Risk Management at the Deutsche Bundesbank March 2011

Size: px
Start display at page:

Download "Risk Management at the Deutsche Bundesbank March 2011"

Transcription

1 Risk Management at the Deutsche Bundesbank March 2011 (C) Deutsche Bundesbank - Division Organisation 1

2 Agenda Definition of risk management [3] Factors of influence to review the RM set up [4] The Framework [5] Governance structure of the Bundesbank [6-19] Risk structure [20] Risk Management Process [21-32] (C) Deutsche Bundesbank - Division Organisation 2

3 Definition Risk management Risk management is a logical and systematic method of identifying, analysing, treating and monitoring risks. Risk management system Early identification of risks Handling of risks Monitoring of risks Identification of risks Evaluation of risks Communication of risks Controls Internal audit (C) Deutsche Bundesbank - Division Organisation 3

4 Factors of influence financial impact reputational impact by example to review the RM set up damage to persons crisis 2004 recommendations of internal & external auditors legal background (C) Deutsche Bundesbank - Division Organisation 4

5 The Framework Contents Aims and structure of the framework Legal background Definitions Aims and functions of risk management Risk culture Expertises and responsibilities Risk structure Risk management process Early identification of risks Identification of risks Risk evaluation Communication of risks Handling of risks Monitoring of risks Implementation after the approval by the board in March 2006 published to the staff via intranet (C) Deutsche Bundesbank - Division Organisation 5

6 Governance structure of the Bundesbank (C) Deutsche Bundesbank - Division Organisation 6

7 Governance structure of the Bundesbank (C) Deutsche Bundesbank - Division Organisation 7

8 Governance structure of the Bundesbank Responsibilities The Executive Board has the overall responsibility for the management of risks is basically responsible for decision making approves a risk tolerance policy and residual risks in specific risk zone receiver of aggregated risk reports (C) Deutsche Bundesbank - Division Organisation 8

9 Governance structure of the Bundesbank Business areas are responsible for the operational risk management according to their tasks overall the whole Bundesbank (decentralisation) The heads of departments are responsible for the identification, assessment and mitigation of their own risks. In some areas, such as the risk management of foreign reserves and other portfolios, IT- security and general security, related tasks are performed by central work units. (C) Deutsche Bundesbank - Division Organisation 9

10 Governance structure of the Bundesbank Office for Risk Control Department Financial Stability Area V Department Statistics This unit is dealing with market risks such as currency risks, interest rate risks, counterparty risks and liquidity risks. It is responsible for the risk management of foreign reserves and other portfolios. Office For Risk Control (C) Deutsche Bundesbank - Division Organisation 10

11 Governance structure of the Bundesbank IT- Security Management Department Information Technology Area VI IT- Security Management Department Markets Supports the board and the business areas in questions concerning IT-Security and is responsible for the design and maintenance of firewalls, evaluation of information from proxy server, the maintenance and enhancement of IT- security concepts. (C) Deutsche Bundesbank - Division Organisation 11

12 Governance structure of the Bundesbank IT Security relationship with ORM Operational risks emerging from this entity are subject to the ORM methodology Regulations/methodologies in the area of IT security are risk treatment measures Horizontal nature of IT risks have to be considered (C) Deutsche Bundesbank - Division Organisation 12

13 Governance structure of the Bundesbank Division Organisation Area III The Division Organisation is part of the Department Department Controlling, Accounting and Organisation Department Human Resources Department Administration & Premises Controlling, Accounting Division and Organisation. Organisation ERM Office Security and Crisis Management (C) Deutsche Bundesbank - Division Organisation 13

14 Governance structure of the Bundesbank Division Organisation ERM Office In context with risk management, the ERM Office is responsible for the maintenance and enhancement of the risk management framework, the methodology, documentation and coordination. In that context business areas are supported to ensure the ORM methodology is properly used, results of risk assessments are checked (plausibility check) and (C) Deutsche Bundesbank - Division Organisation 14

15 Governance structure of the Bundesbank Division Organisation ERM Office analyses conducted as well as reports of the business areas summarised and an annual report drawn up. Besides the ERM Office is involved in the development and rollout of an operational risk management methodology at ESCB/Eurosystem level and stays in close contact with other central banks worldwide to exchange experiences. (C) Deutsche Bundesbank - Division Organisation 15

16 Governance structure of the Bundesbank Division Organisation C 35: Security and Crisis Management Topic centre for questions concerning general security Design and maintenance of the security framework Business-Continuity-Planning, Crisis Management (C) Deutsche Bundesbank - Division Organisation 16

17 Governance structure of the Bundesbank Internal Audit Department Economics Area I Department Audit The Internal Audit is directly responsible to one of the board members of the Deutsche Bundesbank. It is as an independent entity not being involved in the working processes. (C) Deutsche Bundesbank - Division Organisation 17

18 Governance structure of the Bundesbank Internal audit relationship with ORM Assures the integrity of the RM system and compliance with regulations Makes proposals to enhance the RM system use of self assessment results to set up their audit plans (risk based approach) Interaction with/ consultation of ORM/ERM unit while auditing business areas Operational risks subject to the ORM methodology ORM/ERM office can be part of the internal audit [pending on internal set up and mission of the internal audit] (C) Deutsche Bundesbank - Division Organisation 18

19 Governance structure of the Bundesbank Internal audit IT Department ERM Office Office for Risk Control Office for Risk control (C) Deutsche Bundesbank - Division Organisation 19

