Description: The costly, time-consuming and complicated process of enterprise risk management (ERM) can be improved in many companies and made less tedious for managers by using reasonable data and templates obtained from peer group entities. The models used to calculate economic capital (EC) often underestimate its value because they do not consider decision-maker perception about risk. We assume here that managers, as the decision-makers, have appropriate business understanding and they can provide substantial information about risk characteristics regarding all business processes. Therefore we are focused, in this paper, on collecting data from managers across the different businesses to derive the appropriate knowledge about risky events, the importance of particular types of risk, the relationship between the risk outcomes and the level of risk control in a particular industry. We conclude that the collected data has a high potential for use as a benc hmarking reference and analysis for improving ERM models for individual businesses.

Description: Although crisis management remain often seen through a “communication lens”, it has in reality more in common with risk management than usually thought. Both crisis and risk management are anticipatory endeavors, with most of the work being carried out in peace time; both require a deep understanding of the organization’s activities and ecosystem; both have the same overarching objective to enable the organization to survive a brutal change to its usual operating conditions. Developing integration between the two functions would thus go a long way toward a more resilient organization.

Description: Many top-performing businesses aren’t just risk aware, but rather risk intelligent. Such a posture helps prepare companies for a major event and can demonstrate to a regulator or auditor that an appropriately strong control framework is in place. Better still, companies gain real strategic value from a “risk adjusted” understanding not only of their threats and vulnerabilities, but also the upside opportunities associated with various risks. It starts with having both qualitative and quantitative information to identify, assess and manage risks. Strategic risk management, at its core, is about creating value by increasing transparency and accountability, and quality of information. More than a mere compliance exercise, effective risk management enables more informed strategic decision making, increased accountability and transparency, a greater likelihood of organizational success, and – ultimately – competitive advantage, as borne out by many studies that correlate risk management and financial results.

Description: The article is based on a study of causes of insolvency and decisions made by management, regulators, and policyholders over the life cycle of the insolvency.

Description: Many top-performing businesses aren’t just risk aware, but rather risk intelligent. Such a posture helps prepare companies for a major event and can demonstrate to a regulator or auditor that an appropriately strong control framework is in place. Better still, companies gain real strategic value from a “risk adjusted” understanding not only of their threats and vulnerabilities, but also the upside opportunities associated with various risks. It starts with having both qualitative and quantitative information to identify, assess and manage risks. Strategic risk management, at its core, is about creating value by increasing transparency and accountability, and quality of information. More than a mere compliance exercise, effective risk management enables more informed strategic decision making, increased accountability and transparency, a greater likelihood of organizational success, and – ultimately – competitive advantage, as borne out by many studies that correlate risk management and financial results.

Description: A risk map is an effective and dynamic tool in helping companies develop a broader view of their risks.

Description: Risk management and capital budgeting are two critical components of the corporate decision process. They often need to be considered jointly at the corporate level because of their natural interaction through the dependent risk exposures and other synergetic relationships within an intricate corporate structure in a dynamic business environment. . This paper develops an integrated framework that aligns these two important corporate strategies across business divisions to optimize the streamlined enterprise strategic goal in a multi-period setting. The proposed integrated framework can serve as a practical guideline for corporate executives to optimally coordinate capital budgeting and risk management at the enterprise level.

Description: This paper presents actuarial (mathematical) models for cyber breach probability as function of the level and allocations of security spending by a firm.

Description: Highlight of the ERM Symposium