Risk Management
Risk: A probability or threat of damage, injury, liability, loss or any other negative
occurrence that is caused by external or internal vulnerabilities and that may be
avoided through pre-emptive action”
“a condition in which there exists a quantifiable dispersion in the possible outcome
from an activity”.
BUSINESS RISK
O Business or operational:
O relating to the activities carried out within an organisation
O Financial and Market:
O relating to the financial operation of a business
O Environmental:
O relating to changes in the political, economic, social and financial
environment.
O Reputational:
O caused by failing to address some other risk.
O International risk:
O risks associated with international operations can be classified as
transaction, translation, economic and political.
Business risk can affect AR. Business risks usually inherent risks
CR could be business risk
Risk Management
“The identification, analysis, assessment, control and avoidance, minimization, or
elimination of unacceptable risks. An organisation may use risk assumption, risk
avoidance, risk retention, risk transfer, or any other strategy (or combination of
strategies) in proper management of future events.”
, The process of risk management can be described as the identification, evaluation
and measurement, management and monitoring of all major risks with which the
company is faced.
BOD responsibilities
o The board must formulate a plan for RM strategy and process
o The IR should describe the efficiency of the above
o The responsibility of RM should be present from the charter and become RM
policy which is widely distributed
o Annual review of implementation and continuous monitoring
o RM should be part of new director induction
o Determine tolerance annually
o Determine risk appetite
o Constantly monitor if risk is within bounds of above
Role of AC or RC
Committee will consider RM policy and plan and risk management process
Committee consisting of minimum of 3 members majority INE and no SM
members
Meet at least 2 times a year and annual review
Annual formal RM review
Prioritise risks
Top down approach
Management Role
BOD delegate design and implementation of RM plan
Management give effect to RM strategy via implementation of systems and
processes
Management reportable to BOD for integrating RM into day to day operations
CRO should have access to and interact with BOD
Risk: A probability or threat of damage, injury, liability, loss or any other negative
occurrence that is caused by external or internal vulnerabilities and that may be
avoided through pre-emptive action”
“a condition in which there exists a quantifiable dispersion in the possible outcome
from an activity”.
BUSINESS RISK
O Business or operational:
O relating to the activities carried out within an organisation
O Financial and Market:
O relating to the financial operation of a business
O Environmental:
O relating to changes in the political, economic, social and financial
environment.
O Reputational:
O caused by failing to address some other risk.
O International risk:
O risks associated with international operations can be classified as
transaction, translation, economic and political.
Business risk can affect AR. Business risks usually inherent risks
CR could be business risk
Risk Management
“The identification, analysis, assessment, control and avoidance, minimization, or
elimination of unacceptable risks. An organisation may use risk assumption, risk
avoidance, risk retention, risk transfer, or any other strategy (or combination of
strategies) in proper management of future events.”
, The process of risk management can be described as the identification, evaluation
and measurement, management and monitoring of all major risks with which the
company is faced.
BOD responsibilities
o The board must formulate a plan for RM strategy and process
o The IR should describe the efficiency of the above
o The responsibility of RM should be present from the charter and become RM
policy which is widely distributed
o Annual review of implementation and continuous monitoring
o RM should be part of new director induction
o Determine tolerance annually
o Determine risk appetite
o Constantly monitor if risk is within bounds of above
Role of AC or RC
Committee will consider RM policy and plan and risk management process
Committee consisting of minimum of 3 members majority INE and no SM
members
Meet at least 2 times a year and annual review
Annual formal RM review
Prioritise risks
Top down approach
Management Role
BOD delegate design and implementation of RM plan
Management give effect to RM strategy via implementation of systems and
processes
Management reportable to BOD for integrating RM into day to day operations
CRO should have access to and interact with BOD
