Assessment of Entity for Risk Management - Report Format

Assume that as part of your job application to a particular entity, you have been asked to write an assessment of the entity for the purposes of its risk management.

This should be written in Report format (see later).

The Report should be written assuming the reader has business knowledge but not specifically any technical accounting or risk management knowledge.

Therefore, the target audience of the Report is for non-specialists in these areas, typical to the broad audience that could be encountered at an interview panel.

Graduate Job Impact:

We know that applying for jobs is high on the agenda of many students.

The research and work performed here will not only involve you applying risk management theory to a case study but will also help you prepare for a job interviews with organisations, and immediately for the one chosen for the Task.

Module Learning Outcomes Assessed:

• Apply risk management theory to a case study

• Practice critical reflection in applying risk management theory to a specific entity

Presentation Requirements:

Format:

This should be written in Report format and incorporate the following elements:

1. Explain the key goal/s of the entity. Explain the business environment in which your chosen entity operates. This can be achieved through an appropriately structured analysis of the risk environment in which the entity operates.

2. Provide an explanation and assessment of its governance structure, organisational culture and risk management control system. This should explain how risk is managed internally at a general level. Accordingly, you should critically assess its use of Enterprise Risk Management (or not). Further, explain the risk appetite of the entity suggested by your analysis and identify and plot (on a risk matrix) the company’s risk appetite and why you think this is so.

4. Identify and explain four specific key risks the entity faces as a result of the analyses you have conducted in 1 and 2 above. These risks may beexternally or internally generated, however, one of the four risks should be positive in nature (i.e. an opportunity) and be clearly identified as such. Appropriately show the inherent level of each risk on a second version of the risk matrix created in part 1 above
5. Explain how the entity uses mitigations/controls to move the inherent level of each of the four risks that you identified in part 3, to a new residual level. Clearly show on a third risk matrix whether the subsequent residual level now lies within or beyond, the entity’s risk appetite as a result of the mitigations you describe.
6. Make a recommendation for better management of one of the key risks that you identified in part 3, incorporating a visual representation of this key risk using a bow-tie analysis diagram. Your bow-tie analysis should clearly show at least two controls currently operating plus your recommended control along with their respective control types. A costbenefit discussion of your recommended option should also be included.

(Please do not choose Brexit or Covid-19).

1. You should choose an entity that you will or have already applied to.
2. Whichever entity you choose, you May Not contact the entity. You must base your assessments on publicly available information only.
3. Referenced using Harvard style.
4. In-text references and the reference list are not included in the word limit.

To all intents and purposes, each section of the report will be equivalent in word count.

5. For ease of reading, you may use sub-headings and include diagrams intext. Please ensure any diagrams are appropriately labelled.

Ethical Requirements

No primary data will be required for this report.

All data will be secondary, obtained from information freely available in the public domain.