全麵風險管理框架英文(ppt 49頁)

Today’s organizations are concerned about:
Risk Management
Governance
Control
Assurance (and Consulting)
ERM Defined:
“… a process, effected by an entity's board of directors, management and other personnel, applied in strategy setting and across the enterprise, designed to identify potential events that may affect the entity, and manage risks to be within its risk appetite, to provide reasonable assurance regarding the achievement of entity objectives.”
Source: COSO Enterprise Risk Management – Integrated Framework. 2004. COSO.
Value is created by informed and inspired management decisions in all spheres of an entity’s activities, from strategy setting to operations. Entities failing to recognize the risks they face, from external or internal sources, and to manage them effectively can destroy value – in absolute or relative terms – for shareholders and other stakeholders, including the community and society at large.
For companies, shareholders realize value when they recognize value creation and benefit from share-value growth. For governmental entities, value is realized when constituents recognize receipt of valued services at acceptable cost.
Enterprise risk management:
Facilitates management’s ability deal effectively with potential future events that create uncertainty.
Provides the mechanisms to respond in a manner that reduces the likelihood of downside outcomes and increases the upside
Enhances the ability to communicate value creation and preservation programs and goals, communicate with stakeholders, and deliver as planned, with few surprises.

..............................