Risk Management: An Introduction

A business has to try to minimise risks. But if its behaviour is governed by the
attempt to escape risk, it will end up by taking the greatest and least rational risk of all:
the risk of doing nothing.
-Peter Drucker1

Introduction
We live in a world of risk. Some risks are totally unexpected. The September 11, 2001
World Trade Centre attacks in the US, the Tsunami of December 2004, Hurricane Katrina
of August 2005, and the Mumbai terrorist strikes of November 2008 are good examples.
Other risks can be identified but the magnitude and extent are difficult to estimate. The
sub prime crisis is a good example. Not all risks are so unpredictable or unexpected or
difficult to estimate. By closely monitoring the business environment and streamlining
internal systems and processes, companies can anticipate the risks associated with
changing technology, changing customer tastes, changing interest and currency rates,
changing competitive conditions, etc. This book provides a conceptual framework for
dealing with some of these risks in a systematic and coordinated way across an
organization. To keep the scope of the book manageable, the focus will be on financial
risks. Other risks will be considered in passing.
Exhibit.1.1
Major upheavals in recent years

1971 : Breakdown of Bretton Woods

1973 : Oil shock
1987 : US Stock market crash
1989 : Crash of the Nikkei Index
1994 : Mexican Peso crisis
1997 : Asian currency crisis
1998 : Russian rouble crisis/collapse of LTCM
2000 : Dotcom bust
2001 : WTC terrorist attack
2007 : Sub Prime Crisis
2008 : Collapse of Bear Stearns, Lehman, AIG,

Understanding risk management

Risk management has returned to the top of the agenda in the wake of the sub prime
meltdown. Lehman Brothers, Bear Stearns and Merrill Lynch no longer exist. The US
government has acquired a major equity stake in Citibank, while the UK government has
done so in the case of Royal Bank of Scotland. Many European banks are in trouble and
might well have collapsed but for government intervention. For all practical purposes,
much of the British banking system has been nationalized. In a few days during October
2008, the entire banking system in Iceland collapsed and was taken into public

1
Managing for Results
 2

ownership. The countrys average income fell from 160% of that of the US in 2007 to
80% by 2009. And as the credit crisis has spread from banking to other sectors, we have
seen corporates also getting sucked into the whirlpool. The American automotive giants,
General Motors (GM), Ford and Chrysler are in big trouble. President Barrack Obama
has announced comprehensive bail out plans for GM and Chrysler. Companies like
Toyota and Sony have declared losses for the first time in several years. Toyota the
Japanese car manufacturer, with an impressive track record of revenue and profitability
growth over the years, announced in the last week of August 2009 that it would slash
worldwide production.

Quite clearly, risk management systems failed to deliver the goods during the recent
crisis. And the price paid by the global economy has been heavy. It is evident that
financial institutions and companies need to develop and apply a far more robust and
integrated risk management framework that can inspire the confidence of shareholders.
From identifying risk to measuring it and controlling it, the entire risk management
process will have to undergo a major overhaul in the coming years.

To start with, top management will have to be hands on when it comes to understanding
and managing risk. This is not a new concern. As the Economist2 once put it: Top
managers often fail to understand properly the firms sensitiveness to different types of
risk. managers and boards too often regard risk management as a matter for financial
experts in the corporate treasury department rather than as an integral part of corporate
strategy. But recent incidents such as the collapse of Bear Stearns where CEO Jimmy
Cayne was enthusiastically taking part in bridge tournaments while the bank was
collapsing, have reinforced this concern. Similarly, the Swiss bank, UBS had admitted
on its website that its top management should have asked more probing questions when
the banks traders were building huge positions in sub prime mortgages.

Another concern is the way in which companies deal with different risks in a piecemeal
fashion. For example, many banks dealt with credit and market risk separately in the
build up to the sub prime crisis. The credit risk in case of many sub prime assets became
market risk as market indices moved, leading to heavy mark-to-market losses.

An organization wide view of risk management can greatly improve efficiencies,

generate synergies and most importantly result in a deeper understanding of risk
exposure. Which is why banks like UBS have now started to integrate the management of
credit risk and market risk. That is also why many companies are taking a serious look at
Enterprise Risk Management (ERM), which addresses some fundamental questions:

What are the various risks faced by the company?

What is the magnitude of each of these risks?
What is the frequency of each of these risks?
What is the relationship between the different risks?
How can the risks be managed to maximize shareholders wealth?

2
February 10, 1996.

2
 3

We will examine the theme of integrated risk management in more detail in a later
chapter.

Risk identification at Pitney Bowes

While risk management is critical for financial institutions, corporates too are realizing the importance of
risk management. Pitney Bowes, the postal machine maker is a good example. In recent years, this
company has started to take risk management very seriously. The companys enterprise risk management
system identifies and prioritizes potential risks to the business financial, environmental and societal.
These risks are assessed in terms of probability, severity and status of mitigation plans. Sixteen categories
of risk have been identified. The risks identified are reviewed by a senior management Risk Steering
Committee and the Board of Directors. Each risk is assigned to a senior executive. The firm has taken the
view that risk management is a philosophy, not merely numbers. As a senior executive mentions 3, We
have a much more holistic discussion about a business and why we have it. It becomes strategic, instead of
simply, do we get insurance to cover a potential loss?

The benefits of risk management

What is the rationale for risk management? Does risk management really benefit the
shareholders? After all many of the risks a company faces, are specific to it. Portfolio
theory argues that shareholders are rewarded only for systematic risk. Unsystematic risk,
i.e., risk specific to a company can be diversified away by purchasing shares in a
reasonably large number of companies. If shareholders can manage risk more efficienty
on their own, by buying shares in various corporations, should companies really manage
risk? The answer is an emphatic yes.
Exhibit.1.2
How Risk Management adds value

Enterprise Risk management creates value at both a macro or company-wide level and a micro or
business-unit level.
At the macro level, ERM creates value by enabling senior management to quantify and manage the
risk-return tradeoff that faces the entire firm.
At the micro level, ERM becomes a way of life for managers and employees at all levels of the
company.
Incorporating risk in decision making ensures optimal use of capital.
Source: Brian Nocco, Rene Stultz, Enterprise Risk Management: Theory & Practice 4.

For starters, shareholders do not have all the information needed to manage the risks a
company faces. Moreover, even if they had, individual shareholders would find it
inefficient and expensive to manage risks on their own. The transaction costs would be
too high if a large number of small hedging transactions are undertaken. Finally, distress
situations are eminently avoidable. During such situations, significant value destruction
takes place as the assets of the company trade at unrealistically low prices. Recall the
collapse of Bear Stearns in March 2008 and Lehman Brothers in September 2008.

Prudent risk management ensures that the firms cash flows are healthy so that the
immediate obligations and future investment needs of the firm are both adequately taken
care of. Firms typically run into cash flow problems because they fail to anticipate or
3
Time, 22 December 2008, company website, www.pb.com
4
Journal of Applied Corporate Finance, Fall 2006.

3
 4

handle risks efficiently. These risks include market risks such as vulnerability to interest
rate, stock index, commodity price and exchange rate movements. Then there are credit
risks which arise because of excessive investments in the same asset class or lending to
the same customer segment. They also include liquidity risks such as liquidity black
holes, which result when the entire market shifts to one side, with sellers finding it
difficult to find buyers. Firms may also fail to anticipate business risks when the demand
suddenly falls or a rival starts taking away market share aggressively with a new business
model or technological innovation. Then there are various examples of companies failing
to manage operational risk effectively because of poor systems and processes.

Risk management helps in sustaining the staying power of an organization. In 1993,

Metallgesellschaft which tried to cover the risk associated with its long term contracts
through oil futures ended up losing a huge amount. The star studded team at hedge fund,
Long Term Capital Management could do little as unexpected interest rate and currency
movements brought the fund to the edge of bankruptcy in 1998. In both the cases, the
positions taken were fundamentally sound. But there were serious doubts about their
ability to tide through the crisis. Indeed, much of the sub prime crisis has been about
liquidity. Under the circumstances, liquidity has become the most potent weapon in
many sectors. Liquidity gives the comfort to sustain day-to-day operations and more
importantly make those vital investments that are needed to sustain the companys
competitiveness in the long run. Sound risk management goes a long way in ensuring that
the organization has the required liquidity to function effectively even in bad times.

