Risk and Risk Management Basics - Chapter 2 Retelling
Book: Structured Finance and Insurance: The ART of Managing Capital and Risk Author: Christopher L. Culp Publisher: Wiley Finance, 2006 ISBN: 978-0-471-70631-1
Chapter 2 is about risk. Not a specific type of risk. Not a specific risk model. Just: what is risk, how do we categorize it, and what can companies actually do about it?
Culp opens with a great observation. Until the early 1990s, most people defined risk the same way Justice Potter Stewart defined pornography: “I’ll know it when I see it.” The insurance world had its own vocabulary. The derivatives world had its own vocabulary. And the two groups could barely talk to each other. A meaningful conversation about risk was more likely between a corporate treasurer and a Jack Russell terrier than between insurance and derivatives salespeople.
That’s funny, but it’s also a real problem. When two industries that are essentially doing the same thing can’t communicate, the companies they serve pay the price.
Financial Risks vs. Nonfinancial Risks
Culp splits risks into two big buckets.
Financial risks are risks where the size of the loss depends on the movement of financial asset prices. There are five main types:
- Market risk: changes in interest rates, exchange rates, commodity prices, equity prices. Also includes “fraternity row” sensitivities like delta, gamma, vega, theta, and rho.
- Funding risk: not having enough cash when you need it. This is different from market risk because it’s about cash flow timing, not present value.
- Market liquidity risk: markets get so volatile that you can’t exit or hedge a position at a reasonable price.
- Credit risk: someone who owes you money doesn’t pay. This comes in four flavors: presettlement risk (they default before the deal settles), settlement risk (they default during settlement), migration risk (the market just thinks they’re more likely to default, so your claim loses value), and spread risk (everyone’s credit looks worse).
- Legal risk: a contract you thought was enforceable turns out not to be.
The credit risk section has a great example involving Wolfram, Tannhauser, and a lyre, which made me smile. It’s a medieval-themed illustration of how different types of credit losses work, and it’s surprisingly effective.
Nonfinancial risks are called perils, accidents, and hazards. A peril is a situation that can cause a loss (like workplace injuries). An accident is a specific negative event arising from a peril (someone opens a valve they shouldn’t). A hazard is something that makes the peril more likely (drugs, faulty equipment, bad weather).
Types of perils include production risks (losing customers, supply chain failures, reputation damage), operational risks (process failures, fraud, settlement errors), and then all the physical and environmental stuff like fires, floods, and earthquakes.
I found the production risk discussion interesting. Culp points out that customer loss is the real core risk of any business. An airline worries about losing customers just like an online bookstore does. If demand shifts or substitutes become attractive, you’re in trouble regardless of your industry.
Core vs. Noncore Risks
This distinction is huge and comes back constantly throughout the book.
Core risks are the risks a firm is in business to bear. These are the risks that generate the company’s returns above the risk-free rate. An airline’s core risk is flying planes without crashing them and selling seats. A bank’s core risk is credit risk on its loan portfolio.
Noncore risks are risks the firm is exposed to but doesn’t need to keep. The airline is exposed to jet fuel price risk, but that’s not really what the airline is in business to do. Some airlines hedge their fuel costs, treating fuel prices as noncore. Others don’t, treating fuel as part of their business.
Here’s what I find interesting about this. The core/noncore distinction is fundamentally subjective. It’s based on what the firm thinks it has an informational advantage about. And perceptions can be wrong. Businesses fail all the time because they overestimated their own expertise.
Still, every firm needs to make this call. Classify your risks, decide which ones are core, and figure out what to do with the rest.
Three Things You Can Do About Risk
Culp presents a clean framework for risk management decisions. For any risk, a firm has three choices.
Retain it. Keep the risk. This can be planned (you’ve decided this risk is worth bearing) or unplanned (you didn’t know the risk existed). If you retain a risk, you might fund the retention (set aside money in advance or arrange to borrow after a loss) or leave it unfunded (just pay out of pocket when losses happen).
Neutralize it. Reduce or eliminate the risk without involving another party. You can do this through risk reduction (better technology, prevention, maintenance inspections) or risk consolidation (diversification, basically). The central limit theorem is your friend here. When you combine many different risks in one portfolio, the overall loss distribution approaches normal, making it easier to estimate expected losses.
Transfer it. Shift the risk to someone else. This requires at least one willing counterparty.
Risk Transfer Deserves a Closer Look
Culp spends a lot of time on risk transfer because it’s central to the book’s themes. Three dimensions help you understand any risk transfer arrangement:
Indemnity vs. parametric. An indemnity contract reimburses you for actual damage. Insurance works this way. A parametric contract pays based on the movement of some market variable. Derivatives work this way. Both can be effective, but they have different trade-offs.
Limitation of liability. Insurance can never be a source of net profit (the most you can get is your actual loss) and can never create a new liability. Options are similar. But forwards, futures, and swaps can produce huge losses. In theory, those losses should be offset by gains elsewhere. In practice, not always.
Funded vs. unfunded. A funded risk transfer means the cash to cover losses has already been set aside. An unfunded transfer means you’re relying on the counterparty’s ability and willingness to pay. Insurance is almost always unfunded. Derivatives are usually unfunded or partially funded with collateral.
Risk Transfer Specialists
Culp describes what makes a good risk transfer specialist. They’re not necessarily good at bearing risk themselves. Instead, they have:
- Low search costs. Banks and insurers have lots of customers, so they can find offsetting risks more easily than individual firms could.
- Depth of customer information. They know their clients well enough to anticipate risk transfer demands and manage credit risk.
- Creditworthiness. You need to trust that your counterparty will be around to pay. Generally, firms below a single-A credit rating struggle to maintain an active risk transfer business.
- Lots of equity capital. Highly leveraged firms make bad derivatives dealers and insurance providers.
- Good reputation. This business is transactional, one contract at a time, so reputation matters a lot for repeat business.
Insurance companies don’t just keep all the risk they take on. They reinsure large chunks of it. Derivatives dealers try to run matched books. When they can’t match naturally, they use other risk management tools.
Risk Finance: The Other Way
This is a term Culp introduces here and comes back to extensively in Chapter 7. Risk finance is for risks that the firm retains. It’s about making sure you have the cash to survive a big loss.
Preloss finance: Set money aside before anything bad happens. Think of a loss reserve.
Postloss finance: Arrange in advance to borrow money after something bad happens. Think of a line of credit that you can draw on only after a specific loss event.
In both cases, the firm’s shareholders still bear the loss. Risk finance doesn’t change that. It just helps the firm manage the cash flow impact.
This is a subtle but important distinction from risk transfer. With risk transfer, you shift the economic impact to someone else. With risk finance, you keep the loss but smooth out when you actually pay for it.
My Take
I think the most valuable idea in Chapter 2 is the three-way split between retention, neutralization, and transfer. It’s such a clean framework. For any risk, you make a decision: keep it, shrink it yourself, or hand it to someone else. And if you keep it, you decide whether to fund the retention or just deal with it when losses arrive.
The core vs. noncore distinction is also essential. So many bad risk management decisions come from companies treating noncore risks as if they’re core (or the other way around). An oil company that speculates on natural gas instead of hedging it has confused what business it’s actually in.
The vocabulary work in this chapter might seem tedious, but it pays off later. When Culp starts talking about structured finance and ART products, having a shared vocabulary for risk concepts makes everything easier to follow.