20 Risk structure Reputational loss Financial loss Damage to persons Business Risks Operational Risks Currency Risks Interest Rate Risks Counterparty Risks Liquidity Risks Gold price Risks Employee Risks Human Failures Incorrect Conduct Misallocation Of Staff Inadequate Qualification Of Staff Technical Risks IT Risks Critical Infrastructure External Risks Primary Maintenance Risks Dependencies On Third Parties Negative Press Coverage Legal Risks Natural Risks General Security Risks (C) Deutsche Bundesbank - Division Organisation 20

21 Identification of risks Task of business areas Identification should be output oriented with regard to the underlying task Root causes have also to be identified and documented Helpful information could be gathered from: Audit reports (internal as well as external) Test reports (IT-systems) Incident data bases (C) Deutsche Bundesbank - Division Organisation 21

22 Risk assessment As a basic principle, a risk at the Deutsche Bundesbank can result in the following three categories of losses: Financial loss Damage to persons Reputational loss Each of these categories is evaluated for each risk partly in a qualitative and partly in a quantitative way Risk Event = Probability of loss occuring Event X Impact Event (C) Deutsche Bundesbank - Division Organisation 22

23 Risk assessment grading scales Risk likelihood grading scale Likelihood level Criteria 5 - Almost certain 4 - Likely 3 - Possible 2 - Unlikely 1 - Rare Frequency of loss events Every year or more Once every 1-2 years Once every 2-5 years Once every 5-10 years Less than once every 10 years If no observable events: Qualitative criteria (fraud and attacks oriented) Motivation Personal gain... Attracting attention ( making a point ) Skills & knowledge Basic skills sufficient, knowledge not necessary Collaboration Traceability Time and cost <1 day < EUR year > EUR (C) Deutsche Bundesbank - Division Organisation 23

24 Risk assessment grading scales Financial Impact Personal Injuries Level Definition Level Definition Very high * high medium Very high high medium Numerous deaths Individual deaths Life-threatening injuries low negligible low negligible Major injuries Minor injuries (C) Deutsche Bundesbank - Division Organisation 24

25 Risk assessment grading scales Reputational Impact Level Very high high medium low negligible Definition The occurrence of an event can endanger the Bank's security for a lengthy period or cause critical damage to its interests. Examples: Criminal proceedings against individual members of the Bundesbank's governing bodies The occurrence of an event can endanger the Bank's security or cause major damage to its interests. Examples: The occurrence of an event can be of disadvantage to the Bank's interests. Examples: (C) Deutsche Bundesbank - Division Organisation 25

26 Risk tolerance policy Likelihood of loss occurring Almost certain rare unlikely possible likely Impact on overall loss negligible low medium high very high (C) Deutsche Bundesbank - Division Organisation 26

27 Risk treatment Policy of risk avoidance and risk limitation while implementing preventive measures Principles e.g. : Principle of hierarchy Editorial principle (to use a second set of eyes) Principle of separation of functions Principle that tasks, competences and responsibilities should be located within the same entity (C) Deutsche Bundesbank - Division Organisation 27

28 Risk treatment risk Risk and threat analysis Actual risk position Risk avoidance Concept of measures Insurances are only used in law driven issues Approval of the Executive Board Preventive measures Usually, there is no risk transfer Residual risk (C) Deutsche Bundesbank - Division Organisation 28

29 RMS at the Bundesbank Structure of the ORM template (C) Deutsche Bundesbank - Division Organisation 29

30 Communication of risks Risk reporting within the business areas Centralised risk reporting Report within business area (hierarchy) Periodical reports (e.g. daily report of market risks) Ad-hoc reporting if necessary Notification of loss Security relevant matters Compliance, money laundering, corruption Major projects... Centralised annual risk report (C) Deutsche Bundesbank - Division Organisation 30

31 Communication of risks Centralised annual risk report Annual risk report according to our risk management framework The business areas have to examine their risk assessment. The results were aggregated from the ERM Office. Report to the board and feedback to the business areas The board has to decide whether additional mitigation measures should be taken or not. (C) Deutsche Bundesbank - Division Organisation 31

32 Monitoring of risks Monitoring is part of the internal supervision by the head of each unit no formal KRI in place no centralised monitoring of KRI responsibility of business areas KRI are mainly qualitative indicators (C) Deutsche Bundesbank - Division Organisation 32

Practical aspects of determining and applying a risk appetite for SMEs

Practical aspects of determining and applying a risk appetite for SMEs Practical aspects of determining and applying a risk appetite for SMEs By Tim Timchur acis, Director, ActivePro Consulting Pty Ltd Important to determine appetite for risk before determining what risk

More information

ENTERPRISE RISK MANAGEMENT (ERM) POLICY Republic Glass Holdings Corporation. Purpose. Goals

ENTERPRISE RISK MANAGEMENT (ERM) POLICY Republic Glass Holdings Corporation. Purpose. Goals Purpose This Enterprise Risk Management Policy (the ERM policy) provides the framework for managing risks across ( RGHC or the Company ). It contains the policies to guide employees, management and the

More information

Perpetual s Risk Management Framework

Perpetual s Risk Management Framework Perpetual s Risk Management Framework Perpetual s Risk Management Framework Context Perpetual Limited (Perpetual) is a diversified financial services firm, listed on the Australian Securities Exchange.

More information

Business Auditing - Enterprise Risk Management. October, 2018

Business Auditing - Enterprise Risk Management. October, 2018 Business Auditing - Enterprise Risk Management October, 2018 Contents The present document is aimed to: 1 Give an overview of the Risk Management framework 2 Illustrate an ERM model Page 2 What is a risk?

