Blog Week in Risk (ending Sept 25th)

David Harper CFA FRM

David Harper CFA FRM
Subscriber
Low interest rates
Cyber
  • Yahoo hacking — what you need to know (How you could protect yourself against cyber crime) https://www.ft.com/content/266aa154-8165-11e6-8e50-8ec15fb462f4 “To reduce being affected by the next data breach, you should have unique passwords for every service you use rather than reusing passwords across the web. To create unique, strong passwords, password managers such as 1Password or LastPass are the best option.”
  • Yahoo faces questions over delay in data breach revelation (Board faces questions over delay in disclosing hacked accounts as Verizon deal comes under spotlight) https://www.ft.com/content/54ec6bd8-818e-11e6-8e50-8ec15fb462f4
  • Corporate Judgment Call: When to Disclose You’ve Been Hacked (Cyberattacks become more common, but relatively few get reported to the SEC) http://www.wsj.com/articles/corporate-judgment-call-when-to-disclose-youve-been-hacked-1474320689
  • From Yahoo itself: An Important Message About Yahoo User Security https://yahoo.tumblr.com/post/150781911849/an-important-message-about-yahoo-user-security “A recent investigation by Yahoo has confirmed that a copy of certain user account information was stolen from the company’s network in late 2014 by what it believes is a state-sponsored actor. The account information may have included names, email addresses, telephone numbers, dates of birth, hashed passwords (the vast majority with bcrypt) and, in some cases, encrypted or unencrypted security questions and answers … Yahoo believes that information associated with at least 500 million user accounts was stolen and the investigation has found no evidence that the state-sponsored actor is currently in Yahoo’s network.”
  • From Yahoo itself: Account Security Issue FAQs https://help.yahoo.com/kb/account/SLN27925.html What happened? “A recent investigation by Yahoo has confirmed that a copy of certain user account information was stolen from our network in late 2014 by what we believe is a state-sponsored actor.”
Wells Fargo
Banks
  • The Fed’s Stress Tests Need to Be Transparent (Banks are being judged by secret models, in violation of the law that governs agency rule-making) http://www.wsj.com/articles/the-feds-stress-tests-need-to-be-transparent-1474064216 “Before conducting each year’s stress tests, the Fed develops a new economic hypothetical. In 2016 it involved a 6.25% drop in U.S. GDP and a crash that erased half the value of the stock market. Although the Fed discloses its assumptions, it does not provide the public with an opportunity to comment on them. The Fed also develops new models each year for how the hypothetical crisis would affect banks’ capital levels. In 2016 the models predicted losses of $526 billion. But the Fed keeps these models permanently secret, which has a troubling result: Banks must guess at how millions of different assets would respond to the Fed’s assumptions and what this means for the minimum capital they need to pass the test. Designing a stress-test program can cost a bank between $150 million and $250 million …” Here is the referenced report by the Committee on Capital Markets Regulation http://trtl.bz/CCMR-APA-stress-tests
  • Banks have a dubious business model and markets have noticed http://ftalphaville.ft.com/2016/09/...bious-business-model-and-markets-have-noticed This is good and contain several references to FRM concepts “Sarin and Summers pose three key questions, although most of the emphasis is on the first two: 1. How do we measure the riskiness of a bank? 2. What could explain changes in those measures over time? 3. What should be done about it?” The paper is here http://trtl.bz/sarin-summers-have-banks-gotten-safer Including very interesting application of implied volatility; e.g., “The absolute value of the delta of an option can be thought of as the probability of the option ending up in the money (Gunn 2009).”
  • Let's Think Again About Dodd-Frank by Tyler Cowen https://www.bloomberg.com/view/articles/2016-09-20/let-s-think-again-about-dodd-frank “The core problem is this: The franchise value of banks fell after the crisis, which pushed banks closer to insolvency. As recovery proceeded, however, Dodd-Frank pushed down the value of banks once again. If your reaction to this problem is, Regulation needs to be tougher yet, that’s going to worsen the dilemma by bringing banks that much closer to insolvency. Maybe it was factors separate from Dodd-Frank, such as lower interest rates, that have had the biggest role in reducing the value of banks. Still, that means regulation isn’t addressing the most significant threats to bank solvency.”
GARP
Quant
Climate
Books
Risk (other)
  • Enterprise Risk Management (ERM) Playbook [for the U.S. Federal Government] Released https://cfo.gov/2016/07/28/enterprise-risk-management-erm-playbook-released/ “The group included risk practitioners and cross functional representatives from more than twenty federal agencies who gathered, defined, and illustrated practices applying ERM in the Federal context. The Playbook will help departments and agencies make better decisions based on a more holistic view of risks and their interdependencies.”
  • The Sorry State Of Risk Tolerance Questionnaires For Financial Advisors https://www.kitces.com/blog/risk-to...oblems-for-financial-advisors-planplus-study/ “From the academic perspective, those who study consumer behaviors around risk and how it influences investment decisions are converging on three core constructs. The first is RISK TOLERANCE itself. In the academic context, risk tolerance very narrowly and specifically refers to a client’s willingness to take on risk – i.e., to pursue an uncertain positive outcome, with the potential that a negative outcome could result instead … The second construct is RISK CAPACITY, or the client’s financial ability (in dollars and cents terms) to endure a potential financial loss, and still be able to achieve his/her goals … The third construct is to recognize that different clients have different RISK PERCEPTIONS– how risky they think markets (or rather, their investments) are in the first place. The key point is that if perceptions are (or become) misaligned with reality, investors may engage in “surprising” behavior that seems inconsistent with their risk tolerance.
Other
 
Last edited by a moderator:
Top