• Risk Queue
  • Posts
  • Citi's Tech Risks Forced To Reshuffle; Wall Street's AI Risks Concerns; Regulatory Rewrites & Counterparty Risk Deep Dive

Citi's Tech Risks Forced To Reshuffle; Wall Street's AI Risks Concerns; Regulatory Rewrites & Counterparty Risk Deep Dive

Welcome back to the Risk Queue, we have a lot for you this week!

-From Naeem, CEO & Founder - Risk On Q

PICKS:

  1. Headlines

    • Citi’s Tech Controls Wake-Up Call

    • AI Empowering Criminals Faster Than Banks

  2. Regulatory Shifts

    • Treasury & FINRA's Modernization Push

  3. Risk Deep Dive

    • MIT's AI Risk Repository

    • Counterparty Risk Management Framework

Risk Headlines

Key Points:

Citigroup is undertaking a fundamental transformation of its technology workforce by reducing IT contractors from 50% to 20%, adding 2,000 employees, and consolidating vendors from 144 to 50 in response to regulatory pressures and a $136 million fine for data governance deficiencies, highlighting how control weaknesses can lead to direct financial impacts including a recent $22.9 million fraud event and reduced profitability targets for 2026.

_________________________________

Key Points:

Major financial institutions are flagging specific AI risks in their annual reports, including model hallucinations, workforce displacement, regulatory uncertainty, and cybercriminals leveraging AI faster than banks can respond. While AI adoption is essential to remain competitive and serve clients, implementing proper governance frameworks is critical as JPMorgan's Jamie Dimon considers AI potentially "the biggest issue" his bank faces.

Perhaps most concerning is the cybersecurity implication - the report suggests a growing asymmetry where criminals may be adopting AI innovations faster than defending institutions. This represents a potential shift in the cybersecurity landscape where banks' traditional defensive advantages could be eroding.

A.I. Risk / Technology Risk

Key Points:

The MIT AI Risk Repository is a database with two taxonomies of AI risks, compiled through a systematic search for existing frameworks, taxonomies, and other classifications of AI risks, and is maintained by the MIT AI Risk Repository.

The repository is based on 43 included documents, which are presented in a slide deck, and provides a holistic view of how AI risks are currently conceptualized, allowing individuals to understand the variety of ways in which risks have been categorized by various authors.

The frameworks of AI risk aim to synthesize knowledge on AI risks across academia and industry and identify common themes and gaps in our understanding of AI risks, enabling readers to bookmark particularly relevant frameworks for future use and explore the repository further through additional resources, including a research report, website, and repository exploration.

Regulatory News - Fines, Losses, & Rules

Key Points:

Treasury Secretary Bessent has positioned Treasury to lead the administration's financial deregulation efforts by focusing regulators on material financial risks rather than compliance exercises, while explicitly rejecting agency consolidation in favor of Treasury-coordinated parallel work between regulators and industry—suggesting the regulatory landscape will retain its current structure but operate with greater coordination and potentially lighter touch.

Most peer financial firms will passively wait for guidance, but forward-thinking risk leaders should proactively establish direct Treasury engagement channels, conduct materiality assessments of compliance activities, and develop a strategic position that influences how "material financial risk" gets defined in practice. The most significant oversight in the industry will be failing to recognize this as a temporary window for influence before implementation patterns solidify.

_________________________________

Key Points:

FINRA has launched a comprehensive rules modernization review focusing initially on capital formation and workplace supervision, seeking industry feedback until May 12, 2025, amid a broader deregulation push under the current administration. This represents a significant opportunity for broker-dealers to shape regulatory requirements around remote supervision and recordkeeping while potentially reducing compliance burdens, coming at a time when FINRA's enforcement actions have continued their multi-year decline with penalties dropping 14% to $87 million in 2024.

Risk Data to Geek Out On

Define Counterparty Risk - Managing Financial Risk Management - riskonq .com

This week we will continue to focus on a key risk program in financial risk management, moving to Liquidity Riks, last week we covered Market Risk. Over the coming weeks, we will define these concepts to enhance understanding and appreciation of the vast risk management ecosystem existing in the financial sector.

Counterparty Risk Management: Comprehensive Analysis for Financial Institutions

Counterparty Risk Management is a critical component of Financial Risk Management, focusing on mitigating the risk of financial loss due to a counterparty's inability to fulfill contractual obligations. Below is a structured analysis tailored for financial institutions.

Precise Definition

Counterparty Risk Management refers to the identification, measurement, and mitigation of risks arising when one party in a financial transaction fails to meet its contractual obligations. It encompasses the following principles:

  • Core Objectives: Protect financial institutions from losses, ensure liquidity, and maintain systemic stability19.

  • Significance: Counterparty risk is central to safeguarding against defaults in transactions such as derivatives, loans, and securities financing16.

