Integrating Risk Appetite with Strategy
Introducing a integrated risk appetite framework


                 Prepared for

                 Manigent webinar
                 14 February 2011
Objectives and background

 Objectives
      Provide an outline of the Risk Appetite framework within Risk-
       based Performance.
      Provide clarification about the role Risk Appetite has to play in
       the overall strategy process.
      Create a discussion around risk appetite.
 Background
      Risk Appetite is central to the Risk-based Performance
       approach.
      Risk Appetite is a hot topic with our clients right now.




Page  2
Risk-based Performance Management integrates
traditional performance and risk management to enable
sustainable strategy execution


                                                            What are our Threats and
What are we trying to
                                                                       Opportunities?
achieve?                               Strategy             What is our Risk Appetite?
                                      Management




                                        Appetite
                                                                     Are we operating
Are we on track?
                        Performance                   Risk            within appetite?
                        Management                 Management



                               Culture and mindset


 Page  3
The Risk-based Performance Management model is
designed to be a continuous process: the journey is the
destination
What-if analysis
Scenario analysis                                                                               Define Objectives
War games
                                                 Clarify Strategy                                Define Appetite
                                                                                                     Define Risks
                                                                                                   Define Drivers
                    Communicate what could                            Communicate intent
                     hit us ‘out of the blue’                          & accountabilities


     Model future                                  Sustainable                        Operationalise
     uncertainty                                    Strategy                             change

                                                                    Communicate how we will
                Communicate where we are
                                                                     provide assurance whilst
                 doing well & doing poorly
                                                                          driving change
Monitor and analyse
indictors, KPIs, KRIs and KCIs.                 Monitor & analyse
Capture and analyse risk events and                                                            Define Controls
losses
                                                     results                    Define Initiatives and actions


 Page  4
Risk Appetite, and more specifically appetite
alignment, is central to the Risk-based
performance approach
             Risk Appetite is central to
           sustainable strategy execution




Page  5
Failures around risk appetite were highlighted in
governmental and regulatory post-credit crunch reviews

            Supervisors see insufficient evidence of board involvement in setting and
            monitoring adherence to firms’ risk appetite.

            Risk appetite statements are generally not sufficiently robust; such
            statements rarely reflect a suitably wide range of measures and lack
            actionable elements that clearly articulate firms’ intended responses to
            losses of capital and breaches in limits.


            Board-level engagement in risk oversight should be materially increased, with particular attention to
            the monitoring of risk and discussion leading to decisions on the entity’s risk appetite and
            tolerance.

            Remuneration structures for all such “high end” employees are appropriately aligned with the
            medium and longer-term risk appetite and strategy of the entity.

            In essence, the obligation of the board in respect of risk should be to ensure that risks are promptly
            identified and assessed; that risks are effectively controlled; that strategy is informed by and aligned
            with the board’s risk appetite; and that a supportive risk culture is appropriately embedded so that
            all employees are alert to the wider impact on the whole organisation of their actions and decisions.


Page  6
What is Risk Appetite?
The definition of Risk Appetite is clear, but the
application is less well understood

 Risk appetite is the amount and type of
risk that is acceptable to be taken by an
                                             Risk appetite sets the boundaries within
organisational entity over a defined time
                                              which strategy is executed – Manigent
period, to achieve the objectives of that
entity – COSO Enterprise Risk Management


 The COSO definition provides ‘What, Who, When and
  Why’ of risk appetite
          What: the amount and type of risk
          Who: an organisational entity
          When: over a defined time horizon
          Why: to achieve the objectives of the entity



Page  8
Risk Appetite is a multidimensional construct, which
changes depending on the organisational entity and what
they are trying to achieve
        Annual
     90 days                                                             Investment Banking example
                                                                         We are willing to put £x million of
 Overnight                                                               capital @ risk to trade on our own
                                                                         account over the next 12 month
  Extreme                                                                period.

                                                                         We hold no more than x% of our
                                                                         capital in overnight positions.
       High
                                                                         We will accept operational losses
                                                                         of £x million per month.
 Moderate

                                                                            Water Industry example
                                                                         We have no appetite for causing
       Low
                                                                         customer illness by supplying poor
                                                                         quality water.

                                                                         We have no appetite for appearing
                                                                         in local press related to leaks or
                                                                         fines for more than 2 consecutive
                                                             Strategic
                          Market
                 Credit




                                   Liquidity


                                               Operational




                                                                         days.



Page  9
Cascading Risk Appetite through the organisation, is a
powerful way of shaping culture and aligning risk-
taking

 The nature of the organisational unit              Organisational
  will influence the risk dimensions                    entity

      used to consider appetite.




                                           Income                    Capital


                 Organisational                                                         Organisational
                     entity                                                                 entity




    Technology                Reputation                                       Income                    Capital




Page  10
Integrating Risk Appetite with
Strategy
Risk Appetite should be
                                                                                   integrated into your
               Identify strengths                      Identify threats &
                 & weaknesses
                                    Business Goals
                                                         opportunities       organisations standard strategy
              Internal Analysis                          External Analysis
                                                                                        framework
Formulation




               Is our business                            Is our business
                                                           model fit for
                                                                             Formulation
                model fit for       Business Drivers
                                                                             Development of high-level strategies and allocation of scarce resources,
                  purpose?                                   purpose?
                                                                             including capital
                                                                             Given our business context, what is our appetite for risk?
                                       Appetite                              Given our appetite, have we got the right business model?
                                                                             Are we comfortable with the assumptions we have made?


