7 - Risk management lessons Flashcards

1
Q

Which risk management standard is a British manufacturing firm MOST likely to adopt if it requires just generic guidance on risk management standards?

A

ISO 31000.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

The aviation industry is known for having a no blame safety culture at its heart. This means that: (learn)

A

those within the industry are encouraged to learn from events and near misses.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

A key element that contributed to the onset of the 2008 financial crisis was:

A

weak regulation which allowed high risk activity to proceed unchecked.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

From a risk management perspective, the COVID-19 pandemic has resulted in many businesses re-evaluating their:

A

emergency continuity plans.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Following the Grenfell Tower fire in 2017, Government reforms include:

A

making accountability of the risk more clear.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

The key purpose of risk management standards such as COSO can BEST be described as to:

A

clarify business objectives, support decision making, and manage risks better.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

One of the signs that risk management is embedded within an organisation is:

A

risk management issues will feature prominently in the annual report.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

The MAIN purpose of the Public Interest Disclosure Act 1998 is to:

A

encourage individuals to report instances of wrongdoing within an organisation.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Measures that identify the probability of occurrence of incidents early enough to prevent them are known as:

A

key risk indicators.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Two MAIN business reasons for the collapse of Equitable Life were:

A

high guarantees on its pension products and overly generous payouts.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

State the three areas of risk management that ISO 31000 addresses.

A

ISO 31000 is split into three risk management areas: principles, framework and process.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Financial institutions hold limited liquid funds compared with the value of assets they hold. Why was this such a critical factor in the viability of US investment banks during the financial crisis?

A

This is because in 2007 the five major US investment banks were operating with ratios around 40, i.e. for every £40 assets they held there was only £1 available to cover losses. Put another way, a 3% drop in asset values could wipe out the bank.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

It is not unusual for several investigations into a major incident to be undertaken at the same time. Why is caution needed when examining their conclusions?

A

While on face value they may all be looking to uncover the cause(s) of an incident, they will not necessarily all share the same underlying objectives, reach the same conclusions or look at the same evidence. Findings of such enquiries need to be studied in the context of their terms of reference.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the essence of the AIRMIC, Alarm, IRM philosophy regarding risk management and organisation culture?

A

Risk management must be integrated into the culture of an organisation, with leadership from the board and a structured management framework to ensure appropriate procedures and practices are followed at all levels and in all operating units.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Why is the COSO internal control framework widely used in US organisations and their overseas branches?

A

The COSO internal control framework is used because compliance with it satisfies US legal requirements for financial reporting as set out in Sarbanes-Oxley corporate governance legislation.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What was the key decision that led to the demise of Equitable Life and why was it so important?

A

The ‘full distribution’ policy promoted by Ranson in 1983 was the key decision. By distributing all profits to policyholders there was nothing left to build up reserves.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What were the main aims of recommendations made after the BP Gulf disaster?

A

Most recommendations aimed to ensure future high-risk drilling operations were properly controlled and supervised by competent staff, trained to consider overall system implications of technical decisions, and with ability to correctly interpret the results of tests. The culture of participating organisations had to change from emphasis on production to emphasis on safety. Governance improvements required effective risk analysis and review of decisions before permits would be granted.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Why were pay structures criticized for contributing to the financial crisis by encouraging high-risk behavior?

A

Senior executives enjoyed multi-million pound or dollar salaries and generous bonus packages if targets were attained. Generally, targets were short term, tied to sales or asset quantity with no reference to ,quality or risk. There were no arrangements for clawing back bonuses if losses were incurred.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

In investigations into the 2008 financial crisis, what general complaints were made concerning competency of executives, in both financial institutions and their regulators?

A

Many people did not understand the complexities and implications of the business they were in. Non-executive board members were not familiar enough with financial operations and not strong enough to rein in aggressive chief executives. Regulators found it difficult to criticize organisations reporting sound financial results.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What should an audit function be accountable for when reviewing and monitoring risk management procedures?

A

The audit function should be accountable for providing senior management with independent assurance on the risk management process and how well it is working.

21
Q

Where can comparative information on risk management practice be obtained?

A

International standards are often accompanied by best practice recommendations and guides. Many trade and professional organisations publish case studies, together with general and comparative information. Knowledge of other organisations can sometimes be gleaned from new employees, customers, suppliers or appropriate seminars.

22
Q

ISO 31000 is separated into three risk management areas:

A

principle, framework and process. The principles emphasize that risk management is an integral part of organizational processes and decision making.

23
Q

The ISO 31000 framework is intended to help organisations to integrate risk management into their

A

overall management framework.

24
Q

Managing risk is part of governance and leadership and fundamental to management at …

A

All levels

25
Q

FERMA 2003 is a European standard based on the UK standard …

A

AIRMIC, Alarm, IRM: 2002.

