Integrating Risk Appetite With Strategy Feb 14 2011
The document provides an overview of integrating risk appetite with strategy. It discusses:
- The objectives of introducing a risk appetite framework and providing clarity on risk appetite's role in the overall strategy process.
- How risk-based performance management integrates traditional performance and risk management to enable sustainable strategy execution with risk appetite at the center.
- The process for setting risk appetite involves workshops with the board and executive team to define the risk dimensions, levels, and boundaries that shape the organization's risk taking.
- Risk appetite should influence strategic discussions around the business model and objectives to ensure the strategy can be executed within the defined risk tolerances.
Introduction to the integrated risk appetite framework, emphasizing its significance in sustainable strategy execution and performance management.
Detailed insights on risk appetite definition, application, and its multidimensional aspects, illustrated with examples from investment banking and water industries.
Importance of cascading risk appetite throughout the organization to shape culture, aligning risk-taking with business goals and operational strategies.
Linking risk appetite with business drivers and objectives, ensuring alignment for optimal decision-making related to strategy execution.
Describes the structured process of setting risk appetite through workshops and collaborative engagement between board and executive members.
Highlights of successful outcomes achieved by clients after implementing risk-based performance frameworks, demonstrating tangible benefits.
A reflection on the philosophy of risk management, comparing it to driving a car, showcasing its necessity for business agility.
Contact details of Andrew Smart, CEO of Manigent, for follow-up engagement and inquiries.
Integrating Risk Appetite With Strategy Feb 14 2011
1.
Integrating Risk Appetitewith Strategy
Introducing a integrated risk appetite framework
Prepared for
Manigent webinar
14 February 2011
2.
Objectives and background
Objectives
Provide an outline of the Risk Appetite framework within Risk-
based Performance.
Provide clarification about the role Risk Appetite has to play in
the overall strategy process.
Create a discussion around risk appetite.
Background
Risk Appetite is central to the Risk-based Performance
approach.
Risk Appetite is a hot topic with our clients right now.
Page 2
3.
Risk-based Performance Managementintegrates
traditional performance and risk management to enable
sustainable strategy execution
What are our Threats and
What are we trying to
Opportunities?
achieve? Strategy What is our Risk Appetite?
Management
Appetite
Are we operating
Are we on track?
Performance Risk within appetite?
Management Management
Culture and mindset
Page 3
4.
The Risk-based PerformanceManagement model is
designed to be a continuous process: the journey is the
destination
What-if analysis
Scenario analysis Define Objectives
War games
Clarify Strategy Define Appetite
Define Risks
Define Drivers
Communicate what could Communicate intent
hit us ‘out of the blue’ & accountabilities
Model future Sustainable Operationalise
uncertainty Strategy change
Communicate how we will
Communicate where we are
provide assurance whilst
doing well & doing poorly
driving change
Monitor and analyse
indictors, KPIs, KRIs and KCIs. Monitor & analyse
Capture and analyse risk events and Define Controls
losses
results Define Initiatives and actions
Page 4
5.
Risk Appetite, andmore specifically appetite
alignment, is central to the Risk-based
performance approach
Risk Appetite is central to
sustainable strategy execution
Page 5
6.
Failures around riskappetite were highlighted in
governmental and regulatory post-credit crunch reviews
Supervisors see insufficient evidence of board involvement in setting and
monitoring adherence to firms’ risk appetite.
Risk appetite statements are generally not sufficiently robust; such
statements rarely reflect a suitably wide range of measures and lack
actionable elements that clearly articulate firms’ intended responses to
losses of capital and breaches in limits.
Board-level engagement in risk oversight should be materially increased, with particular attention to
the monitoring of risk and discussion leading to decisions on the entity’s risk appetite and
tolerance.
Remuneration structures for all such “high end” employees are appropriately aligned with the
medium and longer-term risk appetite and strategy of the entity.
In essence, the obligation of the board in respect of risk should be to ensure that risks are promptly
identified and assessed; that risks are effectively controlled; that strategy is informed by and aligned
with the board’s risk appetite; and that a supportive risk culture is appropriately embedded so that
all employees are alert to the wider impact on the whole organisation of their actions and decisions.
