RISK MANAGEMENT: AN INTEGRATED APPROACH TO RISK MANAGEMENT AND ASSESSMENT

Purpose: The objective of this paper is to offer an overview over risk management cycle by focusing on prioritization and treatment, in order to ensure an integrated approach to risk management and assessment, and establish the a€ top 8-12a€ risks report within the organization. The interface with Internal Audit is ensured by the implementation of the scoring method to prioritize risks collected from previous generated risk report. Methodology/approach: Using evidence from other research in the area and the professional expertise, this article outlines an integrated approach to risk assessment and risk management reporting processes, by separating the risk in two main categories: strategic and operational risks. The focus is on risk prioritization and scoring; the final output will comprise a mix of strategic and operational (a€ top 8-12a€ ) risks, which should be used to establish the annual Internal Audit plan. Originality/value: By using an integrated approach to risk assessment and risk management will eliminate the need for a separate Internal Audit risk assessment over prevailing risks. It will reduce the level of risk assessment overlap by different functions (Tax, Treasury, Information System) over the same risk categories as a single methodology, is used and will align timings of risk assessment exercises. The risk prioritization by usage of risk and control scoring criteria highlights the combination between financial and non-financial impact criteria allowing risks that do not naturally lend themselves to a financial amount to be also assessed consistently. It is emphasized the usage of score method to prioritize the risks included in the annual audit plan in order to increase accuracy and timelines.