ERM Framework

A complete operating framework for ERM in a Non-Financial entity.

Get Started. It's Free
or sign up with your email address
ERM Framework by Mind Map: ERM Framework

1. 1 Risk Management Planning

1.1. Framework Establishment

1.1.1. Reach and Scope Definition

1.1.2. Taxonomy

1.1.3. Approach

1.1.4. Policy

1.2. Maturity Roadmap

1.2.1. Legacy Risk System Treatment

1.2.2. Short Term Plan

1.2.3. Five Year Goal

1.2.4. Benchmark & Best Practices

1.3. Team Design

1.3.1. Internal Team

1.3.2. Working with vendors

2. 2 Risk IT ~ Data & Systems

2.1. Data Management

2.1.1. Database Relationship Structure

2.1.2. Import and Output Scripts

2.1.3. Data Quality Definition

2.1.4. Integration & Harmonization

2.1.5. External Data and Benchmarks

2.2. Intranet / Cloud

2.2.1. Risk Entry Forms

2.3. Modeling

2.3.1. Model Engine

2.3.2. Distributions & Coherent Risk Measures

2.3.2.1. Loss Data Approach

2.3.2.2. Monte Carlo Simulation

2.3.2.3. Hybrid Approach

2.3.2.4. Time Series Analysis

2.3.3. Causal Modelling

2.3.3.1. Bayesian Networks

2.3.3.2. Principal Component Analysis

2.3.3.3. Partial Least Squares Modelling

2.3.3.4. Recursive Partitioning

2.3.3.5. Structured Equation Modelling

3. 3 Reporting and Decision Making

3.1. Consolidated Risk Report

3.2. Risk Dashboard

3.3. EV Risk Adjusted Return Reports

3.4. Stress Test & Liquidity Report

4. 4 Risk Identification

4.1. Risk Mapping

4.1.1. Definition Based Process Control

4.1.2. Value Chain Views

4.1.3. Tabular Mapping

4.2. Risk Registration

4.3. Incident Management

4.4. Scenario Analysis

5. 5 Risk Assessment

5.1. Root Cause Analysis

5.2. Key Risk Indicators

5.3. Risk Control Assessment

6. 6 Risk Response

6.1. Planned Controlled Response

6.2. Structured Risk Response

6.3. Insurance Coverage

6.4. Business Continuity Planning

7. 7 Specialist Risk Centres

7.1. Credit Risk

7.2. Market Risk

7.3. IT Cyber Risk

7.4. Project Risk

7.5. Strategic Risk

7.6. Reputation Risk

8. 8 Integration

8.1. Governance

8.1.1. Risk Oversight

8.1.2. Risk Appetite

8.1.3. Risk Stewardship

8.2. Compliance

8.2.1. Risk Based Compliance

8.3. Occupational Health & Safety

8.4. Quality Control

8.5. Regulations

8.5.1. Global Standards

8.5.1.1. ISO Standards

8.5.1.2. COSO

8.5.1.3. Local Standards

8.6. Internal Audit

8.6.1. Risk Based Audit

8.6.2. Continuous Audit

8.6.3. Specialised Audits

8.6.3.1. IT Audits

8.6.3.2. Functional Audits

8.6.4. Financial Audits

8.6.4.1. Risk Adjusted Financial Audits

8.7. Finance

8.7.1. Planning and Budgeting

8.7.2. Capital / Provision Establishment

8.7.3. Report Harmonization

8.7.4. IFRS Standards Integration

8.7.5. Strategy / Due Diligence

8.8. Human Resources

8.8.1. Performance Reviews

8.8.2. Resource Planning

8.8.3. HR Risk Policy Development