Page 6
The definition ofRisk Appetite is clear, but the
application is less well understood
Risk appetite is the amount and type of
risk that is acceptable to be taken by an
Risk appetite sets the boundaries within
organisational entity over a defined time
which strategy is executed – Manigent
period, to achieve the objectives of that
entity – COSO Enterprise Risk Management
The COSO definition provides ‘What, Who, When and
Why’ of risk appetite
What: the amount and type of risk
Who: an organisational entity
When: over a defined time horizon
Why: to achieve the objectives of the entity
Page 8
9.
Risk Appetite isa multidimensional construct, which
changes depending on the organisational entity and what
they are trying to achieve
Annual
90 days Investment Banking example
We are willing to put £x million of
Overnight capital @ risk to trade on our own
account over the next 12 month
Extreme period.
We hold no more than x% of our
capital in overnight positions.
High
We will accept operational losses
of £x million per month.
Moderate
Water Industry example
We have no appetite for causing
Low
customer illness by supplying poor
quality water.
We have no appetite for appearing
in local press related to leaks or
fines for more than 2 consecutive
Strategic
Market
Credit
Liquidity
Operational
days.
Page 9
10.
Cascading Risk Appetitethrough the organisation, is a
powerful way of shaping culture and aligning risk-
taking
The nature of the organisational unit Organisational
will influence the risk dimensions entity
used to consider appetite.
Income Capital
Organisational Organisational
entity entity
Technology Reputation Income Capital
Page 10
Risk Appetite shouldbe
integrated into your
Identify strengths Identify threats &
& weaknesses
Business Goals
opportunities organisations standard strategy
Internal Analysis External Analysis
framework
Formulation
Is our business Is our business
model fit for
Formulation
model fit for Business Drivers
Development of high-level strategies and allocation of scarce resources,
purpose? purpose?
including capital
Given our business context, what is our appetite for risk?
Appetite Given our appetite, have we got the right business model?
Are we comfortable with the assumptions we have made?
Business Model
Business Setting
Objectives From high-level strategies to specific business objectives
Setting
Define specific business objectives and appetite for specific entity’s
Allocation of scarce resources by entity, risk category, product lines
Appetite
Are we on-track Strategy Are we operating
to deliver? Management within appetite?
Execution
Execution
Are we on-track to achieve our business objectives
Performance Appetite Are we operating within appetite (are we taking too much, or not enough
Risk Management
Management Alignment risk?)
Do we have the right level of controls in place to meet internal and external
compliance drivers?
Manage Compliance Manage threats Are we aligning our change agenda to our strategic agenda?
strengths & & opportunities
weaknesses
Initiative
Page 12 Management
13.
Risk Appetite hasmultiple touch
Identify strengths Business Goals Identify threats & points within the overall strategy
& weaknesses opportunities
process
Internal Analysis External Analysis
Formulation
Is our business Is our business • Engage with your shareholders
model fit for Business Drivers model fit for • Determine how your organisation is going to view risk – the dimensions of
purpose? purpose? appetite
• Business drivers inform the choice of dimensions of appetite
• Drivers and Appetite influence choice / discussions around the business model
Appetite • Select the ‘best’ strategy and set the risk appetite – this is where the board fulfil
one of their key responsibilities – setting the boundaries within which strategy is
executed
Business Model
Translate the strategy into specific objectives – creating a hypothesis of our strategy
Business Cascade the strategy via business objectives through the organisation
Objectives
Setting
Define appetite for each objective, setting boundaries by organisational unit,
strategic theme, risk category or even product line
Building into your strategy a hypothesis about the risks required to deliver the
strategy
Appetite Linking objectives and appetite shapes culture and enables the cascade of the high
level strategy and appetite down to the operational level where it is actually
executed.
Are we on-track Strategy Are we operating
to deliver? Management within appetite?
Execution
Monitoring alignment between exposure and appetite enables understanding of
Is the business operating within the boundaries set by, or cascaded
Performance Appetite from the Board i.e. appetite?
