risk management
TRANSCRIPT
©UNCTAD 2000 1
EndEndEndEnd
©UNCTAD 2000 2
EndEndEndEnd
About …About …
Risk ManagementRisk ManagementRisk ManagementRisk Management
©UNCTAD 2000 3
EndEndEndEnd
Mouse ‘Click’ to move on to the next slide NextNextNextNext
What is Risk Management?What is Risk Management?What is Risk Management?What is Risk Management?
Who uses Risk Management?Who uses Risk Management?Who uses Risk Management?Who uses Risk Management?
How is Risk Management used?How is Risk Management used?How is Risk Management used?How is Risk Management used?
Risk Management in CustomsRisk Management in CustomsRisk Management in CustomsRisk Management in Customs
How do you use it in Customs?How do you use it in Customs?How do you use it in Customs?How do you use it in Customs?
©UNCTAD 2000 4
EndEndEndEnd
Mouse ‘Click’ to move on to the next slide NextNextNextNext
• Good management practice
• Process steps that enable improvement in decision making
• A logical and systematic approach
• Identifying opportunities
• Avoiding or minimising losses
What is Risk Management?What is Risk Management?What is Risk Management?What is Risk Management?
©UNCTAD 2000 5
EndEndEndEnd
Mouse ‘Click’ to move on to the next slide NextNextNextNext
Risk Management is the name given to a logical and systematic method of identifying, analysing, treating and monitoring the risks
involved in any activity or process.
What is Risk Management?What is Risk Management?What is Risk Management?What is Risk Management?
©UNCTAD 2000 6
EndEndEndEnd
Mouse ‘Click’ to move on to the next slide NextNextNextNext
Risk Management is a methodology that helps
managers make best use of their available resources
What is Risk Management?What is Risk Management?What is Risk Management?What is Risk Management?
©UNCTAD 2000 7
EndEndEndEnd
NextNextNextNext
Risk Management practices are widely used in public and the private sectors, covering a wide range of activities or operations.
These include:
Who uses Risk Management?Who uses Risk Management?Who uses Risk Management?Who uses Risk Management?
• Finance and Investment
• Insurance
• Health Care
• Public Institutions
• Governmen
ts
• Finance and Investment
• Insurance
• Health Care
• Public Institutions
• Governmen
ts
©UNCTAD 2000 8
EndEndEndEnd
NextNextNextNext
• Effective Risk ManagementEffective Risk Management is a recognised and valued skill.
• Educational institutions have formal study courses and award degrees in Risk Management.
• The Risk Management process is well established. (International RM process standards.)
Who uses Risk Management?Who uses Risk Management?Who uses Risk Management?Who uses Risk Management?
©UNCTAD 2000 9
EndEndEndEnd
NextNextNextNext
Risk Management isnow an integral part of
business planning.
Who uses Risk Management?Who uses Risk Management?Who uses Risk Management?Who uses Risk Management?
©UNCTAD 2000 10
EndEndEndEnd
The Risk Management process steps are a generic guide for any organisation, regardless of the type of business, activity or function.
How is Risk Management used?How is Risk Management used?How is Risk Management used?How is Risk Management used?
NextNextNextNext
There are
77 steps in the RM
process
©UNCTAD 2000 11
EndEndEndEnd
NextNextNextNext
The basic process steps are:
Establish the contextEstablish the context
Identify the risksIdentify the risks
Analyse the risksAnalyse the risks
Evaluate the risksEvaluate the risks
Treat the risksTreat the risks
©UNCTAD 2000 12
EndEndEndEnd
NextNextNextNext
‘Risk’ is dynamic and subject to constant change, so the process includes continuing:
Communication & consultationCommunication & consultation
Monitoring and reviewMonitoring and review
and
©UNCTAD 2000 13
EndEndEndEnd
NextNextNextNext
The Risk Management process:
The strategic and organisational context in which risk management will take place.
For example, the nature of your business, the risks inherent in your business and your priorities.
Communicate & consultCommunicate & consult
Establish the contextEstablish the context
©UNCTAD 2000 14
EndEndEndEnd
NextNextNextNext
The Risk Management process:
Communicate & consultCommunicate & consultMonitor and reviewMonitor and review
Defining types of risk, for instance, ‘Strategic’ risks to the goals and objectives of the organisation.
• Identifying the stakeholders, (i.e.,who is involved or affected).
• Past events, future developments.