Categorising uncertainty
Organisations face various types of uncertainty. Milliken5 has classified uncertainty into
three broad categories.
State Uncertainty: This refers to the unpredictability of the environment. Causes of
state uncertainty are:
a) Volatility in the environment
b) Complexity in the environment
c) Heterogeneity in the environment
Effect Uncertainty: This is the uncertainty about the impact of external events on the
organization.
Response Uncertainty: This refers to the unpredictability of the organizations
responses to external developments.

Oliver Williamson6, well known for his work on transaction cost economics and the 2009
Economics Nobel Prize winner has drawn a distinction among environmental / external
uncertainty, organisational/internal uncertainty and strategic uncertainty.

Environmental uncertainty arises due to random acts of nature and unpredictable

changes in consumer preferences.

5
Academy of Management Review, 1987, Volume 12.
6
Handbook of Industrial Organization, Volume I, 1989.

4
 5

Organisational uncertainty refers to the lack of timely communication among

decision-makers, each of whom has incomplete information. This leads to lack of
coordination and consequently, poor decisions.
Strategic uncertainty is created by misrepresentation, non-disclosure and distortion of
information and results in uncertainty in the relations a firm has with suppliers,
customers and competitors.

Exhibit 1.3
Prioritising Risks
High

Create Take
Create
Contingency Take
Immediate
Impact of Risk

Contingency
Plans Immediate
Action
Plans Action

Conduct Conduct
Conduct
Periodic Conduct
Ongoing
Periodic Ongoing
Low

Review Review
Review Review

Low High
Likelihood of Risk

The great Peter Drucker, identified four types of risk7:

The risk that is built into the very nature of the business and which cannot be avoided.
The risk one can afford to take
The risk one cannot afford to take
The risk one cannot afford not to take

Exhibit 1.4
Challenges in implementing Integrated Risk Management
Risk management as a discipline has evolved unevenly across different functional areas.
In finance, the preoccupation has been with hedging and discount rates. Little attention has been paid to
the upside.
In strategy, the focus has been on competitive advantage and barriers to entry.
Risk management at most organizations is splintered.
There is little communication between those who assess risk and those who make decisions based on
those risk assessments.

The Economist Intelligence Unit divides risks into four broad categories.
Hazard risk is related to natural hazards, accidents, fire, etc. that can be insured.
Financial risk has to do with volatility in interest rates, exchange rates, stock markets
and commodity markets, defaults on loans, asset-liability mismatch, etc.
Operational risk is associated with systems, processes and people and deals with
issues such as succession planning, human resources, information technology, control
systems and compliance with regulations.
Strategic risk stems from an inability to adjust to changes in the environment such as
changes in customer priorities, competitive conditions and geopolitical developments.
7
Managing for Results

5
 6

Exhibit 1.5
The Enterprise Risk Management process
Identify the risk.
Quantify the risk to the extent possible.
Prevent or avoid the risk wherever possible.
Transfer the risk if holding it is not consistent with the companys business strategy.
If the risk is core to the business, hold it and manage it by modifying the operations, processes.
Diversify the risk where appropriate by building a portfolio of businesses.
Insure the risk, if it has to be held but is difficult to manage internally.
Increase capital if the risk has to be held and is difficult to transfer.
Assess the risk intelligently and decide whether it is more important to preserve the possibility of
extremely good outcomes or to reduce the possibility of very bad outcomes.

The method of classifying risks is not as important as understanding and analysing them.
Indeed, the very nature of uncertainty implies that it is difficult to identify all risks, leave
alone classify them. Each company should carefully examine its value chain and come up
with its own way of categorising the uncertainties associated with its important value
adding activities. Then, it can quantify these uncertainties to the extent possible and
decide which risks to hold and which to transfer.

In this book, we will concentrate on banks and financial institutions. We will look at the
following risks in detail:
Market risk
Credit Risk
Operational risk
Liquidity risk
Exhibit 1.6
Risk Categories at Credit Suisse

Source: Credit Suisse Annual Report, 2008.

6
 7

A brief history
Risk management is not exactly a new idea. One of the earliest examples of risk
management appears in the Old Testament of the Bible. An Egyptian Pharaoh had a
dream. His adviser, Joseph interpreted this dream as seven years of plenty to be followed
by seven years of famine. To deal with this risk, the Pharaoh purchased and stored large
quantities of corn during the good times. As a result, Egypt prospered during the famine.
Similarly, in Matsya Avatar, Lord Vishnu asked Sage King Satyavratha to put one pair of
each species safely on board the ship that would help them escape the deluge the Lord
was planning to unleash. This ensured the perpetuation of different flora and fauna.

The modern era of risk management probably goes back to the Hindu Arabic numbering
system, which reached the West about 800 years back. The Indians developed the system
while the Arabs played a key role in spreading the knowledge to the west. Without
numbers, it would have been impossible to quantify uncertainty. But mathematics alone
was not sufficient. What was needed was a change in mindset. This happened during the
Renaissance, when long-held beliefs were challenged and scientific enquiry was
encouraged. The Renaissance was a period of discovery, investigation, experimentation
and demonstration of knowledge. As theories of probability, sampling and statistical
inference evolved, the risk management process became more scientific. Many risk
management tools used by traders today originated during the 1654-1760 period. The
pioneers of the Renaissance age included Luca Pacioli, Girolamo Cardano, Galileo,
Blaise Pascal, Pierre de Fermat, Chevalier de Mere and Christiaan Huygens.

Strangely enough, gamblers played a major role in the advancement of probability theory.
A landmark problem they tried to solve was how to estimate the probability of a win for
each team after an unfinished game of cards. These ideas were later supplemented by
advances such as the regression to the mean by Francis Galton in 1885 and the concept of
portfolio diversification by Harry Markowitz in 1952.

More sophisticated risk management tools have been developed in recent decades. These
include models for estimating value-at-risk, volatility, probability of default, exposure at
default and loss given default. A landmark event in the history of risk management was
the development of the Black Scholes Merton Option Pricing Model in 1973. Thanks to
better understanding of various domains, quantitative models and the availability of
computing power, it has become possible to quantify risk to a large extent. Yet, as the
recent sub prime crisis has demonstrated, these numbers are of little use if mature human
judgment is not exercised, by the people involved.

For a more detailed account of the history of risk management, please see annexure at
the end of this chapter.

Risk fundamentals
There are some fundamentals about risk that need to be carefully understood.

Risk can neither be avoided nor eliminated completely. Indeed, without taking risk, no
business can grow. If there were no risks to take, managers would be without jobs!

7
 8

The Pharaoh in the earlier example was obviously taking a risk in the sense that his
investment would have been unproductive had there been no famine. Microsoft has laid
huge bets on its next operating system, Windows 7. But without this investment,
Microsoft realises it may lose its market share as the threat from Google intensifies.
Similarly, Tata Motors has made a huge investment in buying out Daewoo's truck
division in South Korea. The Tatas have also purchased the luxury marque, Jaguar,
realising that without this kind of investment they may become a marginal player in the
global automobile market.

In short, risk management is as much about managing the upside as the downside. But
as John Fraser and Betty Simkins 8 mention, the upside should not become a distraction
and dilute the focus of tactical risk management. The upside should be dealt with during
periodic strategic planning exercises or when circumstances change in a big way. But
once the strategy is in place, ERM should focus on the downside: By keeping shifts in
strategy and discussions of the upside apart from normal operations, companies avoid
having their management and staff distracted by every whim or misunderstood
opportunity.

Exhibit 1.7
Risk categories at Deutsche Bank
This risk arises from all transactions that give rise to actual contingent or potential
Credit Risk claims against any counterparty. The bank distinguishes three kinds of credit risk.
Default risk, Country risk and Settlement risk.
This risk arises from the uncertainty due to changes in interest rates, equity prices,
Market Risk
foreign exchange rates and commodity prices.
This is the possibility of being unable to meet payment obligations when they are
Liquidity Risk
due or having to fund them at very high costs.
This is the possibility of suffering losses in relation to employees, contractual
Operational Risk specifications, technology, infrastructure failure etc. This definition includes legal
and regulatory risk but excludes business and reputational risk.
This is the risk that publicity concerning a transaction, counterparty or business
Reputational Risk
practice involving a client will a negative impact on the publics trust in the bank.
This is the risk arising out of potential changes in general business conditions, such
Business Risk
as the market environment, client behavior and technological changes.
Source: Deutsche Bank Annual Report, 2008.

