The COSO Framework for Internal Control
February 12, 2025
High-Performance teams can be of various types depending upon the objectives or the goals which are required to be fulfilled, which can be distinguished on the basis of the characteristics. Communication is the most pertinent factor which determines the level of cohesion or effectiveness of a team. According to the research study conducted by Ashridge […]
Most organizations expect their employees to dress well. One needs to dress appropriately as per the work culture for a pleasing personality. It is not necessary that you have to wear your business suits daily to work. A crisp white shirt teamed with a black well fit trouser can give you that desired professional look. […]
The need for program evaluation and monitoring Though the non-profits sector is not a sector where each pie of money spent needs to be accounted for under the law, nonetheless, since donor funds are involved, there is a need to evaluate the programs and monitor them for leakages and fraud or even for the simple […]
The millennial consumers are remarkably different from their predecessors. This is true in the sense that whilst earlier generations preferred to own as many resources as possible, the current generation prefers to rent. This is the reason why apps supporting the on-demand economy have ended up disrupting multi-billion-dollar industries. Take the case of Uber, which […]
Leadership in the Face of Adversity The best leaders are those who can face adversity and turnaround their companies from times of trouble to positions of strength. Throughout history, the leaders who were feted and achieved fame are those who took charge during times of crisis and managed to actualize victory. Similarly, in recent decades, […]
The fourth and last step for risk management suggested by the Bank of International Settlements in its Basel Norms is the continuous monitoring of key risk indicators. Key risk indicators are important metrics that can track the business environment and internal control factors. They can help an organization keep track of a rapidly changing internal and external environment. Risk management is all about continuous scanning and monitoring of the environment and key risk indicators are the best way to do so. In this article, we will have a closer look at what key risk indicators are and how they impact the risk management process.
In simple words, key risk indicators can be understood to be predictors of adverse events which are likely to impact organizations. Organizations are impacted when their environment changes. Hence, if the changes in the environment are continuously monitored then the changes in the risk exposure can be spotted early. This would help organizations to identify, report and manage risks better than other companies. The best way to think about the key risk indicators is to think about them as the dashboard of a car. The dashboard conveys important information which must be tracked numerically in order to ensure the smooth functioning of the organization from an operational risk point of view.
The main feature of the key risk indicator is that it should be expressed numerically. This also means that there should be a predefined level for these numbers and then when they vary from the predefined level, they should be immediately reported to the risk management team.
Key risk indicators can be considered to be the lens through which the company views its internal and external environment. This means that choosing the key risk indicators correctly is of utmost importance while designing the risk management system.
The designing of key risk indicators is quite complex since it requires an understanding of the various objectives of the organization as well as the environmental factors which can hinder the achievement of these organizational goals.
The first step in designing a key risk indicator is to understand the cause-effect relationship between the organization's goals and some root cause factors. The next step is to understand the relative significance that each of these root cause factors has on the overall achievement of the goals. The next step is to create a system that collects high-quality data about these indicators. The data collected must be genuine and there must not be too much time lag between the collection of the data and the passing of this data to the risk management decision-making process.
Also, it is important to ensure that only meaningful indicators are incorporated into the key performance indicator process. If too many metrics are simultaneously tracked, it dilutes focus and the company is not able to pay attention to what is really important. It is also important to determine the trigger levels of the key risk indicators in accordance with the risk appetite of the company that has been aligned during the creation of the risk policy.
Key performance indicators or KPIs are also tools that are used by organizations to manage their day-to-day operations. For instance, revenue being generated, costs being incurred, etc are examples of key performance indicators. However, key performance indicators are not the same as key risk indicators.
Key risk indicators can be thought of as being the precursor to the key performance indicators. The objective of the company is to ensure that the performance indicators are never affected. This is the reason that a separate set of indicators called the key risk indicators are used. The effect of the risk should ideally be shown first in the risk indicators before it starts showing up in performance indicators. If that is not the case, then the system has been designed poorly.
An effective operational risk management system also has key control indicators in place. These indicators help an organization determine the success of its key risk indicators. If the risk indicators are able to catch risks early and maintain control over the operational performance, then that will be reflected in the key control indicators. Key control indicators help a company decide whether its risk indicators are accurate or whether they need to be changed.
The key risk indicator approach is not free from challenges. Some of the commonly faced challenges have been mentioned below:
It may be difficult to identify the key risk indicators for all risks which are faced by an organization. This is because there are certain unknown risks that the organization is not even aware of
It may be difficult to build an automatic system that collects the values and intimates the decision-makers at the correct time.
It is also possible that companies may focus too much on the symptoms of the key risk indicators instead of focusing on the actual root cause.
Lastly, many companies may not have action plans ready. There may be ambiguity about the actions that need to be taken once an action crosses a certain threshold.
The bottom line is that the key risk indicator approach is an integral part of the advanced measurement approach suggested in the Basel norms. This is the reason that this approach is followed widely in different parts of the world.
Your email address will not be published. Required fields are marked *