Important Concepts (CH 5) Flashcards
Four differences between RM and ERM
- Risk categories
- Strategic integration
- Performance metrics
- Organizational structure
Upside risk
the risk that an organization with outperform its strategic goals
RM focuses on what type of risks?
Pure risks and hazard risks
Attributes of ERM’s exposure spaces model
Resources, events, and impacts
Why is a strategic plan developed?
it is understood that a company’s business model will not survive indefinitely
Steps of integrating ERM
- Develop ERM goals
- Analyze, evaluate, and prioritize critical risks
- Treat critical risks, considering priority
- Monitor critical risks
Techniques for treating risks to strategy
- Avoid
- Accept
- Transfer
- Mitigate
- Optimize/exploit
ERM helps with:
- Advanced decision making - people have the full risk picture
- Improved risk communication - this can ultimately lead to stakeholder acceptance. Internally, the stakeholders build acceptance, external stakeholders feel confident the company’s reputation and assets are protected
ISO 2009
provides an international standard for risk management applicable within any industry sector. Consists of three major parts:
Principles, a framework, and processes for managing risks
BS 31100
British standard for principles/terminology of risk management and provides recommendations for the model, framework, process, and implementation of risk management
COSO II
published in 2004, defines ERM as a process that comes from a company’s BOD that establishes an enterprise-wide strategy to manage risks within the risk appetite
FERMA
Federation of European Risk Management Associations - establishes consistent terminology, process by with RM is executed, an organized structure, and RM goals
Basel II
issued by the Basel committee in 2004. Established an international standard that banking regulators can use when creating regs for the amount of capital banks need to keep in reserve to guard against financial and operational risks
Solvency II
established in 2007. Consists of regulatory requirements for insurance firms that operate in the EU
Business Model
the core aspects of an organization including its vision, mission, strategies, infrastructure, policies, offerings, and processes