Risk management should not be viewed in absolute terms. It is often about making
choices and tradeoffs between various kinds of risk. These choices and tradeoffs are
closely related to a company's assumptions about its external environment. In the Indian
pharma industry, players like Dr Reddy's Laboratories are challenging the patents of
global players as the generics market in the US opens up with many blockbuster drugs
going off patent. But another leading player, Nicholas Piramal (Nicholas), believes in a
different approach - partnering with global majors. Nicholas does not want to challenge
patents but wants to join hands with large players in various areas such as contract
manufacturing. CEO Ajay Piramal believes that Nicholas' capabilities in managing

8
Ten common misconceptions about Enterprise Risk Management, Journal of Applied Corporate
Finance, Fall 2007.

8
 9

strategic alliances with the big guns in the pharma industry will stand the company in
good stead in the coming years.

Exhibit 1.8
Risk Management vs. Risk Hedging
Risk Hedging Risk Management

View of risk Risk is a danger Risk is a danger & an opportunity

Objective Protect against the downside Exploit the upside

Strategy/cross functional process
Approach Financial, Product oriented
oriented
Reduce volatility in earnings,
Measure of success Higher value
cash flows, value
Type of real option Put Call

Primary impact on value Lower discount rate Higher & sustainable excess returns
Closely held, private firms,
Volatile businesses with significant
Ideal situation publicly traded firms with high
potential for excess returns
financial leverage or distress costs
Ref: Aswath Damodaran, Strategic Risk Taking A Framework for Risk Management, Wharton School
Publishing, 2008.

Risk Management should not be confused with the risk hedging. Risk management is
more strategic, cross functional, process oriented and has the pay off of a call option.
This means that while the downside is protected, opportunities are pursued for
maximizing the upside. While risk hedging aims at reducing earnings volatility, risk
management aims at maximizing the value of the firm. See Exhibit 1.8

All risks are not equally important. Without a clear understanding of the impact and
frequency of different risks, some relatively unimportant risks may receive more attention
than they warrant. As a result, there may be sub optimal utilization of corporate
resources. Risks must be classified according to their frequency and potential impact, to
facilitate prioritization.

Not all risks are external. Very often, the risks organizations assume have more to do
with their own strategies, internal processes, systems and culture than any external
developments. For example, the collapse of the Hyderabad based Global Trust Bank
(GTB) in 2004 had more to do with poor management control systems than any other
kind of risk. GTB took heavy risks while lending money to low credit worthy customers
and investing money in the capital markets. The board failed to ask the right questions
and impose the necessary checks and balances.

The crisis at UTI in 2001 was again due more to internal than external factors. UTI made
a number of questionable investments in the late 1990s. There is considerable evidence
that systems and processes were routinely violated when UTI's fund managers purchased
risky stocks.

9
 10

Every company needs to grow its revenues and generate adequate profits to survive in the
long run. Unprofitable or stagnating companies are doomed to failure. So, investments,
which are needed to stay ahead of competitors, cannot be avoided. And any investment
does carry some amount of risk. Risk management ensures that these risks are identified,
understood, measured and controlled. By understanding and controlling risk, a firm can
take better decisions about pursuing new opportunities and withdrawing from risky areas.

Risk management cannot be completely outsourced. Companies must be clear about

what risks to retain inhouse and what risks to transfer. In general, retaining risks makes
sense when the cost of transferring the risk is out of proportion to the probability and
impact of any damage. The first step for managers is to understand what risks they are
comfortable with and what they are not. Often, companies are not comfortable with risks
caused by volatile financial markets. This is probably why financial risk management,
which deals with volatility in interest and exchange rates, has become popular among non
banking organisations in the past few decades. Companies also tend to transfer those risks
which are difficult to measure or analyze. A good example is earthquakes, where an
insurance cover often makes sense. On the other hand, companies often prefer to retain
risks closely connected to their core competencies. Thus, a software company like
Microsoft would in normal circumstances, not transfer technology risk, but would in all
likelihood hedge currency risk. These are only general guidelines. Ultimately whether to
retain the risk or to transfer it should be decided on a case-to-case basis.

As Nocco and Stultz9 mention, in making decisions whether to retain or transfer

risks, companies should be guided by the principle of comparative advantage in risk
bearing. A company that has no special ability to forecast market variables has no
comparative advantage in bearing the risk associated with most variables. In contrast, the
same company should have a comparative advantage in bearing information intensive,
firm-specific business risks because it knows more about these risks than anybody else.
Indeed, the paradox of risk management is that by reducing non core exposure, it gives
companies the confidence to take more risk and exploit opportunities in their core
business.

The approach towards quantifying risk is different from that used in valuation. A brief
mention may be made here of the differences between the two approaches. While
valuation focuses on the expected present value, risk management is concerned with the
distribution of future value. While valuation concentrates on the centre of the
distribution, risk management is more concerned with the tails. See Exhibit 1.9.

9
Journal of Applied Corporate Finance, Fall 2006.

10
 11

Exhibit 1.9
Valuation & Risk Management approaches
Valuation Risk Management
Principle Expected discounted value Distribution of future value
Focus Centre of distribution Tails of distribution
Horizon Current value, discounting Future value
Precision High precision needed Less precision needed
Ref: Aswath Damodaran, Strategic Risk Taking A Framework for Risk Management, Wharton School
Publishing, 2008.

Behavioral Issues in Risk Management

Behavioral issues play an important role in risk management. Studies have shown that
many New York taxi drivers, set themselves a daily income target. Once they reach their
target, they close shop for the day. This tendency to work less on a busy day when easy
money is there to be made, defies rational logic. Indeed, such anomalies drive the point
home, that while taking decisions with financial implications, logic often takes the
backseat. Indeed, that is how the field of Behavioral Finance has developed. This is a
new approach to finance that argues that some financial phenomena can be better
understood by considering that human beings are not always rational. Behavioral finance
has two building blocks10. The first is limits to arbitrage. Market dislocations may persist
and may not be corrected quickly by arbitrage as traditional finance theory would
suggest. The second is psychology which sustains deviations from fall rationality.
The behaviours of people are strongly guided by perceptions. Two components of risk
influence peoples perceptions the fear factor and the control factor. When we are very
much afraid of the outcome or feel less in control, we perceive the risk to be more. On
the other hand, when we are not afraid of the outcome or feel more in control, we
perceive the risk to be less.
Scholars, Daniel Kahneman (the 2002 Nobel Prize Winner) and the late Amos Tversky,
pioneers of behavioral finance make an important point about how people perceive gains
and losses. When looking at a potential gain, people tend to be risk averse and when they
look at a potential loss, they are more risk loving. They gain less utility from winning
$1000 than what they would forgo if they lose $1000. This asymmetry is especially
relevant in the case of a financial loss or gain but can also apply to other situations.
How people perceive gains and losses also depends on the frame of reference. For
example, managers who have incurred a major loss may be quite happy if the loss is less
than what they had expected. Similarly, the choice of a strategy may depend on the way
the possible outcomes are presented.
Cognitive bias in decision making is also an important point to be considered. People
tend to give greater weight to information which is more easily available or recalled. The
tendency to focus more attention on a particular fact or event, just because it is more
visible or fresh in our minds is called availability heuristic. According to Werner De
Bondt and Richard Thaler, a significant proportion of market volatility is explained by
overreaction to recent news.

10
Nicholas Barberis, Richard Thaler, A Survey of Behavioral Finance, Working Paper, September 2002.

11
 12

People often hold beliefs which are plainly at odds with the evidence, usually because
they have been held and cherished for a long time. This is referred to as cognitive
dissonance or in more common parlance, denial. Many people also tend to be influenced
by outsiders suggestions. This may happen even when it is clearly known that the
person making the suggestion is not necessarily well informed. Evidence indicates that
people also tend to take bigger gambles to maintain the status quo.