Types of Counterparty Risk:

  1. Credit Risk: The risk of default due to insolvency or financial distress913.

  2. Pre-Settlement Risk: The risk that a counterparty fails before the transaction is settled9.

  3. Settlement Risk: Arises during the lag between transaction execution and settlement9.

  4. Wrong-Way Risk: Occurs when exposure increases as the counterparty's creditworthiness declines51.

Interconnection with Other Risks:

  • Credit Risk: Counterparty risk is essentially a subset of credit risk, as it involves assessing the likelihood of default913.

  • Market Risk: Market volatility can amplify counterparty exposure5128.

  • Operational Risk: Poor systems or processes can exacerbate counterparty exposure issues18.

  • Liquidity Risk: Defaults can trigger liquidity crises across interconnected systems17.

Financial Institution Context

Implementation Across Institutions

Financial institutions adapt Counterparty Risk Management based on their business models:

  • Banks: Manage large derivatives portfolios and securities financing transactions through collateralization and margining1722.

  • Investment Firms: Focus on exposure monitoring and stress testing for complex instruments like OTC derivatives2728.

  • Credit Unions: Emphasize credit risk in loans and member deposits.

Regulatory Landscape

Key frameworks influencing practices include:

  1. Basel III Standards: Capital requirements and stress-testing methodologies for counterparty exposures2247.

  2. Dodd-Frank Act (US): Clearing mandates for OTC derivatives to reduce systemic risk925.

  3. European Market Infrastructure Regulation (EMIR): Mandatory clearing and reporting requirements for derivatives in Europe9.

Impact of Financial Products

  1. Loans: Longer-dated loans increase pre-settlement risk.

  2. Derivatives (e.g., swaps): Bilateral nature creates complex risk profiles requiring collateral management28.

  3. Securities Financing Transactions (SFTs): High exposure risk due to interconnected counterparties17.

Macroeconomic Factors

Economic conditions such as GDP growth, interest rates, inflation, and unemployment significantly affect counterparty risk profiles:

  • Recessions increase defaults due to diminished repayment capacity2933.

  • Elevated interest rates strain borrowers with floating-rate debt or balloon payments upon maturity31.

Counterparty Risk Management Strategies

Key Strategies:

  1. Risk Scoring Models:

    • Internal models assess historical data; external ratings benchmark creditworthiness1636.

  2. Loan Origination Processes:

    • Rigorous underwriting standards including sensitivity analyses for counterparty credit profiles24.

  3. Monitoring Mechanisms:

    • Real-time analytics for early warning signals and exposure tracking3538.

  4. Collateral Management:

    • Use of margining agreements and netting arrangements to mitigate exposure risks954.

  5. Portfolio Diversification & Stress Testing:

    • Spread exposure across industries/geographies; simulate extreme market conditions for resilience testing2436.

Effectiveness & Limitations:

  • Effective strategies reduce systemic contagion but may face challenges like model inaccuracies or insufficient data integration across systems5155.

Role of Technology & Data Analytics:

Modern tools leverage AI/ML for real-time monitoring, predictive modeling, and automated decision-making, enhancing efficiency and accuracy in managing counterparty risks3843.

Emerging Risks & Digital Transformation

Contemporary Challenges:

  1. Increased complexity from non-bank financial intermediaries (NBFIs)25.

  2. Greater interconnectedness amplifying systemic fragility in OTC derivatives markets12.

Digital Initiatives:

  1. AI/ML applications in liquidity assessment and credit scoring enhance precision in evaluating counterparties' financial health3843.

  2. Alternative data sources such as social media signals improve predictive capabilities for credit decisions46.

Measurement & Metrics Framework

Key Measurement Approaches:

  1. Key Risk Indicators (KRIs):

    • Metrics like Credit Valuation Adjustment (CVA), bond spreads, and CDS spreads provide early warnings on counterparty health4849.

  2. Stress Testing Methodologies:

    • Scenario-based tests simulate adverse market conditions to assess resilience under extreme exposures2450.

  3. Capital Adequacy Metrics:

    • Ensuring sufficient reserves to cover potential losses from defaults per Basel III guidelines2247.

Actionable Insights

Best Practices:

  1. Establish robust governance frameworks with clear escalation protocols.

  2. Invest in technology-driven solutions for real-time monitoring.

  3. Diversify counterparties across industries/geographies to minimize concentration risks.

Real-world Examples:

  1. The Archegos Capital default highlighted deficiencies in monitoring concentrated exposures across counterparties, leading to significant losses for banks like Credit Suisse and Nomura1517.

  2. Quantifi’s CRMS solution enabled an APAC investment bank to achieve real-time credit evaluations and stress testing capabilities, improving operational resilience against counterparty risks52.

Lessons Learned & Common Pitfalls:

  1. Avoid over-reliance on external ratings; integrate internal models with dynamic market data.

  2. Ensure timely action when limits are breached; delays can exacerbate losses during stress periods.

This structured framework provides actionable insights for financial institutions aiming to optimize their Counterparty Risk Management strategies while navigating regulatory complexities and emerging challenges effectively.

  1. _________________________________

Thank you for reading,

Naeem

p.s. If you find the Risk Queue newsletter helpful please subscribe and share it with a friend or colleagues, you can find it here!