Non-financial risk

Non-financial risks include:

• Operational risk (Op risk). In case that Op risk is considered a part of NFR (and not as equivalent), Op risk summarizes e.g. those risks which can be quantified by the use of scenario models. Examples are pandemics, floods and other weather events.
• Conduct risk means that the behavior of the cooperation's employees leads to losses.^[3]
• Cyber risk and IT risk are possible losses due to security breaches.
• Compliance risks are risks related to governance, risk management, and compliance. Managing the compliance risk means putting a price tag on potential failures of adhering to self-given rules of the bank as well as regulatory compliance.
• Regulatory risk are possible losses due to changes of the law and regulations.
• Reputational Risk is potential loss caused by the damage to a firm's reputation.

All these risk types are closely related. In the case of a data leak (which is a cyber risk incident), the reputation of the company as a whole might be at stake.^[4]