Risk Flashcards
List four important corporate governance roles with risk
DMCC
- Defining the risk that the organization is prepared to take in delivering its strategy
- Ensuring risks are managed and understood
- Ensuring that robust internal controls are in place to manage risk
- Creating a risk culture
List four Business Risks
- Reputational risk: the risk of loss in customer loyalty or support due to an event that has damaged the company’s reputation.
- Competition risk: the risk that business performance will be affected because of the actions of the company’s competitors.
- Business environment risks: the risk that the business environment in which the company operates will change significantly. This may be due to political factors, regulatory factors, economic factors, social and environmental factors or technological factors.
- Liquidity risk: the risk that the company will have insufficient cash to settle all of its liabilities on time.
List four Governance Risks
SIPP
1.Structure – from boards and steering groups to business models and policy frameworks.
2. Processes – from new product processes and communication channels to operations, strategic planning and risk appetite.
3. Information – from financial performance and audit reporting to management, risk and compliance reporting.
4. People and culture – from leadership at the top to accountability and transparency throughout the organisation, including relationships with regulators.
What are the three main types of Internal Controls
- Preventative controls intended to prevent an adverse risk event from occurring, e.g. fraud by employees.
- Detective controls for detecting risk events when they occur, so that the appropriate person is alerted, and corrective action taken.
- Corrective controls for dealing with risk events that have occurred and their consequences.
What are the five stages for the development of a Risk Management System
DARM-R
- Definition & Identification
- Assessment
- Response
- Monitoring
- Reporting
List the six categories of risk used for purpose of identification
- Financial
- Liquidity
- Credit
- Operational
- Strategic
- Reputational
What is the formula to calculate a risk assessment
Risk Assessment = Likelihood Rating X Impact Rating
List 5 benefits of a risk management system?
OMPVC
- Increases the likelihood of achieving business objectives.
- Facilitates monitoring and mitigation of risk in key projects and initiatives.
- Provides a platform for regulatory compliance For financial performance
- Protects and enhances value by prioritising and focusing attention on managing risk across an organisation.
- Builds investor, stakeholder and regulator confidence.
What are examples of Corporate Governance roles within Risk
- Defining the risk that the organization is prepared to take in delivering its strategy
- Ensuring risks are managed and understood
- Ensuring that robust internal controls are in place to manage risks
- Creating a risk culture
List 4 benefits of a company having a risk committee
- Focused only on Risk
- Audit Committee may not have the required skills and experience
- The composition of the committee is not restricted by the requirements of the corporate governance code.
- It can give the board advice and make specific recommendations on risk appetite, the organisation’s risk tolerance and strategies to manage risk.
What is the recommended constitution for a Risk Committee?
- The risk committee should consist of at least three members, all of whom should be independent directors.
- The Committee should include at least one member of the audit committee and/or remuneration committee and/or include one non-executive director specifically responsible for risk.
- Members of the committee should have appropriate knowledge, skills, and expertise to fully understand risk appetite and strategy/members as a whole should have relevant risk expertise.
- The committee as a whole should have relevant competence relevant to the sector in which the company operates.
- The finance director/CFO and the chief risk officer should attend committee meetings regularly.
Provide five functions of a Risk Committee
- Overseeing the CRO’s role and responsibilities and providing direction on them.
- Monitoring the behaviour of management to ensure that there is not excessive risk taking and take appropriate actions if such behaviours are discovered.
- Providing assurance to the board that risk management and processes for control over risk are effective.
- Providing information to the board to help with strategy formulation
- Reviewing and approving statements to be included in the annual report concerning internal controls and risk management.
List 5 tasks of Internal Audit
- Value for Money (VFM) audits.
- Reviewing compliance by the organisation with particular laws or regulations.
- Risk management assessment
- Assessing Suitability of controls
- Reports To Audit Committee/Risk Committee and Board
What are five benefits of an internal Audit function
- Understands the organisation, its culture, operations and risk profile and can add value to the organisation’s processes
- Can build networks throughout the organisation, become integrated into the company’s business and as such become the ‘eyes and ears’ of the board
- Provide assurance to stakeholders on the integrity of the organisation’s systems
- Become an essential part of the checks and balances within the organisation
- could be a lower-cost option, depending on the make-up of the team.
List five areas of illicit activity is a whistleblowing policy designed to uncover?
- Fraud
- A serious violation of a law or regulation by the company or by directors, managers or employees within the company
- A miscarriage of justice
- Bribery
- Price-fixing
- Danger to public health or safety, such as dumping toxic waste in the environment or supplying food that is unfit for consumption
- Neglect of people in care
- Waste or misuse of public funds
- Bullying