                                    Business Model


                                       Business                              Setting
                                      Objectives                             From high-level strategies to specific business objectives
Setting




                                                                             Define specific business objectives and appetite for specific entity’s
                                                                             Allocation of scarce resources by entity, risk category, product lines
                                       Appetite



                Are we on-track       Strategy          Are we operating
                  to deliver?        Management         within appetite?
                                                                             Execution
Execution




                                                                             Are we on-track to achieve our business objectives
               Performance             Appetite                              Are we operating within appetite (are we taking too much, or not enough
                                                        Risk Management
               Management             Alignment                              risk?)
                                                                             Do we have the right level of controls in place to meet internal and external
                                                                             compliance drivers?
                   Manage             Compliance          Manage threats     Are we aligning our change agenda to our strategic agenda?
                 strengths &                              & opportunities
                 weaknesses
                                      Initiative
               Page  12             Management
Risk Appetite has multiple touch
               Identify strengths   Business Goals     Identify threats &    points within the overall strategy
                 & weaknesses                            opportunities
                                                                                          process
              Internal Analysis                          External Analysis
Formulation




               Is our business                            Is our business     •   Engage with your shareholders
                model fit for       Business Drivers       model fit for      •   Determine how your organisation is going to view risk – the dimensions of
                  purpose?                                   purpose?             appetite
                                                                              •   Business drivers inform the choice of dimensions of appetite
                                                                              •   Drivers and Appetite influence choice / discussions around the business model
                                       Appetite                               •   Select the ‘best’ strategy and set the risk appetite – this is where the board fulfil
                                                                                  one of their key responsibilities – setting the boundaries within which strategy is
                                                                                  executed

                                    Business Model

                                                                                 Translate the strategy into specific objectives – creating a hypothesis of our strategy
                                       Business                                  Cascade the strategy via business objectives through the organisation
                                      Objectives                              
Setting




                                                                                  Define appetite for each objective, setting boundaries by organisational unit,
                                                                                  strategic theme, risk category or even product line
                                                                                 Building into your strategy a hypothesis about the risks required to deliver the
                                                                                  strategy
                                       Appetite                                  Linking objectives and appetite shapes culture and enables the cascade of the high
                                                                                  level strategy and appetite down to the operational level where it is actually
                                                                                  executed.

                Are we on-track       Strategy          Are we operating
                  to deliver?        Management         within appetite?
Execution




                                                                                 Monitoring alignment between exposure and appetite enables understanding of
                                                                                         Is the business operating within the boundaries set by, or cascaded
               Performance             Appetite                                             from the Board i.e. appetite?
                                                        Risk Management
               Management             Alignment                                          Is the business taking too much or too little risk to achieve its
                                                                                            objectives?
                                                                                 Monitoring appetite alignment complements existing, commonly used, one-
                                                                                  dimensional tools, strategy and risk maps
                   Manage             Compliance          Manage threats
                 strengths &                              & opportunities
                 weaknesses
                                      Initiative
               Page  13             Management
Risk appetite should influence
                                                                              the your business model and
               Identify strengths
                 & weaknesses
                                    Business Goals     Identify threats &
                                                         opportunities       help identify the ‘right’ business
              Internal Analysis                          External Analysis
                                                                                           model
Formulation




                                                                                                     Create value
               Is our business                            Is our business
                model fit for       Business Drivers       model fit for
                  purpose?                                   purpose?
                                                                                   Business Model                     Deliver value
                                       Appetite


                                                                                                    Capture value
                                    Business Model


                                       Business                                Business Model
                                      Objectives                               The rationale of how an organisation creates, delivers,
Setting




                                                                               and captures value - economic, social, or other forms
                                                                               of value.
                                       Appetite
                                                                               Different business models have different inherit
                                                                               risk/reward characterises.
                Are we on-track       Strategy          Are we operating
                  to deliver?        Management         within appetite?       Business Models are being challenged in many
Execution




                                                                               industries by;
               Performance             Appetite                                    Increasing and changing regulation
                                                        Risk Management
               Management             Alignment
                                                                                   Corporate and personal de-leveraging
                                                                                   Tight credit conditions
                   Manage             Compliance          Manage threats           On going globalisation
                 strengths &                              & opportunities          Rapidly changing technology
                 weaknesses
                                      Initiative
               Page  14             Management
Business drivers play a
                                                                             critical role in the strategy
               Identify strengths                      Identify threats &
                 & weaknesses
                                    Business Goals
                                                         opportunities        process, and in this risk
              Internal Analysis                          External Analysis       appetite framework
Formulation




                                                                                   Business drivers                   Objectives                   Shareholder
                                                                                                                                                      value
               Is our business                            Is our business              Capital
                model fit for       Business Drivers       model fit for                                                          Risk Appetite     Share price

                  purpose?                                   purpose?                  Income
                                                                                                         Risk Dimensions
                                                                                                                                                  Economic Value
                                                                                                                                  Risk Exposure        Add

