Chapter 10: Risk Management Flashcards
What is the difference between risk and uncertainty?
Risk can be defined as “the possible variation in outcome from what is expected to happen”.
Uncertainty is “the inability to predict the outcome from an activity due to a lack of information”.
What are the two main types of risk?
Downside risk (pure risk) is the possibility that the outcome will be worse than expected – i.e. the worst case scenario.
Upside risk (opportunity risk) is the possibility that something could got better than expected – i.e. the best case scenario.
How do you measure risk?
The degree of risk that an organisation faces can be measured by considering two main issues.
Risk = Likelihood × Impact
What is the risk management process?
Risk management is the process of identifying and assessing (analysing and evaluating) risks and the development, implementation and monitoring of a strategy to respond to those risks.
What is risk appetite?
Risk appetite is the extent to which a company is prepared to take on risks in order to achieve its objectives.
What influences risk appetite?
- Expectations of shareholders
- National culture
- Regulatory framework
- Nature of ownerships
- Personal views of managers
What do Miles and Snow suggest the four main types of management attitudes are? (Reactors)
Reactors, Defenders, Analysers, Prospectors
Reactors:
Typical Characteristics
Inconsistent
Fail to link technology, structure and process to strategies
Approach to risk:
Risk averse
Only change if forced to do so
Strategies often out of date in changing markets
What do Miles and Snow suggest the four main types of management attitudes are? (Defenders)
Reactors, Defenders, Analysers, Prospectors
Defenders
Typical Characteristics:
Specialist provider of a specific product
Narrow area of operations
Management expertise
Stable, efficient
Approach to risk:
Low risk tolerance
Maintain share of chosen market
Ignore developments outside expertise
Grow incrementally
What do Miles and Snow suggest the four main types of management attitudes are? (Analysers)
Reactors, Defenders, Analysers, Prospectors
Analysers
Typical Characteristics:
Two business areas –
one stable (c.f. defenders) and one innovative (c.f. prospectors)
Approach to risk:
Balanced attitude to risk/return
Wait and see market reaction to new developments before committing
Then establish formal structures to ensure efficiency
What do Miles and Snow suggest the four main types of management attitudes are? (Prospectors)
Reactors, Defenders, Analysers, Prospectors
Prospectors
Typical Characteristics:
Continually changing structure/technology
Broad approach to planning
Results orientated
Wide portfolio
Risk seeking:
Entrepreneurial
Responsive to new trends
Seek new markets/products
What is risk identification? What can help you in the exam?
Risk identification sets out to identify an organisation’s exposure to risk.
Risks are fundamentally similar to threats.
You can use PESTEL analysis and Porter’s Five Forces model to help you to identify risks in the exam.
What is a risk assessment?
Risk assessment establishes the financial consequences of each risk (severity) and its likelihood of occurrence.
What are the potential difficulties of a risk assessment?
Measuring impact – the non-financial impact of potential outcomes could be difficult to quantify (e.g. loss of life).
Measuring likelihood – whilst insurance companies may be able to apply statistical models, measuring the likelihood of risks occurring for most businesses is likely to be subjective
What is risk evaluation? What should you consider?
Risk evaluation is the process by which a business determines the significance of any risk and whether those risks need to be addressed.
What is the likely cost?
What are the likely benefits?
Legal or regulatory requirements
Stakeholders views
Socioeconomic and environmental factors
What model should you use to assess risk response?
TARA
Transfer:
Transfer risk to a third party
e.g. insurance, hedging
Avoidance:
Avoid downside by not undertaking/terminating risky activities
Usually lose upside potential as well
Reduction:
Retain the activity but take action to limit risk to acceptable levels
Mitigating controls:
Preventative
Corrective
Directive
Detective
Acceptance/Retention:
Tolerating losses when they arise
For small risks could be cheaper than insurance (‘self insurance’)