Case 072Operational risk and loss eventsCore
A bank's unreconciled nostro items older than 30 days have risen from 12 to 45 in three months and now total Rs 60 crore. What does the trend signal, what amber and red thresholds would you set, and who must be told?
1The situation
Elvanta Bank holds nostro accounts, its own accounts with correspondent banks abroad, through which it settles payments in foreign currencies. Each day operations reconciles the bank's records of what should have moved through these accounts against the correspondents' statements. Items that do not match are breaks.
Operations reports a key risk indicator: breaks older than 30 days. Twelve weeks ago there were 12. Today there are 45, worth Rs 60 crore in total. The indicator has no thresholds; it is reported monthly in a pack that nobody has asked about.
2Your task
Assess what the trend signals, set amber and red thresholds for the indicator, and decide who must be told and what they must do.
Quick check
Why do aged breaks matter more than the total number of breaks?
Worked solution
Try it on paper, then open one step at a time.
30-second answerThe answer to give first
The trend signals a control that is losing ground: aged breaks have nearly quadrupled in twelve weeks, and Rs 60 crore of money movements cannot be explained. Set amber at 20 items or Rs 20 crore and red at 35 items or Rs 40 crore, each tied to a named action. On those thresholds the indicator went amber in week 5 and red in week 10; today it is red on both, so the head of operations, the financial controller and operational risk must be told now.
Step 1What does the trend actually signal?
A household that stops reconciling its bank statement for a month usually finds a forgotten bill; one that stops for a year may find a stranger has been using its card. An aged break is money the bank cannot account for, and a rising count means the reconciliation process is falling further behind every week. The count has grown by about 2.8 items a week, and it is accelerating. The average item is Rs 1.33 crore, too large to be rounding. Three explanations are common: the team is short of people or a new system has changed file formats; one correspondent is sending bad statements; or someone is hiding something. You cannot tell which from the count, so the first ask is a breakdown by age, by correspondent and by direction, because unexplained payments out are more worrying than unexplained receipts.
Step 2How do you set the thresholds?
Anchor them to what normal looks like and what the bank can tolerate, and set them on count and value, because 40 tiny items and one Rs 30 crore item are different problems. An indicator earns its place only if crossing a threshold triggers a named action by a named person within a set time. Amber at 20 items or Rs 20 crore: the head of reconciliations presents a clearance plan within a week and operational risk tracks it. Red at 35 items or Rs 40 crore: escalation to the head of operations and the financial controller, a daily clearance report, and a review of the largest items for possible loss or fraud. Any single item above, say, Rs 10 crore unexplained after 30 days goes straight to red whatever the count.
| Level | Trigger | Who acts | What they do |
|---|---|---|---|
| Green | Under 20 items and Rs 20 crore | Reconciliations team | Clear in normal course |
| Amber | 20 items or Rs 20 crore | Head of reconciliations, op risk | Clearance plan within a week |
| Red | 35 items or Rs 40 crore, or any item over Rs 10 crore | Head of operations, financial controller, op risk | Daily tracking, loss and fraud review, committee report |
Step 3Who must be told today, and why each of them?
The indicator is red on both count and value. The head of operations owns the fix. The financial controller needs to know because Rs 60 crore of unexplained items may mean the balance sheet is wrong and some may need to be written off. Treasury needs to know because nostro balances feed its liquidity forecast. Operational risk logs it and reports it to the operational risk committee. And if the breakdown shows unexplained payments out concentrated in one account or one approver, internal audit and the fraud team are told the same day. The deeper finding is not the 45 items; it is that the indicator existed for three months with no threshold, so nobody was obliged to act.
Where candidates lose it
The common miss is treating the number as a workload problem and recommending more staff. That may be the answer, but a rising aged break count is also how fraud and system failures first show, and the answer has to rule them out.
The second is setting thresholds without actions. An amber line that nobody is obliged to act on is decoration, which is exactly how this indicator reached 45.
What the interviewer asks next
- The breakdown shows 30 of the 45 items are with one correspondent. What next?
- How would you set thresholds for an indicator with no history?
- Why track value and count separately?
Company names and figures are illustrative.