Risk Management
Management Alignment Is the business taking too much or too little risk to achieve its
objectives?
Monitoring appetite alignment complements existing, commonly used, one-
dimensional tools, strategy and risk maps
Manage Compliance Manage threats
strengths & & opportunities
weaknesses
Initiative
Page 13 Management
14.
Risk appetite shouldinfluence
the your business model and
Identify strengths
& weaknesses
Business Goals Identify threats &
opportunities help identify the ‘right’ business
Internal Analysis External Analysis
model
Formulation
Create value
Is our business Is our business
model fit for Business Drivers model fit for
purpose? purpose?
Business Model Deliver value
Appetite
Capture value
Business Model
Business Business Model
Objectives The rationale of how an organisation creates, delivers,
Setting
and captures value - economic, social, or other forms
of value.
Appetite
Different business models have different inherit
risk/reward characterises.
Are we on-track Strategy Are we operating
to deliver? Management within appetite? Business Models are being challenged in many
Execution
industries by;
Performance Appetite Increasing and changing regulation
Risk Management
Management Alignment
Corporate and personal de-leveraging
Tight credit conditions
Manage Compliance Manage threats On going globalisation
strengths & & opportunities Rapidly changing technology
weaknesses
Initiative
Page 14 Management
15.
Business drivers playa
critical role in the strategy
Identify strengths Identify threats &
& weaknesses
Business Goals
opportunities process, and in this risk
Internal Analysis External Analysis appetite framework
Formulation
Business drivers Objectives Shareholder
value
Is our business Is our business Capital
model fit for Business Drivers model fit for Risk Appetite Share price
purpose? purpose? Income
Risk Dimensions
Economic Value
Risk Exposure Add
Appetite Reputational
Return on risk
Key Risks adjusted capital
Regulatory
uncertainty Return on risk
Risk Events adjusted assets
Business Model Technology
innovation
Scenarios
Business
Objectives
Setting
Business Drivers
Appetite The critical factors that determine the success or failure of
an organization's strategy and its ability to deliver
shareholder value.
Are we on-track Strategy Are we operating
to deliver? Management within appetite?
Business Driver Relationships
Execution
Drivers help determine the ‘right’ Business Objectives, their KPIs
Performance Appetite and targets.
Risk Management
Management Alignment Select the ‘vital few’ drivers to use as risk dimensions to define risk
appetite
Assess risk using the same dimensions
Manage Manage threats Link risk events back to drivers to provide powerful strategic
Compliance analytics
strengths & & opportunities
Use business drivers as a base for scenarios to test and validate the
weaknesses objectives and risk appetite
Initiative Major changes in business drivers may lead to changes in not only
Page 15 Management objectives and risk appetite, but at the most extreme, to the whole
business model.
16.
This Risk Appetiteframework is based on a ‘vital few’ drivers
which shape thinking around risk appetite and how risk is
assessed, and creates a ‘hard’ link to strategy
Business drivers Objectives Shareholder value
(What are we trying to achieve?)
Capital
Risk Appetite
(How much risk do we want/ Share price
need to take?)
Risk Dimensions
Income (How do we think about risk)
Risk Exposure Economic Value
(How much risk we taking?) Add
Reputational
Key Risks Return on risk
(What are our uncertainties related to achievement of the
objectives?)
adjusted capital
Regulatory
uncertainty Risk Events Return on risk
(What has gone wrong/right?) adjusted assets
Technology
innovation Scenarios
(What could go wrong/right?)
What determines How to define
success? success?
Page 16
17.
When considering riskappetite, the Board and Executive
should also develop a clear understanding of the
organisational Risk Capacity
Risk Capacity is the absolute maximum amount of risk
an organisation can withstand without causing its failure.
Risk Appetite and Risk Capacity
Risk Appetite Risk Capacity
Take emergence
Put the resolution
action to reduce risk,
plan into action to
and get back into
wind up the business
appetite
Low Moderate High Extreme
Page 17
18.
