Skip to main content

Please enter a keyword and click the arrow to search the site

A theory of operational risk



Publishing details

Working Paper

Authors / Editors

Basak S;Buffa A


Publication Year



We study the dynamic decision making of a financial institution in the presence of a novel implementation friction that gives rise to operational risk. We distinguish between internal and external operational risks depending on whether the institution has control over them. Internal operational risk naturally arises in the context of model risk, as the institution exposes itself to operational errors whenever it updates and improves its investment model. In this case, it is no longer optimal to implement the best model available, thus leaving scope for endogenous deviation from it, and hence model sophistication. We show that the optimal exposure to operational risk may well become decreasing in the level of internal operational risk, which in turn makes the exposure to market risk less volatile. We uncover that financial constraints interact with operational risk, whether internal or external, and prompt the institution to always adopt a more sophisticated model. While such constraints are always detrimental when operational risk is internal, they may be beneficial, despite inducing an excessive level of sophistication, when it is external.


Operational risk; Risk management; Model sophistication; Risk exposure; operational losses; financial constraints


Working Paper

Available on ECCH


Select up to 4 programmes to compare

Select one more to compare
subscribe_image_desktop 5949B9BFE33243D782D1C7A17E3345D0

Sign up to receive our latest news and business thinking direct to your inbox


Sign up to receive our latest course information and business thinking

Leave your details above if you would like to receive emails containing the latest thought leadership, invitations to events and news about courses that could enhance your career. If you would prefer not to receive our emails, you can still access the case study by clicking the button below. You can opt-out of receiving our emails at any time by visiting: or by unsubscribing through the link provided in our emails. View our Privacy Policy for more information on your rights.