Citi’s Global Lessons Learned Program, codified in the Lessons Learned Policy and Procedure, establishes a framework for identifying risk exposures and ensuring that Citi enhances its control environment to prevent similar occurrences. The Lessons Learned Lifecycle operationalizes this by identifying, analyzing, and reporting on significant risk events.
The Lessons Learned Lifecycle has six steps.
To proceed, select the step for a brief overview.
In Lessons Learned, Events refer to material losses or other adverse impacts resulting from ineffective or failed processes, people or systems. A Qualifying Event is defined as an Event for a Risk Category which meets or exceeds a pre-determined threshold as specified in the Global Lessons Learned Central Procedure.
Businesses review Events applicable to their process and control environment to identify opportunities to reduce adverse impact(s) from Event(s) and reduce the risk of reoccurrence. Businesses and Independent Risk Management may identify Events below the threshold or where no threshold has been established, if they believe that a Lessons Learned report of such Event would be beneficial.
go to next button
Qualifying Events are assigned in the Lessons Learned Tool to the relevant Business to perform the Lessons Learned analysis.
go to next button
Businesses analyze Qualifying Events to gain a clear understanding of the root cause(s) and take action to reasonably prevent a similar Event from reoccurring.
go to next button
Businesses document the analysis of Qualifying Events in a Lessons Learned Report that is comprehensive, accurate and timely. The report must include a description of the event, its impact(s), root cause(s), contributing factors and remediation/corrective actions.
Businesses submit a draft report to an Independent Challenger within the Lessons Learned Tool (LLT).
go to next button
Independent Risk Management is required to challenge the report.
The designated Independent Challenger must concur with the report’s findings root cause(s), remediation/corrective actions, readability, and completeness.
go to next button
After Independent Challenge review is completed, the report is “published” and shared with other Citi businesses, Independent Risk Management, and regulators.
Publication of Lessons Learned reports enables other Citi businesses to conduct a Read Across review to determine if they have a similar risk exposure. If this determination confirms existence of similar risk exposure, businesses are required to open Issues as defined in the Global Issue Management Standard to mitigate the risk.
Thematic analysis of published reports is performed to identify overarching themes and assess if further risk mitigation is required.
Publication of the Lessons Learned Report and completion of Read Across and Thematic analysis concludes the Lessons Learned process.
return to this button
Now that you know what the Lessons Learned Policy and Procedure say about Qualifying Event identification, let’s see what it looks like in action.
To proceed, select each scene to reveal the scenario.
FX Operations received notice that a client account had a duplicate debit posting for their Foreign Exchange (FX) deal for $64 Million.
go to next button
FX Operations reversed the error with the full funds returned to the client’s account on the same day. The error was classified as a Near-Miss, due to the immediate return of the funds.
The Event’s Risk Category is in Processing Risk, where the qualifying threshold is currently $50 Million and greater for the Near-Miss Category. FX Operations determined that the Near-Miss was a Qualifying Event for Lessons Learned.
go to next button
The business and Independent Risk Management can now appoint individuals to the key Lessons Learned Lifecycle roles. In our case they choose Abdi, Dannielle and Naomi and enter their names into the LLT.
To proceed, select each role to learn more.
Abdi is the Event Owner (1LOD) accountable for managing risk associated with the Qualifying Event.
go to next button
Dannielle is the Report Author (1LOD). She will conduct Event Analysis, including Root Cause Analysis for the Event, and document the Lessons Learned Report (LLR).
go to next button
Naomi is the Independent Challenger (2LOD). Naomi will provide credible challenge against Dannielle’s Event analysis, root cause(s), remediation/corrective actions and the overall accuracy and completeness of the LLR.
go to next button
Report Authors analyze Event details to identify the fundamental underlying root cause(s) and implement effective solutions to prevent reoccurrence.
To proceed, select each question to reveal the scope of the analysis.
What happened?
How did it happen?
Why did it happen?
What did we already know?
Report Authors follow the Root Cause Analysis process to identify fundamental causes that must be addressed to reasonably prevent a similar Event from reoccurring.
To proceed, select each area to learn more about the Root Cause Analysis process.
