Fundamentals of risk management: understanding, evaluating and implementing effective risk management
Saved in:
| Main Author: | |
|---|---|
| Format: | Book |
| Language: | English |
| Published: |
London u.a.
Kogan Page
2010
|
| Edition: | 1. publ. |
| Subjects: | |
| Online Access: | Inhaltsverzeichnis |
| Physical Description: | XXIV, 357 S. graph. Darst. |
| ISBN: | 9780749459420 9780749459437 |
Staff View
MARC
| LEADER | 00000nam a2200000 c 4500 | ||
|---|---|---|---|
| 001 | BV036460230 | ||
| 003 | DE-604 | ||
| 005 | 00000000000000.0 | ||
| 007 | t | ||
| 008 | 100519s2010 d||| |||| 00||| eng d | ||
| 020 | |a 9780749459420 |9 978-0-7494-5942-0 | ||
| 020 | |a 9780749459437 |c ebook |9 978-0-7494-5943-7 | ||
| 035 | |a (OCoLC)705515135 | ||
| 035 | |a (DE-599)BVBBV036460230 | ||
| 040 | |a DE-604 |b ger |e rakwb | ||
| 041 | 0 | |a eng | |
| 084 | |a QP 300 |0 (DE-625)141850: |2 rvk | ||
| 100 | 1 | |a Hopkin, Paul |e Verfasser |4 aut | |
| 245 | 1 | 0 | |a Fundamentals of risk management |b understanding, evaluating and implementing effective risk management |c Paul Hopkin |
| 250 | |a 1. publ. | ||
| 264 | 1 | |a London u.a. |b Kogan Page |c 2010 | |
| 300 | |a XXIV, 357 S. |b graph. Darst. | ||
| 336 | |b txt |2 rdacontent | ||
| 337 | |b n |2 rdamedia | ||
| 338 | |b nc |2 rdacarrier | ||
| 650 | 0 | 7 | |a Risikomanagement |0 (DE-588)4121590-4 |2 gnd |9 rswk-swf |
| 689 | 0 | 0 | |a Risikomanagement |0 (DE-588)4121590-4 |D s |
| 689 | 0 | |5 DE-604 | |
| 856 | 4 | 2 | |m HBZ Datenaustausch |q application/pdf |u http://bvbr.bib-bvb.de:8991/F?func=service&doc_library=BVB01&local_base=BVB01&doc_number=020332141&sequence=000002&line_number=0001&func_code=DB_RECORDS&service_type=MEDIA |3 Inhaltsverzeichnis |
| 999 | |a oai:aleph.bib-bvb.de:BVB01-020332141 | ||
Record in the Search Index
| _version_ | 1804142951251574785 |
|---|---|
| adam_text | Titel: Fundamentals of risk management
Autor: Hopkin, Paul
Jahr: 2010
Contents
Dedication v
List of Figures xvii
List of Tables xix
Preface xxiii
Acknowledgements xxv
Introduction 1
Part 1 Introduction to risk management 9
Learning outcomes for Part 1 9
Part 1 Further reading 10
1 Approaches to defining risk 11
Definitions of risk 11
Types of risks 13
Risk description 14
Inherent level of risk 16
Risk classification systems 16
Risk likelihood and magnitude 17
2 Impact of risk on organizations 20
Risk importance 20
Impact of hazard risks 21
Attachment of risks 22
Risk and reward 23
Risk and uncertainty 25
Attitudes to risk 26
viii Contents
Types of risks 28
Timescale of risk impact 28
Hazard, control and opportunity risks 29
Hazard tolerance 31
Management of hazard risks 32
Uncertainty acceptance 33
Opportunity investment 34
Development of risk management 36
Origins of risk management 36
Insurance origins of risk management 40
Specialist areas of risk management 41
Enterprise risk management 42
Levels of risk management sophistication 43
Risk maturity models 45
Principles and aims of risk management 46
Principles of risk management 46
Importance of risk management 47
Risk management activities 48
Efficient, effective and efficacious 49
Perspectives of risk management 50
Implementing risk management 52
Risk management standards 53
Scope of risk management standards 53
Risk management process 56
Risk management framework 56
COSO ERM cube 58
Features of RM standards 59
Control environment approach 2
Case study: Barclays Bank - risk management objectives * 3
Part 2 Risk strategy
65
Learning outcomes for Part 2
Part 2 Further reading ^
Contents ix
7 Risk management policy 67
Risk architecture, strategy and protocols 67
Risk management policy 69
Risk management architecture 72
Risk management strategy 72
Risk management protocols 73
Risk management guidelines 74
8 Risk management documentation 76
Record of risk management activities 76
Risk response and improvement plans 77
Event reports and recommendations 78
Risk performance and certification reports 79
Designing a risk register 79
Using a risk register 83
9 Risk management responsibilities 87
Allocation of responsibilities 87
Risk management and internal audit 88
Range of responsibilities 88
Statutory responsibilities of management 90
Role of the risk manager 92
Chief risk officer (CRO) 93
10 Risk architecture and structure 95
