In the complex world of banking, financial risks are a known quantity—banks have developed sophisticated methods to manage these risks and even profit from them. However, non-financial risks (NFRs)—encompassing compliance failures, misconduct, technology breakdowns, and operational hiccups—present a different challenge altogether. These risks come with no upside, only a significant potential for damage.
The Cost of Non-Financial Risks
The financial implications of non-financial risks are staggering. Between 2008 and 2012, the world’s leading banks incurred nearly $200 billion in losses due to litigation, compensation claims, and operational failures. Notably, at least 17 incidents during this period resulted in losses exceeding $1 billion each, with an additional 65 incidents causing losses of over $100 million each.
However, the impact of NFRs extends beyond the immediate financial penalties. The reputational damage to banks can be profound, affecting customer trust, investor confidence, and the overall perception of the bank’s business model at a time when scrutiny of banking practices is intensifying. Moreover, the personal accountability of senior managers for failing to prevent these risks has become a focal point for regulators, adding a layer of personal risk to the professional challenges of managing NFRs.
The Response to Non-Financial Risks
Banks have been proactive in their efforts to address non-financial risks, significantly increasing investment in this area. This includes expanding teams, establishing new governance frameworks, and implementing operational enhancements aimed at mitigating risks related to compliance, fraud, and IT. Despite these efforts, the elusive nature of NFRs means that banks often find themselves in a reactive stance, dealing with issues as they arise rather than being able to anticipate and prevent them. This cycle of “firefighting” and addressing audit findings consumes resources and attention, yet fails to provide a reliable means of predicting and preventing the next risk event.
Moving Forward
The ongoing challenge for banks is to evolve their approach to managing non-financial risks, moving beyond the current reactive strategies to develop more predictive and proactive risk management practices. This will not only require further investment in technology and governance but also a cultural shift within organisations to prioritise the identification and mitigation of NFRs before they can inflict damage.
As banks navigate the complexities of non-financial risks, the imperative to improve risk management practices has never been more critical. The journey towards better NFR management is challenging but necessary to safeguard the future stability and integrity of the banking sector.