People often have an exaggerated notion of their ability to control events. Consequently,
they do not pay adequate attention to extreme possibilities. When people think they are
in control of circumstances, when they are actually not, they underestimate the risks
involved. The tendency on the part of people to think they have a greater influence on
events than is actually the case is called magical thinking. Conditions that encourage
illusion of control include stress, too much focus on results (without a periodic reflection
of what is going on) and a series of positive outcomes.

N Barberis, M Huang and T Santos 11 point out another behavioral anomaly, the house
money effect. Individuals are more willing to take risks with found money (money
obtained easily) than with earned money.

Another behavioural issue which has an adverse impact on risk management is

misinterpretation of past events. Once something happens, people tend to think that they
could easily have predicted it. This is called hindsight bias. When something happens
and people condition themselves into believing they predicted it, when they actually did
not, it is called memory bias.

Exhibit 1.10
Risk management: First principles
Risk is everywhere: Our biggest risks will come from places that we least expect them to come from
and in unanticipated forms.
Risk is threat and opportunity: Good risk management is about striking the right balance between
seeking out and avoiding risk.
We are ambivalent about risks and not always rational: A risk management system is only as good as
the people manning it.
Not all risk is created equal: Different risks have different implications for different stakeholders .
Risk can be measured: The debate should be about what tools to use to assess risk than whether they
can be assessed.
Good risk measurement should lead to better decisions: The risk assessment tools should be tailored to
the decision making process.
The key to good risk management is deciding which risks to avoid, which ones to pass through and
which to exploit: Hedging risk is only a small part of risk management.
The pay off to better risk management is higher value: To manage risk right, we must understand the
value drivers of the business.
Risk management is part of everyones job: Ultimately, managing risks well is the essence of good
business practice and is everyones responsibility.

11
Prospect Theory and Asset Prices, Quarterly Journal of Economics, Vol. 116, 2000, pp. 1-53.

12
 13

Successful risk taking organizations do not get there by accident: The risk management philosophy
must be embedded in the companys structure and culture.
Aligning the interests of managers and owners, good and timely information, solid analysis, flexibility
and good people is key: Indeed, these are the key building blocks of a successful risk taking
organization.
Ref: Aswath Damodaran, Strategic Risk Taking A Framework for Risk Management, Wharton School
Publishing, 2008.

The tendency to believe that past patterns will repeat themselves in the future is another
pitfall in risk management. People are adept at finding patterns even when they do not
exist. This phenomenon of treating events as representative of some class or pattern is
called representativeness heuristic.

Thaler points out the role of mental accounting which refers to the way individuals and
households keep track of financial transactions. People tend to evaluate risks separately
than in an integrated fashion. If these risks were evaluated with a broader perspective,
investors would be less risk averse. Shlomo Benartzi and Richard Thaler 12 have used this
concept to explain why equity shares command such a high premium over bonds in the
capital markets. Investors tend to focus more on the short-term volatility of shares than
their long-term returns. Consequently, they demand a premium as compensation.
Instead, if they concentrated on the long term returns offered by shares, they would not
perceive them to be much riskier than comparable bonds. In the case of Metallgesellshaft,
the German oil refiner, though the long term position was hedged, the top management
became pretty much concerned about short term losses. Which is why, they decided to
unwind their futures positions even though they were working fine on a long term basis.

J C Cicchetti and J A Dubin 13 (1994) studied customers who were prepared to pay 45
cents per month as insurance against having to incur a telephone wiring repair cost of $55
with only a .005 profitability. The expected loss in the event of a repair was only (.005)
(55) or approximately 28 cents per month. Millions of customers in the US have been
known to buy similar protection. If utility-maximising customers had rational
expectations about the probability of needing repair, it is unlikely that they would buy the
protection.

There are various other behavioral anomalies, a brief mention of some of which is in
order here. Contamination effects allow irrelevant but proximate information to influence
a decision. The affect heuristic allows preconceived value judgments to interfere with
our assessment of costs and benefits. Over confidence in calibration leads us to
underestimate the confidence intervals within which our estimates will be robust.
Bystander apathy makes us abdicate individual responsibility when in a crowd. The
problem of induction makes us generalize on the basis of insufficient information.

12
Myopic Loss Aversion and the Equity Premium Puzzle, Quarterly Journal of Economics, Vol. 110.1,
1995, pp. 73-92.
13
A Microeconometric analysis of risk aversion and the decision of self insure, Journal of Political
Economy, Vol. 102, 1994, pp. 169-186.

13
 14

Risk management must take into account all these behavioral issues. Ultimately, risks are
identified, measured and controlled by people. So human psychology cannot be
separated from risk management. It is important to note that normal rather than
rational behaviours are at work while taking risk.

One way to resolve the problem of individual biases is to ask employees to operate in
cross functional teams. The advantage of a collective approach to beliefs about risk and
the frame of reference is that individual biases can be minimised and team members can
exercise a restraining influence on each other. Goldman Sachs developed the tradition of
partners coming together to evaluate major risks and approve important decisions. This
has no doubt contributed to the banks strong risk culture.
Concluding Notes
In their seminal paper, The Balanced score card Measures that drive performance 14
Robert Kaplan and David Norton have emphasised the need for evaluating the
performance of an organisation from four different angles customer perspective,
internal perspective, innovation and learning perspective and shareholder perspective.
The Balanced ScoreCard considers financial measures that represent the outcome of past
actions. At the same time, it incorporates operational measures relating to customer
satisfaction, internal processes and attempts at innovation and improvement, all of which
drive future financial performance. Similarly, when we talk of risk management, the
various business risks which organisations face must be considered along with the
financial risks. Ultimately, financial risks are the outcome of business strategy. The role
of financial risk management is to minimise uncertainty regarding cash flows; but the
very source of these cash flows is the type of business which the company runs and the
type of strategic decisions it makes. While much of this book is about financial risks, we
will from time to time illustrate through examples the linkages between business risk and
financial risk.

Till the early 1990s, in most organisations across the world, an integrated approach to risk
management was lacking. The formation of risk management departments was mainly
aimed at reducing the total insurance premium paid or the transaction costs incurred
while hedging risk. From the mid-1990s onwards, this philosophy has been changing.
The range of risks which companies have to manage has widened. Various strategic and
operational risks have become more important than insurable risks. The need to take a
company wide view of risks is becoming increasingly felt.

Boards are realizing that each major initiative needs to be examined on the basis of a risk
return framework. That is why risk-adjusted-return-on-capital and capital allocation
across businesses are being emphasized by banks. As US Federal Reserve governor
Randall Kroszner remarked15, Assessing potential returns without fully assessing the
corresponding risks to the organization is incomplete and potentially hazardous, strategic
analysis, But in the run up to the sub prime crisis, this principle was conveniently
violated. Credit Default Swaps (CDS) and Collateralized Debt Obligations (CDO) were
used merrily without understanding the risks involved. Rational analysis would have
14
Harvard Business Review, January February, 1992.
15
Time, 22 December 2008.

14
 15

indicated that the meager excess returns which these instruments promised, were not
justified in relation to the risk involved. But with compensation by and large linked to
sales and not risk adjusted returns, risk management took a back seat.

Looking back, it is clear that during a boom, risk managers who play the devils advocate
are often not taken seriously enough. But a few CEOs have demonstrated their vision.
CEO Ed Clark decided to withdraw Toronto-Dominion, the Canadian bank from
structured products because he did not fully understand these products. As he remarked, 16
I am an old school banker. I dont think you should do something that you dont
understand, hoping there is somebody at the bottom of the organization who does. A
similar philosophy helped Jamie Dimon, the CEO of J P Morgan Chase avoid the
problems which many other banks ran into because of sub prime mortgages.

Let us end with this chapter with two quotes. The more recent quote is from Niall
Ferguson, one of the foremost finance historians 17, in the world. Ferguson emphasizes the
importance of being prepared for surprises. The history of risk management is one long
struggle between our vain desire to be financially secure and the hard reality that there
really is no such thing as the future... There are only multiple, unforeseeable futures,
which will never lose their capacity to take us by surprise.

Risk management should not be equated with caution, conservatism or cynicism or

inaction. The great American president Theodre Roosevelts famous remarks were
recalled by CEO Jamie Dimon of JP Morgan Chase in the banks 2008 annual report: It
is not the critic who counts; not the man who points out how the strong man stumbles .
The credit belongs to the man who is actually in the arena, whose face is marred by sweat
and blood, who strives valiantly: who errs, who comes short again and again because
there is no effort without error and shortcoming.

