Study guide
10.1 Risk, Uncertainty, and Objectives
SEC Certification Examination Phase 1 General
Track your progress as you read
Finished sections get a check mark.
1 Chapter 1: Corporate Structure & Capital Stock
1.1 Philippine Corporate Formation and Capital Structure 1.2 Common and Preferred Shares 1.3 Stockholder Rights and Corporate Actions 1.4 Corporate Debt and Fixed Income Instruments
2 Chapter 2: Financial Markets and Securities Products
2.1 Money Market and Capital Market Instruments 2.2 Collective Investment Schemes and Funds 2.3 Philippine Stock Exchange (PSE) Structure and Trading 2.4 Real Estate Investment Trusts (REITs) and Asset-Backed Securities
3 Chapter 3: Macroeconomic Principles and Monetary Policy
3.1 Gross Domestic Product, Inflation, and Business Cycles 3.2 Monetary Policy and the Bangko Sentral ng Pilipinas (BSP) 3.3 Fiscal Policy, National Debt, and Foreign Exchange 3.4 Philippine Financial Regulatory Architecture
4 Chapter 4: Financial Mathematics and Valuation Concepts
4.1 Time Value of Money and Interest Calculations 4.2 Bond Valuation and Yield Concepts 4.3 Equity Valuation Metrics and Financial Ratios 4.4 Investment Return, Risk Metrics, and Portfolio Principles
5 Chapter 5: The Securities Regulation Code (SRC) & Securities Registration
5.1 Legislative Framework and SEC Regulatory Powers 5.2 Definition and Scope of Securities 5.3 Mandatory Registration of Securities 5.4 Exempt Securities and Exempt Transactions
6 Chapter 6: Market Intermediaries & Trading Conduct
6.1 Registration of Brokers, Dealers, Associated Persons, and Salesmen 6.2 Duties and Ethical Standards of Market Professionals 6.3 Supervision and Compliance Organization 6.4 Books, Records, and Customer Account Handling
7 Chapter 7: Market Manipulation, Insider Trading & Public Disclosures
7.1 Prohibited Acts and Market Manipulation 7.2 Insider Trading and Unlawful Disclosures 7.3 Tender Offer Rules, Proxy Solicitation, and Periodic Reports
8 Chapter 8: Principles of Corporate Governance & Board Oversight
8.1 Evolution and Governance Framework in the Philippines 8.2 Board Composition, Roles, and Fiduciary Duties 8.3 Independent Directors and Term Limits 8.4 Board Committees and Special Responsibilities
9 Chapter 9: Internal Controls, Disclosure & Shareholder Rights
9.1 Internal Control System and Internal Audit Function 9.2 Related Party Transactions (RPT) Policy and Governance 9.3 Corporate Transparency and Timely Disclosure 9.4 Rights of Shareholders and Stakeholder Engagement
10 Chapter 10: Risk Concepts and Categories
10.1 Risk, Uncertainty, and Objectives 10.2 Financial Risks: Market, Credit, and Liquidity 10.3 Non-Financial Risks: Operational, Strategic, and Reputational
11 Chapter 11: Risk Management Process
11.1 Risk Management: Coordinated Direction and Control 11.2 Risk Identification 11.3 Risk Analysis and Evaluation
12 Chapter 12: Risk Treatment and Hedging
12.1 Risk Treatment, Mitigation, Monitoring, and Review 12.2 Hedging: Purpose and Exposure Identification 12.3 Hedging Strategies and Instruments 12.4 Integrated Risk Scenarios and Review
13 Chapter 13: AML Legal Framework & Institutional Governance
13.1 Anti-Money Laundering Act of 2001 (AMLA) and Amendments 13.2 Anti-Money Laundering Council (AMLC) Powers and Structure 13.3 Money Laundering Offenses and the Three Stages 13.4 Compliance Framework and Money Laundering Prevention Program (MLPP)
14 Chapter 14: Customer Due Diligence, Reporting & Record Keeping
14.1 Customer Due Diligence (CDD) and Know-Your-Customer (KYC) 14.2 Politically Exposed Persons (PEPs) and High-Risk Relationships 14.3 Covered and Suspicious Transaction Reporting 14.4 Record Keeping, Freezing of Assets, and Penalties
10.1 Risk, Uncertainty, and Objectives
Key Takeaways Explain This Topic AI
Risk is the effect of uncertainty on objectives; an effect is a deviation from what was expected and may be adverse or favorable.
A complete risk statement connects a source or cause, an uncertain event, and its consequences for a stated objective.
