Quiz 1 Flashcards
(57 cards)
An approach to risk management when risk assessment is being undertaken by the Board of Directors, the Chief Executive Officers (CEO) and the other top-level management of an organization
Top-down Risk Assessment
An approach to risk management when risk assessment are undertaken by involving individual members of staff and local department management
Bottom-up Risk Assessment
Risk Assessment Technique where the use of structured questionnaires and checklists to collect information that will assist with the recognition of the significant risks
Questionnaires and Checklists
Risk Assessment Technique where collection and sharing of ideas at workshops to discuss the events that could impact the objectives, core processes or key dependencies
Workshops and Brainstorming
Risk Assessment Technique where physical inspections of premises and activities and audits of compliance with established systems and procedures
Inspections and Audits
Risk Assessment Technique where Analysis of the processes and operations within the organization to identify critical components that are key to success
Flowcharts and Dependency Analysis
A most commonly used risk assessment techniques where an analysis of the strengths, weaknesses, opportunities, and threats faced by the organization
SWOT Analysis
Risk Assessment Technique where Considers the political, economic, social, technological, legal and ethical (or environmental) risks faced by the organization
PESTLE Analysis
Risk Assessment Technique where a structured approach that ensures that no risks are omitted. It is often undertaken of hazardous chemical installations and complex transport installations and complex transport structures, such as railways and nuclear power
HAZOP (Hazard and Operability)
Risk Assessment Technique where a very analytical and time-consuming approach just like HAZOP
FMEA (Failures Modes and Effect Analysis)
Risk Assessment Technique where one of the most popular tools of analyzing risk
Bow-Tie Analysis
It is the overall process of risk identification, risk analysis and risk evaluation
Risk Management Process
It’s purpose is to find, recognize and describe risks that might help or prevent an organization in achiecing its objectives.
Risk Identification
It’s purpose is to comprehend the nature of risk and its characteristics including, the level of risk
Risk Analysis
It’s purpose is to support decisions where it involves comparing the results of the risk analysis with the established risk criteria to determine where additional action is required
Risk Evaluation
According to ISO it is only useful if the conclusions of the assessment are used to inform decisions and/or to identify the appropriate risk responses for the type of risk under consideration
Risk Management Process
When undertaking risk assessment, it is common to identify several risk that should impact the company’s objectives, there is a need to reduce the number of risks to a level that will be consedered priority level for management, or the risks that are most important to the achievement of the company’s objectives
Risk Significance
- Is a simple visual presentation of the signifianct risks that have been recognized or identified
- The most commonly used ________ is the likelihood/impact matrix, on that demonstrates the relationship between the likelihood of the risk materializing and the impact of the event should the risk materialize
Risk Matrix
It determines the nature and type of impact which could occur assuming that a particular event situation or circumstances has occured
Consequence Analysis
Represents the long-term approach of the organization to risks or this is the established risk criteria
Risk Attitude
Reflects the amount and type of risks that an organiztion is willing to pursue or retain or the more immediate need to take risk in order to achieve objectives
Risk appetite
It includes all the risks that have already been identified, plus any emerging risks that are starting to appear
Universe of Risk
is the level of risk that the organization fells comfortable taking and embedding into core processes because, regardless of the likelihood of the risk materializing, the impact is so small that it would not be significant if it did materialize or there will be a likelihood of a risk materializing that is considered so remote that it is assumed that it will not occur, even though it would be very serious if it did.
Comfort Zone
Includes all of the risks that have high-likelihood and will be intolerable for the organization
Critical Zone