The document provides a comprehensive overview of risk management, defining key concepts such as risk, uncertainty, and various types of risks including strategic, operational, and economic risks. It outlines the processes involved in risk management, including risk identification, analysis, and response planning, emphasizing the importance of preparation and awareness in mitigating potential losses. Additionally, the document discusses different risk management methods and their advantages and disadvantages within organizational contexts.

1. Chapter - 1
Introduction: Risk Management
Definition of Risk and uncertainty- Classification of Risk, Sources
of Risk-external and internal. Risk Management-nature, risk
analysis, planning, control and transfer of risk, Administration of
properties of an enterprise, provision of adequate security
arrangements. Interface between Risk and Insurance- Risk
identification, evaluation and management techniques, Risk
avoidance, Retention and transfer, Selecti9on and implementation
of Techniques. Various terminology, perils, clauses and risk covers.

2. INTRODUCTION TO RISK:
The etymology of the word “Risk” can be traced to the Latin word
“Rescum” meaning Risk at Sea or that which cuts.
Risk is associated with uncertainty and reflected by way of charge on
the fundamental / basic i.e. in the case of business it is the Capital,
which is the cushion that protects the liability holders of an
institution. There are multiple definitions of risk. The lists following
under the definition of risk:
• The likelihood and undesirable event will occur.
• The magnitude of loss from an unexpected event.
• The probability that “things won’t go right”.
• The effect of an adverse outcome.

3. Meaning of Risk: A probability or threat of damage, injury, liability,
loss, or any other negative occurrence that is caused by external or
internal vulnerabilities, and that may be avoided through preemptive
action.
Definition of Risk: “a condition in which there exists an exposure to
adversity”
Meaning of Uncertainty: A situation in which something is not
known, or something that is not known or certain.
Definition of Uncertainty: “Situation where the current state of
knowledge is such that (1) the order or nature of things is unknown,
(2) the consequences, extent, or magnitude of circumstances,
conditions, or events is unpredictable, and (3) credible probabilities to
possible outcomes cannot be assigned.

4. Risk Uncertainty
In risk, possible outcomes of an
element or analysis involves risk
of the probabilities of the
alternative are known.
While it is characterized by
uncertainty if the frequency
distribution of the possible
outcomes is not known
Risk is the dispersion of the
probability distribution of the
element being estimated or
calculated outcomes (s) being
considered.
While uncertainty is the degree of
lack of confidence that the
estimated probability distribution is
correct
DIFFERENCES - RISK AND UNCERTAINTY:

5. CLASSIFICATION OF RISK:
A. Strategic risks:
- Business environment
- Business strategy
- Product, distribution and sourcing policies
- Corporate reputation or brand image
- Design and other core expertise
B. Operational risks:
- Management, leadership and decision-making
- Operational processes (product range, distribution
network, procurement and supply chains) and their
management
- Intangible assets
- Compliance with laws, regulations and agreements
- Information management
- Continuity of operations
- Compliance with requirements and responsible practices

6. C. Economic risks:
- Price development of production factors
- Price development of operating costs
- Financial risks & Financial reporting
D. Pure and Speculative Risk
o A pure risk is one in which there are only the possibilities
of loss or no loss (earthquake)
o A speculative risk is one in which both profit or loss are
possible (gambling)
E. Diversifiable Risk and Nondiversifiable Risk
o A diversifiable risk affects only individuals or small
groups (car theft). It is also called nonsystematic or particular
risk.
o A nondiversifiable risk affects the entire economy or large
numbers of persons or groups within the economy (hurricane). It
is also called systematic risk or fundamental risk.
o Government assistance may be necessary to insure
nondiversifiable risks.

7. F. Enterprise risk encompasses all major risks faced by a
business firm, which include: pure risk, speculative risk,
strategic risk, operational risk, and financial risk.
– Financial Risk refers to the uncertainty of loss because
of adverse changes in commodity prices, interest rates, foreign
exchange rates, and the value of money.
Enterprise Risk Management combines into a single unified treatment
program all major risks faced by the firm:
– Pure risk, Speculative risk
– Strategic risk, Operational risk
– Financial risk
G. Accident risks:
- The environment
- Personnel, Property, Business operations and Stakeholders

8. MAJOR PERSONAL RISKS AND COMMERCIAL RISKS:
A. Personal risks:
– Premature death of family head
– Insufficient income during retirement
– Poor health (catastrophic medical bills)
– Involuntary unemployment
B. Property risks: destruction or theft of property, Physical Damage
C. Liability risks: the possibility of being held liable for bodily injury
or property damage to someone else
D. Direct loss vs. indirect loss: To Business
E. Commercial risks:
• Property risks,
• Liability risks,
• Loss of business income,
• crime exposures, human resource exposures, foreign loss
exposures, intangible property exposures, and government
exposures

9. INTERNAL RISKS EXTERNAL RISKS
• Human Factors
• Technology Factors
• Physical Factors
• Organizational and Operational
• Strategic
• Innovation
• Financial
• Natural
• Economy
• Political
• Compliance
• Health and Safety
Risk Management: Management of risks is concerned with direction of
purposeful activities towards the achievement of individual or
organizational goals. Risk Management may be defined as “the
identification, analysis and economic control of those risks which can
threaten the assets or earning capacity of an enterprise.” Risk
management evaluates which risks identified in the risk assessment
process require management and selects and implements the plans or
actions that are required to ensure that those risks are controlled.

