Try 10 focused CISI Risk questions on Model Risk, with answers and explanations, then continue with Securities Prep.
| Field | Detail |
|---|---|
| Exam route | CISI Risk |
| Issuer | CISI |
| Topic area | Model Risk |
| Blueprint weight | 3% |
| Page purpose | Focused sample questions before returning to mixed practice |
Use this page to isolate Model Risk for CISI Risk. Work through the 10 questions first, then review the explanations and return to mixed practice in Securities Prep.
| Pass | What to do | What to record |
|---|---|---|
| First attempt | Answer without checking the explanation first. | The fact, rule, calculation, or judgment point that controlled your answer. |
| Review | Read the explanation even when you were correct. | Why the best answer is stronger than the closest distractor. |
| Repair | Repeat only missed or uncertain items after a short break. | The pattern behind misses, not the answer letter. |
| Transfer | Return to mixed practice once the topic feels stable. | Whether the same skill holds up when the topic is no longer obvious. |
Blueprint context: 3% of the practice outline. A focused topic score can overstate readiness if you recognize the pattern too quickly, so use it as repair work before timed mixed sets.
These questions are original Securities Prep practice items aligned to this topic area. They are designed for self-assessment and are not official exam questions.
Topic: Model Risk
A firm’s market-risk model produces a daily VaR figure. During unusually illiquid conditions, the risk committee requires users to consider current market information and document any management overlay rather than rely on the model output alone. This practice is best described as:
Best answer: B
What this tests: Model Risk
Explanation: This describes expert judgement being used alongside a model, not automatic reliance on the model output. A documented management overlay is a model-governance control that recognises models have limits, especially when market conditions differ from normal assumptions.
The core concept is that a model should support decisions, not replace judgement. In the stem, the VaR figure is still used, but users must also consider current information and record any management overlay during illiquid conditions. That is a clear example of expert judgement supplementing model output when the model may be less reliable because market conditions fall outside its assumptions or data history.
A documented overlay is important because it helps ensure:
Independent validation is the closest distractor, but that is a separate control that tests the model itself rather than guiding how a live decision should use model output.
A documented overlay means the model informs the decision, but informed human judgement can adjust for factors the model may not capture.
Topic: Model Risk
A bank has a concentrated portfolio of variable-rate buy-to-let mortgages. Interest rates have risen sharply and arrears are beginning to increase. The risk committee asks for a model that estimates default rates and losses under different future rate paths. What is the main benefit of using such a model?
Best answer: A
What this tests: Model Risk
Explanation: The key benefit of modelling here is forward-looking quantification. By estimating losses under alternative rate scenarios, management can compare actions and make better decisions on pricing, limits and capital before credit deterioration worsens.
Modelling is most useful when it turns uncertain risk drivers into quantified, comparable estimates that support decisions. In this case, the bank has a concentrated variable-rate mortgage book, rates have risen, and arrears are already increasing. A default-and-loss model can show how outcomes may change under different future rate paths, helping the risk committee assess whether pricing, lending limits, provisions and capital remain appropriate.
This is a decision-support benefit: the model helps management test assumptions, compare scenarios and act earlier. It does not guarantee outcomes, remove the need for expert judgement, or eliminate uncertainty. Used properly, a model informs management decisions rather than replacing them.
It helps management quantify how credit risk may change under alternative assumptions and use that information in forward-looking decisions.
Topic: Model Risk
Before a new credit-risk model is put into use, a team separate from the developers tests its methodology, checks data and implementation, challenges key assumptions, and reports weaknesses to the committee that will decide whether the model may be used. Which governance function does this best describe?
Best answer: D
What this tests: Model Risk
Explanation: The function described is independent model validation. It provides effective challenge to the developers by reviewing methodology, data and implementation before a separate body makes the approval decision. That separation is a core governance principle for model risk.
Effective model governance separates development, validation, approval and ongoing monitoring. The described team is not building the model and is not giving the final sign-off for use. Instead, it is independently assessing whether the model is conceptually sound, correctly implemented, and fit for purpose, while identifying limitations and challenging assumptions. That is the role of model validation.
In a strong framework, validation findings are given to the relevant approval body, which then decides whether the model can be used, restricted or remediated. After approval, the model should remain under ongoing oversight through performance monitoring, periodic review and escalation of weaknesses. Internal audit sits further back, providing assurance that the overall model-risk framework and governance are effective. The key distinction is that validation supplies independent evidence and challenge; approval is the governance decision.
