Risk Management Flashcards
The ability to not just withstand high-impact events or shocks, but to improve and benefit from them
Antifragility
Designed to change the probability of a risk event occurring and/or the degree of its impact on the org’s objectives
Risk Management Strategies
Known Knowns (ISO)
Events to be expected, involve little uncertainty
Known Unknowns
Uncertainties we know exist, but don’t know about their probability or impact
Unknown Unknowns
Risks we don’t know exist - rare, major impact
Kaplan and Mike’s 3 risk categories
- Internal and preventable
- Strategy
- External
Components of Enterprise Risk
strategic, operational, financial, and hazards
Recognized as meeting the highest level of social responsibility, sustainability, and well-being of employees, communities, and environment
Certified B Corporations
3 Barriers to risk management
- Structural
- Cognitive
- Cultural
Steps of the Risk Management process
- Establish the context of the risk
- Identify and analyze risks
- Manage risks
- Evaluate
Risk Position
The org’s desired gain or acceptable loss in value, influenced by its risk appetite and risk tolerance
Single loss expectancy
Expected monetary loss every time a risk occurs
Annualized loss expectancy
Expected monetary loss over a 1-yr period
One party engages in risky behavior knowing it is protected because another party will incur any resulting loss
Moral Hazard
An agent makes decisions on behalf of a principal but has personal incentives not aligned with principal
Principal-Agent Problem
Person or org has potential to be influenced by two opposing incentives
Conflict of interest
Risk Control
Action taken to manage a risk
Mutually Exclusive and Comprehensively Exhaustive (MECE)
The org wants to be confident it has identified all plausible risks for all strategic and operational aspects, but wants to avoid duplication or overlapping identification
Orgs should take all possible steps to ensure health, safety, and well-being of employees and protect from foreseeable injury
Duty of Care