vaayaa Inclusive Education
Finance risk assessment

Securities Trading and Derivatives Risk Assessment: Valuation, Counterparty and Conduct Controls

A worked example of how a trading desk and its support functions find, score and control the risks in securities and derivatives, from mispriced positions and counterparty default to conduct breaches and weak reconciliations.

Updated November 2026 8 hazards assessed Review every 6 months Highest risk: High to Medium
See the Securities Trading and Derivatives course

Executive summary

This assessment shows how a small securities and derivatives business can find, rate and control the risks that matter most to accurate books, client assets and market integrity. Eight risks were chosen because they are plausible in everyday trading, clearing and compliance work. Valuation errors, counterparty default and trade processing mistakes are the most likely, while unauthorized trading and conduct breaches are less likely but cause serious harm. Each risk is scored before controls and again after existing and added controls. Most risks fall to Medium or Low once controls are in place, but market and liquidity stress stays at Medium because its impact remains large. The first actions are independent price verification, a split of trading and settlement duties, a daily collateral check and a written conflicts register. Every score illustrates method for a teaching case, not a real organization.

Focus area
Securities trading, derivatives and market operations
Setting
Trading and back office of a small to mid-sized broker dealer that holds equities, bonds and exchange traded and over the counter derivatives for clients and its own account
Method
Five by five likelihood and impact risk register

Scope

This assessment covers the front office, middle office and back office of a small trading business, from order entry and pricing to clearing, settlement, collateral, valuation and regulatory reporting. It looks at risks to accuracy, client assets, legal duties and market confidence. It does not give investment advice or trading strategy. Jurisdiction, products, size and systems are assumptions made for teaching only.

Context

The firm has a head of trading, traders, a risk manager, operations staff, a finance team and an IT function. Orders are placed through a trading platform and booked to an order management system, with spreadsheets used for some pricing models and reconciliations. Clearing and custody are handled by third parties. Each risk is scored before controls to show its natural level, then again after the existing controls and the additional controls proposed here.

Objectives, assets and stakeholders

The objective is to trade within approved limits, price positions accurately, settle and report trades on time, protect client and firm assets, meet conduct and reporting duties, and keep the confidence of clients, counterparties and regulators. The assets in scope are client and house positions, cash and collateral, trade and pricing data, the trading platform and the reputation of the desk. Stakeholders include traders, the risk and compliance teams, operations and finance staff, senior management and the board, clients, clearing brokers, custodians, counterparties and the supervising authority. Every risk has one owner role, and the head of risk keeps the register current and reports to the board each quarter.

Risk matrix: before and after controls

Each cell shows hazard numbers placed by likelihood and impact. Compare the two grids to see how controls move each hazard.

Before controls

Inherent risk

Risk before controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant		 2
Minor		 3
Moderate		 4
Major		 5
Catastrophic
5 Almost certain
4 Likely Likelihood 4, impact 3, score 12, high: H05 Likelihood 4, impact 4, score 16, high: H01
3 Possible Likelihood 3, impact 4, score 12, high: H04 H06 H07 Likelihood 3, impact 5, score 15, high: H02
2 Unlikely Likelihood 2, impact 4, score 8, medium: H08 Likelihood 2, impact 5, score 10, high: H03
1 Rare

After controls

Residual risk

Risk after controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant		 2
Minor		 3
Moderate		 4
Major		 5
Catastrophic
5 Almost certain
4 Likely
3 Possible Likelihood 3, impact 3, score 9, medium: H06
2 Unlikely Likelihood 2, impact 2, score 4, low: H05 H08 Likelihood 2, impact 3, score 6, medium: H01 H02 H04 H07
1 Rare Likelihood 1, impact 5, score 5, medium: H03
  • Low 1 to 4
  • Medium 5 to 9
  • High 10 to 16
  • Critical 17 to 25

Hazard register

A summary first, then the detail for each hazard.

Summary of hazards with scores before and after controls
No.HazardBeforeAfterOwner
H01 Mispricing of derivative and illiquid positions 16 High 6 Medium Head of risk
H02 Counterparty default and collateral shortfall 15 High 6 Medium Treasury lead
H03 Unauthorized trading and weak segregation of duties 10 High 5 Medium Head of operations
H04 Conflicts of interest and market conduct breaches 12 High 6 Medium Compliance officer
H05 Trade capture, settlement and reconciliation errors 12 High 4 Low Head of operations
H06 Market and liquidity stress 12 High 9 Medium Head of risk
H07 Cyber intrusion and market data integrity 12 High 6 Medium IT manager
H08 Regulatory reporting, tax and record keeping failures 8 Medium 4 Low Compliance officer
H01

Mispricing of derivative and illiquid positions

Financial Before 16 After 6

Models, inputs or stale market quotes produce prices for swaps, options and thinly traded bonds that differ from fair value, so profit, losses and collateral are misstated.