                                       Appetite                                     Reputational
                                                                                                                                                   Return on risk
                                                                                                                      Key Risks                   adjusted capital
                                                                                     Regulatory
                                                                                     uncertainty                                                   Return on risk
                                                                                                                     Risk Events                  adjusted assets
                                    Business Model                                   Technology
                                                                                     innovation
                                                                                                                      Scenarios


                                       Business
                                      Objectives
Setting




                                                                               Business Drivers
                                       Appetite                                The critical factors that determine the success or failure of
                                                                               an organization's strategy and its ability to deliver
                                                                               shareholder value.
                Are we on-track       Strategy          Are we operating
                  to deliver?        Management         within appetite?
                                                                               Business Driver Relationships
Execution




                                                                                      Drivers help determine the ‘right’ Business Objectives, their KPIs
               Performance             Appetite                                        and targets.
                                                        Risk Management        
               Management             Alignment                                        Select the ‘vital few’ drivers to use as risk dimensions to define risk
                                                                                       appetite
                                                                                      Assess risk using the same dimensions
                   Manage                                 Manage threats              Link risk events back to drivers to provide powerful strategic
                                      Compliance                                       analytics
                 strengths &                              & opportunities
                                                                                      Use business drivers as a base for scenarios to test and validate the
                 weaknesses                                                            objectives and risk appetite
                                      Initiative                                      Major changes in business drivers may lead to changes in not only
               Page  15             Management                                        objectives and risk appetite, but at the most extreme, to the whole
                                                                                       business model.
This Risk Appetite framework is based on a ‘vital few’ drivers
which shape thinking around risk appetite and how risk is
assessed, and creates a ‘hard’ link to strategy
 Business drivers                          Objectives                               Shareholder value
                                  (What are we trying to achieve?)

       Capital
                                                           Risk Appetite
                                                       (How much risk do we want/       Share price
                                                             need to take?)
                     Risk Dimensions
       Income       (How do we think about risk)
                                                          Risk Exposure               Economic Value
                                                       (How much risk we taking?)          Add
    Reputational
                                            Key Risks                                 Return on risk
                       (What are our uncertainties related to achievement of the
                                             objectives?)
                                                                                     adjusted capital
     Regulatory
     uncertainty                           Risk Events                                 Return on risk
                                    (What has gone wrong/right?)                      adjusted assets
     Technology
     innovation                             Scenarios
                                     (What could go wrong/right?)




 What determines                                                                      How to define
    success?                                                                            success?

Page  16
When considering risk appetite, the Board and Executive
should also develop a clear understanding of the
organisational Risk Capacity

 Risk Capacity is the absolute maximum amount of risk
  an organisation can withstand without causing its failure.
                   Risk Appetite and Risk Capacity


                     Risk Appetite                        Risk Capacity




                                                    Take emergence
                                                                            Put the resolution
                                                  action to reduce risk,
                                                                            plan into action to
                                                    and get back into
                                                                           wind up the business
                                                        appetite


            Low   Moderate      High    Extreme

Page  17
Using this approach enables the Board to be very
clear about the operating boundaries for the
business
                         Time                                                          Capacity
      Risk Dimension                  Low       Moderate       High        Extreme
                        horizon                                                         Limit

                                   X% Capital   X% Capital   X% Capital   X% Capital    Above
            Capital    Overnight
                                    @Risk        @Risk        @Risk        @Risk        X £M


                                     Up to       X £M to      X £M to      X £M to      Above
            Capital     Annual
                                     X £M         Y £M         Y £M         Y £M        X £M


                                    Up to X      Up to X      Up to X      Up to X
        Reputation      Annual      vol. Bad     vol. Bad     vol. Bad     vol. Bad
                                   coverage     coverage     coverage     coverage
   This approach creates shared, clear and actionable understanding of the
    organisational appetite, within the Board, the executive and across the
    enterprise.
   Using clearly defined risk dimensions and levels of risk, creates a common
    language for the organisation, at all level, to embed risk in a strategic or
    operational decision-making.
Page  18
The Risk Assessment process is driven by the risk
dimensions used to define risk appetite enabling
exposure to be aligned to appetite




 Appetite sets the boundaries for the business
 within which they execute strategy and create
 value.
                                                      Reputation             Capital
 Therefore the Appetite Alignment Matrix provides       @Risk                @Risk
 a method of visually monitoring and managing our
 risk taking according to the strategy, identifying
 where too much or not enough risk is being taken.
                                                             Impact x Likelihood
                                                            (over a time horizon)

Page  19
How this approach fits together to enable Boards
  and Executive teams to answer some ‘big’
  questions.

                                                      What is our Strategy?




                                   Business drivers                   Objectives                   Shareholder
                                                                                                      value
                                       Capital
           Create value                                                           Risk Appetite     Share price
                                                         Risk Dimensions
                                       Income
                                                                                                  Economic Value
                                                                     Risk Exposure
Business                 Deliver            How do we think about, and what Add                                     Are we operating within
 What
 Model     is our   business?
                          value     Reputational
                                                   is, our Key Risks
                                                           appetite ?               Return on risk
                                                                                   adjusted capital
                                                                                                                          Appetite?
                                     Regulatory
                                     uncertainty                                                   Return on risk
             Capture                                                 Risk Events                  adjusted assets
              value                  Technology
                                     innovation
                                                                      Scenarios




                                                       What is our risk
                                                        exposure?


