banking Supervision (2009). "Range of practices and issues in economic capital frameworks"
- Will Kenton (2022). "Business Risk", Investopedia
- Stanley Myint (2022). Introduction to Corporate Financial Risk Management. PRMIA Thought Leadership Webinar
- "Risk Management and the Firm’s Financial Statement — Opportunities within the ERM" in Esther Baranoff, Patrick Brockett, Yehuda Kahane (2012). Risk Management for Enterprises and Individuals. Saylor Academy
- Margaret Woods and Kevin Dowd (2008). Financial Risk Management for Management Accountants, Chartered Institute of Management Accountants
- Don Chance and Michael Edleson (2021). Introduction to Risk Management. Ch 10 in "Derivatives". CFA Institute Investment Series. ISBN 978-1119850571
- See §39 "Corporate Planning Models", and §294 "Simulation Model" in Joel G. Siegel; Jae K. Shim; Stephen Hartman (1 November 1997). Schaum's quick guide to business formulas: 201 decision-making tools for business, finance, and accounting students. McGraw-Hill Professional. ISBN 978-0-07-058031-2. Retrieved 12 November 2011.
- David Shimko (2009). Quantifying Corporate Financial Risk. archived 2010-07-17.
- See for example this problem (from John Hull's Options, Futures, and Other Derivatives), discussing cash position modeled stochastically.
- Contrary to conventional wisdom it may be rational to hedge translation exposure. Empirical evidence of agency costs and the managerial tendency to report higher levels of translated income, based on the early adoption of Financial Accounting Standard No. 52.
- Aggarwal, Raj, "The Translation Problem in International Accounting: Insights for Financial Management." Management International Review 15 (Nos. 2-3, 1975): 67-79. (Proposed accounting framework for evaluating and developing translation procedures for multinational corporations).
- Aggarwal, Raj; DeMaskey, Andrea L. (April 30, 1997). "Cross-Hedging Currency Risks in Asian Emerging Markets Using Derivatives in Major Currencies". The Journal of Portfolio Management. 23 (3): 88–95. doi:10.3905/jpm.1997.409611.
- Price Waterhouse Coopers (2017). Achieving hedge accounting in practice under IFRS 9
- Pamela Drake and Frank Fabozzi (2009). What Is Finance?
- Khandani, Amir E.; Lo, Andrew W. (2007). "What Happened To The Quants In August 2007?∗" (PDF).
{{cite journal}}
: Cite journal requires|journal=
(help) - Carl Bacon (2019). “Performance Attribution History and Progress”. CFA Institute Research Foundation
- Staff (2020). What is index option trading and how does it work?, Investopedia
External links
- CERA - The Chartered Enterprise Risk Analyst Credential - Society of Actuaries (SOA)
- Financial Risk Manager Certification Program - Global Association of Risk Professional (GARP)
- Professional Risk Manager Certification Program - Professional Risk Managers' International Association (PRMIA)
- Risk Journals Homepage