It is an independent challenge process that assesses conceptual soundness, implementation and limitations before approval.
Topic: Model Risk
Which statement best reflects sound model-risk governance and challenge?
Best answer: C
What this tests: Model Risk
Explanation: Sound model-risk governance depends on independent validation and continuing challenge. A model can perform well initially yet still fail later because assumptions, data quality, implementation, or use change over time.
The core principle is that model risk is reduced by independent oversight, not by confidence in the model owner or a single approval step. Good governance separates validation from development so that assumptions, methodology, data, implementation, and intended use are challenged objectively. It also requires ongoing performance monitoring, because a model that once appeared reliable may become unsuitable as markets, portfolios, or behaviours change.
Back-testing can be helpful, but it is only one validation tool and does not prove a model is always fit for purpose. Senior management approval supports accountability, but it does not replace technical challenge. The closest distractors confuse useful controls with complete governance; sound model-risk management needs independence, challenge, and continuous review together.
Sound governance requires independent challenge and ongoing monitoring rather than relying on one-off approval or model owners alone.
Topic: Model Risk
A retail bank’s treasury desk funds long-dated mortgage assets with short-term wholesale borrowing. After a market funding shock, rollover of that borrowing is uncertain and corporate customers are expected to draw committed facilities. The CRO wants a model that estimates daily net cash outflows and the bank’s survival horizon. Which model is most appropriate?
Best answer: C
What this tests: Model Risk
Explanation: The scenario is about whether the bank can keep meeting cash obligations if wholesale funding does not roll and committed lines are drawn. That is a liquidity risk question, so a liquidity stress-testing cash-flow projection is the best model.
The core concept is matching the model to the risk being measured. Liquidity risk models focus on the timing of cash inflows and outflows under normal and stressed conditions, including funding rollover failure, drawdowns on committed facilities, deposit withdrawals, and collateral calls. Here, the CRO wants to know daily net cash outflows and survival horizon, which are classic liquidity stress-testing outputs. A market risk model such as VaR would estimate losses from adverse price moves, not cash survival. A credit model using PD, LGD, and EAD would assess borrower default risk, not funding pressure. An operational loss distribution model is designed for process, system, people, or external-event losses. The key takeaway is that funding resilience is measured with liquidity stress models, even when the trigger is a market shock.
It projects stressed inflows, outflows, drawdowns, and funding rollover assumptions to estimate cash shortfalls and survival horizon.
Topic: Model Risk
Senior management uses a portfolio model to compare how a proposed increase in leveraged lending would affect expected loss, earnings volatility and capital usage in both base and stressed conditions. Which main benefit of modelling does this best illustrate?
Best answer: A
What this tests: Model Risk
Explanation: The key benefit shown is forward-looking decision support. The model converts assumptions about a proposed lending change into quantified estimates of loss, volatility and capital usage, helping management compare choices before committing resources.
A core benefit of modelling in risk management is that it provides a structured, forward-looking view of possible outcomes. In the stem, management is not using the model to check whether the model itself is sound, nor to carry out a governance approval step. Instead, it is using the model to estimate how a business decision could affect risk and capital under different conditions, including stress. That is classic decision support: models help firms compare alternatives, assess downside risk, and understand trade-offs before taking action.
Models can inform governance and must be validated and monitored, but those are separate functions. The main benefit here is better-informed decision-making through quantified scenario analysis.
The model is being used to estimate and compare likely effects under different assumptions before a decision is taken.
Topic: Model Risk
A bank uses an internal cash-flow model to set daily liquidity buffers. Its model governance policy states that if the absolute forecasting error is more than 5% in two consecutive months, the model must be escalated for independent validation and re-approval before it is used again for limit-setting.
| Month | Forecast outflow (£m) | Actual outflow (£m) |
|---|---|---|
| Jan | 200 | 198 |
| Feb | 100 | 106 |
| Mar | 100 | 106 |
Based on the policy and the figures, which action best reflects effective model governance?
Best answer: D
What this tests: Model Risk
Explanation: The absolute forecasting errors are 1%, 6% and 6%. Because two consecutive months exceed the 5% trigger, effective ongoing oversight requires escalation for independent validation and re-approval before the model continues to be used for limit-setting.