Risk architecture 95
Corporate structure 97
Risk committees 98
Risk communications 100
Risk maturity 101
Alignment of activities 103
11 Risk-aware culture 104
Styles of risk management 104
Defining risk culture 105
Components of a risk-aware culture 106
Measuring risk culture 107
x Contents
Risk culture and risk strategy 108
Establishing the context 108
12 Risk training and communication 110
Risk training and risk culture 110
Risk information and communication 111
Shared risk vocabulary 112
Risk information on an intranet 113
Risk management information systems (RMIS) 113
Consistent response to risk 115
Case study: Tesco - risk management responsibilities 117
Part 3 Risk assessment 119
Learning outcomes for Part 3 119
Part 3 Further reading 120
13 Risk assessment considerations 121
Importance of risk assessment 121
Approaches to risk assessment 122
Risk assessment techniques 123
Risk matrix 125
Risk perception 126
Risk appetite 127
14 Risk classification systems 131
Short, medium and long-term risks 131
Purpose of risk classification systems 132
Examples of risk classification systems 132
FIRM risk scorecard 134
PESTLE risk classification system 135
Hazard, control and opportunity risks 137
15 Risk likelihood and impact 140
Application of a risk matrix 140
Inherent and current level of risk 141
Control confidence 143
Contents xi
4Ts of risk response 143
Risk significance 144
Risk capacity 146
16 Loss control 148
Risk likelihood 148
Risk magnitude 149
Hazard risks 150
Loss prevention 151
Damage limitation 152
Cost containment 152
17 Denning the upside of risk 154
Upside of risk 154
Opportunity assessment 156
Riskiness index 157
Upside in strategy 160
Upside in projects 161
Upside in operations 162
18 Business continuity planning 163
Importance of BCP and DRP 163
Business continuity standards 164
Successful BCP and DRP 166
Business impact analysis (BIA) 168
BCP and ERM 168
Civil emergencies 169
Case study: Invensys - risks and uncertainties 171
Part 4 Risk and organizations 173
Learning outcomes for Part 4 173
Part 4 Further reading 174
19 Corporate governance model 175
Corporate governance 175
OECD principles of corporate governance 176
xii Contents
LSE corporate governance framework 177
Corporate governance for a bank 179
Corporate governance for a government agency 180
Evaluation of board performance 182
20 Stakeholder expectations 185
Range of stakeholders 185
Stakeholder dialogue 186
Stakeholders and core processes 188
Stakeholders and strategy 189
Stakeholders and tactics 189
Stakeholders and operations 190
21 Analysis of the business model 192
Simplified business model 192
Core business processes 193
Efficacious strategy 194
Effective processes 195
Efficient operations 196
Reporting performance 196
22 Project risk management 198
Introduction to project risk management 198
Development of project risk management 199
Uncertainty in projects 200
Project life cycle 200
Opportunity in projects 202
Project risk analysis and management 202
23 Operational risk management 205
Operational risk 205
Definition of operational risk 206
Basel II 207
Measurement of operational risk 208
Difficulties of measurement 210
Developments in operational risk 212
Contents xiii
24 Supply chain management 214
Importance of the supply chain 214
Scope of the supply chain 215
Strategic partnerships 216
Joint ventures 217
Outsourcing of operations 217
Risk and contracts 219
Case study: Hercules Incorporated - outsourcing logistics 221
Part 5 Risk response 223
Learning outcomes for Part 5 223
Part 5 Further reading 224
25 Enterprise risk management 225
Enterprise-wide approach 225
Definitions of ERM 226
ERM in practice 227
ERM and business continuity 229
ERM in energy and finance 229
Future development of ERM 231
26 Importance of risk appetite 233
Risk capacity 233
Risk exposure 235
Nature of risk appetite 236
Cost of risk controls 239
Risk management and uncertainty 240
Risk appetite and lifestyle decisions 242
27 Tolerate, treat, transfer and terminate 244
The 4Ts of hazard response 244
Risk tolerance 248
Risk treatment 248
Risk transfer 249
Risk termination 250
Project and strategic risk response 250
xiv Contents
28 Risk control techniques 253
Hazard risk zones 253
Types of controls 254
Preventive controls 257