10. Nature of Risk Management:
Scientific approach to dealing with pure risks.
Broader than insurance management.
Differs from insurance management in philosophy.
Pure and speculative risk,
Fundamental and particular risk.
Personal Risks, Property Risks, Liability Risks.
Risk arising from failure on part of others.
Fidelity Risks.
Risks due to ownership and use of Transport vehicle.
Objectives of Risk Management:
Protecting employees from accidents that might result in
death or injury.
Due attention given to cost of handling risks.
Effective utilization of resources.
Maintaining good relations with society and public.

11. Features of Risk Management:
To create the right corporate policies and strategy.
To management men and machines (processes) effectively.
To evaluate the risks confronted by a business.
To effectively handle, spread, monitor and insure the risks.
To introduce various plans and techniques to minimize the risks.
To give advices and suggestions for handling the risks.
To create risk awareness among the people.
To avoid cost, disruption and unhappiness relating to risks.
To decide which risks are worth taking/pursuing, and which
should be shunned.
To fix the sum assured under the policy and to decide on whether
to insure or not.
To select the appropriate technique or method to manage the
risks.

13. Risk Planning: A Risk Management Plan is a document that a project
manager prepares to foresee risks, estimate impacts, and define responses
to issues. It also contains a risk assessment matrix. Most critically, risk
management plans include a risk strategy. Broadly, there are four
potential strategies, with numerous variations. Projects may choose to:
• Avoid risk — Change plans to circumvent the problem;
• Control / Mitigate risk; — Reduces impact or likelihood (or both)
through intermediate steps;
• Accept risk — Take the chance of negative impact (or auto-
insurance), eventually budget the cost (e.g. via a contingency budget
line);
• Transfer risk — Outsource risk (or a portion of the risk - Share
risk) to third party that can manage the outcome. This is done e.g.
financially through insurance contracts or hedging transactions, or
operationally through outsourcing an activity.
SARA for Share Avoid Reduce Accept, or A-CAT for "Avoid,
Control, Accept, or Transfer"). Risk management plans often
include matrices.

14. Risk Management Includes:
- Risk Management Planning
- Risk Identification
- Qualitative Risk Analysis
- Quantitative Risk Analysis
- Risk Response Planning
- Risk Monitoring and Control
Who uses Risk Management?
• Finance and Investment,
• Insurance
• Health Care
• Public Institutions
• Governments
How to use Risk Management?
1. Allocate responsibilities.
2. Evaluate how Risk Management processes can be best applied
in your national environment.
3. Survey existing skills and do training needs assessment.
4. Catalogue existing sources of data or information that can help
in identifying risks.
5. Flow chart existing processes.
6. Communicate and consult.
7. Obtain IT tools or set up processes for effectively operating a
selectivity system.
8. Provide training in profiling/selectivity skills.
9. Test and gain confidence in the Risk Management process.

15. Identifying Business Risk Exposure:
a) Exposure of Physical Assets / Property: property insurance policies
typically promise to indemnify the insured for damage to covered
property on one of two bases;
1. Replacement Cost: it is also known as re-instatement value, is
the cost at the time of loss to replace destroyed or severely
damaged property with the same or like-kind new property or the
cost to repair damaged property, in each instance without
deduction for any depreciation or obsolescence in property
value.
2. Actual Cash Value (ACV): ACV is the cost presently (not
original purchase price) to replace or repair damage property less
the value of physical depreciation and obsolescence.
Risk Identification: Definition – According to Williams and Heinz, risk
identification is “the process by which a business systematically and
continuously identifies property, liability, and personnel exposures as
soon as or before they emerge.”

16. Types of Financial Asset Exposure:
Credit Exposure: credit exposure is the possibility that customers who
have been granted credit will either fail to pay when payment is due, or
will delay payment and take longer credit than agreed.
Currency Exposure: it involves losses from adverse movements in
foreign exchange rates, both short term and long term
Country Exposure:
Political Exposure:
Regulatory Exposure:
Economic Exposure:
Liquidity Exposure: This is refers to the possibility that the market for a
security, such as a bond or stock might be liquid, so that holders of the
security could have difficulty in selling their holding easily, should they
wish to do so, at a fair price.

