ERM Intro Flashcards
ERM
Discipline by which an organization any industry assesses, controls, exploits, finances, and monitors risks from all sources for the purpose of increasing the organization’s short- and long-term value to its stakeholders
ERM framework
A way to conceptualize ERM is two dimensions: one spanning the types, the other RM process
Defense Line 1: Operational Management
Own and manage risks
Defense Line 2: RM and Compliance Function
Monitor the risks, oversee noncompliance
Defense Line 3: Internal audit
Provide independent assurance
Criterion 1
Enterprise-wide Scope. Though most ERM program is focusing on the part where generating most revenue
Criterion 2
All risks. Major difficulty operational and strategy risk
Criterion 3
Key Risk focus. Focus on a relatively small list of risk, 10 to 30
Criterion 4
Integrated across Risk Types
Criterion 5
Aggregate Metrics. Aggregate exposure metrics and risk decision making to the enterprise level. Calculated metric of aggregate risk exposure + decision defining the target level of aggregate risk exposure
Criterion 6
Decision making. Responding to risk, managing it, make decisions. Many risk management programs merely identify and report, no decision making
Criterion 7
Balances risk and return management
Criterion 8
Appropriate risk disclosures (important to shareholders, they are aware if drop in share price)
3 core challenges
- Inability to quantify strategic and operational risk
- Unclear definition of risk appetite
- Lack of integration of ERM into decision making