Likelihood and consequence are assessed together; a remote catastrophic event and a frequent minor event can require different responses.
Inherent risk is assessed before relevant controls, while residual risk is the exposure remaining after controls and treatments operate.
Risk is not synonymous with loss, volatility, hazard, or uncertainty; each describes only part of the concept.
Last updated: October 2026
10.1 Risk, Uncertainty, and Objectives
The official Phase 1 outline begins risk management with a precise idea: risk is the effect of uncertainty on objectives . Each word matters. An objective is a result an organization or investor is trying to achieve. Uncertainty means imperfect knowledge about events, conditions, probabilities, or consequences. An effect is a deviation from the expected result. The deviation can be negative, positive, or both, although controls often focus on protecting against harmful outcomes.
Risk therefore cannot be described well without an objective. “Interest rates may rise” is an uncertain condition, but its significance depends on the objective. A bond portfolio seeking stable market value can suffer from rising rates; a bank planning to reinvest maturing assets may gain from higher yields. The same event can affect different objectives in different ways.
Components of a risk statement
A useful risk statement links three elements:
- Element Question Example
- Source or cause What creates uncertainty? Reliance on one trading system
- Event What might happen? The system becomes unavailable during market hours
- Consequence How could objectives be affected? Orders are delayed, clients are harmed, and rules are breached
A risk source has the potential to generate risk. A hazard is a source of possible harm. A risk event is the occurrence or change of circumstances. A consequence is the outcome affecting objectives. One event can have several consequences, and one consequence can arise from several causes. Keeping these terms separate makes assessment and control design more reliable.
Likelihood and consequence
Likelihood expresses the chance that an event will occur. It can be stated qualitatively—rare, possible, likely—or quantitatively as a probability or frequency. Consequence expresses the magnitude of the effect on objectives. Financial loss is one consequence, but legal, operational, customer, safety, and reputational effects also matter.
Risk level is often represented as a combination of likelihood and consequence. A simple matrix is a prioritization aid, not a calculation of truth. Scores depend on assumptions, time horizon, data quality, and scale definitions. Two risks with the same matrix score may demand different action if one threatens regulatory authorization and the other causes a recoverable processing delay.
Risk, uncertainty, opportunity, and loss
These concepts overlap but are not interchangeable:
Uncertainty is lack of complete knowledge. Risk is uncertainty considered in relation to objectives.
Loss is an adverse result that has occurred. Risk exists before the outcome is known.
Volatility measures variation, often of prices or returns. It can be evidence of market risk but does not capture fraud, default, or system failure.
Opportunity is a favorable possibility. Pursuing it can create downside exposure, so decision makers assess both expected benefit and risk.
Issue describes an existing problem. A failed settlement today is an issue; the possibility of further failures is a risk.
Inherent and residual risk
Inherent risk is the exposure that would exist before considering the effect of relevant controls. Residual risk is what remains after controls and treatments operate. Suppose a broker processes online orders. The inherent risk of unauthorized access may be high. Multi-factor authentication, access reviews, encryption, and monitoring reduce likelihood or consequence, but cannot eliminate exposure; the remaining amount is residual risk.
The distinction supports sound decisions. Management should not claim that a policy document eliminates risk merely because a control exists. It asks whether the control is appropriately designed, actually implemented, consistently performed, and evidenced. Weak operation can leave residual risk close to the inherent level.
Risk appetite, tolerance, and capacity
Risk appetite is the amount and type of risk an organization is willing to pursue or retain in seeking objectives. Risk tolerance is the permitted variation around a particular target, often expressed as a limit. Risk capacity is the maximum risk the organization can absorb without threatening viability or mandatory obligations. Appetite cannot lawfully override a regulatory requirement, and it should remain within capacity.
Exam method
When a scenario is vague, identify the objective first, then the uncertain event, likelihood, consequences, and controls. Do not label every unfavorable fact “risk.” Distinguish cause from event and event from consequence. Finally, determine whether the stated exposure is before controls (inherent) or after controls (residual).
Evidence-Based Risk Statements
A usable risk statement connects a source or cause, an uncertain event, and its effect on an objective. “The market is risky” is too vague to assign or treat. “A sudden increase in benchmark rates may reduce the market value of the dealer's bond inventory and breach its approved loss limit” identifies the driver, event, asset, and consequence. Examiners also distinguish inherent risk , measured before controls, from residual risk , measured after existing controls. A control can reduce likelihood, impact, or both, but it rarely removes uncertainty. Documentation should identify the objective at risk, assumptions, time horizon, owner, available evidence, and the point at which escalation is required.