ENTERPRISE

RISK MANAGEMENT
Focus group 2

bethari larasati / rana aulia / ruwina tri a / dian nur ilmi /

michelle / shafira r / randy lidian / nun
 Enterprise Risk Management

Enterprise risk management (ERM) is the culture, capabilities, and

practices, integrated with strategy-setting and its execution, that
organizations rely on to manage risk in creating, preserving, and
realizing value.
 why we should
implement the ERM?
Reduce unacceptable performance variability

Align and integrate varying views of risk

management
Build confidence of investment community and
stakeholders

Enhance corporate governance

Successfully respond to a changing business

environment

Align strategy and corporate culture

 COSO-ERM and COSO-IC

ERM framework takes a risk-based

Internal control framework takes a control-based

The two are interconnected, but not interchangeable.

 Risk Assessment Approach to
Designing Internal Control

1 2 3
identify and assess changes
assess inherent
analyze risks that impact the
risk
internal control

6 5 4
assess residual responses toward
develop a response
risk risks
 thanks!
Any questions?