Corrective controls 258
Directive controls 258
Detective controls 259
29 Control of selected hazard risks 261
Risk control 261
Control of financial risks 262
Control of infrastructure risks 265
Control of reputational risks 270
Control of marketplace risks 272
Learning from controls 273
30 Insurance and risk transfer 277
Importance of insurance 277
History of insurance 2 78
Types of insurance cover 279
Evaluation of insurance needs 281
Purchase of insurance 282
Captive insurance companies 284
Case study. Intercontinental Hotels Group - loss-control strategy 287
Part 6 Risk assurance and reporting 289
Learning outcomes for Part 6 289
Part 6 Further reading 290
31 Evaluation of the control environment 291
Nature of internal control ^
Purpose of internal control 292
Control environment 293
Features of the control environment 29^
CoCo framework of internal control 296
Risk-aware culture 298
Contents xv
32 Activities of the internal audit function 299
Scope of internal audit 299
Financial assertions 299
Risk management and internal audit 300
Risk management outputs 302
Role of internal audit 302
Management responsibilities 304
33 Risk assurance techniques 306
Audit committees 306
Role of risk management 308
Risk assurance 309
Hazard, control and opportunity risks 310
Control risk self-assessment 311
Benefits of risk assurance 312
34 Reporting on risk management 313
Risk documentation 313
Sarbanes-Oxley Act of 2002 314
Risk reports by US companies 315
Charities risk reporting 317
Public sector risk reporting 318
Government Report on National Security 320
35 Corporate social responsibility 321
CSR and corporate governance 321
CSR and risk management 322
CSR and reputational risk 323
CSR and stakeholder expectations 323
Supply chain and ethical trading 324
CSR reporting 326
36 Future of risk management 327
Review of benefits of risk management 327
Steps to successful risk management 328
Changing face of risk management 331
Concept of risk appetite 332
xvi Contents
Concept of upside of risk 333
Future developments 334
Case study: BP - risk reporting 336
Appendix A: Glossary of terms 338
Appendix B: Implementation guide 348
Index 351
Figures
1.1 Risk likelihood and magnitude 18
2.1 Attachment of risks 22
2.2 Risk and reward 24
4.1 7Rs and 4Ts of (hazard) risk management 40
4.2 Risk management sophistication 44
6.1 IRM risk management process 55
6.2 Components of an RM framework 57
6.3 COSO ERM framework 58
6.4 Risk management framework from BS 31100 60
6.5 Risk management process from ISO 31000 61
10.1 RM architecture for a large corporation 96
10.2 RM architecture for a charity 97
13.1 Risk appetite matrix (risk averse) 128
13.2 Risk appetite matrix (risk aggressive) 128
15.1 Personal risk matrix 140
15.2 Risk matrix and the 4Ts of hazard management 141
15.3 Inherent, current and target levels of risk 142
18.1 Model for business continuity planning 165
19.1 Corporate governance framework 178
19.2 Corporate governance in a government agency 180
20.1 Importance of core processes 188
21.1 Simplified business model 193
22.1 Project life cycle 201
26.1 Risk and uncertainty 234
26.2 Risk appetite, exposure and capacity (optimal) 237
26.3 Risk appetite, exposure and capacity (vulnerable) 238
xviii Figures
26.4 Illustration of control effect 239
26.5 Risk management and uncertainty 241
27.1 Types of controls for hazard risks 246
27.2 Risk versus uncertainty in projects 251
27.3 Risk versus reward in strategy 252
28.1 Hazard risk zones 254
29.1 Cost-effective controls 262
29.2 Cost-benefit analysis 274
29.3 Learning from controls 275
29.4 Risk and reward decisions 276
30.1 Role of captive insurance companies 285
31.1 Criteria of Control (CoCo) framework 293
32.1 Role of internal audit in ERM 303
Tables
1.1 Definitions of risk 12
1.2 Risk description 15
3.1 Categories of disruption 31
4.1 Definitions of risk management 37
4.2 Importance of risk management 38
4.3 7Rs and 4Ts of (hazard) risk management 39
5.1 Principles of risk management 47
6.1 Risk management standards 54
6.2 COSO ERM framework 59
7.1 Risk management framework 68
7.2 Risk management policy 70
7.3 Risk management protocols 71
7.4 Types of RM documentation 74
8.1 Format for a basic risk register 80
8.2 Risk register for a sports club 81
8.3 Risk register for a hospital 82