More information

Nagement. Revenue Scotland. Risk Management Framework. Revised [ ]February Table of Contents Nagement... 0

Nagement. Revenue Scotland. Risk Management Framework. Revised [ ]February Table of Contents Nagement... 0 Nagement Revenue Scotland Risk Management Framework Revised [ ]February 2016 Table of Contents Nagement... 0 1. Introduction... 2 1.2 Overview of risk management... 2 2. Policy Statement... 3 3. Risk Management

More information

Policy Number: 040 Risk Management August 2018

Policy Number: 040 Risk Management August 2018 Policy Number: 040 Risk Management August 2018 Policy Details 1. Owner Manager, Business Services 2. Compliance is required by Staff, contractors and volunteers 3. Approved by The Commissioner 4. Date

More information

REGULATION. on Internal Governance Arrangements, the Management body and the Internal Capital Adequacy Assessment Process for Banks and Savings banks

REGULATION. on Internal Governance Arrangements, the Management body and the Internal Capital Adequacy Assessment Process for Banks and Savings banks Pursuant to point 1 of Article 58 and points 1, 2 and 3 of Article 135 of the Banking Act (Official Gazette of the Republic of Slovenia, No. 25/15; hereinafter: the ZBan-2) and the second paragraph of

More information

Executive Board Annual Session Rome, May 2015 POLICY ISSUES ENTERPRISE RISK For approval MANAGEMENT POLICY WFP/EB.A/2015/5-B

Executive Board Annual Session Rome, May 2015 POLICY ISSUES ENTERPRISE RISK For approval MANAGEMENT POLICY WFP/EB.A/2015/5-B Executive Board Annual Session Rome, 25 28 May 2015 POLICY ISSUES Agenda item 5 For approval ENTERPRISE RISK MANAGEMENT POLICY E Distribution: GENERAL WFP/EB.A/2015/5-B 10 April 2015 ORIGINAL: ENGLISH

More information

Risk Management Policy

Risk Management Policy Risk Management Policy Version: 3 Board Endorsement: 11 January 2014 Last Review Date: 3 January 2014 Next Review Date: July 2014 Risk Management Policy 1 Table of Contents 1 Introduction... 3 2 Overview...

More information

Risk Management Framework

Risk Management Framework Risk Management Framework Anglican Church, Diocese of Perth November 2015 Final ( Table of Contents Introduction... 1 Risk Management Policy... 2 Purpose... 2 Policy... 2 Definitions (from AS/NZS ISO 31000:2009)...

More information

ก ก Tools and Techniques for Enterprise Risk Management (ERM)

ก ก Tools and Techniques for Enterprise Risk Management (ERM) ก ก Tools and Techniques for Enterprise Risk Management (ERM) COSO ERM ISO ERM 31 2554 10:45 12:15.. 301, 302, 307 ก ก COSO Internal Control ERM Integrated Framework Application Technique ISO 31000 Guide

More information

RISK MANAGEMENT FRAMEWORK

RISK MANAGEMENT FRAMEWORK RISK MANAGEMENT FRAMEWORK 1. INTRODUCTION (Company) acknowledges that risk is inherent in its business. The Company s risk management framework is an important tool to guide the organisation towards achieving

More information

Subject SP9 Enterprise Risk Management Specialist Principles Syllabus

Subject SP9 Enterprise Risk Management Specialist Principles Syllabus Subject SP9 Enterprise Risk Management Specialist Principles Syllabus for the 2019 exams 1 June 2018 Enterprise Risk Management Specialist Principles Aim The aim of the Enterprise Risk Management (ERM)

More information

Nagement. Revenue Scotland. Risk Management Framework

Nagement. Revenue Scotland. Risk Management Framework Nagement Revenue Scotland Risk Management Framework Table of Contents 1. Introduction... 2 1.2 Overview of risk management... 2 2. Policy statement... 3 3. Risk management approach... 4 3.1 Risk management

More information

RISK AND BUSINESS CONTINUITY MANAGEMENT

RISK AND BUSINESS CONTINUITY MANAGEMENT RISK AND BUSINESS CONTINUITY MANAGEMENT EFFECTIVE: 18 MAY 2010 VERSION: 1.4 FINAL Last updated date: 29 September 2015 Uncontrolled when printed 2 Effective: 18 May 2010 CONTENTS 1 POLICY STATEMENT...

More information

Enterprise Risk Management Program

Enterprise Risk Management Program Enterprise Risk Management Program David W Sundvall, Risk Manager 3/2/2016 Page 0 of 12 Table of Contents Introduction... 2 Approach... 2 Risk Appetite... 3 Roles and Responsibilities... 3 Process... 4

More information

Risk Management: Principles, Methodologies and Techniques. Peter Getugi Internal Audit Manager ILRI

Risk Management: Principles, Methodologies and Techniques. Peter Getugi Internal Audit Manager ILRI Risk Management: Principles, Methodologies and Techniques Peter Getugi Internal Audit Manager ILRI NAIROBI 22 JUNE, 2010 Session Objectives What is Risk Management? Why is Risk Management importance rising?

More information

Procedure: Risk management

Procedure: Risk management Procedure: Risk management Purpose To outline the procedures involved for identification, assessment and management of risks. Procedure Introduction 1. This procedure outlines the University s Risk Awareness

More information

Risk Management at Central Bank of Nepal

Risk Management at Central Bank of Nepal Risk Management at Central Bank of Nepal A. Introduction to Supervisory Risk Management Framework in Banks Nepal Rastra Bank(NRB) Act, 2058, section 35 (a) requires the NRB management is to design and

More information

RISK COMMITTEE TERMS OF REFERENCE. The Board has resolved to establish a Committee of the Board to be known as the Risk Committee.

