On a regulated broking platform, a risk-engine configuration change pushed at 09:47 set an incorrect margin multiplier for one product segment. From 09:52 to 10:30, 12 percent of derivatives orders were rejected: about 41,000 orders from 9,300 clients. The change had a ticket and an approval, but the canary stage had been skipped. Exchanges were notified at 10:41. The CEO and the board risk committee want to know what happened, internal audit has opened a review, and the regulator's preliminary report is due the next day.
The interviewer asks“Yesterday a bad config change caused 38 minutes of order rejections. The CEO wants a summary today, internal audit wants a full record, and we have regulatory reporting deadlines. How would you document and communicate this incident to each audience?”
I build one evidence-backed timeline as the source of truth and generate different artefacts from it. Executives get a one-page summary within hours: what happened, impact in clients and money, current status, regulatory exposure, decisions needed and the top actions, with facts clearly separated from what we don't know yet. Auditors and regulators get a formal record: timestamped timeline with evidence references, quantified impact, root cause and contributing factors, which controls operated, failed or were bypassed, remediation with owners, dates and verification, and every notification with its timestamp against the deadline. It is blameless about people and strict about accountability for actions, and every number is identical across every document.
A free account unlocks the rest of it, and saves your progress across every track.