Published on

Published in: Business, Economy & Finance
  • Be the first to comment

  • Be the first to like this

No Downloads
Total views
On SlideShare
From Embeds
Number of Embeds
Embeds 0
No embeds

No notes for slide


  1. 1. Excellence in Risk Management III The Changing Face of Risk Management April 27, 2006
  2. 2. Excellence in Risk Management Series <ul><li>“ Excellence in Risk Management I” studied the risk management practices of 30 top-performing risk managers in North America (2004) </li></ul><ul><li>“ Excellence II” examined the characteristics and practices of organizations that are implementing an enterprise-wide risk management program (2005) </li></ul><ul><li>Using “Excellence I” and “Excellence II” as a foundation of understanding, “Excellence III” examines the changes occurring in risk management in the face of a dynamic risk environment </li></ul>
  3. 3. Rapid Evolution of Risk Management
  4. 4. The Risk Manager—New Skill Set <ul><li>Risk managers need to navigate through an increasingly wide array of new risks, requiring broader skill sets. New risks like terrorism, pandemics, energy, and supply-chain shocks are coming out of the woodwork; and management is looking for answers. Ability to communicate in simple language across functions and cultures on the potential of nontraditional risks, as well as handle the traditional world of hazard risk and insurance, is the key to success. </li></ul>
  5. 5. Excellence in Risk Management Series <ul><li>A quantitative study </li></ul><ul><li>Interviews with 866 RIMS members of mid- to large-size organizations </li></ul><ul><li>Interviews were conducted by Greenwich Associates from December 2005 through January 2006 </li></ul><ul><ul><li>Greenwich Associates is a leading research-based consulting firm serving the insurance and financial services industries </li></ul></ul>
  6. 6. Who We Interviewed: Annual Revenues
  7. 7. Who We Interviewed: Annual Revenues
  8. 8. Who We Interviewed: Industry/Sector Affiliation Transportation ( 34 ) Construction ( 22 ) Oil & Energy ( 21 ) Mining, Metals, & Minerals ( 18 ) Automotive ( 17 ) Aerospace & Defense ( 17 ) Hospitality & Gaming ( 17 ) Professional Services ( 15 ) Sports, Entertainment, & Media ( 13 ) Nonprofit/Charitable/Religious ( 12 ) Agriculture ( 11 )
  9. 9. Who We Interviewed: Years of experience in the RM field AVERAGE : 19 YEARS
  10. 10. Strategic, Progressive, and Traditional Risk Management <ul><li>Level of risk management was determined by responses to adoption of various practices </li></ul><ul><li>Methodology for defining Traditional, Progressive, and Strategic: </li></ul><ul><li>Using reported implementation of various risk management practices, we divided the sample into four quartiles </li></ul><ul><ul><li>The bottom quartile represents traditional </li></ul></ul><ul><ul><li>The middle two quartiles represent progressive </li></ul></ul><ul><ul><li>The top quartile represents strategic </li></ul></ul>
  11. 11. Correlation Analysis <ul><li>Risk management is a key priority for company </li></ul><ul><li>Company formally reviews risk management issues on a regular basis </li></ul><ul><li>Company allocates sufficient resources to manage risk effectively </li></ul><ul><li>Impact of SOX on risk management </li></ul><ul><li>Company understands the risks facing the company </li></ul><ul><li>Size of company </li></ul><ul><li>Experienced a previous loss </li></ul><ul><li>Years of experience in risk management </li></ul><ul><li>Company revenue </li></ul>Strong correlation to advanced risk management Less than expected correlation to advanced risk management
  12. 12. Levels of Risk Management <ul><li>Risk Identification </li></ul><ul><li>Loss Control </li></ul><ul><li>Claims Analysis </li></ul><ul><li>Insurance and Risk-Transfer Methods </li></ul>Traditional Risk Management <ul><li>Alternative Risk Financing </li></ul><ul><li>Business Continuity </li></ul><ul><li>Total Cost of risk </li></ul><ul><li>Education and Communication </li></ul>Traditional + Progressive Risk Management <ul><li>Enterprise-wide Risk Management </li></ul><ul><li>Indexing of Risk </li></ul><ul><li>Use of Technology </li></ul>Traditional + Progressive + Strategic Risk Management
  13. 13. Comfort, Current State, and Importance Measures <ul><li>Reflect input from 866 respondents and are quantified using a normalized point score </li></ul><ul><ul><li>Comfort: We measured relative comfort for 19 different risk areas </li></ul></ul><ul><ul><li>Current State: We measured the level of implementation of 11 key risk management practices </li></ul></ul><ul><ul><li>Importance: We measured the relative importance of 19 different risk areas </li></ul></ul>
