Core concepts

01Financial policy aligned with corporate strategy (growth, profitability, market position).
02Risk types: business, financial, operational, market, credit, liquidity, country.
03Risk management process: identify → assess → mitigate → monitor.
04Tools: hedging (forward, futures, options, swaps), insurance, diversification.
05VaR (Value at Risk): max expected loss at given confidence level over time horizon.

Flowchart summary

Exam-critical pointers

⭐VaR limitations: assumes normal distribution; doesn't capture tail (use Expected Shortfall).
⭐COSO ERM framework — integrated approach with strategy, performance.
⭐Hedge ratio = correlation × (σ_spot / σ_futures).
⭐Distinguish hedging from speculation — intent and offset position.

Elaborative notes

Financial Policy & Risk Management

AFM Chapter 1 sets the vocabulary for the rest of the paper. Every later

chapter — forex, derivatives, valuation, M&A — is a specific instance of the

general problem stated here: how does the finance function quantify, price

and manage risk in service of corporate strategy?

1. Financial policy as a strategy lever

Financial policy is the set of long-run choices a firm makes about:

Policy area	Key decision
Investment	Which projects clear the hurdle rate? (Capital budgeting)
Financing	What mix of equity, debt, hybrid? (Capital structure)
Dividend	Payout vs reinvestment? (DDM / signalling)
Liquidity	How much working capital and cash buffer?
Risk	What's hedged, what's tolerated, what's transferred?

These choices must align with corporate strategy (growth, profitability,

market position). A high-growth firm typically retains earnings + raises

equity. A mature firm typically pays dividends + uses cheaper debt. Mismatch

between strategy and financial policy is a recurring exam case-study setup.

2. The risk taxonomy

ICAI groups risks into 7 broad categories. Every AFM exam touches at least 3.

Business risk — variability in operating profit from product, market,

competitive forces. Measured via operating leverage (DOL).

Financial risk — variability in net profit from financing mix.

Measured via financial leverage (DFL). Combined: DCL = DOL × DFL.

Market risk — adverse moves in interest rates, FX, equity, commodity

prices. The category that drives the derivatives toolkit.

Credit risk — counterparty default. Measured via PD × LGD × EAD

(probability of default × loss given default × exposure at default).

Liquidity risk — inability to meet obligations on time. Measured via

liquidity coverage ratio, net stable funding ratio (Basel III).

Operational risk — fraud, system failure, key-person dependency.

Basel II treats this as a separately capitalised category.

Country / political risk — currency controls, expropriation,

regulatory shifts. Builds into the required return for cross-border

investments.

3. The risk management process

Four stages — examiners reward students who quote the stages explicitly:

Identify — risk register; map exposures to drivers.
Assess — quantify probability × impact; bucket as high / medium / low.
Mitigate — choose: avoid, reduce, transfer (insurance / hedge),

accept. Allocate residual risk to a capital buffer.

Monitor — KRIs (Key Risk Indicators), dashboards, periodic review.

This loop sits inside a wider ERM (Enterprise Risk Management) framework

— typically COSO ERM, which integrates risk into strategy and performance.

4. Value at Risk (VaR) — the headline market-risk metric

VaR answers: *"What is the maximum loss I expect to incur over T days, with

X% confidence, under normal market conditions?"*

Three approaches:

Method	Mechanics	Best when
Parametric (variance-covariance)	VaR = Z × σ × √t × portfolio value	Returns roughly normal; closed form needed
Historical simulation	Order historical P&Ls; pick the X-percentile loss	Fat tails matter; data rich
Monte Carlo	Simulate thousands of price paths; pick X-percentile	Complex portfolios with non-linear payoffs

Z values for parametric VaR:

•95% confidence → Z = 1.645
•99% confidence → Z = 2.33

VaR limitations (always cite these in a theory answer)

•Assumes normality — under-states fat-tail / Black Swan loss.
•A single number — doesn't describe loss beyond the threshold.
•Expected Shortfall (ES / CVaR) — the average loss given that VaR is

breached — is the post-2008 refinement examiners now expect students to mention.

5. Hedging vs speculation

Both involve taking a derivatives position. The difference is *intent and

offset*:

•Hedger has an underlying exposure; derivative offsets it. Net P&L is

near-zero regardless of price move.

•Speculator has no underlying exposure; takes the position because they

believe in a direction. Net P&L is the full move.

Important exam point: tax treatment differs. Hedging gains/losses are

ordinary; speculative gains can be treated as capital gains (s 43(5) IT Act,

re commodity transactions on recognised exchanges).

