Chapter 3 – Risk

Assessment (Nos. 5,6 and 7)

Carl Jerome S. Ching
CBET – 01 – 501E
5. List three organizations that provide lists of common
vulnerabilities useful during a risk assessment.

1. Federal Emergency Management Agency

https://www.fema.gov/
Provides the Mapping Information Platform and the
Risk MAP (Mapping, Assessment, and Planning) to
help organizations by delivering data that increases
public awareness and leads to action to reduce the
risk to property and life.
2. US Geological Service (USGS)

https://www.usgs.gov/
Study the landscape, natural resources, and natural
hazards that may threaten the organization.
3. National Weather Service

https://www.weather.gov/
 National Weather Service

Provides rain, hurricane, air quality, winter

storm, flood, and marine weather
information, which can have a substantial
impact on the health, safety, and operation
of organizational process.
 6. List three of the benefits of CSA programs.

According to University of Toledo, CSA is defined

as a process by which a department examines and
improves existing internal controls and/or
implements new internal controls to mitigate risks
associated with a process or function.
 1. An effective mechanism to involve those
who have ownership for risks and
controls in the organization
Enhance responsibility and accountability for risks and
controls among management and staff.
2. CSA consist of questionnaires and other forms that
process owners complete that identify the major activities
in their programs and processes, the objectives, risks and
controls, the individuals that perform key tasks and
controls, and the major challenges affecting these
programs and processes.
There are many different CSA techniques that range from
simple questionnaires, one-on-one interviews, facilitated
workshops and automated solutions. 
3. Require managers to think about the design and
condition of their areas of responsibility and assess
the presence and quality of the related controls.
•Help directors to meet their corporate governance
responsibilities. Highlight best practices and opportunities
to improve business performance.
7. Describe three risks that are unique to each of the following two
manufacturing approaches: made to order (MTO) and
made to stock (MTS).

Make to Stock Make to order

• products are • manufacturing only

manufactured after a customer’s
based on demand order is received
forecasts
• Push-type • Pull-type
 Made to Stock (MTS) Made to Order (MTO)

1.  Increase in storage costs 1. Customer wait times

2. Inventory levels 2. Available raw Materials

3. Forecasts  3. Irregular sales

Thank You!