RISK COMMITTEE TERMS OF REFERENCE. The Board has resolved to establish a Committee of the Board to be known as the Risk Committee. RISK COMMITTEE TERMS OF REFERENCE Constitution The Board has resolved to establish a Committee of the Board to be known as the Risk Committee. Objective To identify and monitor risks to the Society s strategy,

More information

GOV : Enterprise Risk Management Policy

GOV : Enterprise Risk Management Policy Name: Responsibility: Complements: Enterprise Risk Management Framework Coordinator, Enterprise Risk Management GOV-080-005: Enterprise Risk Management Policy Draft Date: November 2006; January 2012 Revised

More information

Risk Management Strategy

Risk Management Strategy Risk Management Strategy 2016 2019 Version: 6 Policy Lead/Author & Deputy Director of Quality position: Ward / Department: Nursing Directorate Replacing Document: Version 5 Approving Committee Quality

More information

Fraud Risk Management

Fraud Risk Management Fraud Risk Management Fraud Risk Assessment Part 2 2017 Association of Certified Fraud Examiners, Inc. Fraud Risk Assessment Frameworks Frameworks are helpful for performing, evaluating, and reporting

More information

Risk management policy

Risk management policy Risk management policy November 2017 Risk management policy Page 0 of 8 Contents 1. Policy objectives and background 2 1.1 Policy background 2 1.2 Policy objective 2 1.3 Policy sponsor and maintenance

More information

MEMORANDUM. To: From: Metrolinx Board of Directors Robert Siddall Chief Financial Officer Date: September 14, 2017 ERM Policy and Framework

MEMORANDUM. To: From: Metrolinx Board of Directors Robert Siddall Chief Financial Officer Date: September 14, 2017 ERM Policy and Framework MEMORANDUM To: From: Metrolinx Board of Directors Robert Siddall Chief Financial Officer Date: September 14, 2017 Re: ERM Policy and Framework Executive Summary Attached are the draft Enterprise Risk Management

More information

ENTERPRISE RISK MANAGEMENT (ERM) GOVERNANCE POLICY PEDERNALES ELECTRIC COOPERATIVE, INC.

ENTERPRISE RISK MANAGEMENT (ERM) GOVERNANCE POLICY PEDERNALES ELECTRIC COOPERATIVE, INC. 1. Purpose: 1.1. Pedernales Electric Cooperative ( PEC ) is committed to delivering low-cost, reliable and safe energy solutions for the benefit of our members. In order to improve the likelihood of achieving

More information

RISK MANAGEMENT FRAMEWORK

RISK MANAGEMENT FRAMEWORK RISK MANAGEMENT FRAMEWORK 1. INTRODUCTION (Company) acknowledges that risk is inherent in its business. The Company faces a broad range of risks as a listed entertainment organisation. The Company s risk

More information

Certified Enterprise Risk Professional (CERP) Test Content Outline

Certified Enterprise Risk Professional (CERP) Test Content Outline Certified Enterprise Risk Professional (CERP) Test Content Outline SECTION 1: RISK GOVERNANCE Domain 1: Board and Senior Management Oversight (8%) Task 1: Provide relevant, timely, and accurate information

More information

Risk Evaluation, Treatment and Reporting

Risk Evaluation, Treatment and Reporting Chapter 8 Risk Evaluation, Treatment and Reporting In the previous chapter we looked at how risks are identified, described and estimated using a likelihood and consequences matrix. This is an essential

More information

Risk Management. Webinar - July 2017

Risk Management. Webinar - July 2017 Risk Management Webinar - July 2017 Compiled by: Raaghieb Najjaar, Yaeesh Yasseen & Rashied Small Adapted and Facilitated by: Professor Enslin J. van Rooyen Risk Management - June 2017 2 Defining Risk

More information

Romanian Court of Accounts RISK MANAGEMENT 24 April 2012 Warsaw, Poland

Romanian Court of Accounts RISK MANAGEMENT 24 April 2012 Warsaw, Poland Romanian Court of Accounts RISK MANAGEMENT 24 April 2012 Warsaw, Poland 1 INTOSAI GOV 9100 Guidelines for Internal Control Standards in Public Sector and INTOSAI GOV 9130 Further Information on Entity

More information

Risk Management. Seminar June Compiled by: Raaghieb Najjaar, Yaeesh Yasseen & Rashied Small

Risk Management. Seminar June Compiled by: Raaghieb Najjaar, Yaeesh Yasseen & Rashied Small Risk Management Seminar June 2017 Compiled by: Raaghieb Najjaar, Yaeesh Yasseen & Rashied Small Defining Risk Risk reflects the chance that the actual event may be different than the planned / expected

More information

There are many definitions of risk and risk management.

There are many definitions of risk and risk management. Definition of risk There are many definitions of risk and risk management. The definition set out in ISO Guide 73 is that risk is the effect of uncertainty on objectives. In order to assist with the application

More information

Risk Management Policy

Risk Management Policy DYNAMIC ARCHISTRUCTURES LIMITED Risk Management Policy DYNAMIC ARCHISTRUCTURES LIMITED Regd. Address: 409, Swaika Centre, 4A Pollock Street, Kolkata - 700001 (West Bengal) CONTENTS Sr. Particulars Page

More information

Market Operations Traineeship Programme (graduate level)

Market Operations Traineeship Programme (graduate level) Market Operations Traineeship Programme (graduate level) Reference 2014-218-TRA EXT Type of contract Who can apply Salary Working time Place of work Closing date for applications Traineeship of between

More information

HSC Business Services Organisation Board

HSC Business Services Organisation Board Paper BSO 25/2009 HSC Business Services Organisation Board Risk Management 1. Purpose of this report The purpose of this report is to brief the Board on the BSO Risk Management process. 2. Background HSC

