Reputational risk is the risk that adverse perceptions of a firm damage its business relationships or access to funding. For a financial institution, lost confidence can cause clients to withdraw assets, lenders to tighten terms or prospective customers to go elsewhere—even when the immediate trading loss is small.
The exposure is to other people’s decisions. A service failure, misconduct allegation, misleading performance claim or association with a troubled product can change how stakeholders view the firm. The financial effect depends on what those stakeholders then do and how the firm responds. An allegation need not be proven before counterparties change their behaviour.
Follow the confidence shock into cash flows
Consider a wholly fictional asset manager. It manages USD 50 million of client assets. Following a loss of confidence, clients withdraw USD 30 million, leaving USD 20 million. Assume unchanged asset prices and no other flows during this illustrative episode. Assets under management (AUM) fall 60%: the withdrawn 30 is three-fifths of the initial 50.
Fictional asset-manager scenario, USD millions. Prices and all other flows are held fixed; the mechanism illustrates possible consequences without estimating their probability.
The withdrawals are client capital leaving the mandate, not automatically a USD 30 million accounting loss to the manager. The manager’s own exposure may include reduced management-fee revenue, client compensation, investigation costs or lost future mandates. Fee revenue depends on the fee contract and timing; an AUM decline alone does not determine the manager’s profit decline.
Nor does a withdrawal automatically imply a loss on the clients’ investments. In this example prices do not change. In a different scenario, selling illiquid holdings to meet redemptions could generate transaction costs and adverse price effects. That would connect the confidence shock to liquidity risk. The entity that must find the cash matters: client-fund redemption obligations and the management company’s own obligations are different exposures.
An amplifier across risk categories
A cyber incident may begin as operational risk. Repair costs belong to the initiating event; lost mandates caused by clients’ changed perceptions describe a reputational channel. The same event can therefore create several consequences without each consequence being a separate additive loss.
In banking, reputational concerns can also motivate support for an affiliated vehicle beyond contractual commitments. That support can bring assets or cash demands back onto the bank and create credit or liquidity exposure. Basel discusses this channel in SRP30.29–33. The bank’s actual support decision, its funding effects and any credit losses should be identified explicitly rather than hidden inside an arbitrary “reputation loss” percentage.
There is a framework boundary here. The Basel Core Principles definition of operational risk includes legal risk and excludes strategic and reputational risk. This classification does not make reputational consequences immaterial or imply that the initiating operational failure disappears. Basel’s supervisory review discussion separately addresses reputational exposures and their capital and liquidity implications. These are banking-framework distinctions; they are not a universal accounting taxonomy for every firm.
For the historical Basel II taxonomy behind that boundary, Operational Risk: Definition, Data, and the Regulatory Landscape provides a fuller treatment (public preview; full lesson requires membership).
What a useful assessment records
A stress test should make the behavioural bridge explicit: whose confidence changes, what they can do, when they can do it, and which cash flows follow. For an asset manager, that means considering redemption terms, client concentration, liquid assets available to meet withdrawals and the fee base after outflows. For a bank, the questions may concern funding renewal, collateral demands and possible support of related entities.
Complaint volumes, client retention, withdrawal requests and funding terms can help monitor the exposure. None is a universal measure of reputation, and deterioration alone does not prove its cause. A market sell-off, for example, can reduce AUM through prices as well as outflows. Separate those effects before attributing the change to lost trust.
Effective management begins with the conduct, controls and service that support confidence, backed by clear escalation and credible remediation. Communication can help stakeholders understand a response; it cannot substitute for fixing the underlying problem. A useful risk appetite statement can also set qualitative boundaries on activities that would compromise core client trust, even where a reliable loss probability cannot be estimated.
Sources
- Basel Framework, SRP30.29–33: stakeholder perceptions, implicit support and banking risk-management implications.
- Basel Core Principles, BCP10, item 18 (2024): the operational-risk definition and its exclusions.
- McNeil, Frey and Embrechts, Quantitative Risk Management, revised edition (2015), §13.1.1, p. 504: the historical Basel definition.
- Hull, Risk Management and Financial Institutions, 4th edition (2015), Chapter 28, p. 567: customer trust and qualitative risk appetite.