Chapter 1 & 2 Flashcards
Name an organisations internal & external stakeholders
INTERNAL
Employees
Managers
Owners
EXTERNAL
Suppliers
Creditors
Shareholders
Government
Customers
Society
How can effective risk management add value to an organisations stakeholders?
Significant value is created by helping an organisation to achieve its objectives and protecting risk-adverse stakeholders from financial or physical harm.
What difference risk preferences can stakeholders have?
Risk-adverse
Risk-neutral
Risk-preferring
What are international risk standards for?
To improve the effectiveness of risk-management in organisations around the world.
What are the three most common areas for risk-management regulation?
Financial stability
Health & safety
Environmental protection
What is a risk?
A risk is an uncertain, random event which may occur in the future- it’s likelihood can only be estimated
A risk may prevent or delay the achievement of an organisations objectives/goals
Not all risks are bad and a certain level of risk can be good
Name 4 organisations that define risk and the key words
ISO 31000
Institute of Risk Management
Orange book form HMT
Institute of Internal Auditors
UNCERTAINTY/PROBABILITY/LIKELIHOOD
NEGATIVE/POSITIVE
CONSEQUENCES/IMPACT
What are the different types of risks?
FROGS
Financial
Reputational
Operational
Governance & Compliance
Strategic
Do stakeholders/shareholders want risk?
Most stakeholders will be more reluctant to take on unnecessary risk
Shareholders may have a greater appetite for risk because of
ASYMMETRIC RETURNS
LIMITED LIABILITY
DIVERSIFIED PORTFOLIOS
When may an organisation have to take risk? E.g. M&A
SUDS
Strategic
Undervalued
Defensive
Synergies
What can failure to manage risks lead to?
Bankruptcy
Legal & admin costs
Brand value depreciation
Selling assets below their market value
Losses to shareholder investments
Affected cash flow opportunities
Operation disruptions (e.g. fire, theft)
Environmental failure
Health and safety issues
Regulatory and government attention
Loss of talent
Missing opportunities
Name the different kinds of Risk Management regulation
Health and Saftey Regulation
Environmental Regulation
Legal Liability Regulations (compulsory insurance)
Industry specific - Financial Services
What is self-regulation?
Groups of organisations or professionals agree to set and enforce specific risk management standards.
Co-ordination and enforcement may be managed by a trade association or institute to help prevent the collapse of the self-regulatory agreement.
What are the advantages & Disadvantages to self-regulation?
Advantages:
1. Regulation is agreed and enforced by those being regulated.
2. Regulation is appropriate and proportionate,
3. Lower costs of compliance.
Disadvantages:
- Hard to sustain because of the limited incentives to enforce such an agreement.
- Many self-regulatory systems fail – such as financial services self-regulation in the UK in the 1980s and early 1990s
- Typically replaced by statutory regulation, enforced by a government-appointed regulatory body.
What forms of market/organisation opportunism and misconduct can affect stakeholders?
Asymmetric Information - Stakeholders do not have the same information on safety of a product as the organisation manufacturing it does.
Opportunism – Exploit of the customer’s lack of prior information by making products less safe/reliable than they could be. More savings but less safe. risks (e.g. Hover-boards being sold on Amazon – price ranging from 200 – 1000, fires cause by faulty batteries and wiring)
Public Goods – Risk management decisions which benefit the company but not the overall society. E.g. less investment in pollution prevention