12.1 Risk control strategies Flashcards
This chapter considers how risk can be c_________ in an organisation.
controlled.
All organsiations make use of risk control t_____. These tools are used to reduce the probability and i______ of loss events, such as fires, fraud or IT failures.
tools
impact
Loss p_________ tools reduce the probability of a loss event by targeting the c_____ of risk events. These are usually linked to the actions or inactions of people, faulures in processes and systems or e_______ events (e.g. weather, politics).
probability
cause
external
Loss r__________ tools target the effects of loss events. Loss events may have financial and non-financial effects. In financial terms, they can affect the physical and c___ assets of an organisation. In non-financial terms, organisations may suffer r________ damage and the loss of goodwill.
reduction
cash
reputation
In broad terms there are four risk control strategies:
1 t______
2 t_________
3 t_________
4 t________
treat
tolerate
transfer
terminate
Risk treatment can be further broken down into a variety of control options. These include formal and informal controls, p_________, corrective, detective, and d________ controls.
preventative
directive
Any organisation will use a wide range of risk financing mechanisms to help fund the financial consequences of loss events. Loss events can be very e__________ to recover from. Assets may need to be repaired or r_________. There may also be clean-up costs, c_____________ payments, fines and liability claims.
expensive
replaced
compensation
R__________ risk financing involves retaining rather than transferring the financial effects of a loss event. An organisation using retained risk financing has made the decision to keep the financial impacts of one or more types of loss event within its l________ and f________ boundaries.
Retained
legal
financial
I___________ risk transfer means purchasing insurance from an insurance company. Insurance companies provide insurance against a range of potential l____ events, including asset damage, theft and l_________ claims.
Insurance
loss
liability
Insurance is not available for every type of risk and where it is available it may be e__________. The alternatives that exist to insurance are termed non-c___________ risk transfer tools.
expensive
conventional
Crisis management is the process by which an organisation controls disruptive and u___________ events that threaten to harm the organisation, to s__________, or to the general public. C______ management is supported by business continuity planning.
unexpected
stakeholders
Crisis
Most organisations make use of third party s_______ contracts. This may be contracts for energy supply, cleaning and waste collection, or they may contract elements of their core operations via long-term o______________ arrangements. Specialist c_______ are needed to reduce the probability and impact of service contracts.
service
outsourcing
controls