Chapter 1 & 2 Flashcards

1
Q

Name an organisations internal & external stakeholders

A

INTERNAL
Employees
Managers
Owners

EXTERNAL
Suppliers
Creditors
Shareholders
Government
Customers
Society

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How can effective risk management add value to an organisations stakeholders?

A

Significant value is created by helping an organisation to achieve its objectives and protecting risk-adverse stakeholders from financial or physical harm.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What difference risk preferences can stakeholders have?

A

Risk-adverse
Risk-neutral
Risk-preferring

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are international risk standards for?

A

To improve the effectiveness of risk-management in organisations around the world.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are the three most common areas for risk-management regulation?

A

Financial stability
Health & safety
Environmental protection

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is a risk?

A

A risk is an uncertain, random event which may occur in the future- it’s likelihood can only be estimated

A risk may prevent or delay the achievement of an organisations objectives/goals

Not all risks are bad and a certain level of risk can be good

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Name 4 organisations that define risk and the key words

A

ISO 31000
Institute of Risk Management
Orange book form HMT
Institute of Internal Auditors

UNCERTAINTY/PROBABILITY/LIKELIHOOD
NEGATIVE/POSITIVE
CONSEQUENCES/IMPACT

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are the different types of risks?

A

FROGS

Financial
Reputational
Operational
Governance & Compliance
Strategic

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Do stakeholders/shareholders want risk?

A

Most stakeholders will be more reluctant to take on unnecessary risk

Shareholders may have a greater appetite for risk because of
ASYMMETRIC RETURNS
LIMITED LIABILITY
DIVERSIFIED PORTFOLIOS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

When may an organisation have to take risk? E.g. M&A

A

SUDS

Strategic
Undervalued
Defensive
Synergies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What can failure to manage risks lead to?

A

Bankruptcy
Legal & admin costs
Brand value depreciation
Selling assets below their market value
Losses to shareholder investments
Affected cash flow opportunities
Operation disruptions (e.g. fire, theft)
Environmental failure
Health and safety issues
Regulatory and government attention
Loss of talent
Missing opportunities

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Name the different kinds of Risk Management regulation

A

Health and Saftey Regulation
Environmental Regulation
Legal Liability Regulations (compulsory insurance)
Industry specific - Financial Services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is self-regulation?

A

Groups of organisations or professionals agree to set and enforce specific risk management standards.

Co-ordination and enforcement may be managed by a trade association or institute to help prevent the collapse of the self-regulatory agreement.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the advantages & Disadvantages to self-regulation?

A

Advantages:
1. Regulation is agreed and enforced by those being regulated.
2. Regulation is appropriate and proportionate,
3. Lower costs of compliance.

Disadvantages:

  1. Hard to sustain because of the limited incentives to enforce such an agreement.
  2. Many self-regulatory systems fail – such as financial services self-regulation in the UK in the 1980s and early 1990s
  3. Typically replaced by statutory regulation, enforced by a government-appointed regulatory body.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What forms of market/organisation opportunism and misconduct can affect stakeholders?

A

Asymmetric Information - Stakeholders do not have the same information on safety of a product as the organisation manufacturing it does.

Opportunism – Exploit of the customer’s lack of prior information by making products less safe/reliable than they could be. More savings but less safe. risks (e.g. Hover-boards being sold on Amazon – price ranging from 200 – 1000, fires cause by faulty batteries and wiring)

Public Goods – Risk management decisions which benefit the company but not the overall society. E.g. less investment in pollution prevention

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What costs are involved in risk management regulation?

A

Balance is needed – e.g. shareholder to receive fair returns.

Excessive costs due to:
Over-regulation or
Ineffective regulation,
Over reduction of risk

Compliance costs:
1.Maintaining a compliance function
2. Providing information to regulators.

17
Q

What is the purpose of global regulations?

A

A range of international laws and regulations that address the management of risk and tend to influence local laws/regulations.

These standards primarily help to share good practice, improving the effectiveness of risk management within organisations and delivering further value to their stakeholders.

These standards also help organisations to comply with international and local laws and regulations.

18
Q

What does Environmental regulation cover?

A

As Pollution (ground/air/water) is not fixed to one location but can move across boundaries.

  1. air quality
  2. water quality
  3. waste management
  4. contaminant clean-up
  5. chemical safety.

Legally binding treaties and subsidiary protocols also exist - Kyoto protocoal on climate change. These are usually incorporated into EU Directives.

19
Q

What can Financial instability trigger?

A
  1. worldwide economic problems
  2. restricting access to consumer and government credit,
  3. threatening the safety of saving deposits and disrupting payment systems.
20
Q

What does Health & Saftey regulations focus on?

A

1.Work-related sickness
2. Disease
3. Injury
4. Harmful actions of organisations located near to their homes.

21
Q

What are the different kinds of global regulation?

A

1.Rules
2. Guidance
3. Principles and outcomes based regulation
4. Risk-based regulation.

22
Q

What are can happen if you breach global regulations?

A

Rules are direct legal requirements, The contravention of a rule will lead to enforcement action can result in:
1. Fines
2. Imprisonment,
3. Civil or criminal sanction.

23
Q

What does ISO cover

A

The ISO provides a wide range of standards to help improve management practices

24
Q

What are the components/principles of the COSO ERM

A

Intergrating with strategy and performance

GRIPS
1.governance and culture
2. Review & Revision
3. Information, Communication & reporting
4.Performance
5. Strategy & Objective setting

25
Q

Summerise COSO ERM

A

Lengthy
Forcused on ERM
One Cube
Skewed to negative
Risk already exists
Risk and opportunites
more sequential process

26
Q

Summerise ISO 31000

A

Short
General approach to managing risk
priciples, framework and process
risk can be positive & negative
risk tied to achieveing objectives
opportunities also source of risk
more iterative process

27
Q

How does Corporate Governance link in with Risk Management?

A

Corporate governance = a system and related processes by which an organisation is directed and controlled

organisation needs to be directed and controlled in line with stakeholder expectations

Corporate Governance:
1. Set strategic objectives in line with stakeholders’ needs and expectations
2. Implement measures to identify, assess, monitor and control risks which could threaten their achievement.

Take all reasonable steps to ensure it determines the right to effectively, efficiently, and economically achieve its objectives

Should effectively manage, not eliminate risk and should ensure the long-term sustainability of the organisation

28
Q

What is the difference between Corporate Governance vs Risk Management

A

Risk Management - limiting risk exposure via the control of risks to an organisation’s strategic objectives.

Corporate Governance - relates to strategic level risk taking and may involve a significant increase in certain types of risk where there are opportunities to exploit.

Potential conflicts:
limiting risk Vs. increasing risk

29
Q

What Risk Management Principles does the UK Corp Gov have?

A

Boards, in particular the NEDs, are responsible for ensuring that effective risk management and internal control systems are in place regular monitoring and an annual formal review of effectiveness.

A board audit committee / separate board risk committee should normally be in place.

Information on the organisation’s principal risks and the soundness of its risk management and internal control systems should be provided in the annual report.

The board’s work on risk management should include consideration of the organisation’s appetite for risk, as well as embedding the desired risk culture.

30
Q

What are the principles of the OECD

A
  1. effective CG framework
  2. Rights of shareholder
  3. equitable treatment of shareholders
  4. Role of stakeholders in CG
  5. Disclosure and transparency
  6. Responsibilities of the Board
31
Q
A