What should management do for risk
Identify
Determine if risk is acceptable with appetite
Assess likelihood it will materialise
Cost v benefits
What are the categories of risk?
Strategic
Operational
What are examples of strategic risks?
Market Credit Liquidity Technological Legal Outsource Health and safety Reputation
Draw TARA diagram
Impact low to high
Probability low to high
Transfer > Avoid > Reduce > Accept
When would you transfer
House fire - insurance
When would you reduce
Internal controls, shop lifting > CCTV
When would you avoid
Exchange rate risk - hedging
Economic downturn - diversification
What are the characteristics of information?
Accurate Complete Cost beneficial User targeted Relevant Authoritative Timely Easy to use