   Page  20
Setting Risk Appetite
Risk Appetite Setting process
                                                      4. Board
                                                      appetite
                                                      setting
1. Joint Board /                                      workshop(s)
                                                                     5. Joint       6. Joint Board /
Executive                             3. Joint risk
                   2. 1-2-1 follow-                                  Appetite       Executive
appetite                              dimension
                   up meetings                                       setting        Appetite sign-
familiarisation                       workshop(s)
                                                                     workshop (s)   off
workshop(s)                                           4. Executive
                                                      appetite
                                                      setting
                                                      workshop(s)


 This process is designed to quickly establish the
  organisational boundaries – risk appetite.

 Step 3 can be combined with either step 2 or 4.

 Splitting the workshops in step 4 is designed to bring out
  different views / perspectives, but these can be
  combined.
Page  22
1. Risk Appetite familiarisation
                                                          4. Board
                                                          appetite
                                                          setting
                                                          workshop(s)
1. Joint Board /   2. 1-2-1 follow-   3. Joint risk                         5. Joint           6. Joint Board /
Executive          up meetings        dimension                             Appetite           Executive
appetite                              workshop(s)                           setting            Appetite sign-
familiarisation                                                             workshop (s)       off
                                                          4. Executive
workshop(s)
                                                          appetite
                                                          setting
                                                          workshop(s)


Purpose                                               Key deliverables
    To ensure the board and executive have a               One 2 hour workshop session
     shared understanding of risk appetite.                 Workshop documentation/notes/report
    Develop a shared understanding of the
     problem and proposed approach.
                                                      What does ‘good’ look like?
                                                            Full and active participation by the Board and
Key inputs                                                   Executive
    Risk Appetite training pack                            Engaging debate demonstrating
                                                             understanding of the business value
                                                            Answer the question – How does this help us
                                                             make money? Create value?


Page  23
2. 1-2-1 follow-up meetings
                                                            4. Board
                                                            appetite
                                                            setting
                                                            workshop(s)
1. Joint Board /     2. 1-2-1 follow-   3. Joint risk                        5. Joint          6. Joint Board /
Executive            up meetings        dimension                            Appetite          Executive
appetite                                workshop(s)                          setting           Appetite sign-
familiarisation                                                              workshop (s)      off
                                                            4. Executive
workshop(s)
                                                            appetite
                                                            setting
                                                            workshop(s)


Purpose                                                 Key deliverables
    To enable individual members of the board or             Meet with all members of the board and
     executive to ask questions, seek clarification,           executive
     debate the topic, challenge the approach etc.            Capture and consolidate feedback/thoughts
    Build buy-in and support
                                                        What does ‘good’ look like?
Key inputs                                                    All members of the board and executive can
    Meeting guide                                             answer the question;
                                                                 How does risk appetite help us make
                                                                    money? Create value?



Page  24
3. Joint risk dimension workshop(s)
                                                          4. Board
                                                          appetite
                                                          setting
                                                          workshop(s)
1. Joint Board /   2. 1-2-1 follow-   3. Joint risk                         5. Joint          6. Joint Board /
Executive          up meetings        dimension                             Appetite          Executive
appetite                              workshop(s)                           setting           Appetite sign-
familiarisation                                                             workshop (s)      off
                                                          4. Executive
workshop(s)
                                                          appetite
                                                          setting
                                                          workshop(s)


Purpose                                               Key deliverables
    Develop a common understanding of the                  One 2 hour workshop (additional workshops
     business drivers                                        maybe required). Alternative approach: Could
    Determine which if these drivers should be              be combined with steps 1 or 4
     used as risk dimensions
                                                            Documented and agreed risk dimensions,
                                                             including selection rationale
Key inputs
    Strategy documents
                                                      What does ‘good’ look like?
    Value driver models
    Board briefing/options paper                           All members of the board and executive
                                                             confidently discuss the business drivers and
    Potentially, working examples
                                                             risk dimensions


Page  25
4. Appetite setting workshop(s)
                                                          4. Board
                                                          appetite
                                                          setting
                                                          workshop(s)
1. Joint Board /   2. 1-2-1 follow-   3. Joint risk                         5. Joint           6. Joint Board /
Executive          up meetings        dimension                             Appetite           Executive
appetite                              workshop(s)                           setting            Appetite sign-
familiarisation                                                             workshop (s)       off
                                                          4. Executive
workshop(s)
                                                          appetite
                                                          setting
                                                          workshop(s)


Purpose                                               Key deliverables
    Each team develop their own perspectives               Two 2 hour workshop (additional workshops
     and thinking around appetite                            maybe required)
    Create challenge and debate within, and                Documented and agreed risk appetite
     between the two teams                                   including selection rationale per team


Key inputs                                            What does ‘good’ look like?
    Strategy document                                      Any member of each team can confidently
    Scenario models                                         present their view of risk appetite and the
    Risk Events / Loss data                                 rationale for setting their limits



Page  26
5. Joint Appetite setting workshop (s)
                                                          4. Board
                                                          appetite
                                                          setting
                                                          workshop(s)
1. Joint Board /   2. 1-2-1 follow-   3. Joint risk                         5. Joint           6. Joint Board /
Executive          up meetings        dimension                             Appetite           Executive
appetite                              workshop(s)                           setting            Appetite sign-
familiarisation                                                             workshop (s)       off
                                                          4. Executive
workshop(s)
                                                          appetite
                                                          setting
                                                          workshop(s)


