Chapter 2 - Risk Management Flashcards
What is risk management?
Process of understanding and managing the risks that the organisation is inevitably subject to in attempting to achieve its corporate objectives
What is conformance?
Avoiding downside risk
Controlling hazards or threats
‘bad things do happen’
What is performance?
Benefitting from upside risk
Maximising return or opportunity
‘good things might not happen’
What is enterprise risk management (ERM)
‘A process, effected by an entity’s board of directors, management and other personnel, applied in strategy setting and across the enterprise, designed to identify potential events that may affect the entity, and manage risk to be within its risk appetite, to provide reasonable assurance regarding the achievement of entity objective.
What is the eight components of the COSO ERM framework?
Internal environment
Objective setting
Event identification
Risk assessment
Risk response
Control activities
Information & communication
Monitoring
What is the five components of the ERM-intergrating strategy and performance?
Governance and culture
Strategy and objective setting
Performance
Review and revision
Information, communication and reporting
What is the benefits of ERM?
Enhanced decision making by intergrating risks
Improvement in investor confidence, and hence shareholder value
Focus of management attention on the most significant risks
A common language of risk management
Reduced cost of finance
What is risk appetite?
Amount of risk an organisation is willing to accept in pursuit of value
What is risk capacity?
Amount of risk that the organisation can bear
What is risk attitude?
Overall approach to risk, in terms of the board being risk averse or risk seeking
What is residual risk?
Risk that business faces after its controls have been considered
What are the features of a risk management strategy?
Statement of organisations attitude to risk
Risk appetite of the organisation
Objective of the risk management strategy
Culture of the organisation in relation to risk
Responsibilities of managers
References should be made to the risk management systems the company uses
Performance criteria should be set so that the effectiveness of risk management can be evaluated
What are the four objectives of ERM?
Strategic
Operating
Reporting
Compliance