Risk Accounting
Risk management describes past losses and models possible future events, while Risk Accounting addresses how the current non-financial risk position of an activity can be represented consistently and quantitatively.
Institutional Focus
A disciplined measurement discipline focused on quantifying non-financial exposure in a common unit, establishing clear relationships between activity volumes, controls, and net residual positions.
The Missing Present — Past / Present / Future
Risk Accounting is principally concerned with a consistent quantitative representation of the present state. This focus on the present does not claim that other disciplines provide no current information.
Past
Losses, incidents, audit findings and historical evidence.
Historical Records →
Present
Primary Focus
Current business activity / exposure → mitigation → residual risk.
Risk Accounting is principally concerned with establishing an auditable, common measurement for this operational plane.
Active Measurement →
Future
Scenarios, stress testing and emerging risks.
Prospective Models
Why Measurement Is Difficult
Quantifying non-financial risk poses distinct methodological hurdles because operational environments, control mechanisms, and risk events lack a natural single denomination.
Different activities have different exposures
Transactions, customer interactions, IT systems, and settlement operations each exhibit distinct profiles that resist intuitive cross-activity aggregation.
Business volumes and activity change
Throughput fluctuations directly affect gross exposure in real time, making static point-in-time assessments quickly obsolete.
Controls and mitigation change
The operational effectiveness of internal controls fluctuates due to staffing, technical drift, system updates, and organizational redesign.
Losses are episodic and historical
Direct loss data reflects trailing consequences rather than present conditions, and severe events are infrequent by nature.
Scenario analysis is prospective
Forward-looking stress exercises simulate hypothetical conditions rather than capturing current day-to-day operational execution.
Assessment scores may not share a common quantitative unit
Ordinal scoring models (such as red-amber-green matrices) cannot be added, subtracted, or audited with mathematical consistency.
The Risk Accounting Idea
Risk Units provide a common measurement framework for comparison through time and, where methodologically appropriate, across activities. The conceptual measurement sequence tracks operational exposure into residual positions.
Stage 1
Business activity / exposure
Identified operational volumes, processes, transactions, and system dependencies.
↓
Stage 2
Inherent Risk
Quantified gross exposure calculated before accounting for active internal mitigations.
↓
Stage 3
Mitigation / control effectiveness
Empirical assessment of active controls, represented dynamically through index testing.
↓
Stage 4
Residual Risk
Net remaining operational exposure expressed in standard units for ongoing tracking.
Core Measures
The framework relies on four primary concepts to express operational risk positions without resorting to ordinal ratings or premature financial translations.
Risk Units (RUs)
Represent non-financial exposure in a common measurement denomination.
Inherent Risk (IR)
Gross exposure before controls and mitigation are taken into account.
Risk Mitigation Index (RMI)
An empirical, dynamic, auditable index of control effectiveness expressed as 0–100%.
Residual Risk (RR)
Remaining net exposure after mitigation, represented in RUs.
Detailed computational logic and index formulations are set out on The Method page.
What This Enables
Establishing a consistent measurement basis can support rigorous operational analysis and management decision-making without asserting unverified claims.
Comparability through time
Tracking whether non-financial risk is expanding or contracting across successive operational cycles on an identical baseline.
Aggregation where methodologically valid
Combining risk exposures across distinct operations where shared measurement standards apply, avoiding arbitrary ordinal scoring.
Visibility of changes in exposure and mitigation
Disentangling whether movements in residual exposure stem from changes in operational volume or changes in control performance.
Understanding the relationship between inherent and residual risk
Evaluating the quantitative sensitivity of net exposure to incremental changes in control infrastructure.
Support for management decision-making
Informing resource allocation toward controls that yield the greatest empirical reduction in net operational exposure.
Auditable measurement inputs
Providing testable criteria for internal and external assurance teams, moving beyond subjective narrative questionnaires.
Measurement Is Not the Same as Accounting Recognition
A credible and testable measurement framework does not by itself determine whether or how risk should be recognised in financial accounting. These related disciplines answer fundamentally distinct questions.
Risk measurement
How much operational exposure exists, how effective are active controls, and what is the net risk position expressed in standardized units?
Monetary valuation
What is the economic or cash-equivalent translation of an exposure profile under specific market, regulatory, or operational assumptions?
Accounting recognition
Does an item satisfy standard statutory criteria (such as IAS 37 or ASC 450) for recognition as a liability, asset, or footnote disclosure?
Measurement, monetary valuation, and accounting recognition are related but distinct questions. Do not infer a financial reporting treatment from the existence of a measurement framework.
Evidence and Development
Risk Accounting has associated research and ongoing methodological development. Ongoing testing and documentation are published through the dedicated standards pages.
Research & Evidence
Review formal publications, analytical white papers, and historical empirical validation supporting the measurement methodology.
Development & Standards
Examine open drafts, consultative discussions, and ongoing standards governance work by the Risk Accounting Standards Board.
Understand how Risk Accounting works
Review the underlying arithmetic, operational formulas, and empirical research that support non-financial risk measurement.