Using this approachenables the Board to be very
clear about the operating boundaries for the
business
Time Capacity
Risk Dimension Low Moderate High Extreme
horizon Limit
X% Capital X% Capital X% Capital X% Capital Above
Capital Overnight
@Risk @Risk @Risk @Risk X £M
Up to X £M to X £M to X £M to Above
Capital Annual
X £M Y £M Y £M Y £M X £M
Up to X Up to X Up to X Up to X
Reputation Annual vol. Bad vol. Bad vol. Bad vol. Bad
coverage coverage coverage coverage
This approach creates shared, clear and actionable understanding of the
organisational appetite, within the Board, the executive and across the
enterprise.
Using clearly defined risk dimensions and levels of risk, creates a common
language for the organisation, at all level, to embed risk in a strategic or
operational decision-making.
Page 18
19.
The Risk Assessmentprocess is driven by the risk
dimensions used to define risk appetite enabling
exposure to be aligned to appetite
Appetite sets the boundaries for the business
within which they execute strategy and create
value.
Reputation Capital
Therefore the Appetite Alignment Matrix provides @Risk @Risk
a method of visually monitoring and managing our
risk taking according to the strategy, identifying
where too much or not enough risk is being taken.
Impact x Likelihood
(over a time horizon)
Page 19
20.
How this approachfits together to enable Boards
and Executive teams to answer some ‘big’
questions.
What is our Strategy?
Business drivers Objectives Shareholder
value
Capital
Create value Risk Appetite Share price
Risk Dimensions
Income
Economic Value
Risk Exposure
Business Deliver How do we think about, and what Add Are we operating within
What
Model is our business?
value Reputational
is, our Key Risks
appetite ? Return on risk
adjusted capital
Appetite?
Regulatory
uncertainty Return on risk
Capture Risk Events adjusted assets
value Technology
innovation
Scenarios
What is our risk
exposure?
Page 20
Risk Appetite Settingprocess
4. Board
appetite
setting
1. Joint Board / workshop(s)
5. Joint 6. Joint Board /
Executive 3. Joint risk
2. 1-2-1 follow- Appetite Executive
appetite dimension
up meetings setting Appetite sign-
familiarisation workshop(s)
workshop (s) off
workshop(s) 4. Executive
appetite
setting
workshop(s)
This process is designed to quickly establish the
organisational boundaries – risk appetite.
Step 3 can be combined with either step 2 or 4.
Splitting the workshops in step 4 is designed to bring out
different views / perspectives, but these can be
combined.
Page 22
23.
1. Risk Appetitefamiliarisation
4. Board
appetite
setting
workshop(s)
1. Joint Board / 2. 1-2-1 follow- 3. Joint risk 5. Joint 6. Joint Board /
Executive up meetings dimension Appetite Executive
appetite workshop(s) setting Appetite sign-
familiarisation workshop (s) off
4. Executive
workshop(s)
appetite
setting
workshop(s)
Purpose Key deliverables
To ensure the board and executive have a One 2 hour workshop session
shared understanding of risk appetite. Workshop documentation/notes/report
Develop a shared understanding of the
problem and proposed approach.
What does ‘good’ look like?
Full and active participation by the Board and
Key inputs Executive
Risk Appetite training pack Engaging debate demonstrating
understanding of the business value
Answer the question – How does this help us
make money? Create value?
Page 23
24.
2. 1-2-1 follow-upmeetings
4. Board
appetite
setting
workshop(s)
1. Joint Board / 2. 1-2-1 follow- 3. Joint risk 5. Joint 6. Joint Board /
Executive up meetings dimension Appetite Executive
appetite workshop(s) setting Appetite sign-
familiarisation workshop (s) off
4. Executive
workshop(s)
appetite
setting
workshop(s)
Purpose Key deliverables
To enable individual members of the board or Meet with all members of the board and
executive to ask questions, seek clarification, executive
debate the topic, challenge the approach etc. Capture and consolidate feedback/thoughts
Build buy-in and support
What does ‘good’ look like?
Key inputs All members of the board and executive can
Meeting guide answer the question;
How does risk appetite help us make
money? Create value?
Page 24
25.