More information

RISK REGISTER POLICY AND PROCEDURE

RISK REGISTER POLICY AND PROCEDURE RISK REGISTER POLICY AND PROCEDURE Lead Manager: Head of Clinical Governance Responsible Director: Board Medical Director Approved by: Date Approved: Date for Review: Feb 2012 Replaces Version: 1.0 Page

More information

Risk Management. Policy No. 14. Document uncontrolled when printed DOCUMENT CONTROL. SSAA Vic

Risk Management. Policy No. 14. Document uncontrolled when printed DOCUMENT CONTROL. SSAA Vic Document uncontrolled when printed Policy No. 14 Risk Management DOCUMENT CONTROL Version: Date approved by Board: On behalf of Board: Jack Wegman 17 March 2015 26 March 2015 Denis Moroney President Next

More information

Energize Your Enterprise Risk Management

Energize Your Enterprise Risk Management Energize Your Enterprise Risk Management Presented By Mark Caiazzo, CISA, CISM, CRISC Tammy Michaud, CPA May 15, 2017 Reviewed: Agenda Enterprise Risk Management Defined Benefits of ERM Key Components

More information

28 July May October 2016

28 July May October 2016 Policy Name Risk Management Policy & Procedure Related Policies and Legislation AISWA Guidelines Risk Management Policy Category Planning & Management Relevant Audience Date of Issue / Last Revision All

More information

Approved by: Diocesan Council 17 December 2015

Approved by: Diocesan Council 17 December 2015 DIOCESAN COUNCIL POLICY 39 Risk Management Approved by: Diocesan Council 17 December 2015 1 PREAMBLE The Perth Diocesan Trustees under the authority of the Diocesan Trustees Statute 1952 have the responsibility

More information

Risk Assessment Policy

Risk Assessment Policy Risk Assessment Policy Updated: April 2018 Date of next Review: April 2019 Policy Lead: Bursar Checked by: Middle Leadership Team 1. INTRODUCTION Beachborough School will have hazards which if not controlled

More information

Risk Management. Policy and Procedures

Risk Management. Policy and Procedures Risk Management Policy and Procedures POLICY SCHEDULE Policy title Policy owner Policy lead contact Approving body Date of approval/review Related Guidelines and Procedures Review interval Risk Management

More information

Kidsafe NSW Risk Management Plan. August 2014

Kidsafe NSW Risk Management Plan. August 2014 Kidsafe NSW Risk Management Plan August 2014 Document Control Document Approval Name & Position Signature Date Document Version Control Version Status Date Prepared By Comments Document Reviewers Name

More information

INTERNAL AUDIT AND OPERATIONAL RISK T A C K L I N G T O D A Y S E M E R G I N G R I S K S T O G E T H E R

INTERNAL AUDIT AND OPERATIONAL RISK T A C K L I N G T O D A Y S E M E R G I N G R I S K S T O G E T H E R INTERNAL AUDIT AND OPERATIONAL RISK T A C K L I N G T O D A Y S E M E R G I N G R I S K S T O G E T H E R Operational Risk Management Today Companies are struggling to obtain a holistic view of risk and

More information

An Overview of the Enterprise Risk Management Process

An Overview of the Enterprise Risk Management Process An Overview of the Enterprise Risk Management Process Laureen Regan, Ph.D. Fox School of Business and Management Temple University What is Enterprise Risk Management? Risk Management is "the culture, processes

More information

An Introductory Presentation for ECU Staff

An Introductory Presentation for ECU Staff Risk Management at ECU An Introductory Presentation for ECU Staff Phillip Draber Manager, Risk and Assurance Outcomes By the end of this session you should: Be able to complete and document risk management

More information

Policy on Anti Money Laundering and Countering Terrorist Financing

Policy on Anti Money Laundering and Countering Terrorist Financing Policy on Anti Money Laundering and Countering Terrorist Financing Adopted by Date of adoption Applies for Group Framework Owner Distribution Language version Information class Basis the Board 22 June

More information

CITY OF JOHANNESBURG METROPOLITAN MUNICIPALITY GROUP RISK AND ASSURANCE SERVICES GROUP RISK MANAGEMENT POLICY

CITY OF JOHANNESBURG METROPOLITAN MUNICIPALITY GROUP RISK AND ASSURANCE SERVICES GROUP RISK MANAGEMENT POLICY CITY OF JOHANNESBURG METROPOLITAN MUNICIPALITY Effective Date 1 July 2015 TABLE OF CONTENTS 1. POLICY STATEMENT... 3 2. POLICY CONTEXT... 4 3. PURPOSE... 5 4. POLICY SCOPE AND APPLICATION... 6 5. RISK

More information

Risk Management Framework. Group Risk Management Version 2

Risk Management Framework. Group Risk Management Version 2 Group Risk Management Version 2 RISK MANAGEMENT FRAMEWORK Purpose The purpose of this document is to summarise the framework which Service Stream adopts to manage risk throughout the Group. Overview The

More information

AIA Group Limited. Terms of Reference for the Board Risk Committee

AIA Group Limited. Terms of Reference for the Board Risk Committee AIA Group Limited AIA Restricted and Proprietary Information Issued by : Board of AIA Group Limited Date : 26 February 2018 Version : 7.0 Definitions 1. For the purposes of these terms of reference (these