Purpose                                               Key deliverables
    Develop a common view of risk appetite                 Clearly defined risk appetite statement with
     between the Board and Executive                         agreement on measureable limits


                                                      What does ‘good’ look like?
Key inputs                                                  Any member of each team can confidently
    Documents from the step 4                               present the organisational risk appetite and
    Working models / examples based on output               its supporting rationale
     from step 4
    Briefing/Options paper



Page  27
6. Joint Board / Executive Appetite sign-off
                                                           4. Board
                                                           appetite
                                                           setting
                                                           workshop(s)
1. Joint Board /    2. 1-2-1 follow-   3. Joint risk                          5. Joint             6. Appetite
Executive           up meetings        dimension                              Appetite             sign-off
appetite                               workshop(s)                            setting              (Board)
familiarisation                                                               workshop (s)
                                                           4. Executive
workshop(s)
                                                           appetite
                                                           setting
                                                           workshop(s)


Purpose                                                Key deliverables
    Board to formally ‘sign-off’ on the risk                ‘Sign-off’ risk appetite statement
     appetite
                                                       What does ‘good’ look like?
                                                             ‘Signed-off’ risk appetite statement
Key inputs
    Examples of appetite process output, as set
     in step 5 – dashboards, appetite alignment
     matrix




Page  28
Q&A


Page  29
About Manigent




Page  30   www.manigent.com | info@manigent.com | +44(0)20 7921 0022
Engaging Manigent
“we have seen a reduction in our Value at Risk
(VaR) of 27% in the first three months of using
Risk-based performance & StratexPoint” –
Financial Services client



   “we were able to reduce our operational losses by
   over to 50% in the first year of using Risk-based
   performance” – Investment banking client



"Coupled with the implementation of a new risk
management framework, significant business
benefits are emerging“ – Source: Annual
accounts of a Financial Services client

  “Using Risk-based performance has delivered a
  more focused, structured Risk framework, enabling
  us to focus on the vital few – the number of Key
  Risk dropped from 120+ to just 10! - Investment
  banking client


Page  31           www.manigent.com | info@manigent.com | +44(0)20 7921 0022
A final thought....



 “the reason that a car has brakes is to allow it
     to go faster, and the same [applies to]…
         business and risk management.”




Page  32
Contact details

Andrew Smart
CEO
Manigent
Email: andrew.smart@manigent.com
Blog: www.riskbasedperformance.com
Web: www.manigent.com
LinkedIn: http://uk.linkedin.com/in/ajsmart