16
Time, 22 December 2008.
17
The Ascent of Money, Allen Lane, 2008.

15
 16

Annexure 1.1 - Risk Management: A historical perspective18

While anecdotal evidence of risk management exists since ancient times, it would be fair
to state that by and large, till the time of Renaissance, the common man took most of his
decisions by instinct and believed in luck. The Renaissance, a time of discovery,
encouraged investigation, experimentation and demonstration of knowledge. As
mathematical advances took place, man became confident about measuring and
controlling risk. Gradually, risk management began to evolve as a science. A historical
account of the various advances in risk management in the past 600 years follows.

In the early 1400s, the Medici family, one of the earliest bankers of Medieval times,
created a flourishing market for bills of exchange in Italy. Creditors could draw bills on
debtors and use the bills as a means of payment or obtain cash at a discount from a
banker willing to act as a broker. The Medici family also gave a boost to the double entry
system of accounting. Their balance sheets systematically listed liabilities on one side
and assets on the other. The Mediccis, succeeded by increasing the size and spread of
their operations. Thanks to their enterprise, the Italian banking system became the
benchmark for many other European nations.

In 1494, Luca Pacioli wrote a remarkable book which covered the basic principles of
algebra. Pacioli drew attention to the problem of dividing the stakes between two players
after an unfinished game of cards. This was one of the earliest attempts to quantify risk.

A sixteenth century physician Girolamo Cardano published a book Ars Magna (The
Great Art) in 1545. The book covered advanced topics such as solutions to quadratic and
cubic equations and square root of negative numbers. Cardano wrote another book Liber
de Ludo Alea (Book on Games of Chance), probably the first scientific attempt to develop
the principles of probability. Cardano defined probability as the number of favourable
outcomes divided by the total number of possible outcomes.

Galileo, born in 1564 and considered the father of modern science, also worked in the
area of probability. He dealt with the problem of throwing one or more dice and
estimating the probability of the various outcomes. Interest in the subject also spread to
other countries like Switzerland, Germany and England. Within 50 years of Galileos
death, major problems in probability analysis had been solved.

Central banking, which has assumed the primary responsibility in many countries for
monitoring the risks posed by the financial system originated in the middle of the 17 th
century. The Swedish Riksbank, set up in 1656 pioneered the concept of fractional
reserve banking. Bulk of the deposits mobilized by banks could be profitably lent out to
those in need. The Bank of England was set up in 1694, primarily to assist the
government with war financing. In 1742, the Bank of England was given a partial
18
The quotes in this section are drawn from Peter Bernsteins book, Against the Gods, unless otherwise
mentioned. The annexure itself draws heavily from this book. Another insightful book which helped in
preparing this note is Niall Fergusons, The Ascent of Money, a history of finance which takes us back
almost 4000 years in time.

16
 17

monopoly on the issue of non interest paying bank notes that could be used to settle
payments. Other countries established central banks much later. Thus the Banque de
France came into existence in 1800, the German Reichsbank in 1875, the Bank of Japan
in 1882, the Swiss National Bank in 1907 and the US Federal Reserve in 1913.

The bond market was also an invention of the Italian Renaissance. Italian City states at
war needed money to finance their mercenary armies. Florence floated bonds to wealthy
citizens and paid interest as compensation. These bonds could be sold to others in case
the investors were in need of liquidity. By the early 14th century, two thirds of households
in Florence were financing the public debt. From Italy, bond market innovations passed
on to other countries in Europe. By the mid 18 th century, there was a thriving bond
market in London where liquid Government consols were the dominant securities traded.
The consols were essentially perpetual bonds. By the late 18th century, two kinds of
consols dominated 3% and 5% coupon bonds. The bond market soon emerged as an
institutional mechanism for providing immediate feedback on government policies.
Indiscriminate spending and government borrowing meant punishment in the form of
higher interest rates on government bonds.

Three French men, Blaise Pascal, Piere de Fermat and Chevalier de Mere made immense
contributions to the development of probability theory. When Chevalier raised the
problem of how to divide the stakes in an unfinished game of cards, Fermat turned to
algebra while Pascal used a combination of geometry and algebra. Pascals work later
evolved into decision theory. Seven letters exchanged by Pascal and Fermat between July
and October of 1654 formed the genesis of probability theory. The Dutch scientist,
Christian Huygens, based on this correspondence, published the first book on probability
in 1656.

In 1662, a book was published by some associates of a monastery with which Pascal was
associated. The book referred to probability explicitly and explained how to calculate it.
The ideas in this book led to the important conclusion that a decision depends on the
strength of ones desire for a particular outcome as well as ones estimate of the
probability of that outcome.

Meanwhile, sampling was also emerging as an important subject. One of the earliest
applications of sampling was in the testing of coins produced by the Royal Mint in
England. The coins were selected at random and compared to a standard to ensure that
the variation was within specified limits.

In 1662, John Graunt published a book covering statistical and sociological research.
Graunt was the first person to condense data into tables and to do descriptive statistical
analysis. Graunt was supported in his efforts by an Irish intellectual, William Petty.
Graunt and Petty can be called the founders of modern statistics. Graunt did a lot of work
on the causes of death. He made a scientific estimate of the population of London and
explained the importance of demographic data. Graunts work gradually led to concepts
such as sampling, averages and the notion of what is normal. Without being aware of it,
Graunt laid the foundation of sampling theory. The line of analysis pursued by Graunt is

17
 18

today known as statistical inference, i.e., drawing conclusions about a population using a
sample.

In 1692, John Arbuthnots translation of Huygens work became the first publication on
probability in the English language. The book had a long title Of the laws of chance or a
method of calculation of the hazards of game, plainly demonstrated and applied to games
as present most in use.

Edmund Halley, the famous British astronomer also made a significant contribution. He
developed tables that facilitated the calculation of annuities. These tables were published
in a work called Transactions in 1693. Halleys work became the basis for the modern
life insurance business.

Towards the end of the 17th century, insurance products began to emerge. A coffee house
which Edward Lloyd opened in London in 1687 was the birth place of Lloyds, the
famous insurance company. In 1696, he prepared the Lloyds list, which provided details
about the arrival and departure of ships and conditions at sea. Ship captains frequented
the coffee shop and compared notes on the hazards associated with different sea routes.
The London insurance industry grew rapidly, fuelled by various innovations.
Underwriters wrote policies to cover various types of risk. In 1771, 79 underwriters came
together to set up the Society of Lloyds.

In the late 17th century, a dedicated insurance market began to develop in London. Some
14 years after the Great Fire of 1666 which destroyed more than 13,000 houses, Nicholas
Barbon established the first insurance company. The Sun Insurance Office, a fire
insurance specialist, was set up in 1710. In 1720, the Royal Exchange Assurance
Corporation and the London Assurance Corporation were set up. These companies
provided life and maritime insurance. All the three were limited liability companies. But
the problem with all these firms was that they operated on a pay-as-you-go basis.
There was always the danger that payouts might exceed the premiums collected.

The first modern insurance fund was pioneered by Scottish ministers, Robert Wallace and
Alexander Webster, along with Colin Maclaurin, a mathematics professor. The fund was
based on modern actuarial principles. Earlier, the window of a deceased minister of a
Scottish Church received only half a years stipend. Webster and Wallace came up with a
scheme in which premiums would be collected from ministers annually and profitably
invested. Windows would be paid out of the returns on the investment and not out of the
premiums as was the earlier practice. Webster and Wallace came up with fairly accurate
calculations of how many beneficiaries there would be in the future and how much
money could be generated to support them. The establishment of the Scottish Ministers
Widows fund was a major milestone in the history of risk management. In the next 20
years, similar funds were established both in England and the American colonies the
Presbyterian Ministers Fund of Philadelphia (1761), English Equitable Company (1762),
United Incorporations of St Marys Chapel (1768). Over time, insurance companies
became major investors in the stock markets. (Insurance premiums rose as a proportion

18
 19

of GDP in the developed countries from around 2% on the eve of the first world war to
about 10% in 2007).