8.4 Project risk register 84
8.5 Risk register attached to a business plan 85
9.1 Risk management responsibilities 89
9.2 Historical role of the insurance risk manager 92
10.1 Responsibilities of the RM committee 99
10.2 Four levels of risk maturity 102
11.1 Risk-aware culture 106
12.1 Risk communications guidelines 111
12.2 Risk management information system (RMIS) 114
13.1 Techniques for risk assessment 123
xx Tables
13.2 Advantages and disadvantages of RA techniques 124
14.1 Risk classification systems 133
14.2 Attributes of the FIRM risk scorecard 135
14.3 PESTLE classification system 136
14.4 Personal issues grid 138
15.1 Benchmark tests for risk significance 145
16.1 Generic key dependencies 150
17.1 Upside of risk 155
17.2 Riskiness index 158
18.1 Key activities in business continuity planning 165
19.1 OECD principles of corporate governance 177
19.2 Nolan principles of public life 181
19.3 Evaluating the effectiveness of the board 183
20.1 Data for shareholders 187
22.1 PRAM model for project RM 203
23.1 ORM principles (Basel II) 208
23.2 Operational risk for a bank 209
23.3 Operational risk in financial and industrial companies 211
24.1 Risks associated with outsourcing 218
25.1 Definitions of enterprise risk management 226
25.2 Benefits of enterprise risk management 228
27.1 Description of the 4Ts of hazard response 245
27.2 Key dependencies and significant risks 247
28.1 Description of types of hazard controls 255
28.2 Examples of the hierarchy of hazard controls 255
30.1 Different types of insurance 280
30.2 Identifying the necessary insurance 282
31.1 Definitions of internal control 291
31.2 Components of the CoCo framework 294
32.1 Allocation of responsibilities ^
33.1 Responsibilities of the audit committee *
33.2 Sources of risk assurance ^
34.1 Risk report in a Form 20-F 316
34.2 Government risk reporting principles *
35.1 Scope of issues covered by CSR
Tables xxi
36.1 Achieving successful risk management 329
36.2 Implementation barriers and actions 330
|
| any_adam_object | 1 |
| author | Hopkin, Paul |
| author_facet | Hopkin, Paul |
| author_role | aut |
| author_sort | Hopkin, Paul |
| author_variant | p h ph |
| building | Verbundindex |
| bvnumber | BV036460230 |
| classification_rvk | QP 300 |
| ctrlnum | (OCoLC)705515135 (DE-599)BVBBV036460230 |
| discipline | Wirtschaftswissenschaften |
| edition | 1. publ. |
| format | Book |
| fullrecord | <?xml version="1.0" encoding="UTF-8"?><collection xmlns="http://www.loc.gov/MARC21/slim"><record><leader>01267nam a2200325 c 4500</leader><controlfield tag="001">BV036460230</controlfield><controlfield tag="003">DE-604</controlfield><controlfield tag="005">00000000000000.0</controlfield><controlfield tag="007">t</controlfield><controlfield tag="008">100519s2010 d||| |||| 00||| eng d</controlfield><datafield tag="020" ind1=" " ind2=" "><subfield code="a">9780749459420</subfield><subfield code="9">978-0-7494-5942-0</subfield></datafield><datafield tag="020" ind1=" " ind2=" "><subfield code="a">9780749459437</subfield><subfield code="c">ebook</subfield><subfield code="9">978-0-7494-5943-7</subfield></datafield><datafield tag="035" ind1=" " ind2=" "><subfield code="a">(OCoLC)705515135</subfield></datafield><datafield tag="035" ind1=" " ind2=" "><subfield code="a">(DE-599)BVBBV036460230</subfield></datafield><datafield tag="040" ind1=" " ind2=" "><subfield code="a">DE-604</subfield><subfield code="b">ger</subfield><subfield code="e">rakwb</subfield></datafield><datafield tag="041" ind1="0" ind2=" "><subfield code="a">eng</subfield></datafield><datafield tag="084" ind1=" " ind2=" "><subfield code="a">QP 300</subfield><subfield code="0">(DE-625)141850:</subfield><subfield code="2">rvk</subfield></datafield><datafield tag="100" ind1="1" ind2=" "><subfield code="a">Hopkin, Paul</subfield><subfield code="e">Verfasser</subfield><subfield code="4">aut</subfield></datafield><datafield tag="245" ind1="1" ind2="0"><subfield code="a">Fundamentals of risk management</subfield><subfield code="b">understanding, evaluating and implementing effective risk management</subfield><subfield code="c">Paul Hopkin</subfield></datafield><datafield tag="250" ind1=" " ind2=" "><subfield code="a">1. publ.</subfield></datafield><datafield tag="264" ind1=" " ind2="1"><subfield code="a">London u.a.