Identify the risksIdentify the risks
©UNCTAD 2000 15
EndEndEndEnd
NextNextNextNext
The Risk Management process:
Communicate & consultCommunicate & consultMonitor and reviewMonitor and review
Analyse the risksAnalyse the risks
How likely is the risk event to happen? (Probability and frequency?)
What would be the impact, cost or consequences of that event occurring? (Economic, political, social?)
©UNCTAD 2000 16
EndEndEndEnd
NextNextNextNext
The Risk Management process:
Communicate & consultCommunicate & consultMonitor and reviewMonitor and review
Evaluate the risksEvaluate the risks
Rank the risks according to management priorities, by risk category and rated by likelihood and possible cost or consequence.
Determine inherent levels of risk.
©UNCTAD 2000 17
EndEndEndEnd
NextNextNextNext
The Risk Management process:
Treat the risksTreat the risks
Develop and implement a plan with specific counter-measures to address the identified risks.
Consider:
• Priorities (Strategic and operational)
• Resources (human, financial and technical)
• Risk acceptance, (i.e., low risks)
©UNCTAD 2000 18
EndEndEndEnd
NextNextNextNext
The Risk Management process:
Document your risk management plan and describe the reasons behind selecting the risk and for the treatment chosen.
Record allocated responsibilities, monitoring or evaluation processes, and assumptions on residual risk.
Communicate & consultCommunicate & consultMonitor and reviewMonitor and review
Treat the risksTreat the risks
©UNCTAD 2000 19
EndEndEndEnd
NextNextNextNext
The Risk Management process:
Communicate & consultCommunicate & consult
Risk Management policies and decisions must be regularly reviewed.
Risk Management policies and decisions must be regularly reviewed.
Monitor and reviewMonitor and review
In identifying, prioritising and treating risks, organisations make assumptions and decisions based on situations that are subject to change, (e.g., the business environment, trading patterns, or government policies).
©UNCTAD 2000 20
EndEndEndEnd
NextNextNextNext
The Risk Management process:
Risk Managers must monitor activities and processes to determine the accuracy of planning assumptions and the effectiveness of the measures taken to treat the risk.
Methods can include data evaluation, audit, compliance measurement.
Communicate & consultCommunicate & consult
Monitor and reviewMonitor and review
©UNCTAD 2000 21
EndEndEndEnd
NextNextNextNext
The Risk Management process:
Establish the contextEstablish the context
Identify the risksIdentify the risks
Analyse the risksAnalyse the risks
Evaluate the risksEvaluate the risks
Treat the risksTreat the risks
Mon
itori
ng
an
d r
evie
wM
on
itori
ng
an
d r
evie
w
Com
mun
icati
on
& c
on
su
ltati
on
Com
mun
icati
on
& c
on
su
ltati
on
©UNCTAD 2000 22
EndEndEndEnd
NextNextNextNext
Customs administrations have turned increasingly to Risk Management as an effective means of meeting national objectives.
Administrations provide facilitation while maintaining control over the international movement of goods and persons.
Risk management helps in matching Risk management helps in matching Customs priorities to resources.Customs priorities to resources.
Risk Management in CustomsRisk Management in CustomsRisk Management in CustomsRisk Management in Customs
©UNCTAD 2000 23
EndEndEndEnd
NextNextNextNext
International Organisations encourage International Organisations encourage and support the adoption of modern and support the adoption of modern Customs control techniques, using Customs control techniques, using Risk Management principles., e.g.,Risk Management principles., e.g.,
•WTO/Kyoto Convention.WTO/Kyoto Convention.
•APEC Sub-Committee on Customs APEC Sub-Committee on Customs Procedures.Procedures.
•Transport Industry representative Transport Industry representative bodies.bodies.
Risk Management in CustomsRisk Management in CustomsRisk Management in CustomsRisk Management in Customs
©UNCTAD 2000 24
EndEndEndEnd
NextNextNextNext
Risk management within Customs can Risk management within Customs can be strategic, operational or tactical.be strategic, operational or tactical.
Risk Management in CustomsRisk Management in CustomsRisk Management in CustomsRisk Management in Customs
Strategic:Strategic: Risks to Customs goals and objectives,
e.g.,prohibitions and restrictions, (social or
economic), health,revenue, environment.
Strategic:Strategic: Risks to Customs goals and objectives,
e.g.,prohibitions and restrictions, (social or
economic), health,revenue, environment.