As trade expanded, judgments about consumer needs, pricing and cost of financing
became important. For these adventurous traders, business forecasting became important.
Indeed, business forecasting was a major innovation of the late 17 th century. Till then, the
principles of probability had been applied only to applications like gambling, far removed
from business.

In 1713, Jacob Bernoulli came up with the law of large numbers. Under similar
conditions, the occurrence of an event in the future will follow the same pattern as in the
past. He showed how probabilities and statistical significance could be inferred from
limited information. According to the law, if we throw up a coin, the ratio of the number
of heads to the total number of throws will tend towards 0.5 as the number of throws
becomes large. In statistical terms, increasing the number of throws will increase the
probability that the ratio of heads to the total number of throws will vary from 0.5 by less
than some stated amount. Interestingly, the Indian mathematician, Brahmagupta (598-
668) had stated without proof that the accuracy of empirical statistics tends to improve
with the number of trials. Poisson, Chebyshev, Markov, Borel, Centelli and Kolmogorov
were the other mathematicians who contributed to the law of large numbers.

In 1738, the Swiss mathematician Daniel Bernoulli published a paper that covered both
the subject of risk as well as human behavior. Bernoulli introduced a very important idea.
The value of an item must not be based on its price, but rather on the utility that it yields.
The utility resulting from any small increase in wealth will be inversely proportional to
the quantity of wealth previously possessed. For example, all people want to become rich
but the intensity to become rich reduces as they become richer. While probability theory
set up the choices, Bernoulli considered the motivations of the person who did the
choosing. Rational decision makers attempt to maximise expected utility, not expected
value. Risk management works well because utility varies across individuals and
organizations. It is the differences in utility that make possible the existence of various
risk transfer mechanisms. As Bernstein puts it so well, If everyone valued every risk in
precisely the same way, many risky opportunities would be passed up. Venturesome
people place high utility on the small probability of huge gains and low utility on the
larger probability of loss. Others place little utility on the probability of gain because their
paramount goal is to preserve their capital. Where one sees sunshine, the other finds a
thunderstorm. Without the venturesome, the world would turn a lot more slowly We
are indeed fortunate that human beings differ in their appetite for risk.

A French mathematician, Abraham de Moivre made impressive contributions to the field

of risk management, documented in his 1713 book, The Doctrine of Chances. De Moivre
demonstrated how observations distribute themselves around their average value. This led
to the concept of the normal distribution. De Moivre also developed the concept of
standard deviation. This made it possible to evaluate the probability that a given number
of observations would fall within some specified bound. De Moivre also showed the
normal distribution to be an approximate form of the binomial distribution. To quote De

19
 20

Moivre, Though chance produces irregularities, still the odds will be infinitely great that
in the process of time, those irregularities will bear no proportion to recurrency of that
order which naturally results from original design.

In the 1760s, an Englishman, Richard Price did some pioneering work in the construction
of mortality tables. Based on the work of Halley and de Moivre, Price published two
articles on the subject. In 1771, he published a book titled Observations on
Reversionary Payments. For this work, Price is generally acknowledged as the founding
father of actuarial science. Prices work however, had some errors. He overestimated
mortality rates at younger ages and underestimated them at later ages. He also
underestimated life expectancies. Consequently, life insurance premia were much higher
than they needed to be.

Thomas Bayes, an Englishman born in 1701 worked on determining the probability of the
occurrence of an event given that it had already occurred a certain number of times and
not occurred a certain number of times. In other words, Bayes focussed attention on using
new information to revise probabilities based on old information. In a dynamic
environment, characterised by a high degree of uncertainty, this can be a very useful tool.
As more and more information becomes available, earlier probabilities can be revised.
Bayes most well known paper was Essay towards solving a problem in the doctrine of
chances. The Bayes theorem of conditional probability was first published in 1763.

Carl Friedrich Gauss, probably the greatest mathematician of his time, published
Disquisitiones Arithmeticae in 1801, which dealt with the theory of numbers. One of his
early attempts to deal with probability was in the book Theoria Motus (Theory of
Motion) published in 1809. In this book, Gauss made attempts to estimate the orbit of
heavenly bodies based on the path that appeared most frequently over many separate
observations. Gauss was also involved in geodesic measurements, the use of the
curvature of the earth to improve the accuracy of geographic measurements. These
measurements involved making estimates based on sample distances within the area
being studied. Gauss noticed that the observations tended to distribute themselves
symmetrically around the mean.

In 1810, Pierre Laplace spotted the weakness in Gauss work. Before Laplace,
probability theory was mostly concerned with games of chance. Laplace applied it to
many scientific and practical problems. In 1809, Laplace also framed the Central Limit
Theorem. It states that the sampling distribution of the mean of different samples drawn
from a population, approaches the normal as the sample size increases. In 1812, Laplace
published his book, Theorie analytique des probabilities. It was only in 1901 that the
importance of the central limit theorem was understood when Russian Mathematician
Aleksandr Lyapunov defined it in general terms and proved precisely how it worked.

Simeon Denis Poisson came up in 1914 with a distribution named after him. The
Poisson distribution is quite useful in situations where a discrete random variable takes
on an integer value. The distribution can be used to estimate the probability of a certain
number of occurrences (usually a very small number) in situations such as the number of

20
 21

telephone calls going through a switchboard system per minute, the number of patients
coming for a check up at a hospital on a given day or the number of accidents at a traffic
intersection during a week. Today the Poisson distribution is used in Credit Risk Plus, a
widely used credit risk model to predict the occurrence of default events.

In 1867, Pafnuty Chebyshev, developed another important theorem in statistics. No

matter what the shape of the distribution, at least 75% of the values will fall within (plus
minus) two standard deviations from the mean of the distribution and at least 89% of the
values will lie within (plus minus) three standard deviations from the mean.

Francis Galton tried to build on the foundation provided by Gauss and others. In 1885,
his work led to the formulation of a general principle that has come to be known as
regression or reversion to the mean. Galton worked on intriguing problems such as
estimating the rate at which tall parents produced children who were tall relative to their
peers but shorter relative to their parents. Galton also studied the average diameter of 100
seeds produced by different sweet pea plants. He found that the smallest pea seeds had
larger offspring and the largest seeds had smaller offspring. Similarly, in another study he
found that if parents were short, the children were slightly taller and vice versa. These
experiments led Galton to develop the term regression, the process of returning to the
mean.

Bernstein has explained the importance of Galtons work: Regression to the mean
motivates almost every kind of risk taking and forecasting. Its at the root of homilies like
what goes up must come down, Pride goeth before a fall, and from shirtsleeves to
shirtsleeves in three generations. Probably Joseph had this in mind when he predicted to
Pharaoh that seven years of famine would follow seven years of plenty. In stock
markets, regression to the mean is applied when we talk of over valuation and under
valuation of stocks. We imply that a stocks price is certain to return to the intrinsic value.
According to Bernstein, Galton transformed the notion of probability from a static
concept based on randomness and the Law of Large Numbers into a dynamic process in
which the successors to the outliers are predestined to join the crowd at the centre.

In the late 19th century, many advances were made in statistical techniques including the
standard deviation, correlation coefficient and the chi square test. In 1893, Karl Pearson
introduced the concept of standard deviation. In 1897, he developed the concept of
correlation coefficient. And in 1900, he presented the idea of the chi-square distribution,
useful for understanding the similarity of different populations. For example, marketers
would find the test useful in determining whether the preference for a certain product
differs from state to state or region to region. If a population is classified into several
categories with respect to two attributes, the chi-square test can be used to determine if
the two attributes are independent of each other. The chi square test facilitates business
decision making in the face of uncertainty. It is a handy tool for mitigating business risk
though it is less used in the world of financial risk.

In 1908, William Gosset presented his work on the t distribution. The t distribution is
typically used for estimation whenever the sample size is less than 30 and the population

21
 22

standard deviation is not known. A t distribution is lower at the mean and fatter at the tails
than a normal distribution. The fat tails of the distribution make it useful in some risk
measurement situations, where the uncertainty is high.

From 1915, another period of development of statistical theory began, led by people like
R A Fisher. They worked on sampling theory, development of distributions of many
sample statistics, principles of hypothesis testing and analysis of variance. Analysis of
variance is a technique to test the equality of three or more sample means and thus make
inferences as to whether the samples come from populations having the same mean.
Essentially, in this technique, the means of more than two samples are compared. In
1925, Fisher published his book, Statistical Methods for research workers, the first
textbook presentation of the analysis of variance.

