Tools and Techniques 2: Assessment and measurement of risk Flashcards
What are the problems with aggregating risks across an organisation?
- Wide variety of risks involved
- Combining qualitative with quantitative
- different risk appetite thresholds at different levels of organisation
- risks not confined to individual hierarchies
- relationships between risks
- Continually changing business external and internal environment.
How do you overcome difficulty in aggregating risks?
Select more important risks and assign scores to them.
When do you multiply probabilities?
When the risks are independent
When do you add probabilities?
When the risks have a common exposure
When is there a correlation between two items?
When the value of one is directly related to the change in value of another
What must assessments take into consideration?
Likely future changes and whether they are within the organisation and it’s environment
What is the objective of a risk assessment?
To assess all identified risks in a consistent way and describe them in a common format
What is the objective of ERM?
To identify, analyse and control all the risks associated with an enterprise.
What is risk categorisation?
Put risks into categories and then look within the category to determine which risks are important and which can be ignored.
Why are risk categorisation systems important?
Enable an organisation to identify accumulations of similar risks and apply common risk control strategies
What will a good categorisation system allow for?
Risk to be looked at in various ways.
True of false - It is worth spending time experimenting with different categorisations systems before making a final decision?
True
What is one crucial distinction in classification of risks?
Timescale of risk
Map the risks to the impact in the business
Long term impact of risk - linked to strategic objectives
Medium term impact of risk - projects; processes; change programmes (acquisitions)
Immediate impact - disrupt current operations
Is there an international recognised risk categorisation standard?
No
What is frictional risk?
Effect of changes in legal, accounting, regulatory or credit agency requirements.
What is aggregation and diversification risk?
Risk of insurance claims not falling into planned distribution patterns.
What is COSO reporting?
US legal requirements to report accurate financial data
What is the FIRM classification?
Uses infrastructure to include core processes, marketplace to reflect business plans and opportunities.
This classification breaks down the external environment in which an organisation operates.
PESTLE