26
Q

The FERMA standard uses ISO terminology and sets out the process by which risk management can be carried out. It also outlines …

A

It also outlines an organisation structure for risk management, and includes a list of benefits to be expected. There are sections on risk reporting and communication, and monitoring and review of the risk management process.

27
Q

AIRMIC, Alarm, IRM: 2010 provides a structured approach to implementing risk management in the context of ISO 31000. The guide reviews the principles and processes of risk management, provides an overview of the requirements of ISO 31000, and gives practical guidance how to design an enterprise wide risk management framework and implement an ERM system. TRUE?

A

True

28
Q

Organisations following COSO recommendations would be recognised as following best practice in risk control and would eliminate what irregularities?

A

accounting irregularities.

29
Q

COSO emphasizes the benefits of analyzing risks associated with both current and potential strategies. Tools such as modelling and artificial intelligence might provide …

A

useful information.

30
Q

Compliance with COSO satisfies the US legal requirements for financial reporting as set out in…

A

Sarbanes-Oxley corporate governance legislation.

31
Q

The board and management can never have absolute assurance that their control systems are

A

foolproof.

32
Q

Management pressure and tiredness are underlying causes of risks classified as human error. Another cause would be a person working under the influence of…

A

drugs or alcohol.

33
Q

A dominant personality tends to promote opinions and ignore or suppress….

A

contradictory warnings and information.

34
Q

Wise managers take an interest in the wider …

A

affairs of colleagues and key staff appointments.

35
Q

Equitable Life was a well-established, successful insurance company that became insolvent in…

A

2000

36
Q

Equitable life

A

• Equitable Life’s management made key decisions to sell products that were only profitable in times of high inflation and high interest rates and to operate with minimal reserves. When inflation and interest rates fell,. potential losses outstripped reserves.
• A combination of factors conspired to the company’s demise. A high-risk business strategy was adopted by arrogant, forceful executives who seemingly dominated board discussions
• Top level governance checks didn’t work because non-executive directors were incompetent and bullied, and regulators were disorganized and inefficient. Equitable Life had no contingency capital or plans to deal with surprises and no access to additional shareholder funds.

37
Q

BP

A

• In 2010, BP was in the process of sealing a newly drilled deep sea oil well in the Gulf of Mexico for later production when a ‘blowout” occurred. The ‘blowout’ was not contained and eleven operators died in subsequent explosions.
• The drilling rig burnt out and sank, and a massive oil spill was released into the Gulf of Mexico. It took a further 83 days to stop the flow, resulting in massive clean-up operations around the Gulf and still unmeasured damage to marine ecology.
• At least thirty separate decisions increased risks during design, installation and testing.
• Investigators criticized the way all operations were conducted. Had well tests been carried out without errors and omissions, key risk indicators would have been uncovered. System safety was never a prime consideration in documentation or reported discussions. Regulation also failed.

38
Q

Financial Crisis

A

• The financial crisis peaked to full scale panic in August and September 2008 when simultaneous failures of some of the world’s largest financial organisations were confirmed and banking confidence broke down.
• US Government policies throughout this period encouraged credit availability in general and home ownership in particular. This encouraged mortgage originators to relax qualification standards. Various categories of ‘sub-prime’ loans appeared.
• Banks repackaged blocks of mortgages into complex residential mortgage backed securities, attractive investments because of the high returns they provided. But this depended on high rate mortgage returns. This was only possible while house prices continued to rise.
• House prices in the US increased each year from 1997 to 2006, by an average of 150%. By 2007 house prices had become unsustainable, and in most regions were starting to fall. Exposed firms ran out of cash.
• Tight knit financial services organisations lost confidence in each other and credit dried up.
• The structure of the banking system caused risk to accumulate in a handful of global financial institutions. Some of these were tightly regulated but in others, regulation was lax or otherwise not fit for purpose.

39
Q

Regulators might be directed to help key financial organisations …

A

improve strategic decision making, become more risk aware, and strengthen corporate governance of high-risk operations.

40
Q

COVID-19 shows what can happen if a potentially serious risk is not …

A

identified or properly assessed.

41
Q

Grenfell illustrates the consequences of a known risk which was ..

A

ignored or hidden in unstructured bureaucracy.

42
Q

Most disasters have multiple causes. Often a combination of events exposes …

A

weaknesses in complex systems or dependant activities.

43
Q

Risk management methods and procedures need to be monitored to see if they are being followed. They also need to be reviewed to see if they are effective in carrying out …

A

risk policy and strategy.

44
Q

Auditors will look for evidence that conversations and meetings …

A

have taken place, that information has been accessed and that records have been kept.

45
Q

Reviews will try and establish how effective procedures are in terms of achieving their …

A

objectives.

46
Q

Comparing your performance with best practice examples on a regular basis is the essence of

A

benchmarking.

47
Q

By adopting the best of other people’s ideas, your own system and performance can be …

A

incrementally enhanced.

48
Q

The best organisations embrace risk management concepts as an integral part of their …

A

culture. It is an essential element of good corporate governance and best management practice.