Yet another period of development of statistical theory began in 1928. Led by Jerzy
Neyman and Egon Pearson, the work of this period included concepts such as Type II
error19, power of a test and confidence intervals. Statistical quality control techniques
were also developed during this period.

In 1939, Abraham Wald developed statistical decision theory. This is useful in situations
where the decision maker wants to reach an objective, there are several courses of action
each having a certain value, events are beyond the control of the decision maker and there
is uncertainty regarding which outcome or state of nature will happen. Essentially,
managers decide among alternatives by taking into account the financial implications of
their actions.

Frank Knight, an economist at the University of Chicago published a book Risk,

Uncertainty and Profit, in 1921, that dealt with decision making under uncertainty.
Knight attempted to draw a distinction between uncertainty and risk: Uncertainty must
be taken in a sense radically distinct from the familiar notion of risk, from which it has
never been properly separatedIt will appear that a measurable uncertainty, or risk
proper is so far different from an unmeasurable one that it is not in effect an uncertainty
at all. Knight argued that it was difficult and not always appropriate to apply
mathematical techniques for forecasting the future. He was also doubtful whether the
frequency of past outcomes could be any guide to the future. As Knight put it: (Any
given) instance is so entirely unique that there are no others or not a sufficient number
to make it possible to tabulate enough like it to form a basis for any inference of value
about any real probability in the case we are interested in.

In 1921, the famous economist John Maynard Keynes compiled a book, A treatise on
probability. Like Knight, Keynes was not in favour of taking decisions based on the
frequency of past occurrences. He felt that there was no certainty an event would occur in
the future just because a similar event had been observed repeatedly in the past.

19
The assumption being tested is called the null hypothesis. Rejecting a null hypothesis when it is true is
called a Type I error and accepting it when it is false called a Type II error.

22
 23

In the decades that followed, understanding of risk and uncertainty advanced in the form
of game theory. The utility theory of Daniel Bernoulli had assumed that individuals made
their choices in isolation. Game theory, on the other hand, accepted that many people
might try to maximise their utility simultaneously. The true source of uncertainty lay in
the intentions of others. Decisions were made through a series of negotiations in which
people tried to minimise uncertainty by trading off what others wanted with what they
themselves wanted. Since the potentially most profitable alternative often led to very
strong retaliation by competitors, compromises made sense.

John von Neumann, who invented game theory first presented a paper on the subject in
1926. Later, Von Neumann teamed up with German economist Oskar Morgenstern and
published a book, Theory of Games and Economic Behaviour. They advocated the use of
mathematics in economic decisionmaking.

In 1952, Harry Markowitz published an article called Portfolio Selection in the Journal
of Finance. The article brought Markowitz the Nobel Prize for Economics in 1990.
Markowitzs key insight was the important role of diversification. The return on a
diversified portfolio of stocks is equal to the average of the rates of return on individual
holdings but its volatility is less than the average volatility of its individual holdings. So,
instead of going for a killing by investing in a single stock, investors could decrease their
risk, by diversifying. Markowitz used the term efficient to describe portfolios that offered
the best returns for a given risk. Each efficient portfolio gives the highest expected return
for any given level of risk or the lowest level of risk for a given expected return. Rational
investors can choose the portfolio that best suits their appetite for risk. Later, William
Sharpe developed the Capital Asset Pricing Model which explained how financial assets
would be valued if investors religiously followed Markowitzs instructions for building
portfolios. Sharpe too won the Nobel Prize in 1990.

As we saw earlier in the chapter, two Israeli psychologists, Daniel Kahneman and Amos
Tversky, pioneered the development of behavioral finance. They conducted in-depth
research into how people managed risk and uncertainty. Their Prospect theory, which
evolved in the mid-1960s, discovered behavioural patterns that had not been recognised
by proponents of rational decision making. Kahneman and Tversky argued that human
emotions and the inability of people to understand fully what they were dealing with
stood in the way of rational decision making. One of the most important insights from
Prospect theory was the asymmetry between decision-making situations involving gains
and those involving losses. Where significant sums were involved, most people rejected a
fair gamble in favour of a certain gain.

When Kahneman and Tversky offered a choice between an 80% chance of losing $400,
and a 20% chance of breaking even and a 100% chance of losing $300, 92% of the
respondents chose the gamble, even though the expected loss at $320 was higher. But
when they had to choose between an 80% chance of winning $400 and a 20% chance of
winning nothing and a 100% chance of winning $300, 80% of the respondents preferred
the certain outcome.

23
 24

According to Tversky: Probably the most significant and pervasive characteristic of the
human pleasure machine is that people are much more sensitive to negative than to
positive stimuli Think about how well you feel today and then try to imagine how
much better you could feel There are a few things that would make you feel better, but
the number of things that would make you feel worse is unbounded.

Exhibit 1.11
Evolution of Analytical Risk Management tools

1938 Bond duration

1952 Markowitz mean variance framework
1963 Beta
1966 Multiple factor models
1973 Black Scholes, Greeks
1983 Risk adjusted return on capital
1986 Limits on exposure by duration
1988 Limits on Greeks
1992 Stress testing
1993 Value-at-Risk
1994 Risk Metrics
1997 Credit Metrics
1998 Integration of credit & market risk
2000 Enterprise wide risk management
Source: Philippe Jorion20, Value at Risk: the new benchmark for managing financial risk.

Kahneman and Tversky coined the term failure of invariance to describe inconsistent
choices when the same problem is expressed in different ways. For example, the way a
question is framed in an advertisement may persuade people to buy something with
negative consequences. In a 1992 paper summarising the advances in Prospect Theory,
Kahneman and Tversky commented: Theories of choice are at best approximate and
incomplete Choice is a constructive and contingent process. When faced with a
complex problem, people use computational shortcuts and editing operations.

Even as efforts continued to develop a better understanding of risk and new risk
management techniques, the environment changed dramatically in the 1970s and 1980s.
Financial deregulation, inflation, volatility in interest and exchange rates and commodity
prices all combined to create an environment where the conventional forms of risk
management were ill equipped. US dollar long-term interest rates, which had been in the
range 2-5% since the Depression, rose to 10% by the end of 1979 and to more than 14%
by the autumn of 1981. Economic and financial uncertainty also had an impact on
commodity prices. The term Risk Management became more commonly used in the
1970s. The first educational qualifications in risk management were provided in the US
in 1973. The US Professional Insurance Buyers Association changed its name to the Risk
and Insurance Management Society (RIMS) in 1975.

20
McGraw Hill, 2007.

24
 25

In the early 1970s, Fischer Black and Myron Scholes completed the development of their
famous option pricing model. Robert C Merton made important additions to the model.
The paper submitted by Black & Scholes was rejected by some reputed journals before
being published in the May/June 1973 issue of the relatively unknown publication, The
Journal of Political Economy. Black and Scholes constructed a risk free portfolio that
replicated the pay offs of an European call option. By equating the return on the portfolio
with the risk free return and by making suitable assumptions about the distribution of
stock prices, they were able to set up a differential equation and develop their famous
model. Merton played a key role in solving the differential equation.

As stock options began to be traded at the Chicago Board of Exchange and electronic
calculators came into the market, the Black Scholes Model found rapid acceptance. The
model made a number of simplifying assumptions. The stock paid no dividends during
the options life. Options were of the European type. Markets were efficient. No
commissions were charged. Interest rates remained constant and known. Returns were
lognormally distributed.

In 1973, Merton relaxed the assumption of no dividends. Three years later, Jonathan
Ingerson relaxed the assumption of no taxes and transaction costs. In 1976, Merton
removed the restriction of constant interest rates. For their pioneering contribution,
Scholes and Merton won the Nobel Prize in 1997. Unfortunately, Black died before the
award was announced. Even though Black did not win the Nobel Prize, he played a
stellar role in taking many academic concepts to Wall Street. Closely associated with
Goldman Sachs, Black played a crucial role in strengthening that investment banks
quantitative abilities.

