Enterprise Risk Management (ISO 31000 and COSO ERM)

Genellikle neleri kapsar

1. 1

   From Silo Risk Management to Enterprise Risk Management

   • What Enterprise Risk Management Adds Over Silo Risk Management
   • The Portfolio View of Risk and Value
   • The Building Blocks of an ERM Programme
   • Recognising Tick-Box Registers and Risk Theatre
2. 2

   Frameworks and Governance: ISO 31000, COSO ERM and the Three Lines

   • ISO 31000:2018 Principles, Framework and Process
   • COSO ERM 2017: Five Components and Twenty Principles
   • Choosing and Combining ISO 31000 and COSO ERM
   • Board, Risk Committee and the Chief Risk Officer
   • The Three Lines Model, Risk Policy and Risk Charter
3. 3

   Risk Appetite and a Common Risk Language

   • Risk Appetite, Risk Tolerance and Risk Capacity
   • Writing a Risk Appetite Statement
   • Cascading Risk Appetite into Limits and Metrics
   • Building a Risk Taxonomy and a Common Risk Language
4. 4

   Identifying and Assessing Risk at Enterprise Level

   • Top-Down and Bottom-Up Risk Identification
   • Emerging Risks, Horizon Scanning and PESTLE
   • Consistent Assessment Scales and Risk Velocity
   • Interconnected Risks, Bow-Tie Thinking and Scenario Analysis
   • Simple Risk Quantification and Its Limits
5. 5

   Prioritising, Treating and Monitoring the Enterprise Risk Profile

   • Aggregating Risks into a Corporate Risk Profile
   • Treatment as a Portfolio: Cost–Benefit and Choice of Response
   • Designing Key Risk Indicators
   • Setting KRI Thresholds and Escalation
6. 6

   Making ERM Change Decisions: Integration, Reporting and Culture

   • Integrating Risk into Strategy and Business Planning
   • Integrating Risk into Budgets, Projects and Performance Management
   • Reporting Risk to the Board
   • Risk Culture, Incentives and Behaviour
7. 7

   Implementing, Maturing and Sustaining an ERM Programme

   • Implementing an ERM Programme in Phases
   • Assessing ERM Maturity and Driving Continual Improvement
   • Recovering a Programme That Has Become Risk Theatre
   • Putting It Together: An Integrated ERM Case