Prévia do material em texto

IDENTIFY
RISK
ASSESS
RISK
REVIEW
CONTROLS
CONTROL
RISK
RISK
MANAGEMENT
PROCESS
‹nº›
RISK MANAGEMENT PROCESS
WRITE YOUR SUBTITLE HERE
IDENTIFY
RISK
CONTROL
RISK
ASSESS
RISK
REVIEW
CONTROLS
‹nº›
2
RISK MANAGEMENT PROCESS
WRITE YOUR SUBTITLE HERE
IDENTIFY
RISK
CONTROL
RISK
ASSESS
RISK
REVIEW
CONTROLS
‹nº›
3
RISK MANAGEMENT PROCESS
WRITE YOUR SUBTITLE HERE
IDENTIFY
RISK
CONTROL
RISK
ASSESS
RISK
REVIEW
CONTROLS
The company identifies and defines potential risks that may negatively influence a specific company process or project.
 The risk is then further evaluated after determining the risk's overall likelihood of occurrence combined with its overall consequence.
Following up on both the risks and the overall plan to continuously monitor and track new and existing risks. 
During this step, companies assess their highest-ranked risks and develop a plan to alleviate them using specific risk controls. 
‹nº›
4
RISK MANAGEMENT PROCESS
WRITE YOUR SUBTITLE HERE
IDENTIFY
RISK
CONTROL
RISK
ASSESS
RISK
REVIEW
CONTROLS
‹nº›
5
RISK MANAGEMENT STRATEGIES
WRITE YOUR SUBTITLE HERE
CERTAIN
LIKELY
POSSIBLE
UNLIKELY
RARE
INSIGNIFICANT
MINOR
SIGNIFICANT
MAJOR
CATASTROPHIC
Low
Moderate
Moderate
Moderate
High
High
Moderate
Moderate
Extreme
High
High
Moderate
Extreme
Extreme
High
Moderate
SIGNIFICANCE
LIKELIHOOD
Low
Low
Low
Low
Low
Low
Low
Low
Low
‹nº›
CERTAIN
LIKELY
POSSIBLE
UNLIKELY
RARE
INSIGNIFICANT
MINOR
SIGNIFICANT
MAJOR
CATASTROPHIC
LOW
MODERATE
MODERATE
MODERATE
HIGH
HIGH
MODERATE
MODERATE
EXTREME
HIGH
HIGH
MODERATE
EXTREME
EXTREME
HIGH
MODERATE
SIGNIFICANCE
LIKELIHOOD
LOW
LOW
LOW
LOW
LOW
LOW
LOW
LOW
LOW
RISK ASSESSMENT MATRIX
WRITE YOUR SUBTITLE HERE
‹nº›
RISK ASSESSMENT MATRIX
WRITE YOUR SUBTITLE HERE
Low
Medium
High
Medium
Low
High
RISK CONSEQUENCE
RISK LIKELIHOOD
Risk Level:
Low
Medium
High
	#	RISK
DESCRIPTION	RISK MITIGATION PLAN
	1	Green marketing is a practice whereby companies seek to go above and.	Green marketing is a practice whereby companies seek to go above and.
	2	Green marketing is a practice whereby companies seek to go above and.	Green marketing is a practice whereby companies seek to go above and.
	3	Green marketing is a practice whereby companies seek to go above and.	Green marketing is a practice whereby companies seek to go above and.
‹nº›
RISK ASSESSMENT MATRIX
WRITE YOUR SUBTITLE HERE
Incidental
Minor
Serious
Major
Catastrophic
Unlikely
Remote
Seldom
Occasional
Frequent
CONSEQUENCE/SEVERITY
RISK LIKELIHOOD
‹nº›
RISK
LOW
HIGH
MIDDLE
RISK METER SLIDE
WRITE YOUR SUBTITLE HERE
‹nº›
RISK
MANAGEMENT
FRAMEWORK
IDENTIFY
MEASURE
MANAGE
MONITOR
REPORT
‹nº›
RISK
MANAGEMENT
FRAMEWORK
IDENTIFY RISK
CONTROL RISK
ASSESS RISK
REVIEW CONTROLS
The company identifies and defines potential risks that may negatively influence a specific company process or project.
Following up on both the risks and the overall plan to continuously monitor and track new and existing risks. 
 The risk is then further evaluated after determining the risk's overall likelihood of occurrence combined with its overall consequence.
