OPERATIONAL RISK MANAGEMENT OF SURABAYA MAIN NAVAL BASE V REPAIR AND MAINTENANCE FACILITY BASED ON ISO 31000 FRAMEWORK

JOURNAL ASRO ◽  
2019 ◽  
Vol 10 (3) ◽  
pp. 111
Author(s):  
Yunus Patabang ◽  
Suprayitno Suprayitno ◽  
Erpan Sahiri ◽  
I Made Jiwa

Surabaya Main Naval Base V Repair and Maintenance Facility is one of the work units under the auspices of the Indonesian Navy that is tasked with carrying out the maintenance and repair of all major weapons systems of the Indonesian Navy. In carrying out their duties Surabaya Main Naval Base V Repair and Maintenance Facility has a big challenge and even there are various kinds of risks to prepare all the Indonesian Armed Forces defense equipment in accordance with the demands of need. Therefore, in this research, risk management will be carried out at the Surabaya Main Naval Base V Repair and Maintenance Facility Operational based on the ISO 31000: 2018 framework. Based on this framework, risk management will be carried out, namely how to carry out risk assessments in the form of risk identification, risk analysis, and risk evaluation for all risks in the operational field. Enterprise Risk Management (ERM) is also used to carry out in-depth risk management processes. One method used to solve existing problems is to use the House of Risk (HOR) method, which is divided into two stages. Stage 1 HOR focuses on ranking the Aggregate Risk Potential (ARP) value and with the help of the Pareto diagram the cumulative ARP value is obtained to determine the risk event (risk agent) selected, which then requires treatment on a priority scale. The results of this HOR phase 1 are then included in HOR phase 2 to rank the most effective prevention measures based on costs and resources. From the results of the HOR phase 2, further brainstorming was carried out with the Surabaya Main Naval Base V Repair and Maintenance Facility in accordance with the actions chosen for preventive actions that could be immediately carried out.Keywords: House of Risk, Enterprise Risk Management, SNI ISO 31000: 2018.

2017 ◽  
Vol 25 (3) ◽  
pp. 274-295 ◽  
Author(s):  
Erastus Karanja

Purpose There are two main industry-sanctioned enterprise risk management (ERM) models, that is, COSO 2004 and ISO 31000:2009, that firms refer to when implementing ERM programs. Taken together, the two ERM models specify that firms should implement ERM programs to meet a strategic need, improve operations and reporting or to comply with government regulations or industry best practices. In addition, the focus of ERM implementation should be either the subsidiary, business unit, division, firm/entity or global level. The purpose of this study is to investigate whether firms are aligning their ERM implementations with these tenets: strategy, operations, reporting, compliance and the level of implementation. Design/methodology/approach The proxy for ERM implementation is the hiring of a Chief Risk Officer (CRO). The research data come from a sample of 122 US firms that issued a press release following the hiring of a CRO between 2010 and 2014. The press releases were retrieved and aggregated through content analysis in LexisNexis Academic. Findings The results reveal that many ERM implementations are occurring at the firm/entity level, and with the exception of reporting, firms consider ERM to be a strategic firm resource capable of improving business operations and compliance initiatives. Originality/value There is a dearth of research studies specifically investigating whether ERM programs adopted by firms are aligned with the specification of COSO 2004 and ISO 31000:2009 frameworks. The apparent lack of a clear understanding of the alignment between the firm ERM programs and the industry’s ERM frameworks may limit the development and implementation of ERM and the eventual realization of the benefits associated with a successful ERM implementation.


2021 ◽  
Vol 14 (3) ◽  
pp. 139
Author(s):  
José Ruiz-Canela López

Operational risk is defined as the potential losses resulting from events caused by inadequate or failed processes, people, equipment, and systems or from external events. One of the most important challenges for the management of the company is to improve its results through its operational risk identification and evaluation. Most of Enterprise Risk Management (ERM) scholarship has roots in the finance/risk management and insurance (RMI) discipline, mainly in the banking sector. This study proposes an innovative operational risk assessment methodology (OpRAM), to evaluate operational risks focused on telecommunications companies (TELCOs), on the basis of an operational risk self-assessment (OpRSA) process and method. The OpRSA process evaluates operational risks through a quantitative analysis of estimates which inputs are the economic impact and the probability of occurrence of events. The OpRSA method is the “engine” for calculating the economic risk impact, applying actuarial techniques, which allow estimation of unexpected losses and expected losses distributions in a TELCO. The results of the analyzed business unit in the field work were compared with standardized ratings (acceptable, manageable, critical, or catastrophic), and contrasted against the company’s managers, proving that the OpRSA framework is a reliable and useful management tool for the business, and leading to more research in other sectors where operational risk management is key for the company success.