6. The 60+ marks topper convention

•Open every risk-policy answer with the taxonomy — name the risk

category before discussing the case.

•Cite the framework (COSO ERM, Basel III for banks, Ind AS 109 for

financial instrument risk) — earns the authority mark.

•Show the VaR formula substitution — 1 mark for formula, 1 for the Z,

1 for the σ × √t scaling, 1 for the rupee figure. Four marks just for

presenting the working clearly.

•Always state confidence and horizon — "VaR at 95% confidence over

10 trading days is …" — examiners dock marks for unstated assumptions.

•End with the limitation cite — every VaR answer should mention ES /

fat-tail caveat for 1–2 marks.

Worked examples

Worked example — Parametric VaR for an equity portfolio

A portfolio of ₹50 crores in a diversified equity fund has an annualised

standard deviation of 18%. The risk manager wants the 10-day VaR at the 99%

confidence level. Assume 250 trading days per year.

Step 1 — Daily σ

σ_daily = σ_annual / √250 = 18% / √250 = 18% / 15.811 = 1.139%

Step 2 — Scale to 10-day horizon

σ_10d = σ_daily × √10 = 1.139% × 3.162 = 3.602%

Step 3 — Apply Z at 99% confidence

VaR_10d = Z × σ_10d × Portfolio Value = 2.33 × 3.602% × 50 Cr

VaR_10d = 0.08393 × 50 Cr = **₹4.197 Cr**

Step 4 — Statement and limitation

Final answer: The 10-day 99%-confidence VaR is ₹4.20 Cr — meaning

there is a 1% probability that the portfolio will lose more than ₹4.20 Cr

over the next 10 trading days under normal market conditions.

Caveat (always include): VaR assumes normal returns and stable

volatility. The actual tail loss can materially exceed this. **Expected

Shortfall** (average loss given VaR is breached) for the same portfolio

would be approximately ₹4.80 Cr at 99% confidence and is the more

informative metric for stress scenarios.

Detailed flowcharts

Risk Management Loop + VaR Methods

Render diagram ↗

flowchart TD
  A[Identify Risk<br/>build risk register] --> B[Assess<br/>P × Impact]
  B --> C{Treatment?}
  C -->|Avoid| D1[Exit / decline]
  C -->|Reduce| D2[Internal controls,<br/>diversification]
  C -->|Transfer| D3[Insurance,<br/>hedge with derivatives]
  C -->|Accept| D4[Allocate capital<br/>buffer]
  D1 --> E[Monitor<br/>via KRIs &<br/>dashboards]
  D2 --> E
  D3 --> E
  D4 --> E
  E -->|Periodic review| A

  F[Quantify Market Risk] --> G{VaR method?}
  G -->|Parametric| G1["VaR = Z × σ × √t × value<br/>Z=1.645 at 95%<br/>Z=2.33 at 99%"]
  G -->|Historical sim| G2[Order past P&Ls,<br/>pick X-percentile]
  G -->|Monte Carlo| G3[Simulate price paths,<br/>pick X-percentile]
  G1 --> H[Report VaR +<br/>Expected Shortfall]
  G2 --> H
  G3 --> H

  style D3 fill:#dbeafe,stroke:#1d4ed8
  style H fill:#dcfce7,stroke:#15803d

Pitfalls examiners flag

Common pitfalls

Quoting business risk and operational risk interchangeably. Business

risk is about market/competitive variability of EBIT. Operational risk is

about internal failures (fraud, IT outage). Mixing them costs marks.

Forgetting the √t scaling in VaR. A 1-day VaR scales by √10 for a

10-day horizon (assuming i.i.d. returns). Students often multiply by 10

instead.

Using portfolio σ as if it were already weighted. When given component

σs and weights, you must compute portfolio σ first before plugging into

the VaR formula.

Citing COSO ERM only for non-financial risk. COSO covers all risk

categories including financial. Don't bracket it as "soft risk only".

Writing prose instead of citing Z values. 95% = 1.645, 99% = 2.33 —

these numerical anchors are expected.

30-second revision card

Financial Policy & Risk Management — 30-second recap

•Financial policy = investment + financing + dividend + liquidity + risk
•Risk types: business, financial, market, credit, liquidity, operational, country
•Process: Identify → Assess → Mitigate → Monitor
•VaR = Z × σ × √t × portfolio value (Z = 1.645 at 95%, 2.33 at 99%)
•Methods: parametric, historical sim, Monte Carlo
•Always mention ES / fat-tail limitation in theory answers
•Hedge vs speculate = presence of underlying offset
•DOL × DFL = DCL (combined leverage)

Make it click