Final Period
Final Period
CHAPTER 11
RISK MANAGEMENT
INTRODUCTION
Effective corporate governance cannot be attained without the organization mastering the art of risk
management; And risk management is recognized as one of the most important competencies needed
by the board of directors of modern Organization, large as well as small and medium sized business
firms. The level of risk face by business firm have increased because of the fast-growing sophistication of
organization, globalization, modern technology and impact of corporate scandals. In addition therefore
to compliance with legal requirements, top management should consider adequate knowledge of risk
management.
Risk management is the process of measuring or assessing risk and developing strategies to manage it.
Risk management is a systematic approach in identifying, analyzing arid controlling areas or events with
a potential for causing unwanted change. Risk management is the act or practice of controlling risk. It
includes risk planning., assessing risk areas, developing risk handling options, monitoring risks to
determine how risks have changed and documenting overall risk management program.
As defined in the International Organization of Standardization (150 3 1000), Risk management is the
identification, assessment. and prioritization of risks followed by coordinated and economical
application of resources to minimize, monitor and control the probability and/or impact of unfortunate
events and to inirtim4e the realization of opportunities.
It is through risk management risk to any specific program are assessed and systematically managed to
reduce risk to an acceptable level. Risk can come from uncertainty in financial market, project failure,
legal liabilities, credit risk, accident, natural causes and disaster, as well.as deliberate attack
from.adversary or event, of uncertain or unpredictable root-cause.
The International Organization of Standardization (ISO) identifies the basic principles of risk
management.
create value — resources spent to mitigate risk should be less than the consequence Of inaction, i.e..
the benefits should exceed the costs
create capability of continual improvement and enhancement considering the best available information
and human factors
According to the Standard ISO 31000 "Risk management — Principles and Guidelines on
Implementation, "the process of risk management consists of several steps as follows:
Establishing the Context. This will involve a. Identification of risk in a selected domain of interest
the social scope of risk management ii. the identity and objectives of stakeholders iil. the basis upon
which risks will be evaluated, constrained.