The COSO Framework for Internal Control
Internal frauds are a big part of the operational risk faced by any organization. This is truer of multinational companies who have business interests in various countries across the globe. This is because there are thousands of people in important positions making business decisions on behalf of the company. Hence, ensuring that all these employees…
The Cost Structure in the Insurance Industry
Insurance is one of the most regulated industries in the world. Also, there are multiple players which offer every type of insurance. As a result, the competitive pressures are very high. This ensures that the insurance companies are not able to charge exorbitant premiums. Almost every insurance company across the world is a price taker…
Credit Derivatives: An Introduction
Credit derivatives are the most important financial innovation in the field of credit risk management. These derivative instruments have been created quite recently. They have only been traded for a couple of decades as compared to other instruments like stocks and bonds which have been around for centuries. Within this short period of time, credit…
Literally speaking, risk management is the process of minimizing or mitigating the risk. It starts with the identification and evaluation of risk followed by optimal use of resources to monitor and minimize the same.
Risk generally results from uncertainty. In organizations this risk can come from uncertainty in the market place (demand, supply and Stock market), failure of projects, accidents, natural disasters etc. There are different tools to deal with the same depending upon the kind of risk.
Ideally in risk management, a risk prioritization process is followed in which those risks that pose the threat of great loss and have great probability of occurrence are dealt with first. Refer to table below:
| IMPACT | ACTIONS | ||
| SIGNIFICANT | Considerable Management Required | Must Manage and Monitor Risks | Extensive Management essential |
| MODERATE | Risk are bearable to certain extent | Management effort worthwhile | Management effort required |
| MINOR | Accept Risks | Accept but monitor Risks | Manage and Monitor Risks |
| LOW | MEDIUM | HIGH | |
| LIKELIHOOD | |||
The above chart can be used to strategize in various situations. The two factors that govern the action required are the probability of occurrence and the impact of the risk.
For example a condition where the impact is minor and the probability of occurrence is low, it is better to accept the risk without any interventions.
A condition where the likelihood is high and the impact is significant, extensive management is required. This is how a certain priority can be established in dealing with the risk.
Apart from this, typically most of the organizations follow a risk management cycle. Refer diagram below:
According to this cycle there are four steps in the process of risk management.
The first step is the assessment of risk, followed by evaluation and management of the same. The last step is measuring the impact.
Risk identification can start at the base or the surface level, in the former case the source of problems is identified. We now have two things to deal with the source and the problem.
Risk Source: The source can be either internal or external to the system. External sources are beyond control whereas internal sources can be controlled to a certain extent. For example, the amount of rainfall, weather over an airport etc!
Problem: A problem at the surface level could be the threat of accident and casualty at the plant, a fire incident etc.
When any or both of the above two are known beforehand, certain steps can be taken to deal with the same.
After the risk/s has been identified then it/they must be assessed on the potential of criticality. Here we arrive upon risk prioritization.
In generic terms ‘Likelihood of Occurrence × Impact’ = Risk.
This is followed by development of a risk management plan and implementation of the same. It comprises of the effective security controls and control mechanisms for mitigation of risk.
A more challenging risk to organizational effectiveness is the risk that is present but cannot be identified. For example a perpetual inefficiency in the production process accumulates over a certain period of time and translates into operational risk.
Article Written by
Himanshu Juneja, the founder of Management Study Guide (MSG), is a commerce graduate from Delhi University and an MBA holder from the esteemed Institute of Management Technology (IMT). He has always been someone deeply rooted in academic excellence and driven by a relentless desire to create value. Recently, he was honored with the “Most Aspiring Entrepreneur and Management Coach of 2025 (Blindwink Awards 2025)” award, a testament to his hard work, vision, and the value MSG continues to deliver to the global community.
Article Written by
Himanshu Juneja, the founder of Management Study Guide (MSG), is a commerce graduate from Delhi University and an MBA holder from the esteemed Institute of Management Technology (IMT). He has always been someone deeply rooted in academic excellence and driven by a relentless desire to create value. Recently, he was honored with the “Most Aspiring Entrepreneur and Management Coach of 2025 (Blindwink Awards 2025)” award, a testament to his hard work, vision, and the value MSG continues to deliver to the global community.
Your email address will not be published. Required fields are marked *
