Skip to main content
FRM Part 1 · Worked study notes

Country and Operational Risk Basics

Country risk concerns adverse conditions tied to a jurisdiction, including sovereign and transfer risk. Operational risk concerns failures of people, processes, systems or external events. Identify the cause of a loss before choosing a control or hedge.

The method at a glance

  • 01Sovereign risk

    How it works: Assess the government’s ability and willingness to meet obligations.

    Watch for: Assuming every domestic borrower has the same default risk.

  • 02Transfer risk

    How it works: A borrower may have funds but be unable to convert or remit them.

    Watch for: Treating borrower solvency as proof of cross-border payment ability.

  • 03Operational risk

    How it works: Trace the failed process, system, human action or external event.

    Watch for: Using a market hedge as the remedy for a broken payment process.

Original worked example

Solvent borrower, blocked payment

A firm has enough local currency to service a USD loan. New exchange controls prevent conversion and remittance. Separately, a bank outage delays a domestic payment.

  1. STEP 1

    The cross-border restriction is a transfer-risk channel linked to the country.

  2. STEP 2

    The firm’s balance-sheet strength does not eliminate the restriction.

  3. STEP 3

    The unrelated bank outage is an operational disruption requiring recovery and payment controls.

Similar late payments can have different causes. The appropriate mitigations depend on that cause.

Illustrative assumptions and calculations for learning. Not observed market data or an official exam item.

Apply the method and check its limits

Before you start: Borrower default, currency conversion and settlement processes.

Separate borrower, sovereign and transfer channels

A sovereign can fail to meet its own debt obligations. A private borrower can default for firm-specific reasons. Transfer restrictions can prevent an otherwise solvent private borrower from servicing foreign-currency debt. Identify the borrower, payment currency, asset location and legal restrictions before treating a sovereign rating as a complete assessment of the exposure.

Match the control to the failure mechanism

An alternate payment system can help with a technology outage, but it cannot by itself remove a legal remittance prohibition. Conversely, a currency hedge does not restore a failed payments platform. Trace each causal channel, assign the responsible function and verify whether the proposed action addresses the actual constraint.

Country risk is not a single rating

Consider currency mismatches, legal enforceability, political restrictions and correlated local exposures. Insurance, guarantees or diversification may transfer some risks while leaving exclusions and counterparty exposure. In an operational case, distinguish preventive controls from recovery arrangements: preventing an error and restoring a critical service require different evidence.

Work through the topic

Distinguish country, sovereign, transfer and operational risk by tracing the event that prevents a promised payment or service. This is a classification bridge, not a complete country-rating method.

Separate the borrower from the country transmission channel

Country risk concerns adverse conditions associated with an exposure’s country context. Sovereign risk focuses on obligations of a sovereign borrower. A private company can be financially sound and still face payment restrictions, disrupted legal enforcement or a shortage of transferable foreign currency. Conversely, a weak company can default in a stable country. Identify the borrower and the mechanism before selecting a label.

Consider a private exporter that owes a foreign lender one million in a foreign currency. It has enough local-currency revenue to buy that amount at the current exchange rate. A restriction preventing currency conversion or cross-border remittance can nevertheless interrupt payment. This differs from a fall in sales that leaves the company unable to pay even when conversion remains available. The first case emphasizes transfer or convertibility constraints; the second emphasizes borrower credit weakness.

An exposure’s booking location alone may not describe its ultimate economic risk. A borrower, guarantor, collateral asset and source of repayment can sit in different jurisdictions. A guarantee may shift some exposure only if it is enforceable and the guarantor can perform in the adverse state. Map those connections rather than assuming that the address on the contract answers every country-risk question.

Classify the mechanism in an original cross-border lending case

Borrower revenue collapses
Primary mechanism to investigate: Borrower credit deterioration
Evidence needed: Cash flows and debt service
Conversion is restricted
Primary mechanism to investigate: Convertibility or transfer constraint
Evidence needed: Applicable restrictions and payment route
Government misses its own bond payment
Primary mechanism to investigate: Sovereign credit event
Evidence needed: Issuer obligations and payment terms
Payment instruction is corrupted
Primary mechanism to investigate: Operational processing failure
Evidence needed: System records and authorization controls

Distinguish an operational cause from its financial effects

Operational risk arises through failures involving people, processes, systems or external events. An incorrect settlement instruction may cause a missed payment, a fee, a liquidity need and reputational damage. The consequences can cross risk categories, while the initiating control failure remains operational. A useful incident record preserves both the cause and the resulting exposures instead of forcing the whole event into one label.

In an original example, a treasury payment of 500,000 is sent to an incorrect account because a changed beneficiary was not independently verified. The amount sent is an exposure pending recovery; it is not necessarily the final realized loss. If 450,000 is recovered and 8,000 is spent on investigation and remediation attributable to the incident, an illustrative direct-loss total is 58,000 under those stated assumptions. Reporting policies determine the precise recognition and classification.

A control should address the mechanism. Independent beneficiary verification, restricted change permissions and exception review can reduce the chance of this event. A larger capital allocation does not itself correct the payment instruction. Insurance may transfer specified financial consequences subject to terms, but cannot guarantee uninterrupted service or reimbursement for every cost. Keep prevention, detection, response and financial absorption distinct.

Evaluate cross-border dependencies without counting the same loss twice

A country disruption and an operational dependency can interact. Suppose a service provider operates a critical processing center in a location where communications fail. The institution needs to understand the service impact, the provider’s alternate capacity, data availability and the time needed to switch. Merely having a contract with another provider does not establish that the service can continue during a correlated disruption.

Build a short event chain: trigger, affected dependency, service interruption, financial consequence and response. Assign an owner to each response and record the evidence that it can be executed. For a cross-border payment, this could include an alternative payment route, permitted currency conversion and an independently tested manual procedure. Each measure solves a different part of the problem.

When aggregating consequences, distinguish a delayed payment from a permanent loss, and an amount at risk from an amount already lost. The same 500,000 payment should not be counted once as a credit exposure and again as a realized operational loss unless the measures are clearly separated and reconciled. Part II operational resilience develops the service and recovery analysis; the purpose here is accurate classification and transmission logic.

Is every loss during a country crisis a sovereign loss?

No. The sovereign may not be the borrower or the cause of the loss. Separate private credit deterioration, transfer restrictions, market movements and operational disruption. Their interaction matters, but the legal obligor and event mechanism still need to be identified.

Does a recovered payment mean the control worked?

Recovery limits the financial consequence; it does not prove that the preventive control was effective. Review why the incorrect instruction was accepted, how it was detected and whether the recovery depended on circumstances that may not recur.

Try a changed assumption

A solvent exporter has USD receivables, but its bank cannot execute a payment because of a system outage. Is that automatically transfer risk?

Show answer and reasoning

No. In these facts the immediate cause is operational. A government restriction on conversion or remittance would introduce a distinct transfer-risk channel.

Original learning check. No email or account needed.

Can one incident be both country and operational risk?

Yes. A political event may disrupt local infrastructure and payment operations. Trace each channel rather than forcing the whole event into one category.

Sources and scope

Links checked 2026-10-10. GARP establishes exam scope; the technical references support the methods identified below. These are selected study notes and original examples, not complete curriculum coverage or official exam questions.

Prepared by MiloPrep editorial team. MiloPrep is independent of GARP. References do not imply endorsement or independent review of these notes.