ST5 Flashcards
Briefly explain ISO 31000: 2009 (Risk management standard)?
Using ISO 31000 can help organizations increase the likelihood of achieving objectives, improve the identification of opportunities and threats and effectively allocate and use resources for risk treatment.
What are the categories of risk?
- Operational risk
Think: Risks at the shop floor level - Compliance risk
Think: The risk of law and industry standards - Financial or business risk
Think: Risks due to money and finance - Programme or project risk
Think: Risks relating to specific projects - Technological/data risk
Think: Risks arising from IT and communication systems
-Strategic risk
Think: Risk at the highest levels of an organisation
-Speculative risk
Think: Risky undertakings and ventures
Define Operational risk?
Think: Risks at the shop floor level
Operational risk is at the lower levels of the organisation, i.e. where things get done (where a product is actually made, a service is rendered, etc.).
Define compliance risk?
Think: The risk of law and industry standards
Compliance risks are those risk that are associated with the need to comply with laws and regulations.
Define Financial or business risk?
Think: Risks due to money and finance
Financial or business risks are the risks that can affect a business in terms of its general financial viability. Financial risks are associated with the financial structure of an organisation, the transactions the organisation makes and the financial systems that may already be in place.
Define Programme or project risk?
Think: Risks relating to specific projects
Projects can often have a major impact on the direction of an organisation and ultimately its very success or failure managing this project risk is, therefore, an essential skill for any project manager or HSE professional.
Define Technological/data risk?
Think: Risks arising from IT and communication systems
This is risk associated with bringing new technology products to market or introducing new technology and IT systems into the organisational setting, both of which are high risk ventures.
Remember: IT-related risk is a speculative risk and, therefore, inherently high risk.
Define Strategic Risk?
Think: Risk at the highest levels of an organisation
Strategic risks that can affect the strategic direction and survival of an organisation.
Strategic risk also includes risks associated with poor business decisions, or the direction an organisation takes by management, as well as those risks arising from:
• Merger and acquisition activity
• Changes in customers or in customer demand
• Industry sector changes
• Research and development
• Financial imperatives
• New ‘vision’ for an organisation
Define Speculative risk?
Think: Risky undertakings and ventures
Speculative risks are prone to so many different variables that they cannot be quantified or controlled easily.
What are the two fundamental that risk management is based on?
- Risk Control
- Risk Financing
Define Risk Control?
Risk control: Primarily preventing losses from occurring by reducing the severity of losses from risks and/or reducing the frequency of losses occurring because of risks.
Define risk financing?
No organisation can fully prevent or eliminate all losses from risks that may be present in the organisation.
Define and explain SWOT analysis?
SWOT = Strengths, Weaknesses, Opportunities, Threats
A SWOT analysis is a strategic approach to planning whereby an organisation tries to ascertain its primary strengths and weaknesses, as well as the potential treats and opportunities for the organisation.
Define PESTE Analysis?
PESTE = Political, Economic, Social, Technological, Environmental
PESTEL = Add Legal
PEST = Discard Environmental
A PESTE/PESTEL/PEST analysis is a measurement tool used by an organisation to assess markets for a particular product or service provision at a given timeframe.
Define VUCA and explain?
VUCA is an acronym that is used to describe or reflect on the volatility, uncertainty, complexity and ambiguity that an organisation may face.