Risk Management Failures: Case Studies

Why Study Failures?

The FRM exam devotes significant coverage to historical risk management failures because they illustrate fundamental principles that theory alone cannot teach. Every major failure demonstrates at least one of these patterns:

• Inadequate governance or oversight
• Excessive concentration in a single risk factor
• Model risk — overreliance on quantitative models
• Failure to account for tail risk or liquidity drying up
• Cultural issues where risk warnings were ignored

Barings Bank (1995)

What happened: Nick Leeson, a trader based in Singapore, accumulated massive unauthorized positions in Nikkei 225 futures. When the Kobe earthquake struck and markets crashed, losses exceeded the bank's entire capital. Barings, the UK's oldest merchant bank, collapsed.

Key facts for the exam:

• Leeson was responsible for both trading and settlement (back office). This is a catastrophic failure of segregation of duties (first and second lines of defense collapsed into one person).
• Losses totaled £827 million against capital of only £541 million.
• Management in London received reports showing the Singapore office's outsized profitability but didn't investigate.

Risk management lessons:

1. Operational controls matter — Separation of front office and back office is non-negotiable.
2. Profits that look too good deserve scrutiny — Exceptionally high returns from "low-risk" arbitrage should trigger an investigation, not celebration.
3. Governance failure — The board and senior management did not understand the risks being taken.

Long-Term Capital Management — LTCM (1998)

What happened: LTCM was a hedge fund run by Nobel laureates and former Salomon Brothers traders. They used convergence arbitrage — betting that mispriced spreads would revert to fair value. Their models were highly sophisticated but built on the assumption that historical correlations would hold.

When Russia defaulted on its debt in August 1998, markets panicked. Correlations that were historically near zero spiked to near one — a "flight to quality" meant every spread widened simultaneously. LTCM's portfolio lost $4.6 billion in weeks.

Key facts:

• Leverage ratio at peak was approximately 25:1 ($125 billion in assets on $5 billion in capital)
• LTCM's VaR models assumed normal distributions and stable correlations
• The Federal Reserve organized a bailout by major banks to prevent systemic contagion

Risk management lessons:

1. Correlation is not constant — In a crisis, correlations converge to 1.0. Diversification benefits disappear precisely when you need them most.
2. Leverage amplifies everything — Small percentage losses become existential at 25:1 leverage.
3. Model risk — Models based on historical data assume the future resembles the past. Tail events break this assumption.
4. Liquidity risk — LTCM couldn't unwind positions because their trades were too large relative to the market.

Exam Tip: LTCM is the textbook example of how VaR underestimates risk during stress events. Know why: VaR assumes normality and stable correlations, both of which fail in crises.

Enron (2001)

What happened: Enron used Special Purpose Entities (SPEs) to hide debt and inflate profits. Executives manipulated accounting to show growth while the underlying businesses were losing money. When the fraud was discovered, Enron's stock collapsed from $90 to $0.30.

Key facts:

• Enron's risk management team deliberately misrepresented the firm's financial position
• Arthur Andersen (auditor) was complicit, shredding documents and approving misleading financial statements
• Losses to shareholders exceeded $74 billion

Risk management lessons:

1. Governance breakdown — The board relied on management representations without independent verification.
2. Conflicts of interest — The CFO had personal financial interests in the SPEs, a fundamental violation of fiduciary duty.
3. Auditor independence — Arthur Andersen provided both audit and consulting services to Enron, creating an inherent conflict.
4. Culture of deception — Risk management fails when the culture rewards hiding problems rather than surfacing them.

Bear Stearns and the 2008 Crisis

What happened: Bear Stearns held massive concentrations of mortgage-backed securities (MBS) and collateralized debt obligations (CDOs). When the US housing market declined and subprime defaults spiked, the value of these securities collapsed. A liquidity crisis followed — Bear's counterparties and repo lenders pulled funding, and the firm was acquired by JPMorgan at $2/share (later $10).

Risk management lessons:

1. Concentration risk — Bear Stearns had an outsized exposure to a single asset class (structured credit).
2. Liquidity risk — The firm relied heavily on overnight repo funding. When confidence evaporated, funding disappeared in days.
3. Mark-to-model risk — Many structured products had no liquid market for price discovery, so models determined valuations. The models were wrong.
4. Interconnectedness — Bear's failure threatened the entire financial system because of counterparty exposures across the network.

Common Themes Across All Failures

Exam Approach

1. Know the key facts — For each case, know the approximate loss amount, the primary risk management failure, and the structural weakness.
2. Link to frameworks — GARP wants you to connect each failure to a governance principle, a risk type, or a control deficiency. Don't just memorize the story — explain why it happened using the concepts from other readings.
3. Common question format: "Which of the following best describes the primary risk management failure at [firm]?" — Practice identifying the root cause, not just the symptom.