MERICAN Journal of Public Diplomacy and International Studies www.
grnjournal.us private risk emanating from an external risk factor
l , owner-managed risk
m and related to the
group of types of risks
n .
Formula for calculating the group of exogenous types of risks
( )
ExCR n as follows:
6
5
( )
( ,
, )
l m ExCR n ExR l m n
(6)
The value of the risk group of external factors
( )
ExFR l is calculated using the
following formula:
5
5
( )
( ,
, )
m n ExFR l ExR l m n
(7)
Accordingly, the size of the risk group of risk owners
( )
ExROR m is calculated using the
following formula:
6
5
( )
( ,
, )
l n ExROR m ExR l m n
(8)
For the purpose of greater detail, an organization can identify private external
factors and risk owners within groups and analyze them in more detail to determine the most risky
areas of its activities and analyze areas of responsibility.
In practice, a situation is possible when one particular risk arises under the influence of
several groups of factors simultaneously. In this case, there are two options for filling the matrices
shown in Fig. 5-6:
- risk belongs to the cell
( ,
, )
EnR k m n or
( ,
, )
ExR l m n , in accordance with the main
factor, the impact on which allows you to most effectively manage the likelihood and / or
consequences of a risk event;
- the risk belongs to several cells
( ,
, )
EnR k m n или
( ,
, )
ExR l m n , distributed among
all factors, the impact on which allows you to manage the likelihood and / or consequences of the
initial risk, in proportion to the degree of this impact. At the same time, it is necessary to introduce
appropriate designations that allow a clear understanding of the causal relationships of each factor
with the same risk.
The organization itself determines which filling option to use. However, it must be
understood that the second option for filling in the tables is more time-consuming than the first.
Its application is possible only in conditions of full automation of risk management procedures
and the availability of an extensive database of risk relationships. Having considered the main
types of risks of the organization, risk owners, as well as business processes and external threats
and opportunities that cause these risks, the author created a multi-tasking risk classification in the
form of three-dimensional matrices of classifications of endogenous and exogenous risks, which
provide mechanisms that allow them to be finalized in accordance with characteristics of the
activities of each particular organization.