2016 ◽  
Vol 5 (2) ◽  
pp. 80
Author(s):  
Linda L Vila ◽  
Vito Buccellato

Background: Today’s health care landscape requires a new standard of service delivery aimed at quality outcomes, cost-effective provisions of coordinated treatment, and access to equitable care. This standard has brought emerging risks that pose threats to the operational and financial well-being of health care organizations, especially safety net hospitals. The establishment of enterprise risk management (ERM) programs guided by the efforts of efficacious health care managers will promote deeper risk analysis, engagement of the entire health care organization, and structured, coordinated and cohesive mitigation responses to risk exposures.Objective: To establish and implement an ERM program using the Administrator on Duty (AOD) model that will promote a patient-centric paradigm of care while optimizing organizational performance and mitigating risk and exposure.Results: The AOD model significantly contributes to all phases of ERM, particularly risk identification, risk assessment, risk response and monitoring. The model, as perceived by both AODs and hospital senior leadership, provides tremendous benefits to a health care organization. These include, among many others, a substantial leadership presence, dynamic risk mitigation efforts, continuous education to staff and facilitation of problem solving and conflict resolution.Conclusions: The AOD program is a vital constituent of an ERM endeavor. AODs are pivotal to managing the global risk terrain of a health care organization and play a substantial role in promoting patient, staff and visitor safety while working to ensure potential and actual risk issues are addressed timely and appropriately.


2020 ◽  
Vol 5 (8) ◽  
pp. 595
Author(s):  
Luluul Jannah ◽  
Darlin Aulia ◽  
Kurnia Indah Sumunar

Kepercayaan stakeholder terhadap informasi yang diberikan pada laporan keuangan semakin menurun. Saat ini, stakeholder lebih tertarik pada pengungkapan informasi mengenai risiko. Penelitian ini bertujuan untuk menguji apakah terdapat pengaruh pengungkapan enterprise risk management sebagai variabel moderasi terhadap komite manajemen risiko dan nilai perusahaan. Penelitian ini menggunakan sampel pada 110 perusahaan yang terdaftar di Bursa Efek Indonesia dengan kriteria perusahaan pertambangan pada tahun 2016-2018 dan perusahaan yang mengungkapkan enterprise risk management disclosure pada tahun 2016-2018. Berdasarkan pengukuran enterprise risk management disclosure menggunakan checklist yang dikembangkan berdasarkan ISO 31000: 2009, penelitian ini menemukan bahwa komite manajemen risiko berpengaruh positif signifikan terhadap nilai perusahaan dan enterprise risk management disclosure memperkuat pengaruh komite manajemen risiko terhadap nilai perusahaan. Komite manajemen risiko memberikan sinyal positif kepada stakeholder sehingga  asimetri informasi tidak terjadi.


2020 ◽  
Vol 13 (12) ◽  
pp. 323
Author(s):  
Don Pagach ◽  
Monika Wieczorek-Kosmala

In this paper, we examine the impact that COVID-19 has had on enterprise risk management (ERM). Guided by the origins and philosophy of ERM, we suggest an agenda for future research on ERM in a “post-COVID-19” reality, by addressing its integrated, strategic, and value-enhancing orientation. To guide future research endeavors in ERM, which is still an evolving discipline, we present topics that would benefit from additional research attention within both risk identification and analysis, as well as the strategic dimension of ERM.