- usually longer term strategies
- usually longer term strategies
©UNCTAD 2000 25
EndEndEndEnd
NextNextNextNext
Risk management within Customs can Risk management within Customs can be strategic, operational or tactical.be strategic, operational or tactical.
Risk Management in CustomsRisk Management in CustomsRisk Management in CustomsRisk Management in Customs
Operational:Operational: Decisionsand action plans
on measures taken to deal with the assessed risks.
Deployment of resources; monitoring and review.
Operational:Operational: Decisionsand action plans
on measures taken to deal with the assessed risks.
Deployment of resources; monitoring and review. - medium term strategies
- medium term strategies
©UNCTAD 2000 26
EndEndEndEnd
NextNextNextNext
Risk management within Customs can Risk management within Customs can be strategic, operational or tactical.be strategic, operational or tactical.
Risk Management in CustomsRisk Management in CustomsRisk Management in CustomsRisk Management in Customs
Tactical:Tactical: Used byofficers at their workplace,
to deal with immediate situations, working within
set parameters andto approved procedures.
Tactical:Tactical: Used byofficers at their workplace,
to deal with immediate situations, working within
set parameters andto approved procedures.- short te
rm strategies
- short term strategies
©UNCTAD 2000 27
EndEndEndEnd
NextNextNextNext
• Economic benefits, by facilitating the Economic benefits, by facilitating the movement of goods, ships, aircraft and movement of goods, ships, aircraft and people – when rated low risk.people – when rated low risk.
• Makes more effective use of existing Makes more effective use of existing skills and experience – giving better skills and experience – giving better results.results.
• Improves the quality of Customs controls Improves the quality of Customs controls – information and accountability.– information and accountability.
Risk Management in CustomsRisk Management in CustomsRisk Management in CustomsRisk Management in Customs
Why you should use Risk Management:Why you should use Risk Management:
©UNCTAD 2000 28
EndEndEndEnd
NextNextNextNext
The process helps The process helps Administrations focus on priorities Administrations focus on priorities and in decisions on deploying and in decisions on deploying limited resources to deal with the limited resources to deal with the highest risks.highest risks.
Risk Management in CustomsRisk Management in CustomsRisk Management in CustomsRisk Management in Customs
Why you should use Risk Management:Why you should use Risk Management:
©UNCTAD 2000 29
EndEndEndEnd
NextNextNextNext
How do you use it in Customs?How do you use it in Customs?How do you use it in Customs?How do you use it in Customs?
The first step is to look at your The first step is to look at your Customs context. Customs context.
• What is the role of Customs?What is the role of Customs?
• What are your national priorities What are your national priorities and the expectations of the and the expectations of the government and the public?government and the public?
• What is the nature of your What is the nature of your operational environment?operational environment?
Where do you start?Where do you start?Where do you start?Where do you start?
©UNCTAD 2000 30
EndEndEndEnd
NextNextNextNext
How do you use it in Customs?How do you use it in Customs?How do you use it in Customs?How do you use it in Customs?
The next steps in the Risk The next steps in the Risk Management process are to:- Management process are to:-
• Identify the risks Identify the risks
• Analyse the risks; andAnalyse the risks; and
• Evaluate the risks,Evaluate the risks,
… … but, if you are just starting on but, if you are just starting on Risk Management planning:Risk Management planning:
Where does the information come Where does the information come from?from?
Where does the information come Where does the information come from?from?
Who does this?Who does this?
©UNCTAD 2000 31
EndEndEndEnd
NextNextNextNext
Responsibilities must be Responsibilities must be allocated:allocated:
•Appoint a Risk Management Appoint a Risk Management champion with appropriate champion with appropriate qualifications, including experience qualifications, including experience and analytical skills.and analytical skills.
•Form a Risk Management Form a Risk Management Committee, representative of Committee, representative of operational areas.operational areas.
•Conduct Risk Management Conduct Risk Management Workshops.Workshops.
•Determine operating procedures. Determine operating procedures.
Who does the Risk Assessment?Who does the Risk Assessment?Who does the Risk Assessment?Who does the Risk Assessment?
©UNCTAD 2000 32
EndEndEndEnd
NextNextNextNext
1.1. Identify commodity or control Identify commodity or control risks; e.g., high duty rates or risks; e.g., high duty rates or quantity controls, the demand for quantity controls, the demand for prohibited goods, such as drugs, prohibited goods, such as drugs, pornography, traffic in CITES pornography, traffic in CITES wildlife.wildlife.