Page  33

Integrating Risk Appetite With Strategy Feb 14 2011

  • 1.
    Integrating Risk Appetitewith Strategy Introducing a integrated risk appetite framework Prepared for Manigent webinar 14 February 2011
  • 2.
    Objectives and background Objectives  Provide an outline of the Risk Appetite framework within Risk- based Performance.  Provide clarification about the role Risk Appetite has to play in the overall strategy process.  Create a discussion around risk appetite.  Background  Risk Appetite is central to the Risk-based Performance approach.  Risk Appetite is a hot topic with our clients right now. Page  2
  • 3.
    Risk-based Performance Managementintegrates traditional performance and risk management to enable sustainable strategy execution What are our Threats and What are we trying to Opportunities? achieve? Strategy What is our Risk Appetite? Management Appetite Are we operating Are we on track? Performance Risk within appetite? Management Management Culture and mindset Page  3
  • 4.
    The Risk-based PerformanceManagement model is designed to be a continuous process: the journey is the destination What-if analysis Scenario analysis Define Objectives War games Clarify Strategy Define Appetite Define Risks Define Drivers Communicate what could Communicate intent hit us ‘out of the blue’ & accountabilities Model future Sustainable Operationalise uncertainty Strategy change Communicate how we will Communicate where we are provide assurance whilst doing well & doing poorly driving change Monitor and analyse indictors, KPIs, KRIs and KCIs. Monitor & analyse Capture and analyse risk events and Define Controls losses results Define Initiatives and actions Page  4
  • 5.
    Risk Appetite, andmore specifically appetite alignment, is central to the Risk-based performance approach Risk Appetite is central to sustainable strategy execution Page  5
  • 6.
    Failures around riskappetite were highlighted in governmental and regulatory post-credit crunch reviews Supervisors see insufficient evidence of board involvement in setting and monitoring adherence to firms’ risk appetite. Risk appetite statements are generally not sufficiently robust; such statements rarely reflect a suitably wide range of measures and lack actionable elements that clearly articulate firms’ intended responses to losses of capital and breaches in limits. Board-level engagement in risk oversight should be materially increased, with particular attention to the monitoring of risk and discussion leading to decisions on the entity’s risk appetite and tolerance. Remuneration structures for all such “high end” employees are appropriately aligned with the medium and longer-term risk appetite and strategy of the entity. In essence, the obligation of the board in respect of risk should be to ensure that risks are promptly identified and assessed; that risks are effectively controlled; that strategy is informed by and aligned with the board’s risk appetite; and that a supportive risk culture is appropriately embedded so that all employees are alert to the wider impact on the whole organisation of their actions and decisions. Page  6
  • 7.
    What is RiskAppetite?
  • 8.
    The definition ofRisk Appetite is clear, but the application is less well understood Risk appetite is the amount and type of risk that is acceptable to be taken by an Risk appetite sets the boundaries within organisational entity over a defined time which strategy is executed – Manigent period, to achieve the objectives of that entity – COSO Enterprise Risk Management  The COSO definition provides ‘What, Who, When and Why’ of risk appetite  What: the amount and type of risk  Who: an organisational entity  When: over a defined time horizon  Why: to achieve the objectives of the entity Page  8
  • 9.
    Risk Appetite isa multidimensional construct, which changes depending on the organisational entity and what they are trying to achieve Annual 90 days Investment Banking example We are willing to put £x million of Overnight capital @ risk to trade on our own account over the next 12 month Extreme period. We hold no more than x% of our capital in overnight positions. High We will accept operational losses of £x million per month. Moderate Water Industry example We have no appetite for causing Low customer illness by supplying poor quality water. We have no appetite for appearing in local press related to leaks or fines for more than 2 consecutive Strategic Market Credit Liquidity Operational days. Page  9
  • 10.
    Cascading Risk Appetitethrough the organisation, is a powerful way of shaping culture and aligning risk- taking The nature of the organisational unit Organisational will influence the risk dimensions entity used to consider appetite. Income Capital Organisational Organisational entity entity Technology Reputation Income Capital Page  10
  • 11.
  • 12.
    Risk Appetite shouldbe integrated into your Identify strengths Identify threats & & weaknesses Business Goals opportunities organisations standard strategy Internal Analysis External Analysis framework Formulation Is our business Is our business model fit for Formulation model fit for Business Drivers Development of high-level strategies and allocation of scarce resources, purpose? purpose? including capital Given our business context, what is our appetite for risk? Appetite Given our appetite, have we got the right business model? Are we comfortable with the assumptions we have made? Business Model Business Setting Objectives From high-level strategies to specific business objectives Setting Define specific business objectives and appetite for specific entity’s Allocation of scarce resources by entity, risk category, product lines Appetite Are we on-track Strategy Are we operating to deliver? Management within appetite? Execution Execution Are we on-track to achieve our business objectives Performance Appetite Are we operating within appetite (are we taking too much, or not enough Risk Management Management Alignment risk?) Do we have the right level of controls in place to meet internal and external compliance drivers? Manage Compliance Manage threats Are we aligning our change agenda to our strategic agenda? strengths & & opportunities weaknesses Initiative Page  12 Management
  • 13.