2019 ◽  
Vol 34 (2) ◽  
pp. 162-188 ◽  
Author(s):  
Birendra K. Mishra ◽  
Erik Rolland ◽  
Asish Satpathy ◽  
Michael Moore

Purpose This study aims to examine the factors influencing enterprise risk management and propose a framework for identifying and explaining the components of enterprise risk management. To enable broader analytical thinking about risk factors, the framework utilizes the resource-based theory to link various classes of risks to an extended set of organizational resources. Design/methodology/approach The paper opted for an exploratory study using a sample from an online survey. The survey subjects were recruited from the membership database of the American Institute of Certified Public Accountants, focusing primarily on CFOs. The survey consisted of six sections: demographics, a section on each of the four risk types included in ERM: strategic risk, operational risk, financial risk and hazard risk, and exit questions (where very general questions about ERM were asked). The survey yielded a data set of 227 valid responses. Findings Using the associated sample survey data, the paper provides empirical validation of the proposed framework that managers in any organizations could use to identify and manage risks. Research limitations/implications The proposed model does have limitations that predominantly exist from the fact that human judgment in decision-making is not always data-driven, and hence, a proper risk exposure could be ignored based on pure arguments of cost and benefits from domain experts. Therefore, researchers and practitioners are encouraged to test the proposed framework further. Practical implications Risk exposure is not a snapshot event in an organization’s time horizon. Rather, risk identification is an ongoing process and the proposed framework allows organizations to handle increasing complex risks and/or identifying them based on how the organizational resources may be exposed over time. Managers could use a form of risk control analytics (monitoring dashboard of all identified risks under each interaction sets on a regular basis) to become more proactive in managing risk or exploiting opportunities across enterprise. Originality/value This paper fulfills an identified need to study how enterprise risks exposure can be proactively assessed and managed.


Author(s):  
Johan Candra ◽  

Every choice made in the pursuit of objectives has its risks. From day-to-day operational decisions to the fundamental trade-offs in the boardroom, dealing with uncertainty in these choices is a part of the organizational lives. A strategy is nothing more than a commitment to a set of coherent, mutually reinforcing policies or behaviours aimed at achieving a specific competitive goal. In order to ensure the implementation of efforts and the allocation of resources to achieve strategic goals, top management should conduct integrated risk management practices to all activities/initiatives of the organization’s management, both individually and collectively. Risk management is an intrinsic part of business planning and decision making. No direction is taken without looking at the potential risks and comparing them against the organization’s risk appetite. This paper aims to research in general the practice of enterprise risk management within Institut Teknologi Bandung (ITB) as a well-known and public-state-owned university in Indonesia. This research concludes that the enterprise risk management implementation is not fully implemented yet within ITB as an enterprise. Almost all respondents agree that the implementation of enterprise risk management has a positive and significant influence on the organization’s objectives achievement. Improving university performance overall will require an effective enterprise risk management practice. Author highly recommends ITB to adopt risk management practice based on ISO-31000 standard, and it can be combined with other risk management standards available nowadays if necessary. ITB needs to start the implementation at the soonest as possible, in order to maintain its strategic position as a top university in Indonesia, increase its competitive advantages to compete in the global scale, and at the same time achieving its vision and mission in a long-term and sustainable manner.


2022 ◽  
Vol 4 (1) ◽  
pp. 16-22
Author(s):  
Franciskus Antonius Alijoyo

Enterprise risk management (ERM) is significant in running a company. ISO 31000 is one of the ERM types that are familiar. However, there are still pros and cons of ISO 31000. Thus, this study aimed to find out the responses of the Indonesian fintech lending companies managements in implementing ISO 31000. Specifically, this study tried to identify the problems in implementing ISO 31000:2018 to be implemented as ERM. Besides, it also discussed the benefits of the ISO 31000:2018 implementation from the companies' management's perspectives. The data were collected through questionnaires and interviews. The questionnaire results were quantified and interpreted in percentage, while the interview results were analyzed qualitatively using the interactive data analysis method. The study results showed that most of the companies' management believed that they had no significant problems implementing ISO 31000:2018. In addition, they felt that implementing ISO 31000:2018 as ERM gave many benefits in running the companies. The study's findings were discussed by connecting them with the current theories and empirical reviews. However, since the study was done qualitatively, a further study that involves quantitative study to measure the effectiveness of ISO 31000 empirically is needed to support the results of this study.


Sign in / Sign up

Export Citation Format

Share Document