2.2. Research existing databases and Research existing databases and records on commodity and trader records on commodity and trader histories. histories.
3.3. Evaluate current procedures to Evaluate current procedures to identify potential control identify potential control weaknesses.weaknesses.
Sources of information for Risk AssessmentsSources of information for Risk AssessmentsSources of information for Risk AssessmentsSources of information for Risk Assessments
©UNCTAD 2000 33
EndEndEndEnd
NextNextNextNext
After identifying and analysing After identifying and analysing the risks, you can evaluate.the risks, you can evaluate.
• What is the likelihood of the What is the likelihood of the risk event occurring? risk event occurring?
Evaluate the risksEvaluate the risksEvaluate the risksEvaluate the risks
•Almost Almost certaincertain
•LikelyLikely•ModerateModerate•UnlikelyUnlikely•Rare?Rare?
•Almost Almost certaincertain
•LikelyLikely•ModerateModerate•UnlikelyUnlikely•Rare?Rare?
What is the What is the consequenconsequen
ce if the ce if the risk event risk event occurs?occurs?
What is the What is the consequenconsequen
ce if the ce if the risk event risk event occurs?occurs?
•ExtremeExtreme•Very Very highhigh
•ModeratModeratee
•LowLow•NegligiblNegligible?e?
•ExtremeExtreme•Very Very highhigh
•ModeratModeratee
•LowLow•NegligiblNegligible?e?
©UNCTAD 2000 34
EndEndEndEnd
NextNextNextNext
You need to describe or to You need to describe or to quantify exactly what the quantify exactly what the ‘Likelihood’ and ‘Consequence’ ‘Likelihood’ and ‘Consequence’ terms means to you.terms means to you.
This helps in ensuring a consistent This helps in ensuring a consistent approach in future risk approach in future risk assessment and review and assessment and review and monitoring.monitoring.
It promotes a common It promotes a common understanding within the understanding within the Administration.Administration.
Evaluate the risksEvaluate the risksEvaluate the risksEvaluate the risks
©UNCTAD 2000 35
EndEndEndEnd
NextNextNextNext
After establishing ‘After establishing ‘LikelihoodLikelihood’ and ’ and ‘‘ConsequenceConsequence’ you can use a table ’ you can use a table like this to set a level of risk.like this to set a level of risk.
Evaluate the risksEvaluate the risksEvaluate the risksEvaluate the risks
Extreme Very high Moderate Low Negligible
Almost certain
Severe Severe High Major Moderate
Likely Severe High Major Significant Moderate
Moderate High Major Significant Moderate Low
Unlikely Major Significant Moderate Low Very low
Rare Significant Moderate Low Very low Very Low
You must define what these risk levels mean You must define what these risk levels mean to you.to you.
You must define what these risk levels mean You must define what these risk levels mean to you.to you.
©UNCTAD 2000 36
EndEndEndEnd
NextNextNextNext
Low and very low level risks can Low and very low level risks can normally be accepted, subject to normally be accepted, subject to on-going monitoring.on-going monitoring.
All other risks are included in the All other risks are included in the management plan.management plan.
The plan catalogues the risks, the The plan catalogues the risks, the level of risk, and describes a level of risk, and describes a treatment. treatment.
The treatment is the action The treatment is the action proposed, (and perhaps the proposed, (and perhaps the resources allocated).resources allocated).
Treating the risksTreating the risksTreating the risksTreating the risks
©UNCTAD 2000 37
EndEndEndEnd
NextNextNextNext
Treating the risksTreating the risksTreating the risksTreating the risks
TargetedselectionsTargetedselections
Development ofDevelopment of Risk Profiles
Development ofDevelopment of Risk Profiles
PhysicalPhysicalexaminationexamination
PhysicalPhysicalexaminationexaminationIndustry auditsIndustry audits
RandomRandomexaminationsexaminations
RandomRandomexaminationsexaminations
ComplianceimprovementCompliance
improvement
©UNCTAD 2000 38
EndEndEndEnd
NextNextNextNext
Treating the risksTreating the risksTreating the risksTreating the risks
A common method of treating risks is to develop risk profiling and targeting systems.
This means – in the case of goods – selecting transactions for specific checks, according to trader, agent, origin of goods, commodity code, duty rate, routing, value, etc.
