About Risk

Risk and reward/return are two sides of a coin.

Risk in terms of Enterprise Risk Management concept basically comprises of three important words: chance/probability, impact, and objective.

Chance or probability refers to events that may occur in the future. These events may present threat or opportunity. Probability of the occurrence should be identified by ERM officers using the most relevant analytical tools available. These events are called as risk issues or risk events.

Impact refers to our exposures towards the risk events describe above. Impact could be positive or negative depends on the objective. Without exposures, any events are no more than events. But with the present of exposures - means we are being exposed to certain risk events, than that events should be anticipated. Especially if they potentially threaten or strengthen the achievement of our objectives.

Objectives are those goals or targets that are well formulated by our organizations. No goals no risk. No destination no risk. If an organization does not have clear formulated goals, it essentially does not have risks. But without goals or targets they are going nowhere. It will face total failure.

Based on the above understanding, good ERM officers should be able to identify and predict what might happen to the achievement of an organization objectives based on their analyses of the internal and external context of their organization (financial, customers, people, management, information technology, partners, and regulators).