Chapter 7 - Risk Management Roles & Responsibilities Flashcards

1
Q

Who is the overall management and direction of any organisation the responsibility of?

A

The board members - when become a member accept responsibilities and sets CLEAR OBJECTIVE FOR THE PEOPLE MANAGING the COMPANY

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the umbrella roles of directors & senior executives in risk management?

A
  • Duty to shareholders
  • Corporate governance
  • Supervising risk management
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What does the Companies Act 2006 legislate? Is there a caveat?

A

Requires consideration of:
- Likely long-term consequences of decisions
- Interest of employees
- Foster relationships
- Impact of organisation on community & environment
- Acting fairly

= RISK MANAGEMENT NOT SPECIFICALLY MENTIONED BUT CERTAINLY IMPLIED

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Define corporate governance:

A

The way a board sets up its organisation to achieve its OBJECTIVES along with the systems put in place which MANAGE and CONTROL the organisation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

When was the UK Corporate Governance Code introduced, what does it cover for the board?

A

The VOLUNTARY code applies to business with a premium listing on the London Stock Exchange, whether incorporated in the UK or overseas. The version was introduced in 2018 for accounting periods beginning 1st of Jan 2019:
- Ensure resources are in place to meet company OBJECTIVES
- Establish PROCEDURES to MANAGE risk, oversee control framework
- Carry out ASSESSMENT of the company’s emerging and principle risks and confirm in annual report
-> Requires remuneration arrangements to ensure reputational and other risks from excessive rewards
- Can also DELEGATE some tasks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is an executive?

A

= Someone who has ADMINISTATIVE or SUPERVISORY authority in the organisation, usually members of the Board and include:
CEO
COO
Director of Finance & HR
CRO

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is a non-executive director

A

Specialists in there field at running organisation which bring independent view to the decisions made by the board - not involved in day to day running, usually part-time and are there for THE PROTECTION OF SHAREHOLDERS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

When should the board delegate decisions to others?

A

All depends on the business, sometimes board makes all decisions whereas in others, simply rubber stamp for executive recommendations. Usually: board makes very major decisions, bulk of main decisions to executive officers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How does the board supervise risk management?

A
  1. Appoints a risk subcommittee
  2. CRO (Chief Risk Officer)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Define and explain the purpose/role of the risk subcommittee?

A

= Board selects individuals with approporiate risk backgrounds from executives & own members - DELEGATES risk ASSESSMENT and SUPRVERSION responsibilities to the subcomittee

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What does the risk subcommitee?

A
  • Sets policies and manages risk decisions
  • Keep board informed of all activities and seek approval where required
  • Ensures compliance with appropriate legislation and regulation relating to risk management
  • Publishing the risk management philosophy of an organisation
  • Implementing risk policies
  • Monitor and set up risk systems
  • Specify risk apetite
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is a chief risk officer (CRO)

A

The head of the enterprise risk management group function - as regulation increases, companies seek to cope with regulatory pressure and appoint a CRO. CRO is INDEPENDENT and will follow on judgement, untainted by ‘groupthink’

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is a risk manager?

A

= Job Titles vary as no set definition, organisations use term in different ways sometimes describing and individual role or context in part of another role

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the hierarchy of risk management roles & job related titles?

A
  1. Leadership (CRO, Director of Risk Management) - Works with governing body and senior execs, large influence of appetite for risk taking and decides shape of risk managerial roles
  2. Expert (Head of Risk Management, Risk Management Exec) - Develops & manages the policies and procedures set by board, monitors and reports on the organisation
  3. Support (Risk Analyst, Risk Management Officer, H&S Officer) - Focus on individual components of the RM process
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

A risk manager may have Board status, or be middle management or less. The scope of the
task varies on what?

A

Whether organisation is global, international or national & public or private & if operates in service or manufacturing sectors

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Explain what is meant by Group Risk Management & when it might be required.