More information

2.2 For Board Members to approve the five high risks the Trust is facing:

2.2 For Board Members to approve the five high risks the Trust is facing: HEREFORD HOSPITALS NHS TRUST PUBLIC BOARD MEETING 28 TH JANUARY 2011 COMPANY SECRETARY S REPORT NICOLA.LICENCE@HHTR.NHS.UK BOARD ASSURANCE FRAMEWORK 1.0 INTRODUCTION 1.1 The attached Board Assurance Framework

More information

BERGRIVIER MUNICIPALITY. Risk Management Risk Appetite Framework

BERGRIVIER MUNICIPALITY. Risk Management Risk Appetite Framework BERGRIVIER MUNICIPALITY Risk Management Risk Appetite Framework APRIL 2018 1 Document review and approval Revision history Version Author Date reviewed 1 2 3 4 5 This document has been reviewed by Version

More information

Risks and uncertainties facing the business

Risks and uncertainties facing the business Identifying and managing our risks The Board is responsible for the Group s system of risk management and internal control. Risk management is recognised as an integral part of the Group s activities.

More information

RISK MANAGEMENT GUIDELINES

RISK MANAGEMENT GUIDELINES RISK MANAGEMENT GUIDELINES Purpose of Guidelines These guidelines outline the way South West Healthcare operates its Risk Management Program and are to assist the organisation, its divisions, departments

More information

USF System Compliance & Ethics Program. Risk Assessment Process. Enterprise-Wide Risk Assessment

USF System Compliance & Ethics Program. Risk Assessment Process. Enterprise-Wide Risk Assessment USF System Compliance & Ethics Program Risk Assessment Process Enterprise-Wide Risk Assessment Risk Assessment Process Risk Assessment: A disciplined, documented, and ongoing process of identifying and

More information

Sections of the ORSA Report

Sections of the ORSA Report Lessons Learned From Orsa Reviews Impact on Risk Focused Examination NAIC Insurance Summit INS Companies Joe Fritsch, Director INS Companies Don Carbone, Exam Manager INS Companies Sections of the ORSA

More information

Risk Management Process-02. Lecture 06 By: Kanchan Damithendra

Risk Management Process-02. Lecture 06 By: Kanchan Damithendra Risk Management Process-02 Lecture 06 By: Kanchan Damithendra Risk Analysis Risk Register The main output of the risk identification process is a list of identified risks and other information needed to

More information

Risk Management Policy

Risk Management Policy Risk Management Policy Contents Executive summary... 3 Aim & introduction... 3 Definitions... 3 Consequence... 3 Event... 3 Likelihood... 3 Risk... 4 Risk Appetite... 4 Risk Management... 4 Risk Management

More information

An introduction to Operational Risk

An introduction to Operational Risk An introduction to Operational Risk John Thirlwell Finance Dublin, 29 March 2006 Setting the scene What is operational risk? Why are we here? The operational risk management framework Basel and the Capital

More information

WHITE PAPER FOUR PRACTICAL WAYS TO CAPTURE AND MONITOR RISK APPETITE

WHITE PAPER FOUR PRACTICAL WAYS TO CAPTURE AND MONITOR RISK APPETITE WHITE PAPER FOUR PRACTICAL WAYS TO CAPTURE AND MONITOR RISK APPETITE 90 CAPTURE AND MONITOR RISK APPETITE 2 FOUR PRACTICAL WAYS TO CAPTURE AND MONITOR RISK APPETITE Many organisations are grappling with

More information

Guidelines for Financial Assurance Planning

Guidelines for Financial Assurance Planning For Global Fund Grants Guidelines for Financial Assurance Planning June 2016 Geneva, Switzerland The financial assurance plan provides improvements to the way the Global Fund obtains financial assurance

More information

Topic RISK MANAGEMENT Procedure Category Risk Management Updated 07/2011

Topic RISK MANAGEMENT Procedure Category Risk Management Updated 07/2011 Topic RISK MANAGEMENT Procedure 07.01 Category Risk Management Updated 07/2011 RELATED POLICIES, PROCEDURES AND FORMS Policies Procedures Forms Risk Management Policy Code of Conduct Public Interest Disclosure

More information

Additional reporting and disclosures

Additional reporting and disclosures Additional reporting and disclosures Corporate governance The EBRD is committed to the highest standards of corporate governance. Responsibilities and related controls throughout the Bank are properly

More information

Delivering Clarity to Credit Unions Through Expertise and Experience

Delivering Clarity to Credit Unions Through Expertise and Experience Jeff Owen, The Rochdale Group September 2012 Delivering Clarity to Credit Unions Through Expertise and Experience Enterprise Risk Management Lending Execution and Risk Management Merger Strategy and Realization

More information

Version: th November 2010 RISK MANAGEMENT POLICY

Version: th November 2010 RISK MANAGEMENT POLICY Version: 1.2-25th November 2010 RISK MANAGEMENT POLICY Document History Document Location To be completed. Revision History Date of this revision: 17/09/2010 Date of next revision: N/A Revision Number

More information

An Update On Association Policies, Health Checks & Guidelines To A Safer Hockey Association. Lauren Woods Member Engagement & Operations

An Update On Association Policies, Health Checks & Guidelines To A Safer Hockey Association. Lauren Woods Member Engagement & Operations An Update On Association Policies, Health Checks & Guidelines To A Safer Hockey Association Lauren Woods Member Engagement & Operations Association Health Checks Issues arising from the health check: 3/27

More information

Business Conduct Possible Approach

Business Conduct Possible Approach Business Conduct Possible Approach Financial Supervision Authority, Romania Insurance Sector Business Conduct and Intermediaries Supervision Directorate Calin Rangu, Director Objective of Business Conduct

More information

Senior arrangements, Systems and Controls. Chapter 13. Operational risk: systems and controls for insurers

