Summary of 2. Video Pembelajaran - Proses Manajemen Risiko
Summary of "2. Video Pembelajaran - Proses Manajemen Risiko"
This video provides a comprehensive overview of the Risk Management Process based on ISO 31000 and BPN Regulation Number 3 of 2022, focusing particularly on Operational Risk Management within organizations such as the Land Office. The content covers the entire risk management cycle, from context determination to monitoring and reporting, emphasizing practical examples and regulatory compliance.
Main Ideas and Concepts
- Introduction to Risk Management Process
- Understanding risk management according to ISO 31000 and BPN Regulation No. 3/2022.
- Focus on operational risk in achieving organizational goals.
- Risk arises from uncertainties in operational activities that may hinder goal achievement or reduce performance.
- Context Determination
- Importance of understanding internal and external contexts of the organization.
- Internal context includes leadership, employees, business processes, organizational structure, systems, and internal regulations.
- External context includes natural disasters, community, partners (e.g., PPAT), government, regulators, and law enforcement.
- Context helps define objectives and scope of risk management aligned with organizational goals.
- Risk Identification
- Purpose: Find, recognize, and describe risks that affect organizational goals.
- Consider factors such as causes, events, threats, opportunities, internal/external context, indicators, and information reliability.
- Avoid limiting risk identification by arbitrary numbers (e.g., forcing identification of exactly 20 risks).
- Risk descriptions should be clear, specific (less than 10 words), jargon-free, understandable by diverse backgrounds, and free from abbreviations.
- Examples:
- Delay due to unique hardware delivery issues.
- Delay caused by heavy rain affecting construction.
- Risk Analysis
- Determine the magnitude or exposure of risk by assessing likelihood and consequences.
- Techniques can be qualitative, quantitative, or mixed, depending on objectives and available data.
- Factors in analysis:
- Event likelihood and frequency.
- Impact on reputation, safety, lawsuits, service quality, etc.
- Effectiveness of existing controls.
- Sensitivity and confidence in assessment.
- Distinguish between:
- Inherent risk: risk without controls.
- Residual risk: risk remaining after controls.
- Example: Risk of getting wet when going to the office in rain (inherent) vs. risk when using an umbrella (residual).
- Risk Evaluation
- Compare risk analysis results against risk criteria to decide if further action is needed.
- Possible outcomes:
- No further action.
- Further analysis.
- Selection or reconsideration of control methods.
- Methods for risk evaluation include:
- Human ability analysis.
- Monte Carlo simulation.
- Reliability-centered maintenance.
- Ensure risk tolerance is not exceeded beyond organizational capacity.
- Risk Treatment
- Select and implement risk handling options balancing benefits and costs.
- Four main strategies:
- Accept the risk.
- Transfer or share the risk.
- Reduce the risk.
- Avoid the risk.
- Considerations for treatment:
- Optimality and effectiveness.
- Cost-effectiveness.
- Compliance with normative requirements.
- Treatment planning includes:
- Reason for choice and expected benefits.
- Accountability and responsibility.
- Required resources and contingencies.
- Performance measures.
- Reporting and monitoring mechanisms.
- Timeline and justification beyond economic factors, including stakeholder perspectives.
- Control Action Plan and Implementation
- Develop action plans based on chosen risk treatment.
- Ensure clarity in roles, timelines, and expected outcomes.
- Monitoring and Review
- Ensure quality and effectiveness of risk management through continuous monitoring.
- Key review points:
- Have all significant risks been identified?
- Are organizational changes affecting risk exposure?
- Is there a need to update controls?
- Are control failures detected and addressed?
- Reporting should be:
- Comprehensive and complete.
- Supported by other reports for stakeholder needs.
- Presented in formats suitable for different audiences (senior management vs. operational level).
- Documentation and Reporting
- Essential documents:
- Communication and consultation records.
- Risk assessments.
- Risk treatment plans.
- Monitoring and review reports.
- Example reporting system includes:
- Risk event logs.
- Mitigation plans.
- Implementation schedules (planned vs. realized).
- Evidence of mitigation.
- Risk owner assignment.
- Essential documents:
Methodology / Step-by-Step Instructions in Risk Management Process
- Step 1: Context Determination
- Identify internal and external factors influencing risk.
- Define organizational goals and scope of risk management.
- Step 2: Risk Identification
- Search and describe risks clearly and specifically.
- Consider causes, events, impacts, controls, and context.
Notable Quotes
— 00:00 — « No notable quotes »
Category
Educational