  14. 14. Risks that are high in importance and low in comfort represent key opportunity areas Comfort Level With and Importance of Risks
  15. 15. Comfort vs. Current State of Risk Management Program Industry View Comfort Level Versus Current State of Risk Management by Industry
  16. 16. Company size is not a strong determinant of risk management sophistication Company Size Versus Level of Risk Management
  17. 17. Sophistication is related to the experience of the risk manager Years of Experience Versus Level of Risk Management
  18. 18. “Strategic” enables more aggressive risk-financing approach Firms’ Orientation Towards Risk Financing
  19. 19. Organizational support is key to embracing a strategic risk management approach Strongly Agree & Agree “ Our company will keep analyzing risk. There is no doubt about that. It is not our highest priority right now, but it is important.”
  20. 20. A strategic approach is supported by strong communications with senior management Strongly Agree & Agree “ It is crucial to have senior management buy-in and understanding for any risk management function to be successful.”
  21. 21. Risk Management Practices <ul><li>Emergency response, crisis management, business continuity plans </li></ul><ul><li>Risk identification, assessment, prioritization </li></ul><ul><li>Risk mitigation and loss control </li></ul><ul><li>Communications and education </li></ul><ul><li>Claims analysis coordinated with loss control </li></ul><ul><li>Process to evaluate insurance and other risk-transfer methods </li></ul>HIGH FUTURE IMPORTANCE RATING MID-LEVEL FUTURE IMPORTANCE RATING <ul><li>ERM program </li></ul><ul><li>Technology platforms to facilitate the risk management function </li></ul><ul><li>Measurement of the total cost of risk (TCOR) and benchmarking </li></ul><ul><li>Benchmarking of risk </li></ul><ul><li>Alternative risk financing </li></ul>LOWER FUTURE IMPORTANCE RATING
  22. 22. Risk Management Practices Significant Gaps—Current vs. Future Importance <ul><li>Emergency response, crisis management, business continuity plans </li></ul><ul><li>Risk identification, assessment, prioritization </li></ul><ul><li>Risk mitigation and loss control </li></ul><ul><li>Communications and education </li></ul><ul><li>Claims analysis coordinated with loss control </li></ul><ul><li>Process to evaluate insurance and other risk-transfer methods </li></ul>HIGH FUTURE IMPORTANCE RATING MID-LEVEL FUTURE IMPORTANCE RATING <ul><li>ERM program </li></ul><ul><li>Technology platforms to facilitate the risk management function </li></ul><ul><li>Measurement of the total cost of risk (TCOR) and benchmarking </li></ul><ul><li>Benchmarking of risk </li></ul><ul><li>Alternative risk financing </li></ul>LOWER FUTURE IMPORTANCE RATING
  23. 23. Risk Management Practices Transparency Strongly Agree & Agree Request full disclosure of commissions paid to broker Increase reviews of correspondence to verify pricing integrity Place more emphasis on checking the price provided by brokers directly with insurers Increase the number of buying relationships Seek more quotes from multiple brokers
  24. 24. Emerging risks will drive risk management evolution
  25. 25. Outside Perspectives Chief Financial Officers <ul><li>Build trust with investors, risk competence as buy-side attraction </li></ul><ul><li>Ability to respond to complex, rapidly changing risks before they emerge </li></ul><ul><li>Translating pain of SOX to gains in risk understanding, organizational efficiency </li></ul><ul><li>Address board interest in broader risk management understanding </li></ul><ul><li>Fill advisory vacuum due to changing role of auditor </li></ul><ul><li>Increased risk-based decision making </li></ul><ul><li>High certainty in command and control of reporting of numbers and disclosures </li></ul>CFO Challenges } CFOs Looking for Strategic Risk Leadership Source: Mercer & Russell Reynolds Associates study, How CFOs are managing changes in roles and expectations
  26. 26. Positive Impact of Sarbanes-Oxley <ul><li>There have been a lot of negatives, mostly related to the excess workload; but in the end, Sarbanes is all positive. </li></ul>
  27. 27. Positive Impact of Sarbanes-Oxley
  28. 28. Positive Impact of Sarbanes-Oxley <ul><li>SOX has had a positive impact because once people have gotten beyond the internal controls issues, they (CEO/board members) are asking questions about broader risk management issues of the company. </li></ul>
