RISKS Flashcards
External risks include
economic slowdown, regulatory changes, increasing competition, or damage to reputation
steps taken to deal with risk
risk management policy, board approval of policy and risk monitoring and reporting
UK risks law
Turnbull report, UKs governance code on how to assess and manage risk
US risks law
sarbanes oxley act 2002, on how to assess and manage risk
worldwide risks
Basel Agreements for the financial world
expectations of risk
organsiations, expected to take risks, risks shouldnt be avoided but leveraged
if a firm didnt take risks
it would still face risks from the external environment
audit committee (risks)
could take on risk committee tasks, but its backward looking so separate committee is better
risk management committee
consists of 4/5 INEDs, initially meet frequently and then meet 3/4 times a year
report to mains board and responsible for risk policy, procedure and plans
risk management officer
senior exec, reports to CEO, responsible for working with committee and develops policies and keeps in touch with insurers
levels of risks
SMO, strategic management and operational
strategic threat from outside
financial crisis, technological changes, new laws and regulations, trade wars
management hazards from activities
pollution, product recall, negative public attention (primark factory)
operational hazards from enterprise
health and safety, waste, employee theft, ethical breach
analysis of risks has 3 phases
recognition, assessment, evaluation
recognition, identify risks, threats and hazards
identifying risks, directors and staff can see the extent and still support activities
assessment, likely effect on business
risk assessment programme helps develop risk management policies
evaluation, probability of risk
look at the chance of occurring and the magnitude of the risk and then deal with it accordingly
4 methods of managing risk
avoid, mitigate, transfer and accept
avoid
dont undertake the activity
mitigate
undertake the activity but put in preventative controls to weaken the risk
transfer
transfer the risk to a third party, insurance, hedging, outsourcing
accept
undertake the activity and accept the risk to generate shareholder value
ERM
enterprise risk management information system
vital to record risk factors such as nature, effects, likelihood and decisions of management in regard to the risk