indifferent

risk-averse

risk-seeking

conservative

Business

strategy has little effect on operational risks.

The

main factors of operational risk are people, processes and external events.

Internal

operational factors should be reviewed in terms of capacity and capability.

Causes and effects of loss events can be classified

in terms of frequency and impact.

aims to prevent loss or

damage resulting from unavailability of timely information.

entails

a reactive approach to the management of operational risk.

forms

an integral part of operational risk and should be managed on an annual basis.

is

a top-down management process.

a,c,d

a,b,d

a,b,c,d

a,b,c

a,c,d

a,b,c,d

a,b,c

a,b

a,b,c

c,d

a,b,c,d

b,c

Risk

should primarily be viewed as a negative event.

A risk event with a high

probability of occurring is considered a high-risk event.

Risk

management should be focused on loss-preventing measures.

Risk management should be

focused on the downside of possible risk events.

a,c,d

a,c

a,b,c,d

a,b,c

a,c,d

a,b,c,d

b,c,d

a,b,c

The

disclosure of the effectiveness of the organisation’s risk management strategy

should preferably be reported to stakeholders on a monthly basis.

Information

on short- and long-term business opportunities should be provided to line

managers on a quarterly basis.

Key risk issues should be

reported to line managers and risk officials on a daily basis.

Senior

management should be provided with a report on the risk profile of the

organisation on a daily basis