Senior arrangements, Systems and Controls. Chapter 13. Operational risk: systems and controls for insurers Senior arrangements, Systems and Controls Chapter Operational risk: systems and controls for insurers SYSC : Operational risk: Section.1 : Application.1 Application.1.1 SYSC applies to an insurer unless

More information

ENTERPRISE RISK MANAGEMENT (ERM) The Conceptual Framework

ENTERPRISE RISK MANAGEMENT (ERM) The Conceptual Framework ENTERPRISE RISK MANAGEMENT (ERM) The Conceptual Framework ENTERPRISE RISK MANAGEMENT (ERM) ERM Definition The Conceptual Frameworks: CAS and COSO Risk Categories Implementing ERM Why ERM? ERM Maturity

More information

Risk Management Strategy January NHS Education for Scotland RISK MANAGEMENT STRATEGY

Risk Management Strategy January NHS Education for Scotland RISK MANAGEMENT STRATEGY NHS Education for Scotland RISK MANAGEMENT STRATEGY January 2016 1 Contents 1. NES STATEMENT ON RISK MANAGEMENT 2 RISK MANAGEMENT STRATEGY 3 RISK MANAGEMENT STRUCTURES 4 RISK MANAGEMENT PROCESSES 5 RISK

More information

Scouting Ireland Risk Management Framework

Scouting Ireland Risk Management Framework No. SID 124A/15 Gasóga na héireann/scouting Ireland Issued Amended 20 th June 2015 Deleted Source: National Management Committee Scouting Ireland Risk Management Framework Revision Date Description # 20/06/2015

More information

Annual Accounts of the ECB

Annual Accounts of the ECB Annual Accounts of the ECB 2017 Management report 2 Financial statements of the ECB 24 Balance Sheet as at 31 December 2017 24 Profit and Loss Account for the year ending 31 December 2017 26 Accounting

More information

RISK MANAGEMENT FRAMEWORK

RISK MANAGEMENT FRAMEWORK RISK MANAGEMENT FRAMEWORK Approving authority Approval date University Council 5 August 2013 (3/2013 meeting) Advisor Vice President (Corporate Services) vpcorporateservices@griffith.edu.au (07) 373 57343

More information

Risk Management Strategy and Board Assurance Framework

Risk Management Strategy and Board Assurance Framework Risk Management Strategy and Board Assurance Framework Version 1.1 Ratified by Health Commissioning Board Date ratified Audit Committee in Common: 10 th October 2017 Heath Commissioning Board: 8 th November

More information

Integrated Risk Management Framework Sept Page 1 of 17

Integrated Risk Management Framework Sept Page 1 of 17 Integrated Risk Management Framework 2017-2018 Sept 2017 Page 1 of 17 Reference: Title: Author/Nominated Lead: Approval Date: Approving Committee: Review Date: Target Audience: Circulation List: Cross

More information

RISK MANAGEMENT POLICY

RISK MANAGEMENT POLICY RISK MANAGEMENT POLICY Approved by Governing Authority February 2016 1. BACKGROUND 1.1 The focus on governance in corporate and public bodies continues to increase. It resulted in an expansion from the

More information

Risk Management Policy and Procedures.

Risk Management Policy and Procedures. Risk Management Policy and Procedures. Rev Date Purpose of Issue/Description of Change Date 1. June 2006 Initial Issue 2. November 2009 Revised and updated 6 th November 2009 3. September 2010 Revised

More information

Risk Management Policy

Risk Management Policy Version: 2.0 New or Replacement: Policy number: Document author(s): Replacement ULHT-MD-GOV-RM-PMIMSI Paul White, Risk Manager Contributor(s): Members of the Trust Board & Senior Leadership Team Approved

More information

Best Practices in ENTERPRISE RISK MANAGEMENT. [ Managing Risks Holistically ]

Best Practices in ENTERPRISE RISK MANAGEMENT. [ Managing Risks Holistically ] Best Practices in ENTERPRISE RISK MANAGEMENT [ Managing Risks Holistically ] INTRODUCTIONS MODERATOR: Bob Lipps, JD, CPA PANELISTS: Ron Wilcox Abel Pomar Karen Gordon, Esq. THE EVOLUTION OF RISK Traditional

More information

PRINCIPLES FOR RISK MANAGEMENT IN NORGES BANK INVESTMENT MANAGEMENT LAID DOWN BY THE EXECUTIVE BOARD 10 JUNE 2009, LAST AMENDED 21 NOVEMBER 2018

PRINCIPLES FOR RISK MANAGEMENT IN NORGES BANK INVESTMENT MANAGEMENT LAID DOWN BY THE EXECUTIVE BOARD 10 JUNE 2009, LAST AMENDED 21 NOVEMBER 2018 PRINCIPLES FOR RISK MANAGEMENT IN NORGES BANK INVESTMENT MANAGEMENT LAID DOWN BY THE EXECUTIVE BOARD 10 JUNE 2009, LAST AMENDED 21 NOVEMBER 2018 1. Purpose and objective These principles represent our

More information

Traineeship (Graduate level)

Traineeship (Graduate level) Traineeship (Graduate level) Type of contract Who can apply EU nationals Salary band and benefits Working time Full-time Place of work Frankfurt am Main, Germany Closing date for applications 04 September

More information

Contents INTRODUCTION...4 THE STEPS IN MANAGING RISKS ESTABLISH GOALS AND CONTEXT IDENTIFY THE RISKS...8

Contents INTRODUCTION...4 THE STEPS IN MANAGING RISKS ESTABLISH GOALS AND CONTEXT IDENTIFY THE RISKS...8 Contents INTRODUCTION...4 THE STEPS IN MANAGING RISKS...4 1. ESTABLISH GOALS AND CONTEXT...5 2. IDENTIFY THE RISKS...8 Identifying the risks... 8 Identify the sources of the risks... 8 Identify the impact

