value creation and enhancement for listed companies with ... · value creation and enhancement for...

43
การบรรยายวิชาการ Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification, Risk Assessment and Prioritization ๑๔ มีนาคม ๒๕๖๑ .ดร.อาณัติ ลีมัคเดช สาขาวิชาการเงิน ภาควิชาบริหารธุรกิจ คณะพาณิชยศาสตร์และ การบัญชี

Upload: others

Post on 18-Mar-2020

0 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

การบรรยายวชิาการ

Value Creation and Enhancement for Listed Companies

with the New COSO 2017 Enterprise Risk Management

(ERM)

Event Identification, Risk Assessment and

Prioritization

๑๔ มนีาคม ๒๕๖๑ศ.ดร.อาณตั ิลมีคัเดช

สาขาวชิาการเงิน ภาควชิาบรหิารธุรกจิ คณะพาณิชยศาสตรแ์ละ

การบญัชี

Page 2: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

2Source: mitre.org

Page 3: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Screening

Page 4: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Risk Assessment

Page 5: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Analysis Report

Page 6: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Drawbacks

● Rigid predefined risk factors

● Subjective views

● Ignore Risk Appetite

● good governance = Action Plan?

Page 7: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

7

Page 8: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

8

Page 9: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Risk Impact Assessment

9

Page 10: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,
Page 11: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,
Page 12: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,
Page 13: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Measuring Abstract

Page 14: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,
Page 15: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,
Page 16: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,
Page 17: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,
Page 18: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Risk Prioritization

18

Page 19: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,
Page 20: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Risk Profile

20

Page 21: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

21

Source: WEF 2018

Page 22: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Why Risk Appetite?

Sourc

e:

htt

p:/

/foru

mblo

g.o

rg/2

013/0

1/a

n-

entr

epre

neurial-appro

ach

-to-r

isk/

Page 23: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

More on Risk

Page 24: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Risks are INTERCONNECTED

Page 25: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Risk is DYNAMIC

Page 26: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Risk Mgt is ROUTINE

Page 27: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Quantifying Risk needs Data

Page 28: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

ตวัอยา่งระบบบรหิารจดัการความเสีย่ง

Page 29: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Identify – ก าหนดความเสีย่งของหน่วยงาน/ โครงการ

Page 30: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Identify - Risks

Page 31: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Identify - Risks

ดขูอ้มลูความเสีย่งทีห่น่วยงานอื่นบนัทกึไวไ้ด้

Page 32: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Identify - Risks

ความเสีย่งทีม่ใีนระบบแลว้ ระบบจะแสดงคา่เฉลีย่ของ Probability ทีม่ี

การรายงานในระบบใหเ้ป็นแนวทางในการก าหนดคา่ Probability ของผูใ้ช้

Page 33: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Identify - Risks

แสดงเกณฑ์การวดัในแต่ละปัจจยัเสีย่ง

Page 34: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Identify - Probability

ปรบัเปลีย่นคา่ Probability

ได้ โดยมคีา่เฉลีย่ของทัง้หมดแสดงเป็นแนวทาง

Page 35: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Identify - Option

ก าหนดแนวทางการจดัการความเสีย่งได้ 4 แนวทาง คอื • Control

• Avoid

• Accept

• Transfer

Page 36: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Identify - Project

● แต่ละปัจจยัความเสีย่ง สามารถระบุโครงการทีก่ าหนดขึน้เพือ่จดัการความเสีย่งดงักลา่ว โดยมกีารจดัเกบ็ขอ้มลูผลการด าเนินงาน รายละเอยีดโครงการตวัชีว้ดัในระบบเรยีกดขูอ้มลูไดใ้นภายหลงั

Page 37: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Incidence Report

● รายงานสถานะความเสีย่งทีเ่กดิขึน้ สามารถอพัเดทไดเ้ป็นระยะตามเหตุการณ์จรงิ โดยระบบจะบนัทกึเป็นขอ้มลูเกบ็ไว้ เพือ่ประมวลผลเป็นคา่เฉลีย่ทีแ่นะน าในระบบ

Page 38: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Incidence Report

ก าหนดระดบัความเสีย่งตามสเกลทีก่ าหนดในแต่

ละความเสีย่ง

Page 39: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Risk Profile

● ใช้ Risk Profile ในการวเิคราะหแ์ละจดัระดบัความเสีย่งจากโอกาสทีจ่ะเกดิความเสีย่งและผลกระทบของความเสีย่ง

Page 40: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Risk Profile

Page 41: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,
Page 42: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

Risk Profile

Page 43: Value Creation and Enhancement for Listed Companies with ... · Value Creation and Enhancement for Listed Companies with the New COSO 2017 Enterprise Risk Management (ERM) Event Identification,

http://data.tbs.tu.ac.th

● User name: test

● Password: test123

● ตดิต่อขอใชร้ะบบ Risk Management ฟรี● [email protected]