Risk Management Practices and Policies › Limitations and Challenges

Despite sophisticated tools and organizational structures, risk management faces inherent limitations that you must acknowledge.

Model risk is pervasive. All risk models simplify reality through assumptions about distributions, correlations, and market behavior. These assumptions often fail precisely when accuracy matters most: during market stress. The well-known limitations of VaR, including its inability to capture tail risk and its potential for gaming, apply to most quantitative risk measures. We should treat model outputs as inputs to judgment, not substitutes for it.

The illusion of precision can be dangerous. Reporting risk to many decimal places creates false confidence in measurement accuracy. A VaR number of $12,345,678 suggests precision that doesn't exist given the underlying assumptions and estimation uncertainty. You must communicate uncertainty around point estimates and help decision-makers understand the range of possible outcomes.

Incentive conflicts complicate implementation. Business units naturally resist constraints on their activities, and traders have strong incentives to characterize their positions as less risky than they may be. You must maintain healthy skepticism and verify claims independently. The challenge is maintaining constructive relationships with business units while preserving independence.

Emerging risks may not appear in historical data. Climate risk, cyber risk, and pandemic risk have limited historical precedent in financial markets, making traditional statistical approaches less reliable. Scenario analysis and expert judgment become essential complements to quantitative models.

Costs of risk management are certain while benefits are probabilistic. Firms pay for risk management infrastructure, hedging costs, and capital held against risk every day. The payoff (avoiding catastrophic losses) occurs only occasionally and counterfactually (what would have happened without risk management). This asymmetry creates pressure to reduce risk management expenditures, particularly when times are good.