Who or what is affected: Traders, risk managers, finance staff and clients

Causes

Stale quotes, complex models, unclear inputs and pressure to show profit on illiquid positions.

Consequences

Misstated profit, wrong collateral calls, restated accounts and losses when positions are closed.

Existing controls

  • Trader marks are reviewed by the finance team each month.
  • Models are approved by a committee before first use.

Control gaps

Marks for thinly traded products are rarely tested against an independent source.

Additional controls

  • Prevent: Use independent price sources and documented model validation before any new product is booked.
  • Detect: Compare desk marks with independent prices daily and investigate differences above tolerance.
Likelihood 4 x impact 4 before; 2 x 3 after Owner: Head of risk Target: Within 30 days Early warning: Valuation differences above the agreed tolerance between desk and independent prices.
H02

Counterparty default and collateral shortfall

Financial Before 15 After 6

A clearing broker, bank or swap counterparty fails to meet its obligations, or collateral is not called and received in time, leaving the firm with unpaid exposure.

Who or what is affected: Clients, clearing brokers, custodians and shareholders

Causes

Concentration with a few counterparties, long settlement cycles and margin calls that are disputed or paid late.

Consequences

Unrecovered losses, forced sales at poor prices, client harm and higher funding costs.

Existing controls

  • Netting agreements are signed with each main counterparty.
  • Exposure to each counterparty is reported to management weekly.

Control gaps

Collateral disputes are settled by email with no time limit, so shortfalls can persist.

Additional controls

  • Prevent: Set counterparty limits by credit rating and require daily variation margin on uncleared derivatives.
  • Respond: Hold a contingency plan to close or transfer positions when a counterparty is downgraded.
Likelihood 3 x impact 5 before; 2 x 3 after Owner: Treasury lead Target: Within 45 days Early warning: Collateral calls not met by the agreed time or exposure above the approved counterparty limit.
H03

Unauthorized trading and weak segregation of duties

Operational Before 10 After 5

A trader exceeds limits, books trades outside approved products, or uses a colleague's login, and the same person can enter, confirm and settle the deal, so losses stay hidden.

Who or what is affected: Traders, the desk, clients and the firm's capital

Causes

Pressure to hit targets, shared logins and system rights that are added and never removed.

Consequences

Large unauthorized losses, dismissal, regulatory action and loss of client confidence.

Existing controls

  • Trading limits are set in the platform for each trader.
  • Trade tickets are signed off by a supervisor at the end of each day.

Control gaps

Supervisor sign off is done in bulk, so limit breaches are not checked one by one.

Additional controls

  • Prevent: Remove any combination of entry and settlement rights held by one user and require individual log in.
  • Detect: Run daily reports of trades outside limit, late booking and trades with no matching client order.
Likelihood 2 x impact 5 before; 1 x 5 after Owner: Head of operations Target: Within 45 days Early warning: Trades entered outside approved limits or by users without current trading rights.
H04

Conflicts of interest and market conduct breaches

Legal and compliance Before 12 After 6

Staff trade ahead of client orders, share non-public information, or favor a connected client, which breaches conduct duties and damages market integrity.

Who or what is affected: Clients, colleagues, market participants and the supervising authority

Causes

Access to client order flow, bonus pressure and unclear rules on gifts and outside interests.

Consequences

Fines, client compensation, loss of licences and damage to professional standing.

Existing controls

  • Staff sign a code of conduct each year.
  • Personal dealing in listed securities must be pre-approved.

Control gaps

Personal dealing declarations are collected but not compared with the order book each week.

Additional controls

  • Prevent: Keep a restricted list and a watch list and block orders in those securities for connected staff.
  • Respond: Investigate suspected front running promptly and record the outcome and any reporting decision.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Compliance officer Target: Within 60 days Early warning: Personal dealing or outside interest declarations linked to a security being traded.
H05

Trade capture, settlement and reconciliation errors

Operational Before 12 After 4

Trade details are keyed wrongly, confirmations are missed, or settlement instructions do not match the broker, so trades fail, incur penalties or are booked to the wrong account.

Who or what is affected: Operations staff, clients, brokers and the finance team

Causes

Manual re-keying, changes to standing instructions and time zone differences between markets.

Consequences

Settlement penalties, wrong client positions, cash shortfalls and complaints.