A

= Large organisations may need extra layer of management supervision as different divisions or geography of the business. - may need a distinct team of people at the centre

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Describe some roles & responsibilities of the risk manager and risk team

A

= Effectively whole risk management process e.g – Drafting risk policy
- Writing risk appetite & tolerance statement
- Raising risk awareness in the organisation
- Help identify risk trends
- Identifying, anal and eval risks in designated area
- Maintaining risk register
etc etc.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What 3 sectors has much of the development of risk management originated in?

A
  • Insurance Industry
  • Workplace h&S
  • Financial risks of businesses
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

As risk management has developed what are some specialist areas which have appeared? - Explain the following areas of specialist risk management
1. Insurance (3 Examples)
2. Healthcare
3. Operational
4. Energy
5. Cyber

A
  1. Treatment of insurance risks e.g. limit of financial exposures, underwriting authority and geographical exposures
  2. Patient care
  3. Operational risks with the business (usually finance)
  4. Future energy risks e.g. price and exploration
  5. IT security
20
Q

Explain the role of the operational team in risk management, what is a realistic aim? What model is often adopted to ensure this?

A

= Operations is heart of the organisation - realistic aim is that ops managers, supervisors & employees should automatically thinking about risk.

How? Ensure operational colleagues are connected to risk management effort ensuring board, senior management, risk specialists, auditors & ops colleagues work together so adopt 3 LINES OF DEFENCE MODEL

21
Q

What are the 3 lines of the 3-line of defence model?

A
  1. functions that own & manage risk - formed by staff and managers responsible for identifying and managing risk for objectives
  2. Functions that oversee or specialise in compliance - frameworks, tools & techniques to support risk compliance managed at first line
  3. Functions that provide assurance - Internal audit
22
Q

How does the risk team pass on their expertise?

A

= Education - training courses, risk workshops, newsletters, campaigns and computer based training

23
Q

What is the difference between operational colleagues & risk team in relation to risk?

A

operation colleagues experts in the organisation and have appreciation for risk but risk team have deeper and broader knowledge of risk and management

24
Q

Reinforce: what is ERM?

A

= important element of corporate governance where risk management is embedded throughout an organisation and not kept as domain of specialist risks

25
Q

What is the difference between a centralised & de-centralised approach to risk management?

A

Centralised apprach is where firms have large head office where ops are managed from centre and de-centralised is where firms head office is small & management and ops are assigned to subsidiary of divisional management

26
Q

What are some advantages and dis-adv of a centralised approach?

A

Adv:
- Company can build centre of excellence in risk management e.g. strategy and roll out
- Aggregate reporting and data analytics to support org

Dis-adv:
- Not the same detailed knowledge that each business will have of risks
- Can slow down decision making process

27
Q

What is a hybrid approach to the risk management structure?

A

= Largely decentralised structure with small strategic risk management team reporting to CRO and setting standards (often through a group risk policy)

28
Q

What is the role of audit and the two main types?

A

Role = provide independent assurance that the organisation’s risk management, governance and control and operating effectively

External - seperate professional orgs entirely independent and assure STAKEHOLDERS standards are correct

Internal - within organisation providing assurance to BOARD that approved systems are operating as intended

29
Q

Risk management is supported by a range of outsourced service providers that offer
specialist knowledge and services on a fee basis. One of which is loss adjusters and loss assessors, please provide a comparison relating to what they have in common, who employs, the service provided, who pays and do they need to be used?

A

= Both offer professional expertise in evaluating and negotiating insurance claims

Loss assessor = employed by POLICYHOLDER, evaluates & negotiates claim on behalf of them, paid by PH, dont have to be used

Loss adjustor = employed by INSURER, confirms circumstances of the claim, extent of damage and recommendation of payment, INSURER pays fee, PH MUST COOPERATE WITH loss adjustor BUT dont have to be used in all claims

30
Q

What are forensic specialists? What do they do, who are the employed by, are there new fields, if so what are they?