More information

Report on Internal Control

Report on Internal Control Annex to letter from the General Secretary of the Autorité de contrôle prudentiel to the Director General of the French Association of Credit Institutions and Investment Firms Report on Internal Control

More information

Guidance Note Capital Requirements Directive Operational Risk

Guidance Note Capital Requirements Directive Operational Risk Capital Requirements Directive Issued : 19 December 2007 Revised: 13 March 2013 V4 Please be advised that this Guidance Note is dated and does not take into account any changes arising from the Capital

More information

1. Define risk. Which are the various types of risk?

1. Define risk. Which are the various types of risk? 1. Define risk. Which are the various types of risk? Risk, is an integral part of the economic scenario, and can be termed as a potential event that can have opportunities that benefit or a hazard to an

More information

FIRMA Nashville Tennessee April 21, 2015

FIRMA Nashville Tennessee April 21, 2015 FIRMA Nashville Tennessee April 21, 2015 Brian J. Pinkerton T. Kevin Whalen Enterprise risk management (ERM) is the process of planning, organizing, leading, and controlling the activities of an organization

More information

Subject ST9 Enterprise Risk Management Syllabus

Subject ST9 Enterprise Risk Management Syllabus Subject ST9 Enterprise Risk Management Syllabus for the 2018 exams 1 June 2017 Aim The aim of the Enterprise Risk Management (ERM) Specialist Technical subject is to instil in successful candidates the

More information

Common Safety Methods CSM

Common Safety Methods CSM Common Safety Methods CSM A common safety method on risk evaluation and assessment Directive 2004/49/EC, Article 6(3)(a) Presented by: matti.katajala@safetyadvisor.fi / www.safetyadvisor.fi Motivation

More information

Procedures for Management of Risk

Procedures for Management of Risk Procedures for Management of Policy Sponsor: Name of Parent Policy: Policy Contact: Procedure Contact: Vice President Finance and Administration Enterprise Management Policy Vice President Finance and

More information

Key risks and mitigations

Key risks and mitigations Key risks and mitigations This section explains how we control and manage the risks in our business. It outlines key risks, how we mitigate them and our assessment of their potential impact on our business

More information

GUIDELINE ON ENTERPRISE RISK MANAGEMENT

GUIDELINE ON ENTERPRISE RISK MANAGEMENT GUIDELINE ON ENTERPRISE RISK MANAGEMENT Insurance Authority Table of Contents Page 1. Introduction 1 2. Application 2 3. Overview of Enterprise Risk Management (ERM) Framework and 4 General Requirements

More information

Applying COSO s Enterprise Risk Management Integrated Framework. September 29, 2004

Applying COSO s Enterprise Risk Management Integrated Framework. September 29, 2004 Applying COSO s Enterprise Risk Management Integrated Framework September 29, 2004 Today s organizations are concerned about: Risk Management Governance Control Assurance (and Consulting) ERM Defined:

More information

DECISION ON RISK MANAGEMENT BY BANKS

DECISION ON RISK MANAGEMENT BY BANKS RS Official Gazette, Nos 45/2011, 94/2011, 119/2012, 123/2012, 23/2013 other decision 1, 43/2013, 92/2013, 33/2015, 61/2015, 61/2016, 103/2016 and 119/2017 Pursuant to Article 28, paragraph 7, Article

More information

Enterprise Risk Management in WFP

Enterprise Risk Management in WFP Enterprise Risk Management in WFP 28 February 2011 For this discussion, we will structure risks according to the Humanitarian Policy Group-commissioned paper Contextual Risk: Risk of state failure, return

More information

Pillar 3 Disclosures. Sterling ISA Managers Limited Year Ending 31 st December 2017

Pillar 3 Disclosures. Sterling ISA Managers Limited Year Ending 31 st December 2017 Pillar 3 Disclosures Sterling ISA Managers Limited Year Ending 31 st December 2017 1. Background and Scope 1.1 Background Sterling ISA Managers Limited (the Company) is supervised by the Financial Conduct

More information

Bournemouth Primary MAT Risk Management Policy

Bournemouth Primary MAT Risk Management Policy Bournemouth Primary MAT Risk Management Policy 1. Introduction The Bournemouth Primary Multi-Academy Trust (the Trust) operates a risk management system in order to identify and manage key exposures and

More information

Risk Management Plan PURPOSE: SCOPE:

Risk Management Plan PURPOSE: SCOPE: Management Plan Authority Source: Vice-Chancellor Approval Date: 16/05/2018 Publication Date: 17/05/2018 Review Date: 17/05/2021 Effective Date: 16/05/2018 Custodian: General Counsel and University Secretary

More information

The Risk of Economic Crime

The Risk of Economic Crime The Risk of Economic Crime 0 ACFE European Fraud Conference London, March 7, 0 GROUP SECURITY HERE TO PROTECT OUR WORLD Torsten Wolf Group Head of Crime and Fraud Prevention Agenda Introduction Economic

More information

An AIF shall be managed by a single AIFM responsible for ensuring compliance with the AIFM Law which shall either be:

An AIF shall be managed by a single AIFM responsible for ensuring compliance with the AIFM Law which shall either be: THE DELEGATION UNDER THE AIFM LAW The law of July 12, 2013 on alternative investment fund managers (the AIFM Law ) 1 regulates the authorisation, activities and transparency requirements of managers qualifying

More information