Existing controls

  • Each trade is matched with the broker confirmation the next morning.
  • Settlement instructions are held in a reference table.

Control gaps

Breaks under a set amount are written off without a reason being recorded.

Additional controls

  • Prevent: Use straight through processing with validated fields and block trades with missing settlement details.
  • Detect: Reconcile positions, cash and settlement failures each day and age any open breaks.
Likelihood 4 x impact 3 before; 2 x 2 after Owner: Head of operations Target: Within 30 days Early warning: Unmatched trades or failed settlements open beyond the settlement cycle.
H06

Market and liquidity stress

Financial Before 12 After 9

Sharp price moves or a dry market stop positions from being sold at expected prices, so losses grow, margin calls rise and the firm cannot fund its obligations.

Who or what is affected: Clients, traders, lenders and shareholders

Causes

Concentrated holdings, reliance on one market maker and models that assume normal conditions.

Consequences

Forced sales, margin shortfall, large losses and damage to the firm's funding.

Existing controls

  • Position limits are set for each product and market.
  • Value at risk and stress tests are run each day.

Control gaps

Stress scenarios are not updated after market structure changes and are not tested with the desk.

Additional controls

  • Prevent: Set liquidity limits for thinly traded products and cap concentration in single issuers.
  • Respond: Agree a funding and de-risking plan that names which positions to reduce first.
Likelihood 3 x impact 4 before; 3 x 3 after Owner: Head of risk Target: Within 90 days Early warning: Bid offer spreads or price moves that exceed the stress tolerance for a held position.
H07

Cyber intrusion and market data integrity

Technology and data Before 12 After 6

Phishing, credential theft or a faulty price feed alters quotes, client data or order instructions, leading to erroneous trades, data leaks or a halted platform.

Who or what is affected: Clients, traders, operations staff and the trading platform

Causes

Phishing, reused passwords, unpatched systems and feeds that are not checked before use.

Consequences

Erroneous trades, data loss, client harm and loss of trading capacity.

Existing controls

  • Passwords are required and accounts lock after repeated failed attempts.
  • Market data comes from approved vendors only.

Control gaps

Market data feeds are not compared with a second source before orders are sent.

Additional controls

  • Prevent: Enable multi-factor sign in for all trading and settlement systems and restrict remote access.
  • Recover: Test restoration of the order database from backup each quarter and keep a written recovery plan.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: IT manager Target: Within 30 days Early warning: Repeated failed log ins or price feed values that differ from a second source.
H08

Regulatory reporting, tax and record keeping failures

Legal and compliance Before 8 After 4

Transaction reports, tax withholding, client statements or record retention are late, inaccurate or incomplete, so the firm breaches its duties and misinforms clients.

Who or what is affected: Clients, the supervising authority, tax authorities and the board

Causes

Rules that differ by product and jurisdiction, manual corrections and staff turnover.

Consequences

Penalties, restated client statements, reputational harm and added audit scrutiny.

Existing controls

  • A reporting calendar lists the main deadlines.
  • Transaction reports are checked against trade records each week.

Control gaps

Reports are checked for timing but not for content accuracy at each step.

Additional controls

  • Detect: Test a sample of reports against source trades and record every correction.
  • Respond: Notify the supervising authority of any late or wrong report as the relevant rules require.
Likelihood 2 x impact 4 before; 2 x 2 after Owner: Compliance officer Target: Within 60 days Early warning: Transaction reports rejected or corrected more than once in a month.

Rating method and evaluation

Each risk is rated on two five-point scales. Likelihood runs from Rare to Almost certain, and impact runs from Insignificant to Catastrophic. Multiplying the two gives a score from 1 to 25, which falls into one of four bands: Low from 1 to 4, Medium from 5 to 9, High from 10 to 16 and Critical from 17 to 25. The score is a guide for ordering work, not a measurement. Inherent risk is the score before any controls. Residual risk is the score after the existing and added controls. Impact is judged on financial loss, client harm, time to correct, effect on reported results and damage to market confidence. A risk is never rated down only because it has not yet happened. Anything Critical or High needs senior attention and a dated plan, anything Medium needs routine controls with a named owner, and anything Low is accepted and watched. Ratings are challenged by a second person who did not set them, and by the risk function at each review. A rating is reopened whenever an indicator reaches its escalation threshold.

Likelihood, impact and rating bands

Likelihood

  • 5 Almost certain: Expected to happen in most circumstances.
  • 4 Likely: Will probably happen in many circumstances.
  • 3 Possible: Could happen at some time.
  • 2 Unlikely: Not expected, but it could happen.
  • 1 Rare: Only in exceptional circumstances.