    Risk Appetite hasmultiple touch Identify strengths Business Goals Identify threats & points within the overall strategy & weaknesses opportunities process Internal Analysis External Analysis Formulation Is our business Is our business • Engage with your shareholders model fit for Business Drivers model fit for • Determine how your organisation is going to view risk – the dimensions of purpose? purpose? appetite • Business drivers inform the choice of dimensions of appetite • Drivers and Appetite influence choice / discussions around the business model Appetite • Select the ‘best’ strategy and set the risk appetite – this is where the board fulfil one of their key responsibilities – setting the boundaries within which strategy is executed Business Model  Translate the strategy into specific objectives – creating a hypothesis of our strategy Business  Cascade the strategy via business objectives through the organisation Objectives  Setting Define appetite for each objective, setting boundaries by organisational unit, strategic theme, risk category or even product line  Building into your strategy a hypothesis about the risks required to deliver the strategy Appetite  Linking objectives and appetite shapes culture and enables the cascade of the high level strategy and appetite down to the operational level where it is actually executed. Are we on-track Strategy Are we operating to deliver? Management within appetite? Execution  Monitoring alignment between exposure and appetite enables understanding of  Is the business operating within the boundaries set by, or cascaded Performance Appetite from the Board i.e. appetite? Risk Management Management Alignment  Is the business taking too much or too little risk to achieve its objectives?  Monitoring appetite alignment complements existing, commonly used, one- dimensional tools, strategy and risk maps Manage Compliance Manage threats strengths & & opportunities weaknesses Initiative Page  13 Management
  • 14.
    Risk appetite shouldinfluence the your business model and Identify strengths & weaknesses Business Goals Identify threats & opportunities help identify the ‘right’ business Internal Analysis External Analysis model Formulation Create value Is our business Is our business model fit for Business Drivers model fit for purpose? purpose? Business Model Deliver value Appetite Capture value Business Model Business Business Model Objectives The rationale of how an organisation creates, delivers, Setting and captures value - economic, social, or other forms of value. Appetite Different business models have different inherit risk/reward characterises. Are we on-track Strategy Are we operating to deliver? Management within appetite? Business Models are being challenged in many Execution industries by; Performance Appetite  Increasing and changing regulation Risk Management Management Alignment  Corporate and personal de-leveraging  Tight credit conditions Manage Compliance Manage threats  On going globalisation strengths & & opportunities  Rapidly changing technology weaknesses Initiative Page  14 Management
  • 15.
    Business drivers playa critical role in the strategy Identify strengths Identify threats & & weaknesses Business Goals opportunities process, and in this risk Internal Analysis External Analysis appetite framework Formulation Business drivers Objectives Shareholder value Is our business Is our business Capital model fit for Business Drivers model fit for Risk Appetite Share price purpose? purpose? Income Risk Dimensions Economic Value Risk Exposure Add Appetite Reputational Return on risk Key Risks adjusted capital Regulatory uncertainty Return on risk Risk Events adjusted assets Business Model Technology innovation Scenarios Business Objectives Setting Business Drivers Appetite The critical factors that determine the success or failure of an organization's strategy and its ability to deliver shareholder value. Are we on-track Strategy Are we operating to deliver? Management within appetite? Business Driver Relationships Execution  Drivers help determine the ‘right’ Business Objectives, their KPIs Performance Appetite and targets. Risk Management  Management Alignment Select the ‘vital few’ drivers to use as risk dimensions to define risk appetite  Assess risk using the same dimensions Manage Manage threats  Link risk events back to drivers to provide powerful strategic Compliance analytics strengths & & opportunities  Use business drivers as a base for scenarios to test and validate the weaknesses objectives and risk appetite Initiative  Major changes in business drivers may lead to changes in not only Page  15 Management objectives and risk appetite, but at the most extreme, to the whole business model.
  • 16.
    This Risk Appetiteframework is based on a ‘vital few’ drivers which shape thinking around risk appetite and how risk is assessed, and creates a ‘hard’ link to strategy Business drivers Objectives Shareholder value (What are we trying to achieve?) Capital Risk Appetite (How much risk do we want/ Share price need to take?) Risk Dimensions Income (How do we think about risk) Risk Exposure Economic Value (How much risk we taking?) Add Reputational Key Risks Return on risk (What are our uncertainties related to achievement of the objectives?) adjusted capital Regulatory uncertainty Risk Events Return on risk (What has gone wrong/right?) adjusted assets Technology innovation Scenarios (What could go wrong/right?) What determines How to define success? success? Page  16
  • 17.
    When considering riskappetite, the Board and Executive should also develop a clear understanding of the organisational Risk Capacity  Risk Capacity is the absolute maximum amount of risk an organisation can withstand without causing its failure. Risk Appetite and Risk Capacity Risk Appetite Risk Capacity Take emergence Put the resolution action to reduce risk, plan into action to and get back into wind up the business appetite Low Moderate High Extreme Page  17
  • 18.
    Using this approachenables the Board to be very clear about the operating boundaries for the business Time Capacity Risk Dimension Low Moderate High Extreme horizon Limit X% Capital X% Capital X% Capital X% Capital Above Capital Overnight @Risk @Risk @Risk @Risk X £M Up to X £M to X £M to X £M to Above Capital Annual X £M Y £M Y £M Y £M X £M Up to X Up to X Up to X Up to X Reputation Annual vol. Bad vol. Bad vol. Bad vol. Bad coverage coverage coverage coverage  This approach creates shared, clear and actionable understanding of the organisational appetite, within the Board, the executive and across the enterprise.  Using clearly defined risk dimensions and levels of risk, creates a common language for the organisation, at all level, to embed risk in a strategic or operational decision-making. Page  18
  • 19.
    The Risk Assessmentprocess is driven by the risk dimensions used to define risk appetite enabling exposure to be aligned to appetite Appetite sets the boundaries for the business within which they execute strategy and create value. Reputation Capital Therefore the Appetite Alignment Matrix provides @Risk @Risk a method of visually monitoring and managing our risk taking according to the strategy, identifying where too much or not enough risk is being taken. Impact x Likelihood (over a time horizon) Page  19
  • 20.
    How this approachfits together to enable Boards and Executive teams to answer some ‘big’ questions. What is our Strategy? Business drivers Objectives Shareholder value Capital Create value Risk Appetite Share price Risk Dimensions Income Economic Value Risk Exposure Business Deliver How do we think about, and what Add Are we operating within What Model is our business? value Reputational is, our Key Risks appetite ? Return on risk adjusted capital Appetite? Regulatory uncertainty Return on risk Capture Risk Events adjusted assets value Technology innovation Scenarios What is our risk exposure? Page  20
