Enterprise Risk Management: Balancing Risk Appetite and Risk Tolerance

In today’s world of evolving technologies and businesses, financial organizations are taking on increasing levels of risk. This initiative has increased the need to employ appropriate Enterprise Risk Management (ERM) strategies, policies, and processes in order to identify, monitor, and manage risk at the proper levels. In a world of do more at a faster pace, it is important for companies to manage their activities in a manner that can allow them to align risk strategies with overall risk management and internal control activities. Inability to do this may put the company at risk for not being able to meet strategic objectives.

The topic of Enterprise Risk Management continues to be an important element for organizations to successfully manage risk. Yet many organizations still approach the effort as a siloed set of processes instead of as an integrated part of business operations. This can render the program ineffective.

This course covers the basic concepts of Enterprise Risk Management and key elements that finance executives and personnel need to be aware of when implementing ERM across their organizations.

• Define and explain Enterprise Risk Management (ERM)
• Identify ERM roles, responsibilities, and accountabilities
• Learn how to establish and manage an ERM function—organization, policies, processes

Definition of ERM

• Enterprise risk management is a framework to reduce earnings volatility through sound risk management capabilities, a robust risk governance structure, and a strong risk culture.
• It is the organization's enterprise risk competence - the ability to understand, control, and articulate the nature and level of all risks across the enterprise taken in pursuit of business strategies which contributes to increased confidence shown by stakeholders.”
• Balance between risk appetite and risk tolerance

Spectrum of ERM Risks

• Credit risk
• Market risk
• Liquidity risk
• Operational risk
• Legal risk
• Reputational risk
• Strategic risk

Regulatory Expectations for Financial Organizations’ ERM

• Balanced risk-taking incentives
• Compatibility with effective controls and risk management
• Strong corporate governance

Key steps to ERM Implementation and Maintenance

• The tone of the organization including risk management philosophy and appetite
• Objectives must be in place before management can determine the events that may impact achievement
• Identify events distinguishing between risks and opportunities
• Analyze risks considering likelihood and impact on an ongoing basis
• Select a risk response – avoid, accept, reduce or share risk
• Implement policies and procedures to ensure the risk response is carried out
• Information is captured and communicated in a timely fashion up, down and across the bank
• The entire entity is monitored and modifications made as required

Risk Management Hierarchy

• It starts at the top

Enterprise Risk Management Personnel in -  

• Credit Operational 
• Compliance 
• Market 
• Liquidity 
• Legal 
• Reputational 
• Strategic Functions 
• Loan Review 
• Lending