Impact

  • 1 Insignificant: No lasting effect. Handled within routine work.
  • 2 Minor: Small effect that is quickly corrected.
  • 3 Moderate: Noticeable effect that needs managed effort to correct.
  • 4 Major: Serious effect on people, delivery or reputation.
  • 5 Catastrophic: Severe or lasting effect that threatens the whole activity.

Bands (likelihood x impact)

  • Low (1 to 4): Accept and monitor.
  • Medium (5 to 9): Manage with routine controls.
  • High (10 to 16): Senior attention and a treatment plan.
  • Critical (17 to 25): Act first. Do not proceed until reduced.

Monitoring, escalation and review

Review this assessment every 6 months, and sooner when an indicator below reaches its threshold.

Early-warning indicators and escalation thresholds
Indicator to watchEscalate when
Valuation differences above the agreed tolerance between desk and independent prices.Escalate to the head of risk at once when a difference exceeds tolerance, and to the board if it remains open after 5 days.
Unmatched trades or failed settlements open beyond the settlement cycle.Escalate to the head of operations on the same day, and to the head of trading if any item is unresolved after 2 days.
Collateral calls not met by the agreed time or exposure above the approved counterparty limit.Escalate to the treasury lead immediately, and to the risk committee if a limit breach continues beyond one business day.
Trades entered outside approved limits or by users without current trading rights.Escalate to the head of trading and the compliance officer at once, and suspend the user until the position is reviewed.
Personal dealing or outside interest declarations linked to a security being traded.Escalate to the compliance officer before the next order is placed, and record the outcome in the conflicts register.

Contingency arrangements

If a serious event occurs, such as an unauthorized trade, a failed counterparty or a pricing error that moves a large amount, the head of trading limits activity in the affected book and the head of risk is informed at once. Operations confirms open trades and collateral positions with clearing brokers and custodians. The IT manager isolates affected systems and restores data from the latest tested backup. Compliance decides when the supervising authority and clients must be told, as the relevant jurisdiction requires. Client funds are protected through segregated accounts and a funding plan, and staff are briefed early and plainly.

Prioritized action plan

  1. Introduce independent daily price verification for all derivative and illiquid positions, owner head of risk, within 30 days.
  2. Split order entry, confirmation and settlement duties and review trader system rights, owner head of operations, within 45 days.
  3. Run a daily collateral and margin call check with each counterparty, owner treasury lead, within 30 days.
  4. Enable multi-factor sign in and test a restore of the trade database from backup, owner IT manager, within 30 days.
  5. Maintain a written conflicts and personal dealing register checked against open trades, owner compliance officer, within 60 days.

Conclusion

Reliable trading depends on steady habits: independent pricing, split duties, daily reconciliation, collateral checks, a written conflicts register and tested backups. The highest scores sit with valuation, counterparty and processing risks, and each has actions that reduce the residual score. Treat the register as a living record, review it on the stated cycle, and seek qualified advice for any real trading, valuation, tax or regulatory question.

Assumptions and limitations

Assumptions

  • The firm is authorized to deal in securities and derivatives and is supervised by a securities regulator in an unspecified jurisdiction.
  • Traders use a managed trading platform, and market data and pricing models are supplied by approved vendors.
  • Clearing, settlement and custody are outsourced to regulated third parties under written agreements.
  • Products include listed equities, bonds, futures, options and over the counter swaps, all within approved limits.

Limitations

  • The scores are examples for learning and do not describe any real firm, product or market.
  • Securities, derivatives and conduct rules differ by jurisdiction and change over time, so specialist review is needed.
  • This is educational content and is not investment, legal, tax or regulatory advice.

Related frameworks to study

  • Three lines model of risk ownership
  • Internal control framework with control activities and monitoring
  • Value at risk and stress testing concepts
  • Hierarchy of controls
  • Trade lifecycle and reconciliation model

Finance Risk Assessment

China, India, United States, Indonesia, Pakistan, Nigeria, Brazil, Bangladesh, Russia, Japan, Mexico, Philippines, Vietnam, Egypt, Turkey, Germany, United Kingdom, France, Italy, Canada, South Korea, Australia, Spain.

For Learning Reference Only: This assessment demonstrates how risk assessment principles are applied in a practical setting, providing a useful reference for learning and understanding. Actual assessments may be adapted to suit specific site conditions and circumstances.

Keep learning

Study the subject behind this assessment.

Securities Trading and Derivatives course Read the best practices for this course

More Finance risk assessments

Hourly Active: 35,661 Learners