Even in the late 1980s, despite the several advances made and the development of
exciting computational techniques, risk management remained unsystematic in large
companies. The establishment of risk management departments in the late 1980s and
early 1990s was mainly to cut costs. Non financial risk management essentially meant
managing insurable risks such as physical hazards and liability risks.

Meanwhile, the use of derivatives by corporates, banks and speculators increased,

resulting in some classic cases of misuse and fraud. Between 1984 and 1995, the actions
of trader, Toshihide Iguchi, while trading in US bonds, cost Daiwa Bank more than $1
billion. Due to unauthorised dealing by Peter Young, Deutsche Morgan Grenfell lost a
similar amount. Three famous case studies Metallgesellschaft, Barings and Sumitomo,
merit a more detailed examination.

Metallgesellschaft offered customers contracts to supply heating oil and gasoline over a
5/10 year period at a fixed price. Customers could exit the contract if the spot price rose
over the fixed price in the contract. Then the company would pay the customer half the
difference between the futures prices and the contract price. Customers would exercise
the option if they did not need the product or if they experienced financial difficulties.
These contracts essentially created for Metallgesellschaft a short position in long term
forward contracts. To hedge this exposure, the company bought futures contracts with

25
 26

the same expiry date. Prior to the delivery, the firm would liquidate the futures and buy
another set of futures with longer expiration. Metallgesellschaft had to use such a strategy
because there were no alternatives in the forward market and long term futures contracts
were illiquid. Unfortunately, the company incurred losses on its futures positions for
which margin calls had to be met immediately. Whereas the gains on the customer
contracts would not be realized for years. Thus, even though the positions were
fundamentally sound and hedged, the company ran into funding liquidity risk.

In 1995, Barings, Britains oldest merchant bank went bankrupt because of the risky deals
of a reckless trader, Nick Leeson. The problems at Barings were the result of poor checks
and balances. Leeson succeeded in grossly misrepresenting his situation. In 1994,
Leeson lost an estimated $296 million but reported a profit of $46 million to the
management. Leesons trading had two broad planks selling straddles on Nikkei 225
and taking advantage of the different prices of Nikkei futures contracts trading on
different exchanges. Later, Leeson shifted to a speculative long position on Nikkei
futures. When the Nikkei plunged, following the Kobe earthquake of January 1995,
Leesons losses mounted. Leeson was able to get away with his erratic behaviour
because he was in charge of both the front office and the back office. He used his clout to
ensure that Barings top management did not come to know about his activities.

The actions of Yasuo Hamanaka, who tried to manipulate copper prices cost Sumitomo
Corporation dearly. Hamanaka took a long position in futures contracts and
simultaneously purchased copper in the spot market. His aim was to establish a
stranglehold on the copper market and create an artificial shortage so that the price of
copper would have to go up. People with short positions would have to pay a large
premium to unwind their positions. Hamanaka also sold put options. But plummeting
copper prices resulted in a $2.6 billion trading loss and a $150 million fine for Sumitomo,
from the Commodity Futures Trading Commission. Lack of proper internal controls had
cost Sumitomo dearly.

From the mid-1990s, a new approach to risk management began to take shape in many
corporates. The focus shifted from external hazards to business risks. Risk management
also attempted to become more proactive and to ensure better cross-functional
coordination. The range of risks companies faced also increased significantly. Branding,
mergers and acquisitions, succession planning, intellectual property rights and antitrust
rules are all areas where sophisticated risk management has become crucial in recent
times.

Thus, we have come a long way in our attempts to develop new and more sophisticated
techniques of dealing with risk. Yet, as Bernstein puts it 21, mathematical innovations are
only tools. And tools must be handled carefully. The more we stare at the jumble of
equations and models, the more we lose sight of the mystery of life which is what risk
is all about. Knowing how and when to use these tools is the introduction to wisdom.
The sub prime crisis has adequately demonstrated that if mathematical models are
mechanically used without exercising judgment and intuition, the result can be disaster.
21
Financial Times Mastering Risk, Volume I.

26
 27

In other words, there is no magic formula yet available to eliminate risk. No model will
be able to predict the future correctly. Managers will continue to be respected for their
intuitive skills. But the aim of risk management is to ensure that intuition is backed by
numbers wherever possible.

=========

References:
1. Peter F Drucker, Managing for results, William Heinemann, 1964.
2. F Milliken, Three types of perceived uncertainty about the environment: State, effect and
response uncertainty, Academy of Management Review, 1987, Vol. 12, pp. 133-143.
3. O E Williamson, Transaction Cost Economics, Handbook of Industrial Organization, 1989,
Volume I, pp. 135-182.
4. Robert S Kaplan and David P Norton, The Balanced Scorecard Measures that drive
performance, Harvard Business Review, JanuaryFebruary, 1992, pp. 71-79.
5. Kenneth A Froot, David S Scharfstein and Jeremy C Stein, A framework for risk
management, Harvard Business Review, November December, 1994, pp. 91102.
6. J. C Cicchetti, J A Dubin, A Microeconometric analysis of risk aversion and the decision of
self insure, Journal of Political Economy, Vol. 102, 1994, pp. 169-186.
7. Shlomo Benartzi, Richard Thaler, Myopic Loss Aversion and the Equity Premium Puzzle,
Quarterly Journal of Economics, Vol. 110.1, 1995, pp. 73-92.
8. Mathew Bishop, Corporate Risk Management Survey, The Economist, February 10, 1996.
9. Heidi Deringer, Jennifer Wang and Debora Spar, Note on Political Risk Analysis, Harvard
Business School Case No. 9-798-022, September 17, 1997.
10. Patric Wetzel and Oliver de Perregaux, Must it always be risky business? The McKinsey
Quarterly, 1998, Number 1.
11. Peter L Bernstein, Against the Gods, John Wiley & Sons, 1998.
12. Robert Simons, How risky is your company? Harvard Business Review, May June 1999,
pp. 85 94.
13. Clayton M Christensen and Michael Overdorf, Meeting the challenge of disruptive change,
Harvard Business Review, March April, 2000, pp. 66-76.
14. Guido A Krickx, The relationship between Uncertainty and Vertical Integration,
International Journal of Organizational Analysis, Issue 3, 2000, pp. 309-329.
15. Forest L Reinhardt, Down to Earth, Harvard Business School Press, 2000.
16. N Barberis, M Huang, T Santos, Prospect Theory and Asset Prices, Quarterly Journal of
Economics, Vol. 116, 2000, pp. 1-53.
17. The new enemy, The Economist, September 15, 2001, pp. 15-16.
18. Taking stock, The Economist, September 22, 2001, p. 59.
26. Chris Lewin Refining the art of the probable, Financial Times Mastering Risk
Volume I, 2001, pp. 35-41.
27. Kiriakos Vlahos, Tooling up for risky decisions, Financial Times Mastering Risk
Volume I, 2001, pp. 47-52.
28. Peter L Bernstein, The enlightening struggle against uncertainty, Financial Times
Mastering Risk Volume I, 2001, pp. 5-10.
29. Enterprise Risk Management Implementing New Solutions, The Economist
Intelligence Unit Research Report 2001.
30. Dan Borge, The Book of Risk, John Wiley & Sons, 2001.
31. N Barberis, R Thaler, A Survey of Behavioral Finance, Working Paper, September 2002.

27
 28

32. Brian W Nocco, Rene M Stultz, Enterprise Risk Management Theory and Practice,
Journal of Applied Corporate Finance, Fall 2006.
33. John Fraser, Betty Simkins, Ten Common Misconceptions about Enterprise Risk
Management, Journal of Applied Corporate Finance, Fall 2007.
34. Philippe Jorion, Value-at-risk: The new benchmark for managing financial risk, McGraw
Hill, 2007.
35. Barbara Kiviat, Reassessing risk, Time, December 22, 2008, pp. 47-49.
36. Niall Ferguson, The Ascent of Money, Allen Lane, 2008.
37. Patricia Pearson, The case for pessimism, BusinessWeek , August 24/32, 2009, p. 66
38. Aswath Damodaran, Strategic Risk Taking: A Framework for Risk Management, Wharton
School Publishing, 2008.
39. Credit Suisse Annual Report 2008.
40. Deutsche Bank Annual Report, 2008.
41. William D Cohan, The rage over Goldman Sachs, Time, August 31, 2009, pp.22-26.

28