Where Do We Go From Here?

1. Where Do We Go From Here? Penny Cagan Managing Director

2. Where We Have Come From

3. 2008: A year of great volatility March 2008: Bear Stearns is acquired by JP Morgan in a transaction orchestrated by the US government July 2008: US Federal government seizes IndyMac (largest thrift to fail in US history) Sept. 7, 2008: US government takes over Freddie Mac and Fannie Mae Sept. 14, 2008: Bank of America announces it will acquire Merrill Lynch Sept 15, 2008: Lehman Brothers files for bankruptcy Pieter Bruegel the Elder, The Fall of the Rebel Angels

4. 2008: A Year of Great Volatility Sept. 16, 2008: US government announces $85 billion emergency aid package for AIG Sept. 18, 2008: Federal Reserve and central banks in Asia and Europe pump up to $180 billion into money markets. US Congress considers $700 billion facility to buy bad debt from banks. Sept. 19, 2008: US government announces that it will insure all money market funds. The SEC bans short selling of shares in 799 financial stocks. Sept. 22, 2008: Goldman Sachs and Morgan Stanley announce they have requested a change in their status to Bank Holding Companies, regulated by Federal Reserve Pieter Bruegel the Elder, Landscape with the Fall of Icarus

5. Where Risk Lies • Underwriting of new loans: Credit Risk (loan quality) & OpRisk(documentation, background check, integrity of loan process) • Securitization: Reputation & OpRisk (mis-selling, valuation, investor issues) & Liquidity Risk (cash shortages) • Investor: Credit, Market & OpRisk (mark-to-market issues, what are securitized loans worth when they are sold in volatile markets, will the investment pay off, what’s under the hood of structured products) • Market Reactions: Market Risk, OpRisk (increased volatility leads to behavior that can increase oprisk, such as unauthorized trades, questionable valuations, processing issues), Credit Risk (bankruptcies can occur if investors, issuers and packagers can not raise funds.)

6. Events by Trigger Source: Algo FIRST

7. Events by Trigger Source: Algo FIRST

8. The Bezzle “At any given time there exists an inventory of undiscovered embezzlement in - or more precisely not in - the country's business and banks. This inventory - it should be called the bezzle. It also varies in size with the business cycle." from “The Great Crash: 1929” by John Kenneth Galbraith.

9. Procylicality of Fraud & Market Practice Issues • Supply of fraud is correlated with supply of credit • Access to credit allows for the continuance of both fraud and gray-matter market practice issues • Corporations push the boundaries when credit is available in terms of compensation, disclosure, client relationships, profit taking and financial reporting • Enron, Worldcom, and Madoff frauds initiated during bubble and uncovered during retraction • The absence of credit during a downturn results in uncovering of frauds

10. December 2008: Bernard Madoff $50 billion Ponzi Scheme WGZ $230m UAT Enron$2.2 billionfraud AIB Allfirst$691m UAT Vix Daily Closing Prices Hamilton Bank$130m fraud Codelco $170m UAT BankBoston$73m fraud Kidder Peabody/J. Jett $350m UAT SocGen $7.2bUAT Barings $1.3 billionUAT Calyon $247mUAT CBOE Volatility Index,1990-2008, vs. events in the FIRST database Source: CBOE, Bloomberg and FIRST

11. A Gallery of Rogues: Bernard Madoff and Robert Stanford Bernard Lawrence "Bernie" Madoff (born April 29, 1938 ) is an American businessman and former chairman of the NASDAQ stock exchange. He founded the Wall Street firm Bernard L. Madoff Investment Securities LLC in 1960 and was its chairman until December 11, 2008, when he was charged with perpetrating what may be the largest investor fraud ever committed by a single person. • Robert Alan Stanford, charged with running $9.2 billion investment fraud • Sold $8 billion of Certificates of Deposit through Stanford International Bank, based in Antigua • Promised double-digit returns over the past 15 years • Bank claimed $51 billion in deposits and assets under management, with more than 70,000 clients in 140 countries • Possible money laundering charges pending

12. Largest Losses from Credit Crisis Source: Algo FIRST

13. Product Types Behind Subprime losses Source: Algo FIRST

14. The Opportunity: OpRisk at the Core of the Solution We will see a fundamental re-design of risk management: Operational Risk provides the governing framework IN: Integrated. Consistent. Actionable. Non-deterministic. OUT: Silos, automatic models, compliance running on auto-pilot Categorizations have become meaningless! Operational risk is the driver for change

