Operational Risk
A Continuous Cycle
Evaluating operational risk occurs on a continuous cycle and includes four main steps:
- Identify and Prioritize
- Assess
- Mitigate/Control
- Report
How Do Functional Areas Identify Operational Risk?
- Strategic and Operational Planning
- Business Continuity Planning
- Subject Matter Experts (SMEs)
- Daily Operations
- ELT Input
How Do Functional Areas Assess, Mitigate and Report Operational Risks?
- ERM Operational Risk Framework, Methodology, and Tool
- Continuous collaboration with Subject Matter Experts (SMEs) to maintain current data in risk tool
- Implementing controls to decrease the likelihood and/or impact or eliminate an operational risk
- Utilize operational risk data to keep leadership and CU Elevate informed
How is the Operational Risk List used?
- Strategic Planning and Execution
- Operational Planning
- Risk Awareness
- Decision Making