This is a model-governance trigger identified through ongoing monitoring. The policy does not ask for a net or average signed error; it asks whether absolute error is above 5% in two consecutive months.
February and March both breach the threshold, so the model should be independently validated and taken back through the approval process before it continues to set liquidity limits. The key principle is that model owners may remediate, but validation, challenge and approval must be independent. The closest trap is averaging or netting the monthly errors, which ignores the stated escalation rule.
February and March each have a 6% absolute forecasting error, so the policy trigger is met and independent validation plus re-approval is required.
Topic: Model Risk
A bank’s treasury desk uses a cash-flow model to set internal liquidity limits. The model assumes deposit outflows similar to the last three years, but after a social-media-driven run at a peer bank the bank’s actual outflows exceed the modelled stress. The model’s annual independent validation is three months overdue. Which response best reflects sound model-risk governance and challenge?
Best answer: D
What this tests: Model Risk
Explanation: The model has shown signs of being unreliable in changed market conditions, and its independent validation is overdue. Sound model-risk governance is to escalate, use a prudent overlay, and obtain independent challenge before the model continues to determine liquidity limits.
Model-risk governance is not just about whether a model was once approved; it is about whether it remains fit for purpose when conditions change. Here, actual outflows have exceeded the stressed outputs, which suggests the model’s assumptions or calibration may no longer be appropriate, and the overdue validation weakens assurance further. The best response is to escalate through governance, place a conservative overlay or other usage constraint on the model, and obtain independent validation or targeted review before resetting limits. That keeps decisions prudent while the model is reassessed. Relying on old approval ignores evidence of model weakness, while letting the model owner recalibrate and implement immediately removes independent challenge. A total stop is usually disproportionate when interim controls can manage the risk.
This recognises that assumptions may no longer hold, so the issue should be escalated, reliance constrained, and independent challenge restored before model outputs drive limits.
Topic: Model Risk
A bank values an illiquid note using an approved pricing model. Policy requires escalation for valuation uncertainty if a plausible valuation falls below £10.0m.
Model outputs under plausible inputs
Which conclusion best reflects sound model-risk practice?
Best answer: C
What this tests: Model Risk
Explanation: The model is still useful, but the figures show that the valuation is sensitive to plausible assumptions. Because credible outputs fall below the £10.0m threshold, the result should be treated as an input to judgement and escalated, not relied on mechanically as a single final number.
This tests a core model-risk principle: an approved model is not a substitute for judgement when outputs vary materially under plausible assumptions. Here, the valuation range is £9.5m to £10.4m, and two credible outputs are below the firm’s escalation threshold. That means the bank should not rely only on the base case or on a simple average.
Averaging the results may summarise them, but it does not remove the uncertainty shown by the range.
Plausible input changes push the valuation below the policy threshold, so the model should inform judgement and escalation rather than act as a final answer.
Topic: Model Risk
A bank’s credit trading desk holds a concentrated position in BBB corporate bonds. Its daily VaR model was calibrated during a long low-volatility period and assumes positions can be reduced in normal market liquidity. After a sharp spread widening, the desk is still within its VaR limit, but bid-offer spreads have widened materially. What is the single best response by the risk function?
Best answer: C
What this tests: Model Risk
Explanation: The best answer is to treat the model as a decision aid, not a substitute for judgment. Here, concentration, weaker liquidity, and a regime change mean the VaR output may understate the true risk, so it should be supplemented with stress testing, liquidity assessment, and senior oversight.
This tests a core model-risk principle: a model is useful within its assumptions, but it should not replace informed judgment when conditions move outside those assumptions. In the scenario, the VaR model was calibrated in a benign period and assumes normal liquidity, yet the desk now faces spread widening, poorer market depth, and concentration risk. Those facts mean the reported VaR may no longer capture the risk of exiting or hedging the position.
A sound response is to keep using the model output, but only as one input alongside:
The closest distractor is abandoning the model completely, but that overreacts; the right approach is to supplement, not blindly follow or discard, the model.
The model remains useful, but its assumptions are under strain, so judgment and supplementary analysis are needed before relying on the limit signal.
Use the CISI Risk Practice Test page for the full Securities Prep route, mixed-topic practice, timed mock exams, explanations, and web/mobile app access.
Read the CISI Risk guide on SecuritiesMastery.com, then return to Securities Prep for timed practice.