</subfield><subfield code="b">Kogan Page</subfield><subfield code="c">2010</subfield></datafield><datafield tag="300" ind1=" " ind2=" "><subfield code="a">XXIV, 357 S.</subfield><subfield code="b">graph. Darst.</subfield></datafield><datafield tag="336" ind1=" " ind2=" "><subfield code="b">txt</subfield><subfield code="2">rdacontent</subfield></datafield><datafield tag="337" ind1=" " ind2=" "><subfield code="b">n</subfield><subfield code="2">rdamedia</subfield></datafield><datafield tag="338" ind1=" " ind2=" "><subfield code="b">nc</subfield><subfield code="2">rdacarrier</subfield></datafield><datafield tag="650" ind1="0" ind2="7"><subfield code="a">Risikomanagement</subfield><subfield code="0">(DE-588)4121590-4</subfield><subfield code="2">gnd</subfield><subfield code="9">rswk-swf</subfield></datafield><datafield tag="689" ind1="0" ind2="0"><subfield code="a">Risikomanagement</subfield><subfield code="0">(DE-588)4121590-4</subfield><subfield code="D">s</subfield></datafield><datafield tag="689" ind1="0" ind2=" "><subfield code="5">DE-604</subfield></datafield><datafield tag="856" ind1="4" ind2="2"><subfield code="m">HBZ Datenaustausch</subfield><subfield code="q">application/pdf</subfield><subfield code="u">http://bvbr.bib-bvb.de:8991/F?func=service&doc_library=BVB01&local_base=BVB01&doc_number=020332141&sequence=000002&line_number=0001&func_code=DB_RECORDS&service_type=MEDIA</subfield><subfield code="3">Inhaltsverzeichnis</subfield></datafield><datafield tag="999" ind1=" " ind2=" "><subfield code="a">oai:aleph.bib-bvb.de:BVB01-020332141</subfield></datafield></record></collection> |
| id | DE-604.BV036460230 |
| illustrated | Illustrated |
| indexdate | 2024-07-09T22:39:55Z |
| institution | BVB |
| isbn | 9780749459420 9780749459437 |
| language | English |
| oai_aleph_id | oai:aleph.bib-bvb.de:BVB01-020332141 |
| oclc_num | 705515135 |
| open_access_boolean | |
| physical | XXIV, 357 S. graph. Darst. |
| publishDate | 2010 |
| publishDateSearch | 2010 |
| publishDateSort | 2010 |
| publisher | Kogan Page |
| record_format | marc |
| spelling | Hopkin, Paul Verfasser aut Fundamentals of risk management understanding, evaluating and implementing effective risk management Paul Hopkin 1. publ. London u.a. Kogan Page 2010 XXIV, 357 S. graph. Darst. txt rdacontent n rdamedia nc rdacarrier Risikomanagement (DE-588)4121590-4 gnd rswk-swf Risikomanagement (DE-588)4121590-4 s DE-604 HBZ Datenaustausch application/pdf http://bvbr.bib-bvb.de:8991/F?func=service&doc_library=BVB01&local_base=BVB01&doc_number=020332141&sequence=000002&line_number=0001&func_code=DB_RECORDS&service_type=MEDIA Inhaltsverzeichnis |
| spellingShingle | Hopkin, Paul Fundamentals of risk management understanding, evaluating and implementing effective risk management Risikomanagement (DE-588)4121590-4 gnd |
| subject_GND | (DE-588)4121590-4 |
| title | Fundamentals of risk management understanding, evaluating and implementing effective risk management |
| title_auth | Fundamentals of risk management understanding, evaluating and implementing effective risk management |
| title_exact_search | Fundamentals of risk management understanding, evaluating and implementing effective risk management |
| title_full | Fundamentals of risk management understanding, evaluating and implementing effective risk management Paul Hopkin |
| title_fullStr | Fundamentals of risk management understanding, evaluating and implementing effective risk management Paul Hopkin |
| title_full_unstemmed | Fundamentals of risk management understanding, evaluating and implementing effective risk management Paul Hopkin |
| title_short | Fundamentals of risk management |
| title_sort | fundamentals of risk management understanding evaluating and implementing effective risk management |
| title_sub | understanding, evaluating and implementing effective risk management |
| topic | Risikomanagement (DE-588)4121590-4 gnd |
| topic_facet | Risikomanagement |
| url | http://bvbr.bib-bvb.de:8991/F?func=service&doc_library=BVB01&local_base=BVB01&doc_number=020332141&sequence=000002&line_number=0001&func_code=DB_RECORDS&service_type=MEDIA |
| work_keys_str_mv | AT hopkinpaul fundamentalsofriskmanagementunderstandingevaluatingandimplementingeffectiveriskmanagement |