©UNCTAD 2000 39
EndEndEndEnd
NextNextNextNext
Treating the risksTreating the risksTreating the risksTreating the risks
Risk Profiles are developed as a means of putting risk management into practice at the Operational level.A Risk Profile is normally specific
to a Customs office. It describes:• The risk areas• Assessment of the level of risk• The countermeasures adopted• Activation date and review dates• Means of measuring
effectiveness.
A Risk Profile is normally specific to a Customs office. It describes:
• The risk areas• Assessment of the level of risk• The countermeasures adopted• Activation date and review dates• Means of measuring
effectiveness.
©UNCTAD 2000 40
EndEndEndEnd
NextNextNextNext
Treating the risksTreating the risksTreating the risksTreating the risks
Using the profile information, consignments of goods, means of transport and people are targeted.
The profile information is used as the basis for Selection Criteria.
Documents received and processed by Customs, i.e., cargo and passenger manifests, goods declarations, are compared against the Selection Criteria
Documents received and processed by Customs, i.e., cargo and passenger manifests, goods declarations, are compared against the Selection Criteria
Selection Criteria
Selection Criteria
©UNCTAD 2000 41
EndEndEndEnd
NextNextNextNext
Treating the risksTreating the risksTreating the risksTreating the risks
Selections are made by manual checks of documents, or by using automated systems.
Selected transactions or movements are subject to the actions detailed in the profile or plan, e.g., physical examination, audit, etc.
Selection Criteria
Selection Criteria
Documentsand Data
Documentsand Data
Selected movements
Selected movements
©UNCTAD 2000 42
EndEndEndEnd
NextNextNextNext
Monitor & ReviewMonitor & ReviewMonitor & ReviewMonitor & Review
The initial assessment made of the existence and level of risks must be evaluated on a regular basis.
You need to measure the effectiveness of risk profiles and update as necessary.• Reliable reporting of examination Reliable reporting of examination
resultsresults• Reliable reporting of examination Reliable reporting of examination
resultsresults• Compliance measurement Compliance measurement activitiesactivities
• Compliance measurement Compliance measurement activitiesactivities• Feedback from the business Feedback from the business communitycommunity
• Feedback from the business Feedback from the business communitycommunity• Results analysis and data Results analysis and data comparisonscomparisons
• Results analysis and data Results analysis and data comparisonscomparisons
©UNCTAD 2000 43
EndEndEndEnd
NextNextNextNext
The starting point is the The starting point is the Action PlanAction Plan::
1.1. Allocate responsibilities, e.g., a Risk Allocate responsibilities, e.g., a Risk Management Champion and a working Management Champion and a working party.party.
2.2. Evaluate how Risk Management processes Evaluate how Risk Management processes can be best applied in can be best applied in youryour national national environment.environment.
3.3. Survey existing skills and do a training Survey existing skills and do a training needs assessment.needs assessment.
4.4. Catalogue existing sources of data or Catalogue existing sources of data or information that can help in identifying information that can help in identifying risks. risks.
Using Risk ManagementUsing Risk ManagementUsing Risk ManagementUsing Risk Management
©UNCTAD 2000 44
EndEndEndEnd
NextNextNextNext
5.5. Flow chart existing processes. Flow chart existing processes.
6.6. Communicate and consult – within Communicate and consult – within Customs, with other Agencies, the Customs, with other Agencies, the trading community and transport trading community and transport industry.industry.
7.7. Obtain IT tools or set up processes for Obtain IT tools or set up processes for effectively operating a selectivity system.effectively operating a selectivity system.
8.8. Provide training in profiling/selectivity Provide training in profiling/selectivity skills.skills.
9.9. Test and gain confidence in the Risk Test and gain confidence in the Risk Management process. Management process.
Using Risk ManagementUsing Risk ManagementUsing Risk ManagementUsing Risk Management
©UNCTAD 2000 45
EndEndEndEnd
This presentation endeavors to This presentation endeavors to cover briefly the concepts and the cover briefly the concepts and the benefits of using Risk benefits of using Risk Management practices, Management practices, particularly within Customs particularly within Customs Administrations.Administrations.
The processes and the many The processes and the many control options deserve further control options deserve further study, and many other sources of study, and many other sources of information on this topic are information on this topic are available.available.
Control Control ANDAND Facilitation FacilitationControl Control ANDAND Facilitation Facilitation
By.. Risk ManagementBy.. Risk ManagementBy.. Risk ManagementBy.. Risk ManagementEndEndEndEnd