Root Cause Analysis is the process used to diagnose the fundamental underlying driver(s) of an Event. Below are the steps taken to perform Root Cause Analysis.
go to next button
Collect information and data to develop a comprehensive understanding of the Event, enabling an evidence-based Root Cause Analysis for accurate and effective root cause identification.
go to next button
The 'Five Whys' is a problem-solving method that helps uncover the root cause of an Event.
go to next button
Following her Event Analysis, Dannielle has everything she needs to begin documenting the formal LL Report in the LLT.
Dannielle needs to be sure that her report clearly explains the root causes, the contributing and controllable factors, corrective actions, and lessons learned. Formal Lessons Learned reports are shared with key Citi stakeholders and regulators, and they must be written clearly, and comprehensively.
To proceed, select each area to find out what Dannielle’s LLR will include.
go to next button
Financial impacts
Non-financial impacts
go to next button
Controllable Factors
Dannielle will document any missing, inadequate or failed controls that allowed the Event to occur.
go to next button
In her report, Dannielle must reference any completed and/or planned actions to mitigate the risk and reasonably reduce the likelihood of reoccurrence. Those planned actions must include raising or identifying existing iCAPS Issue(s) to address identified control gaps in line with Global Issue Management Standard requirements.
go to next button
In her conclusions, Dannielle will consider the broader lessons from the Event, including retrospective mitigating actions which could have helped prevent the Event (or similar root cause Events in the future).
go to next button
As Independent Challenger, Naomi provides credible challenge to Dannielle’s Report.
To proceed, select each step for an overview of the Independent Challenge process.
Select each image to learn more.
Root cause and remediation actions
Confirm agreement with the Event details and root cause(s) of the Event.
Readability assessment
Collaboration
go to next button
Naomi will need to document her challenges:
go to next button
Naomi must agree with Dannielle’s conclusions on the root cause, contributing factors, controllable factors, and remediation plans to reduce the likelihood of a similar Event happening again.
go to next button
Should Dannielle and Naomi disagree on the final report’s language or actions, they must escalate the details of the disagreement to their respective next level of management for resolution.
go to next button
Which statement describes the objective of Lessons Learned?
Select the best response from the four options and then select Submit.
Please use the Space key only when selecting a radio option with the keyboard. The Enter key is not fully supported. If the Enter key has been used to select a radio option, please use the Escape key. Then you will be able to use the Space key again to select a radio option.
Citi’s Global Lessons Learned Program aims to learn from Qualifying Events, prevent similar occurrences and share insights across Citi business units. The Lessons Learned Lifecycle operationalizes this by identifying, analyzing, and reporting on Events to enhance controls and reduce future risks.
Citi’s Global Lessons Learned Program aims to learn from Qualifying Events, prevent similar occurrences and share insights across Citi business units. The Lessons Learned Lifecycle operationalizes this by identifying, analyzing, and reporting on Events to enhance controls and reduce future risks.
Citi’s Global Lessons Learned Program aims to learn from Qualifying Events, prevent similar occurrences and share insights across Citi business units. The Lessons Learned Lifecycle operationalizes this by identifying, analyzing, and reporting on Events to enhance controls and reduce future risks.
That answer is correct.
Citi’s Global Lessons Learned Program aims to learn from Qualifying Events, prevent similar occurrences and share insights across Citi business units. The Lessons Learned Lifecycle operationalizes this by identifying, analyzing, and reporting on Events to enhance controls and reduce future risks.
That answer is not correct.
Refer to Lessons Learned Lifecycle, About the Lessons Learned Lifecycle for more information.
That answer is not correct.
Refer to Lessons Learned Lifecycle, About the Lessons Learned Lifecycle for more information.
The Lessons Learned Lifecycle begins with Event Identification, Event Assignment and Event Analysis. What are the next stages of the Lessons Learned Lifecycle?
Select the best response from the four options and then select Submit.
Please use the Space key only when selecting a radio option with the keyboard. The Enter key is not fully supported. If the Enter key has been used to select a radio option, please use the Escape key. Then you will be able to use the Space key again to select a radio option.