17. Exposure to Legal Liability: There are three broad classes of legal
liability
A crime is a legal wrong against society that is punishable
by fines, imprisonment, or death.
A breach of contract is another class of legal wrongs.
A tort is a legal wrong for which the law allows a remedy
in the form of money damages.
The person who is injured or harmed (called the plaintiff or claimant) by
the actions of another person (called defendant or tort teaser) can sue for
damages.
Criminal Law: It involves an offense against society, such as murder,
robbery, or attack. In criminal cases, a state or central govt. brings formal
charges against the accused person, who is called the defendant. Such
formal charges are known as indictments.
Civil Law: It involves lawsuits or disputes between two parties. This
may include a citizen suing another citizen.

18. Torts can be classified into Three Categories:
Intentional Torts: It can arise from an intentional act or omission those
results in harm or injury to another person or damage to the person’s
property.
Absolute or Strict Liability: it means a liability is imposed regardless
of negligence or fault. Absolute liability is also referred to as strict
liability. Some common situations of absolute liability include the
fallowing.
Blasting operations that injure another person,
Manufacturing of explosives,
Owning wild or dangerous animals,
Crop spraying by airplanes,
Occupational injury and disease of employees under a worker’s
compensation law.
Negligence: It is another type of tort that can result in substantial
liability. Because negligence is so important in liability insurances, it
merits special attention.

19. Risk Identification:
Preparing Checklist of risks or various losses which may
arise due to risks.
On-site Inspections and risk assessment, Financial
Statement analysis.
Flowchart preparation and identification of risky activities.
Interaction with employees for their views about risk
exposures of business based on their knowledge and experience.
Statistical records of occurrence of losses related to various
categories of risks.
Orientation, Risk analysis questionnaires, Exposure
checklists, SWOT Analysis
Insurance policy checklists, Flow process charts, Analysis
of financial statements
Other internal records, Inspections, Interviews,
Brainstorming, Delphi Technique, Interviewing
Root Cause Identification, Assumption Analysis,
Diagramming Techniques

20. Common Risk Identification Methods are:
 Objective based risk identification: organization and project teams
have objectives. Any event that may endanger achieving an objective
partly or completely is identified as risk.
 Scenario based risk identification: in scenario analysis different
scenarios are created. e.g. a market or battle. Any event that triggers an
undesired scenario alternative is defined as risk.
 Taxonomy based risk identification: it involves a breakdown of
possible risk sources. Based on the taxonomy and knowledge of best
practices, a questionnaire is complied. The answered to the question
reveals risk.
 Common risk checking: in several industries, lists with known risks
are available. Each risk in the list can be checked for application to a
particular situation.
 Risk charting: This method combines the above approaches by listing
resources at risk, threats to those resources, modifying factors which
may increase or decrease the risk and consequences which are to be
avoided.

21. Risk Management Methods:
1. Loss Control: Risk control is a generic term to describe techniques for
reducing the frequency or severity of losses. It includes fallowing types.
• Risk avoidance
• Risk / loss prevention
• Risk / loss reduction
• Risk retention
• Risk transfer
2. Loss Financing: it refers to techniques that provide for the funding of
losses after they occur. It involves transferring the risk or retention of risk.
3. Internal Risk Reduction: risk reduction involves methods that reduce
the severity of loss or the likelihood of the loss from occurring. It can be
avoided by taking appropriate steps for prevention of risk or avoiding loss,
such steps include adaption of safety include adaption of safety program,
installation of waste material.

22. Risk Analysis / Risk Assessment:
It is a process of defining and analyzing the dangers to individuals,
business and government agencies posed by potential natural and human
caused ad versed events. Risk Assessment can be done Quantitatively
and Qualitatively.
Process of Risk Assessment:
Step 1: the initial step is to look for hazards. Take a tour of the
workplace and check for potential dangers concentrate on anything with
the potential to cause serious harm to employees.
Step 2: the second step is to decide who might be harmed and how .
Step 3: with this step one must calculate whether there have been
enough precautions put into place to encounter the hazard.
Step 4: the next step is to record findings. Risk assessment check must
show that it has dealt with all obvious hazards.
Step 5: the final step is to review risk assessment procedures and make
revisions if necessary.

23. Perils and Hazards: Types of Perils by Ability to Insure
Hazards : Tangible and Intangible

24. Advantages of Risk Management:
It encourages the firm to think about its threats. In
particular, risk management encourages it to analyze risks
that might otherwise be overlooked.
In clarifying the risk, it encourages the firm to be better
prepared. In other words, it helps the firm to manage itself
better.
It lets the organization prioritize its investment and
reduces internal disputes about how money should be
spent.
It reduces manpower duplication (e.g. one manager can
often oversee both quality and environment risk).
It reduces duplication of systems. Integration of
environment and health and safety systems are one
instance.

25. Disadvantages of Risk Management:
If risks are improperly assessed and prioritized, time
can be wasted in dealing with risk of losses that are not
likely to occur.
Unlikely events do occur but if the risk is unlikely
enough to occur it may be better to simply retain the risk
and deal with result if the loss does in fact occur.
Qualitative risk assessment is subjective and lacks
consistency
Prioritizing the risk management processes too highly
could keep an organization form ever completing a project
or even getting started. This is especially true if other
works is suspended until the risk management process is
considered complete.