15. Largest Bank Failures Source: Algo FIRST

16. Control Failings Behind Bank Failures Source: Algo FIRST

17. Product Types Behind Bank Failures

18. Where We Came From: Five Deadly Sins Lack of care for stakeholders Automatic approach Unknowns ignored Silos accepted Risk and return managed separately Domenico di Michelino, La commedia illumina Firenze

19. 1. Lack of Care for Stakeholders Short-term earnings culture threatened shareholder value Failure to put clients’ interests firstFiduciary duties became secondary Compensation Community Role Pieter Bruegel the Elder, The Fall of the Rebel Angels

20. 2. Automatic Approach Perfecting standard models Firms that experienced more significant problems tended to apply a mechanical risk management approach. Senior Supervisors Group (2008) The tendency to overly formalize arcane aspects of an analysis often detracts from the bigger picture. Corrigan Report (2008) Pieter Bruegel the Elder, Parable of the Blind

21. 3. Unknowns ignored Methodology can convey a false sense of precision All models use assumptions and assumptions can have a material impact on the model outcomes. However, most models do not specifically acknowledge what assumptions they are making. Federal Reserve Bank of New York (2008) Pieter Bruegel the Elder, The Adoration of Kings

22. 4. Silos Accepted The existence of organizational silos appeared to be detrimental to performance during the turmoil. Business areas [made] decisions in isolation and in ignorance of other area’s insights. Senior Supervisors Group (2008) Pieter Bruegel the Elder, The Tower of Babel

23. 5. Risk and Reward Separated Pursuing returns without managing risk Firms that recorded relatively larger unexpected losses tended to champion the expansion of riskwithout commensurate focus on controls. Senior Supervisors Group (2008) Pieter Bruegel the Elder, Gluttony

24. Where We Can Go From Here: Five Virtues Focus on the Stakeholders Acknowledge uncertainty transparently Imagine and Challenge assumptions Manage risk at the enterprise level Manage risk and return proactively Pieter Bruegel the Elder, Fortitude

25. 1. Focus on the Stakeholders Develop a culture of risk governance Risk management must rely heavily on judgment, communication and coordination. This culture of governance will help to break down the silo mentality. It [requires] rigorous and continuous attention at the highest levels. Corrigan Report (2008) Pieter Bruegel the Elder, Justice

26. 2. Acknowledge Uncertainty Risk is more than a single number [We] must recognize the limitations of mathematical models. Corrigan Report (2008) Managers at better performing firms relied on a wide range of measures of risk. Senior Supervisor Group (2008) Pieter Bruegel the Elder, Prudence

27. 3. Imagine. Challenge Assumptions Firms [must] think creatively about how stress tests can be conducted. Corrigan Report (2008) Firms that tended to avoid significant challenges assessed risk positions drawing on different underlying assumptions. Senior Supervisors Group (2008) Discover the Unknown, Don’t Perfect the Known

28. 4. Manage Risk at the Enterprise Level Dismantle silos Firms that understoodquickly the risk they faced relied on information from many parts of their businesses. Better performing firms were able to integrate their measures of market risk and counterparty risk across businesses. Senior Supervisors Group (2008) Institute of International Finance (2008) Pieter Bruegel the Elder, The Tower of Babel

29. 5. Manage Risk (and Return) Pro-actively The need for speed [Firms] must have the capacity to monitor risk concentrations as well as exposures to institutional counterparties in a matter of hours and provide effective and coherent reports to senior management. Corrigan Report (2008)

30. The Next Wave: A Prediction Black Swans will happen • There will be more risk-related regulation: Recent G20 and BIS actions are just a start • Comprehensive and active ERM is “back” • Assumptions, models and results will become context specific • Client-centric financial innovation is here to stay Pieter Bruegel the Elder, The Battle about Money

31. The Next Wave: A Hope Think! • Imagine. Explore what you don’t know • Challenge your assumptions • Communicate, don’t “report” • Use sound judgment Risk management = Decision making under uncertainty Pieter Bruegel the Elder, Hope

32. Where do we go from here OpRisk Best Practices is part of the solution • Manage risk on a firm-wide basis and overcome silos • Integrate risk identification, risk and self assessments, monitoring and testing of controls within the enterprise-wide risk framework • Look at all material risks together, and not be limited to market, credit, liquidity and operational risk • Understand assumptions and what happens if assumptions fail • Integrate scenario approaches within overall framework • Lobby to change an organization’s culture • Supplement quantitative tools with qualitative judgment

33. Thank you for your time For further information contact: Penny Cagan Managing Director penny.cagan@algorithmics.com 212-612-7853