Next stages of the Lessons Learned Lifecycle are Report Development, Independent Challenge, Publication & Sharing.
Next stages of the Lessons Learned Lifecycle are Report Development, Independent Challenge, Publication & Sharing.
Next stages of the Lessons Learned Lifecycle are Report Development, Independent Challenge, Publication & Sharing.
That answer is correct.
Next stages of the Lessons Learned Lifecycle are Report Development, Independent Challenge, Publication & Sharing.
That answer is not correct.
Refer to Lessons Learned Lifecycle, Lessons Learned Lifecycle Overview for more information.
That answer is not correct.
Refer to Lessons Learned Lifecycle, Lessons Learned Lifecycle Overview for more information.
What are the objectives of the Root Cause Analysis process used by Lessons Learned Report Authors?
Select the best response from the four options and then select Submit.
Please use the Space key only when selecting a radio option with the keyboard. The Enter key is not fully supported. If the Enter key has been used to select a radio option, please use the Escape key. Then you will be able to use the Space key again to select a radio option.
Root Cause Analysis addresses underlying causes (not just symptoms), informs comprehensive corrective action plans, and identifies causes that must be addressed to prevent a similar Event from reoccurring.
Root Cause Analysis addresses underlying causes (not just symptoms), informs comprehensive corrective action plans, and identifies causes that must be addressed to prevent a similar Event from reoccurring.
Root Cause Analysis addresses underlying causes (not just symptoms), informs comprehensive corrective action plans, and identifies causes that must be addressed to prevent a similar Event from reoccurring.
That answer is correct.
Root Cause Analysis addresses underlying causes (not just symptoms), informs comprehensive corrective action plans, and identifies causes that must be addressed to prevent a similar Event from reoccurring.
That answer is not correct.
Refer to Event Analysis, Report Development & Independent Challenge, About Event Analysis for more information.
That answer is not correct.
Refer to Event Analysis, Report Development & Independent Challenge, About Event Analysis for more information.
What is the purpose of Report Challenge?
Select the best response from the four options and then select Submit.
Please use the Space key only when selecting a radio option with the keyboard. The Enter key is not fully supported. If the Enter key has been used to select a radio option, please use the Escape key. Then you will be able to use the Space key again to select a radio option.
The purpose of Report Challenge is to ensure:
The purpose of Report Challenge is to ensure:
The purpose of Report Challenge is to ensure:
That answer is correct.
The purpose of Report Challenge is to ensure:
That answer is not correct.
Refer to Event Analysis, Report Development & Independent Challenge, Report Development Process for more information.
That answer is not correct.
Refer to Event Analysis, Report Development & Independent Challenge, Report Development Process for more information.
Following the Independent Challenge, Publication & Sharing of a Lessons Learned Report, what must the business do?
Select the best response from the four options and then select Submit.
Please use the Space key only when selecting a radio option with the keyboard. The Enter key is not fully supported. If the Enter key has been used to select a radio option, please use the Escape key. Then you will be able to use the Space key again to select a radio option.
Businesses conduct a Read Across applicability review and determine whether similar potential risk exposure could exist in their business, or across to other business units. Quarterly thematic analysis helps identify overarching themes, trends, and additional risk mitigation opportunities.
Businesses conduct a Read Across applicability review and determine whether similar potential risk exposure could exist in their business, or across to other business units. Quarterly thematic analysis helps identify overarching themes, trends, and additional risk mitigation opportunities.
Businesses conduct a Read Across applicability review and determine whether similar potential risk exposure could exist in their business, or across to other business units. Quarterly thematic analysis helps identify overarching themes, trends, and additional risk mitigation opportunities.
That answer is correct.
Businesses conduct a Read Across applicability review and determine whether similar potential risk exposure could exist in their business, or across to other business units. Quarterly thematic analysis helps identify overarching themes, trends, and additional risk mitigation opportunities.
That answer is not correct.
Refer to Publication & Sharing, Publication & Sharing Process for more information.
That answer is not correct.
Refer to Publication & Sharing, Publication & Sharing Process for more information.
go to close menu button
go to close button
