Module 3. How Risks can be identiffied and analyzed? Flashcards
is the process of determining potential risks to your business. The objective of this is to understand what is at risk within the context
of the Institution’s objectives.
Risk identification
Benefits of Risk Identification
- Identify potential threats to your business, both internal and external to become prepared for any possibilities.
- Assess your business vulnerabilities, knowing your weak spots can protect yourself from possible attacks.
- Make better decisions and avoid costly mistakes.
are useful for identifying, filtering and screening risks but it is important that these judgement based techniques be supplemented by more robust and sophisticated methods where possible, including quantitative techniques
Risk workshop and interview
Focus points of Risk Identification
(1) Strategic Risk Identification
(2) Operation Risk Identification
(3) Project Risk Identification
identify risks emanating from the strategic choices made by the Institution, specifically with regard to whether such choices weaken or strengthen the Institution’s ability to execute its Constitutional mandate:
Strategic Risk Identification
identify risks concerned with the Institution’s operations. It should seek to
establish vulnerabilities introduced by
employees, internal processes and systems,
contractors, regulatory authorities and
external events;
it should be an embedded continuous process to identify new and emerging risks and consider shifts in known risks through mechanisms such as management and committee meetings,
environmental scanning, process reviews and
the like; and
should be repeated when changes occur, or at least once a year, to identify new and emerging risks.
Operation Risk Identification
identify risks inherent to particular
projects. it should be identified
for all major projects, covering the
whole lifecycle; and
* for long term projects, the
project risk register should be
reviewed at least once a year to
identify new and emerging risks.
Project Risk Identification
How to perform Risk Identification?
- Undestand what to consider when identifying risks.
- Gather information from different sources to identify risks.
- Apply risk identification tools and techniques
- Document the risks identified
- Document your risks identification process
is comprehensive record of all risks across the institution or project depending on the purpose/context of the register
Risk register
Three main purpose of risk register
- A source of information to report the key risks throughout the institution
- For the management to focus their priorities risks.
- To help the auditors to focus their plans on the institutions’s top risks.
- framework including an assessment of
whether the risk is acceptable or whether it
needs to be treated; - a clear prioritization of risks (risk
profile); - accountability for risk treatment (may be
part of the risk treatment plan); and - timeframe for the risk treatment
Risk register
seeks to identify, measure, and mitigate various risk exposures or hazards facing a business, investment, or project.
Risk analysis
enables corporations, governments, and
investors to assess the probability that an adverse event might negatively impact a business, economy, project, or investment.
Risk assessment
Types of Rsk analysis
- Risk benefits
- Needs assessment
- Business impact analysis
- Root cause analysis
In this type of analysis, an analyst compares the benefits a company receives to the financial and nonfinancial expenses related to the benefits
Risk benefits