According to a March 2019 Deloitte poll, 79.2% of C-suite and other executives say significant operational risk events impact shareholder value over the long term. Yet, just 39.5% of polled executives leverage advanced analytics to manage operational risk and only 6% use emerging technologies like cognitive computing and machine learning to do so.

1. Operational risk management:
Implementation, data and analytics
Deloitte poll results from March 2019

2. Operational risk management: Implementation, data, and analyticsCopyright © 2019 Deloitte Development LLC. All rights reserved. 2
Methodology
C-suite and other executives were polled
online during a Dbriefs webcast, titled
“Operational risk management:
Implementation, data and analytics,” on
March 28, 2019. Answer rates differed by
question and respondents differed by webcast
poll.
Data totals for certain questions may not equal
100.0% due to the rounding of raw data to the nearest
tenth of a percentage.
955+
2

3. Operational risk management: Implementation, data, and analyticsCopyright © 2019 Deloitte Development LLC. All rights reserved. 3
Do you think significant operational risk events impact
shareholder value over the long-term period?
C-suite and other executive findings
Votes received: 1,589
Yes, 79.2%
No, 8.7%
Don't know / not
applicable, 12.1%

4. Operational risk management: Implementation, data, and analyticsCopyright © 2019 Deloitte Development LLC. All rights reserved. 4
Which best describes your organization’s use of emerging
technologies (e.g., advanced analytics, cognitive computing,
machine learning) to manage operational risk?
Don’t Know / Not Applicable = 21.6%
C-suite and other executive findings
Votes received: 957
6.0%
33.5%
38.9%
Advanced – Risk team is equipped to
provide predictive insights and greater
efficiency on operational risk through
the use of advanced analytics and
other advanced technologies
Building – Risk team currently uses
only advanced analytics for operational
risk management, and is involved in
related strategic decision-making
Lagging - Risk team is focused on
preventing, detecting, responding to
and remediating operational risk, but
offers only backward-looking analysis
and reports, leveraging no analytics or
other advanced technologies

5. Operational risk management: Implementation, data, and analyticsCopyright © 2019 Deloitte Development LLC. All rights reserved. 5
Which best describes your organization’s operational risk
management program over the next 12 months?
Don’t Know / Not Applicable = 22.9%
C-suite and other executive findings
Votes received: 1,570
9.9%
30.1%
24.4%
12.8%
Advancing – we are currently transforming
our program and will make considerable
improvements
Improving – we are currently making
improvements to our program, and will
continue to fine-tune
Planning – we plan to begin making
improvements to our program soon
Not changing – we have no plans to make
improvements to our program

6. Operational risk management: Implementation, data, and analyticsCopyright © 2019 Deloitte Development LLC. All rights reserved. 6
What do you think will be the biggest challenge to your
organization’s operational risk management program in the next
12 months?
Don’t Know / Not Applicable = 18.7%
C-suite and other executive findings
Votes received: 1,515
19.3% 18.1% 17.8%
15.8%
10.2%
Process inefficiencies –
internal protocols hinder
the ability to optimize
program
Lack of adequate
technologies – funding,
talent skillset and/or
technology challenges do
not meet program needs
Change management
concerns – tension in
balancing operational
risk program
enhancements with
ongoing, day-to-day
business needs
Poor data quality –
integrity or location of
risk management data
does not meet program
needs
Lack of predictive
capabilities – inability to
sense emerging risks
that might have
oversized future impact

7. Operational risk management: Implementation, data, and analyticsCopyright © 2019 Deloitte Development LLC. All rights reserved. 7
Which best describes the risk insights derived from your current
integrated governance, risk and compliance (GRC) structure?
Don’t Know / Not Applicable = 26.5%
C-suite and other executive findings
Votes received: 1,368
4.2%
26.4%
19.4%
23.5%
Well above expectations – we are obtaining high
quality insights from across the org by theme,
closer to real time on most important risks
Meeting expectations – we are obtaining some
more high-quality insights more quickly on top
risks, but still have a way to go in achieving our
vision across all important risks
Not meeting expectations – we have the vision,
but have not reached our goal in obtaining high-
quality or speedier insights due to various
factors
We have not yet embarked on GRC structure

8. Operational risk management: Implementation, data, and analyticsCopyright © 2019 Deloitte Development LLC. All rights reserved. 8
Media contact
Shelley Pfaendler
Public Relations
Deloitte Services LP
spfaendler@deloitte.com
Full press release available on
Deloitte.com
8

9. About Deloitte
Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee (“DTTL”), its network of
member firms, and their related entities. DTTL and each of its member firms are legally separate and independent entities. DTTL (also
referred to as “Deloitte Global”) does not provide services to clients. In the United States, Deloitte refers to one or more of the US
member firms of DTTL, their related entities that operate using the “Deloitte” name in the United States and their respective affiliates.
Certain services may not be available to attest clients under the rules and regulations of public accounting. Please see
www.deloitte.com/about to learn more about our global network of member firms.
Copyright © 2019 Deloitte Development LLC. All rights reserved.
The statements in this report reflect the aggregation of poll responses and are not intended to reflect facts or opinions of any entities.
All data, charts and statistics referenced and presented, as well as the representations made and opinions expressed, unless
specifically described otherwise, pertain only to the participants and their responses to the Deloitte poll. The information obtained
during the poll was taken “as is” and was not validated or confirmed by Deloitte.
This presentation contains general information only and Deloitte is not, by means of this presentation, rendering accounting, business,
financial, investment, legal, tax, or other professional advice or services. This presentation is not a substitute for such professional
advice or services, nor should it be used as a basis for any decision or action that may affect your business. Before making any
decision or taking any action that may affect your business, you should consult a qualified professional advisor.
Deloitte shall not be responsible for any loss sustained by any person who relies on this presentation.