  • 21.
  • 22.
    Risk Appetite Settingprocess 4. Board appetite setting 1. Joint Board / workshop(s) 5. Joint 6. Joint Board / Executive 3. Joint risk 2. 1-2-1 follow- Appetite Executive appetite dimension up meetings setting Appetite sign- familiarisation workshop(s) workshop (s) off workshop(s) 4. Executive appetite setting workshop(s)  This process is designed to quickly establish the organisational boundaries – risk appetite.  Step 3 can be combined with either step 2 or 4.  Splitting the workshops in step 4 is designed to bring out different views / perspectives, but these can be combined. Page  22
  • 23.
    1. Risk Appetitefamiliarisation 4. Board appetite setting workshop(s) 1. Joint Board / 2. 1-2-1 follow- 3. Joint risk 5. Joint 6. Joint Board / Executive up meetings dimension Appetite Executive appetite workshop(s) setting Appetite sign- familiarisation workshop (s) off 4. Executive workshop(s) appetite setting workshop(s) Purpose Key deliverables  To ensure the board and executive have a  One 2 hour workshop session shared understanding of risk appetite.  Workshop documentation/notes/report  Develop a shared understanding of the problem and proposed approach. What does ‘good’ look like?  Full and active participation by the Board and Key inputs Executive  Risk Appetite training pack  Engaging debate demonstrating understanding of the business value  Answer the question – How does this help us make money? Create value? Page  23
  • 24.
    2. 1-2-1 follow-upmeetings 4. Board appetite setting workshop(s) 1. Joint Board / 2. 1-2-1 follow- 3. Joint risk 5. Joint 6. Joint Board / Executive up meetings dimension Appetite Executive appetite workshop(s) setting Appetite sign- familiarisation workshop (s) off 4. Executive workshop(s) appetite setting workshop(s) Purpose Key deliverables  To enable individual members of the board or  Meet with all members of the board and executive to ask questions, seek clarification, executive debate the topic, challenge the approach etc.  Capture and consolidate feedback/thoughts  Build buy-in and support What does ‘good’ look like? Key inputs  All members of the board and executive can  Meeting guide answer the question;  How does risk appetite help us make money? Create value? Page  24
  • 25.
    3. Joint riskdimension workshop(s) 4. Board appetite setting workshop(s) 1. Joint Board / 2. 1-2-1 follow- 3. Joint risk 5. Joint 6. Joint Board / Executive up meetings dimension Appetite Executive appetite workshop(s) setting Appetite sign- familiarisation workshop (s) off 4. Executive workshop(s) appetite setting workshop(s) Purpose Key deliverables  Develop a common understanding of the  One 2 hour workshop (additional workshops business drivers maybe required). Alternative approach: Could  Determine which if these drivers should be be combined with steps 1 or 4 used as risk dimensions  Documented and agreed risk dimensions, including selection rationale Key inputs  Strategy documents What does ‘good’ look like?  Value driver models  Board briefing/options paper  All members of the board and executive confidently discuss the business drivers and  Potentially, working examples risk dimensions Page  25
  • 26.
    4. Appetite settingworkshop(s) 4. Board appetite setting workshop(s) 1. Joint Board / 2. 1-2-1 follow- 3. Joint risk 5. Joint 6. Joint Board / Executive up meetings dimension Appetite Executive appetite workshop(s) setting Appetite sign- familiarisation workshop (s) off 4. Executive workshop(s) appetite setting workshop(s) Purpose Key deliverables  Each team develop their own perspectives  Two 2 hour workshop (additional workshops and thinking around appetite maybe required)  Create challenge and debate within, and  Documented and agreed risk appetite between the two teams including selection rationale per team Key inputs What does ‘good’ look like?  Strategy document  Any member of each team can confidently  Scenario models present their view of risk appetite and the  Risk Events / Loss data rationale for setting their limits Page  26
  • 27.
    5. Joint Appetitesetting workshop (s) 4. Board appetite setting workshop(s) 1. Joint Board / 2. 1-2-1 follow- 3. Joint risk 5. Joint 6. Joint Board / Executive up meetings dimension Appetite Executive appetite workshop(s) setting Appetite sign- familiarisation workshop (s) off 4. Executive workshop(s) appetite setting workshop(s) Purpose Key deliverables  Develop a common view of risk appetite  Clearly defined risk appetite statement with between the Board and Executive agreement on measureable limits What does ‘good’ look like? Key inputs  Any member of each team can confidently  Documents from the step 4 present the organisational risk appetite and  Working models / examples based on output its supporting rationale from step 4  Briefing/Options paper Page  27
  • 28.
    6. Joint Board/ Executive Appetite sign-off 4. Board appetite setting workshop(s) 1. Joint Board / 2. 1-2-1 follow- 3. Joint risk 5. Joint 6. Appetite Executive up meetings dimension Appetite sign-off appetite workshop(s) setting (Board) familiarisation workshop (s) 4. Executive workshop(s) appetite setting workshop(s) Purpose Key deliverables  Board to formally ‘sign-off’ on the risk  ‘Sign-off’ risk appetite statement appetite What does ‘good’ look like?  ‘Signed-off’ risk appetite statement Key inputs  Examples of appetite process output, as set in step 5 – dashboards, appetite alignment matrix Page  28
  • 29.
  • 30.
    About Manigent Page 30 www.manigent.com | [email protected] | +44(0)20 7921 0022
  • 31.
    Engaging Manigent “we haveseen a reduction in our Value at Risk (VaR) of 27% in the first three months of using Risk-based performance & StratexPoint” – Financial Services client “we were able to reduce our operational losses by over to 50% in the first year of using Risk-based performance” – Investment banking client "Coupled with the implementation of a new risk management framework, significant business benefits are emerging“ – Source: Annual accounts of a Financial Services client “Using Risk-based performance has delivered a more focused, structured Risk framework, enabling us to focus on the vital few – the number of Key Risk dropped from 120+ to just 10! - Investment banking client Page  31 www.manigent.com | [email protected] | +44(0)20 7921 0022
  • 32.
    A final thought.... “the reason that a car has brakes is to allow it to go faster, and the same [applies to]… business and risk management.” Page  32
  • 33.
    Contact details Andrew Smart CEO Manigent Email:[email protected] Blog: www.riskbasedperformance.com Web: www.manigent.com LinkedIn: http://uk.linkedin.com/in/ajsmart Page  33

Editor's Notes

  • #21 By integrating Risk Appetite into the Strategy process, at each of the 3 steps, Boards and Executive Teams are able to answer some ‘big’ questions about their organisations.