Chapter 2 Notes- Acc 3300

What is the nature of risk in business?

Risk is the likelihood of an unfavorable event occurring that can hinder a business's success or cause a loss.

Why is understanding risk important for accounting professionals?

It is essential for assessing and managing risks that could lead to business losses.

What is a risk-aware culture?

A culture that allows businesses to proactively identify and manage risks.

What are the three primary types of business processes?

Operational, financial, and reputational processes.

What is Enterprise Risk Management (ERM)?

ERM is the comprehensive process of identifying, categorizing, prioritizing, and responding to a company's risks.

What are the four steps of ERM?

Identify, categorize, prioritize, and respond.

How can risks be identified?

Through brainstorming, analyzing historical data, diagramming processes, and developing operational assumptions.

What is a risk statement?

A statement that includes an issue and a possible outcome, typically formatted as 'This issue may result in this outcome.'

What are internal risks?

Risks that occur within a company's operations and are often preventable through careful management.

What are the three major internal risk categories?

Operational risk, financial risk, and reputational risk.

What are external risks?

Risks that come from outside the company and are often less predictable.

What are the three types of external risks?

Compliance risk, strategic risk, and physical risk.

What is a risk inventory?

A listing of all known risks that allows mapping to business objectives and processes.

How does technology impact risk management?

Technology provides new ways to manage risk but also introduces new risks related to its use.

What is the significance of categorizing risks?

It helps in understanding risks at both the entity level and across business processes.

What is operational risk?

The risk of loss resulting from inadequate or failed internal processes, people, and systems.

What is reputational risk?

The potential loss of reputation due to negative public perception or events.

What is strategic risk?

The risk associated with a company's strategy that can affect its competitive position.

Why is it important to understand the granular view of risk?

It allows businesses to address specific risks more effectively.

What is the 'sweet spot' in risk-taking?

The optimal level of risk that balances potential rewards with the likelihood of loss.

How can businesses respond to identified risks?

By implementing strategies to mitigate, transfer, accept, or avoid the risks.

What role do accountants play in risk management?

Accountants assess and address risks constantly, both formally and informally.

What is the impact of a risk-aware culture on a business?

It enables proactive identification and management of risks, leading to better decision-making.

What is the relationship between risk and business goals?

Risks can hinder the achievement of business goals, making risk management essential for success.

How does a portfolio view of risk differ from a profile view?

A portfolio view examines risk at the entity level, while a profile view considers risk at a more granular level.

What is compliance risk?

The risk of legal penalties or reputational damage due to failure to comply with regulations.

What is physical risk?

The risk of loss due to physical damage to assets or disruptions in operations.

What is the difference between internal and external risks?

Internal risks are identifiable risks within an organization, while external risks arise from outside the organization.

Why is prioritizing risk important for businesses?

Businesses have limited resources and must determine which risks to address based on priority.

How is risk severity evaluated?

Risk severity is evaluated based on the likelihood of occurrence and the potential impact on the company.

What scales are used to measure likelihood and impact?

Both likelihood and impact are measured on a scale from low to high.

What is the purpose of using risk formulas?

Risk formulas help differentiate risks that may have similar qualitative rankings by assigning numerical values.

What is the likelihood risk scale?

The likelihood risk scale ranges from 1 to 5, indicating the probability of an outcome occurring.

What is the impact risk scale?

The impact risk scale ranges from 1 to 5, indicating the potential damage caused by the risk.

What are risk scores?

Risk scores are calculated by multiplying the likelihood and impact rankings to assess overall risk.

What is a risk matrix?

A risk matrix visually represents risks, often using a heat map to indicate priority levels.

What does a heat map indicate in risk management?

A heat map uses colors to represent the priority of risks based on their scores; green indicates lower priority, red indicates higher priority.

What is inherent risk?

Inherent risk is the natural level of risk in a business process without any risk responses in place.

What is residual risk?

Residual risk is the remaining risk after a risk response plan has been implemented.

What is target residual risk?

Target residual risk is the desired level of risk after implementing risk responses.

What is risk appetite?

Risk appetite is the amount of risk a company is willing to accept at a given time.

What are the four traditional risk responses?

The four traditional risk responses are accept, mitigate, transfer, and avoid.

What does risk acceptance entail?

Risk acceptance occurs when an organization acknowledges an inherent risk but chooses not to take action.

What does risk avoidance involve?

Risk avoidance eliminates the risk by avoiding the events that cause it.

What is risk mitigation?

Risk mitigation involves minimizing the impact of a risk while accepting its occurrence.

What does risk transfer mean?

Risk transfer involves shifting the risk to a third party, such as through insurance.

How can inherent risk be illustrated?

Inherent risk can be plotted on a heat map to visualize its severity.

How does residual risk differ from inherent risk?

Residual risk is what remains after risk responses are implemented, while inherent risk is the initial level of risk.

What is the role of critical thinking in risk management?

Critical thinking is essential for understanding the situation and determining appropriate risk responses.

What is the significance of risk rankings on a risk matrix?

Risk rankings help prioritize risks visually, aiding in decision-making for resource allocation.

What is the purpose of assessing risk in a business?

Assessing risk helps identify potential threats and determine how to manage them effectively.