  29. 29. Outside Perspectives Institutional Investors <ul><li>Risk management not “top of mind” with buy-side institutions, however… </li></ul><ul><li>… When discussed, importance resonates strongly, and there is recognition that an effective risk management program can improve company performance and earnings </li></ul><ul><li>Major opportunity to improve communications with buy-side investors </li></ul>
  30. 30. Excellence in Risk Management Series <ul><li>Does the firm’s senior management level know how much it is prepared to lose from all sources of risk over a given horizon (often a reporting period, but also over shorter horizons) to achieve its overall long-term financial objectives? </li></ul>Risk Framework: Is the organization able to answer the following questions at all times? <ul><li>Does the firm’s senior management level know where the top exposures are (both in terms of measured risks and non-measured uncertainties)? </li></ul><ul><li>Is there an adequate understanding of the profile and mitigation of the potential losses from the top exposures? </li></ul>
  31. 31. Enhanced Risk Communication
  32. 32. Enterprise-wide Risk Management Implementation Status
  33. 33. Conclusions <ul><li>Risk management “demand curve” is driven by emerging risks, changing environments, executive and financial stakeholder interest </li></ul><ul><ul><li>Profession is poised to fill this need or lose risk management market share to other functions…. </li></ul></ul><ul><li>Demand for leadership in nontraditional risk areas is recognized by the profession and by executive/stakeholder leadership. It will help define the risk management value proposition. The profession will continue to handle traditional hazard/insurance risks as well </li></ul><ul><ul><li>e.g., terrorism, brand, intellectual property, business-continuity plan, pandemics, human capital </li></ul></ul><ul><li>Strategic risk management—ERM—shows tremendous potential with great expected benefits, but it is still in its infancy of implementation </li></ul>
  34. 34. The Risk Manager New Skill Set <ul><li>Risk managers today are not going to be able to sit in that seat five or ten years from now unless they have a totally different educational and skill-set background. The financial background will have to be much stronger. If they don't have the strategic and financial background, they are not going to make it because they won't fit in the boardroom. </li></ul>
  35. 35. Putting This Survey to Practical Use! <ul><li>Use this survey as a discussion, education tool to draw out C-suite and board members on risk management direction and risk appetite </li></ul><ul><li>Conduct a self-evaluation or internal focus group with risk management function and key partners to discuss the current state and direction of your risk management program relative to survey findings as part of your strategic-planning process </li></ul><ul><ul><li>How is your company-specific “risk/demand curve” developed? </li></ul></ul><ul><ul><li>What are your emerging risks? </li></ul></ul><ul><ul><li>What are the gaps between current capabilities and likely future needs? </li></ul></ul><ul><li>Begin preparations for more inquiries by third parties (Moody’s, S&P, investors, boards) on risk profile and response capabilities </li></ul><ul><ul><li>How well is your leadership prepared for these questions? </li></ul></ul>
  36. 36. The Risk and Insurance Management Society, Inc. (RIMS) is a not-for-profit organization dedicated to advancing the practice of risk management, a professional discipline that protects physical, financial and human resources. Founded in 1950, RIMS represents nearly 4,000 industrial, service, nonprofit, charitable, and governmental entities. The Society serves over 9,600 risk management professionals around the world. Marsh is part of the family of MMC companies, including Kroll, Guy Carpenter, Putnam Investments, Mercer Human Resource Consulting (including Mercer Health & Benefits, Mercer HR Services, Mercer Investment Consulting, and Mercer Global Investments), and Mercer specialty consulting businesses (including Mercer Management Consulting, Mercer Oliver Wyman, Mercer Delta Organizational Consulting, NERA Economic Consulting, and Lippincott Mercer). Copyright 2006 Marsh Inc. All rights reserved. Compliance # MA6-10322 RIMS and Marsh are proud to have sponsored the Excellence in Risk Management III Survey Thank You!