During this step, companies assess their highest-ranked risks and develop a plan to alleviate them using specific risk controls. 
‹nº›
LOW
LOW
LOW
LOW
LOW
LOW
LOW
LOW
LOW
LOW
LOW
LOW
MEDIUM
MEDIUM
MEDIUM
MEDIUM
MEDIUM
MEDIUM
MEDIUM
MEDIUM
MEDIUM
HIGH
HIGH
HIGH
EXTREME
ALMOST
CERTAIN
LIKELY
POSSIBLE	
UNLIKELY
RARE
INSIGNIFICANT
MINOR
MODERATE
MAJOR
EXTREME
STRUCTURE
Green marketing is a practice whereby companies seek to go above.
STRUCTURE
Green marketing is a practice whereby companies seek to go above.
STRUCTURE
Green marketing is a practice whereby companies seek to go above.
STRUCTURE
Green marketing is a practice whereby companies seek to go above.
RISK ASSESSMENT MATRIX
WRITE YOUR SUBTITLE HERE
‹nº›
RISK
MANAGEMENT
CORRECTIVE ACTION
ASSESSMENT
IN-DEPTH MODEL
VALIDATION
VALIDATION REPORT
COMPLEXITY & MATERIAL
SCORING
BACK TESTING
RISK MEASURE
CONSISTENCY TESTS
INDEPENDENT
PLAUSABILITY TESTS
‹nº›
RISK MANAGEMENT PROCESS
WRITE YOUR SUBTITLE HERE
ESTABLISH THE
CONTEXT
IDENTIFY RISK
ANALYZE RISK
EVALUATE RISK
TREAT RISK
MONITOR &
REVIEW
RISK ASSESSMENT
‹nº›
INSTITUTIONAL RISK MATURITY
WRITE YOUR SUBTITLE HERE
NAIVE
AWARE
DEFINED
MANAGED
ENABLED
STRUCTURE
Has not yet developed an approach for risk management.
Risks are a nuisance, would rather avoid the talk of them.
Scattered silo based approach to risk management.
Mitigate risks as they become relevant.
Risk management strategy and policies in place and communicated across the organization.
Enterprise wide risk management approach considering risk at highest level but could be further enabled in decision making.
Risks taken on an informed basis.
Risk management is used to help manage multiple aspects of the institution.
‹nº›
IDENTIFY
RISK
CONTROL
RISK
ASSESS
RISK
REVIEW
CONTROLS
Document the risks and related events and bring together risk management related data in a risk register that includes risk description, severity and impact, consequences, risk rating, mitigation plan and related emerging issues.
Assess and measure identified risks using a set of criteria that includes impact, likelihood, controllability, and other determinants. Prioritize the risks and assist managers in determining which risks need to be addressed first.
RISK
MANAGEMENT
PROCESS
Leverage on established risk management frameworks to define a set of controls that mitigate those risks. Develop assessment plans to evaluate and ensure effectiveness of the controls, and assign to owners based on roles and responsibilities.
Provide up to date information on risk management across the enterprise, including risk-control assessments, near-misses, remediation statuses, successes, failures and trends. Drill-down at finer levels of detail on specific risks.
‹nº›
RISK MANAGEMENT
WRITE YOUR SUBTITLE HERE
REPORTS
AND
DOCS
RISK
TRACKER
RISK MANAGEMENT
WORKFLOW
DOCUMENTATION
AND REPORTING
HAZARD
ANALYSIS
RISK
REDUCTION PLAN
RISK
IDENTIFICATION
CLASSIFICATION
AND ASSESSMENT
RISK MITIGATION
CATION
‹nº›
RISK MANAGEMENT MODEL
WRITE YOUR SUBTITLE HERE
MEDIUM
HIGH
LOW
LOW
MEDIUM
HIGH
LIKELIHOOD
IMPACT
Intensive management
Requires monitoring and management
Close monitoring required
Management required
Management recommended
Risk may be accepted, but requires monitoring
Managed
Risk acceptable, requires regulation
Acceptable risk
‹nº›
ENTERPRISE RISK MANAGEMENT
WRITE YOUR SUBTITLE HERE
PHASE 1:
ASSESSMENT
PHASE 2:
PLANNING
PHASE 3:
COORDINATION
PHASE 4:
IMPLEMENTATION
Focus area: Leadership and governance
Focus area: Standards
Focus area: Integrating independent risk management activities
Focus area: Integrating independent internal control activities
‹nº›
‹nº›