A

= Scientific & engineering expertise to IDENTIFY CAUSE OF LOSS OR DAMAGE, commissions by INSURER, lawyers, police and companies e.g. cause of fires.
1. Forensic accounting - review business records to identify problems e.g. financial irregularities pertaining to embezzlement, fraud
2. Digital forensics - identity fraud etc and growth of cyber crimes

31
Q

What do legal services provide in relation to risk management service providers?

A

= MAINLY CONCERNING INSURANCE, employed by insurer, broker or PH in matters of death, injury and property damage e.g. disputing coverage

32
Q

What do corporate governance specialists do?

A

Specialist risk governance advisors offering skills to advise board members, directors & committees on policies and procedures

33
Q

How do valuation and appraisal specialists assist in risk management?

A

Ensure realistic sums insured - judging reinstatement value, declared value and indemnity

34
Q

When disaster strikes, which 3 specialists assist in getting client back to normal?

A
  1. BCM consultant - impact analysis, recovery strategies and maintaining plan
  2. Emergency response consultant - comes in when something goes wrong and puts plans into action
  3. Emergency property & restoration specialists - e.g. drying out and cleaning up floods
35
Q

What do risk management information software (RMIS) specialists do?

A

= Provide computing power to assist:
- Incident management -> record of all incidences & reports
- Insurance claims - all policy details, dates, costs etc.
- Exposure and asset management - record assets and levels of exposure and inform decisions to transfer risks
- Managing risk controls -

36
Q

In relation to risk analytics, what is the ‘big data’ problem? and how can risk analytics help in the risk management?

A

Refers to huge volumes of data becoming available to organisations everyday e,g records of everything: customer data, competitor data - VALUE AS MAKES CONNECTIONS AND PATTERNS

  • Combines maths, stats, predictive modelling, computer porcesing to filter the large quantities of data
37
Q

What is the role of HSE in regulating?

A
  • covers wide range of activities e.g. reviewing regulations, producing research & stats and guidance and tools
38
Q

What is the role of the UK Government, Foreign, Commonwealth & Development Office and Department for International trade in regulating risk management?

A

Provides geogrpahical & economic alanysis on overseas markets and guidance on potential risks e.g. human rights, bribery, corruption

39
Q

How does the PRA regulate risk managment?

A

= Supervises firms and steps in if not BEING RUN IN SAFE OR SOUND way

40
Q

What does the FCA do? What are is aims?

A

= Ensures financial industry RUN WITH INEGREITY
- Firms must provide appropriate products and services with CONSUMER BEST INTEREST AT HEART

41
Q

In what 2 ways is the FCA’s Consumer Duty relevant to risk management?

A

For consumers REDUCES risk with buying inappropriate insurance products
For insurer/broker introduces ADDITIONAL RISK OF NON-COMPLIANCE with regulations e.g. fines

Problem = firms presenting information making it hard for customers to make informed decisions

Solution = ending hidden charges, make it easy to switch products, clear and accessible consumer support and making sure information is clear and timely

From end of July 2023 applies to all new products and services and all existing products for renewal

42
Q

How does the CII Code of Ethics assist in the regulation of risk manahement?

A

The CII publication ‘Financially Inclusive Customer Outcomes: A companion to the CII Code
of Ethics’ summarises the key principles which insurance and personal finance professionals
should observe at each of the following four stages of their customer engagement process:
* Designing products and services.
* Marketing products and services.
* Engaging with customers for the first time.
* Servicing customers throughout the policy life cycle.

43
Q

What is a GRC structure?

A

Governance, risk and compliance = merge the structures & objectives by designing organisational structure which merges functions but remain independent

44
Q

What does analysis of corporate disasters reveal?

A

nearly all organisations suffering losses did not have embedded culture that emphasised risk management as an essential element of corporate governance or chose to avoid warnings

45
Q

What are the indicators risk management is truly embedded?

A

= Good practice in INMLEMENTING risk management processes - should DOCUMENT channels used, what records are established etc.
- Reviews - how effective procedures are
- Historical tests - see if worked
- New projects - ensure all risks are identified
- Looking for signs of ongoing awareness - embedded in handbooks and training Ing, news sheets and annual reports
- Benchmarking - testing international standards