Module 2 - Quiz 1 Flashcards
ORM - Operational Risks
- Internal Fraud
- External Fraud
- Employment Practices and Workplace Safety
- Clients, Products, and Business Practices
- Damage to Physical Assets
- Business Disruption and System Failures
- Execution, Delivery, and Process Management
SRM - Strategic Risks
- Strategy Development
- Strategy Execution
- Competitor
- Strategic Relationships
- Supply Chain Risk
- External Stakeholders
- Governance
- Legislative/Regulatory
- International risks
FRM – Financial Risks
- Market
- Credit
- Liquidity
- Systemic
- Economic
IRM - Insurance Risks
- Underwriting
- Claims
- Reserve
- Capital Adequacy Risk
- Solvency Risk
- Regulatory Capital Risk
- Economic Capital Risk
The Four Sources of Risk
- Holistic View
- Risk Appetite
- Risk Aggregation
- Reporting
Holistic View
ERM emphasizes the interconnectedness of these four types of risks and seeks to manage them in a coordinated manner
Risk Appetite
The organization defines its risk tolerance across all risks and ensures that exposures remain within its Risk Appetite
Risk Aggregation and Reporting
ERM frameworks ensure that risks are aggregated, quantified, and reported across the organization to ensure transparency and proactive management
Risk Management Objectives: Top of Cube
- Operations
- Reporting
- Compliance
Organizational Structure: Right Side of Cube
Cover every aspect of the business, from function level to entity level
Risk Components: Front of Cube (in order)
- Control Environment
- Risk Assessment
- Control Activities
- Information & Communication
- Monitoring
Risk Components have how many principles?
17
Control Environment
Board and senior management establish the tone at the top set of standards, processes, and structures that provide the basis/foundation
Risk Assessment
process of identifying, assessing, prioritizing, and responding to risks that can impact an entity’s ability to meet its business objectives
Control Activities
The actions established that help ensure management’s directives to mitigate risks. It’s performed at all levels of the entity.