Insights on Crypto Payments, Infrastructure, and Operations

Correlation Risk

Pronunciation: kaw-ruh-LAY-shun RISK

Definition

Correlation risk is the possibility that relationships between exposures strengthen during stress, reducing expected diversification or hedge effectiveness. A score for Correlation Risk is not the risk itself; results depend on model assumptions, data quality, scenario boundaries, control effectiveness, and changing operating conditions. Correlation Risk must specify the objective or asset exposed, causal scenario, threat or dependency, likelihood basis, impact dimensions, time horizon, existing controls, and accountable owner.

Overview

Correlation risk arises when assets, counterparties, markets, or operational dependencies move together more strongly than assumed. Positions that appear diversified in normal conditions may experience simultaneous losses during liquidity shocks, depegs, cyber incidents, or broad risk reduction.

Historical correlations are unstable and depend on data frequency, period, market regime, and nonlinear behavior. Indirect connections through shared collateral, custodians, exchanges, cloud providers, investors, or legal jurisdictions can create correlation not visible in price data.

Limits, liquidity buffers, independent providers, and conservative hedge assumptions help, but no fixed correlation estimate can guarantee protection during an unprecedented event.

Dependencies can weaken Correlation Risk even when the primary component behaves correctly.

Correlation Risk is used when separate exposures may fail together rather than independently; for example, a market shock can simultaneously weaken an asset, exchange, liquidity provider, and borrower.

Correlation risk is the possibility that relationships between exposures strengthen during stress, reducing expected diversification or hedge effectiveness. Diversification can disappear during stress, so correlation assumptions need scenario testing and analysis of shared operational and financial dependencies.

For Correlation Risk, the assessment should evaluate the possibility that relationships between exposures strengthen during stress, reducing expected diversification or hedge effectiveness. The assessment record should separate observed evidence supporting the possibility that relationships between exposures strengthen during stress, reducing expected diversification or hedge effectiveness from assumptions, state the time horizon and existing controls, and identify who owns any remaining exposure. Monitoring should test whether the conditions described in the possibility that relationships between exposures strengthen during stress, reducing expected diversification or hedge effectiveness have changed enough to require a new rating, treatment, or approval.

Key Takeaway

Diversification can disappear during stress, so correlation assumptions need scenario testing and analysis of shared operational and financial dependencies.

Sources

  1. NIST Documentation: Cyberframework — NIST (2026-07-30)
  2. FATF Documentation: Virtual Assets — FATF (2026-07-30)