3. Joint riskdimension workshop(s)
4. Board
appetite
setting
workshop(s)
1. Joint Board / 2. 1-2-1 follow- 3. Joint risk 5. Joint 6. Joint Board /
Executive up meetings dimension Appetite Executive
appetite workshop(s) setting Appetite sign-
familiarisation workshop (s) off
4. Executive
workshop(s)
appetite
setting
workshop(s)
Purpose Key deliverables
Develop a common understanding of the One 2 hour workshop (additional workshops
business drivers maybe required). Alternative approach: Could
Determine which if these drivers should be be combined with steps 1 or 4
used as risk dimensions
Documented and agreed risk dimensions,
including selection rationale
Key inputs
Strategy documents
What does ‘good’ look like?
Value driver models
Board briefing/options paper All members of the board and executive
confidently discuss the business drivers and
Potentially, working examples
risk dimensions
Page 25
26.
4. Appetite settingworkshop(s)
4. Board
appetite
setting
workshop(s)
1. Joint Board / 2. 1-2-1 follow- 3. Joint risk 5. Joint 6. Joint Board /
Executive up meetings dimension Appetite Executive
appetite workshop(s) setting Appetite sign-
familiarisation workshop (s) off
4. Executive
workshop(s)
appetite
setting
workshop(s)
Purpose Key deliverables
Each team develop their own perspectives Two 2 hour workshop (additional workshops
and thinking around appetite maybe required)
Create challenge and debate within, and Documented and agreed risk appetite
between the two teams including selection rationale per team
Key inputs What does ‘good’ look like?
Strategy document Any member of each team can confidently
Scenario models present their view of risk appetite and the
Risk Events / Loss data rationale for setting their limits
Page 26
27.
5. Joint Appetitesetting workshop (s)
4. Board
appetite
setting
workshop(s)
1. Joint Board / 2. 1-2-1 follow- 3. Joint risk 5. Joint 6. Joint Board /
Executive up meetings dimension Appetite Executive
appetite workshop(s) setting Appetite sign-
familiarisation workshop (s) off
4. Executive
workshop(s)
appetite
setting
workshop(s)
Purpose Key deliverables
Develop a common view of risk appetite Clearly defined risk appetite statement with
between the Board and Executive agreement on measureable limits
What does ‘good’ look like?
Key inputs Any member of each team can confidently
Documents from the step 4 present the organisational risk appetite and
Working models / examples based on output its supporting rationale
from step 4
Briefing/Options paper
Page 27
28.
6. Joint Board/ Executive Appetite sign-off
4. Board
appetite
setting
workshop(s)
1. Joint Board / 2. 1-2-1 follow- 3. Joint risk 5. Joint 6. Appetite
Executive up meetings dimension Appetite sign-off
appetite workshop(s) setting (Board)
familiarisation workshop (s)
4. Executive
workshop(s)
appetite
setting
workshop(s)
Purpose Key deliverables
Board to formally ‘sign-off’ on the risk ‘Sign-off’ risk appetite statement
appetite
What does ‘good’ look like?
‘Signed-off’ risk appetite statement
Key inputs
Examples of appetite process output, as set
in step 5 – dashboards, appetite alignment
matrix
Page 28
Engaging Manigent
“we haveseen a reduction in our Value at Risk
(VaR) of 27% in the first three months of using
Risk-based performance & StratexPoint” –
Financial Services client
“we were able to reduce our operational losses by
over to 50% in the first year of using Risk-based
performance” – Investment banking client
"Coupled with the implementation of a new risk
management framework, significant business
benefits are emerging“ – Source: Annual
accounts of a Financial Services client
“Using Risk-based performance has delivered a
more focused, structured Risk framework, enabling
us to focus on the vital few – the number of Key
Risk dropped from 120+ to just 10! - Investment
banking client
Page 31 www.manigent.com | [email protected] | +44(0)20 7921 0022
32.
A final thought....
“the reason that a car has brakes is to allow it
to go faster, and the same [applies to]…
business and risk management.”
Page 32
#21 By integrating Risk Appetite into the Strategy process, at each of the 3 steps, Boards and Executive Teams are able to answer some ‘big’ questions about their organisations.