风险挑战文化（英文版）_26页_612kb

A Risk Challenge Culture Summary

Core Content

This document explores the concept of a risk challenge culture, a framework designed to improve risk management and oversight within organisations. It emphasizes the importance of fostering an environment where questioning, critical assessment, and open dialogue are encouraged at all levels of the organisation, particularly among the board of directors and the C-suite. The report is based on insights from the ACCA-IMA Accountants for Business Global Forum and roundtables held in Dubai, London, and New York in late 2013.

Main Viewpoints

• Risk challenge culture is essential for effective risk management, especially in light of the 2008 global financial crisis, which highlighted the need for stronger governance practices.
• A challenge culture is not about confrontation, but about professional scepticism and constructive questioning to uncover new insights and improve decision-making.
• Board diversity and expertise in ERM are critical to maintaining a robust risk challenge culture, as they allow for multiple perspectives and informed oversight.
• Clear roles and responsibilities must be defined for the board, C-suite, and internal audit functions to ensure a structured and effective ERM process.
• Information asymmetry between executives and the board is a major risk, and mechanisms must be in place to ensure transparency and timely communication.
• Cognitive biases can hinder effective risk decision-making, and awareness of these biases is necessary to promote a more rational and open risk culture.

Key Information

1. Professional Scepticism and Board Oversight

• A risk challenge culture starts with professional scepticism at the board and C-suite level.
• Board members and executives should ask "what if" questions rather than "why" questions to encourage open-mindedness and innovation.
• The board must challenge the C-suite and avoid "group think" or "violent politeness" that suppresses dissent.
• The board should be open to constructive criticism and feedback from risk experts.

2. Board Diversity and Expertise Development

• Board diversity is vital for a risk challenge culture, as it brings varied perspectives and enhances the board's ability to question and assess risks.
• All board members should be knowledgeable in ERM, not just one designated 'risk expert'.
• Board training is ongoing and experiential, not just a one-time event. It includes scenario planning, risk identification, and understanding the limitations of risk management.
• The chair of the board plays a key role in initiating and sustaining ERM training.

3. Conversations and Roles in Risk Management

• The board and C-suite have shared responsibilities in the ERM process.
• Setting risk appetite and clarity of strategy are key roles of the board.
• Risk identification should be done by front-line personnel, not just through top-down reporting.
• The internal audit function is critical in ensuring the ERM process is effective and transparent, acting as a third line of defense.

4. Information Asymmetry and Risk Reporting

• Information asymmetry between the board and executives can lead to poor risk oversight and delayed responses.
• Boards should ensure that key risk information is not filtered or delayed and that a trickle-up mechanism exists.
• Pre-reviewed risk reporting by internal audit is an effective way to reduce information asymmetry.
• Boards should be actively involved in risk monitoring and assessment to ensure they are not left in the dark.

5. Decision Making and Cognitive Biases

• Cognitive biases such as anchoring, loss aversion, overconfidence, and confirmation bias can negatively affect risk decision-making.
• Awareness and mitigation of these biases are essential for a healthy risk challenge culture.
• Strategic clarity and open dialogue are necessary to counteract these biases and ensure informed decision-making.

Conclusion

The development of a risk challenge culture is a crucial step in enhancing organisational resilience and effective risk governance. It requires a commitment from the board and C-suite to foster professional scepticism, diversity, and open communication. Additionally, it necessitates the elimination of information asymmetry and the mitigation of cognitive biases. By ensuring that all levels of the organisation engage in meaningful and rigorous risk discussions, companies can improve their ability to anticipate, manage, and respond to risks effectively.