B1-M2 Flashcards
Enterprise Risk Management
the culture, capabilities, and practices integrated with strategy setting and performance that organizations rely on to manage risk in creating, preserving and realizing value
5 components of Enterprise Risk Management
- Governance and Culture
- Strategy and Objective setting
- Performance
- Review and Revision
- Information, Communication, and Reporting
Governance and Culture
entity’s tone at the top, oversight responsibilities for ERM
Strategy and Objective setting
Define risk appetite, evaluates alternative strategies, formulates business objectives
Performance
risk is prioritized assessed and identified, implement risk responses
Review and Revision
assess substantial change, reviews risk and performance
Information, Communication, and Reporting
management uses relevant info, org reports on risk culture and performance
Inherent Risk
Risk to an entity in the absence of any direct or focused actions by management
Actual residual risk
Risk remaining AFTER management has taken action