Dripping water torture
Little inefficiencies could lead to large operational losses / risks.
According to recent global research, 90% of financial organisations loose more than R70m a year each because of poor risk management.
Despite, massive annual losses the survey reflected that one-fifth of all financial institutions have no operational risk programme.
In addition, the survey revealed that many companies have been slow to identify their business is most at risk
Although failure or down-time of IT systems was identified as a key concern, while the company's ability to retain key employees was less of a concern, the survey revealed that many companies have been slow to identify their where their business is most at risk.
The survey conducted by Waters Group and SAS, was the most comprehensive of its kind to date and surveyed 400 corporate risk managers at 300 financial institutions.
"Despite the focus on compliance and the litigation that many financial organisations are facing because of poor risk management, many companies are at a loss to know what to do about this threat to their businesses," said Peyman Mestchian, head of risk management for SAS UK.
"In terms of corporate governance and the King II report it is unacceptable for financial institutions not to have a sound operational risk management programme in place," said Paul Skivington, director of enterprise-wide risk at Alexander Forbes Risk Services.
"Understandably, it can be difficult for organisations to get to grips with the less apparent or "softer" operational risks such as the effect of dissatisfied customers, lack of client retention, the resignation of a key employee which could result in client losses and consequently financial losses.
Since these losses are easy to measure and operational in nature, the true impact of the loss is likely to be less apparent immediately after the loss and only realised months after the actual loss occurred," he says.
Skivington illustrates the effect of operational or enterprise-wide risks by a likening them to an 'iceberg effect'.
"In many instances, operational risks may not appear to be significant but an accumulation over time of hidden losses that occur gradually erode away the organisation's profits.
“It's the little inefficiencies that add up to a much greater cost and lead to diminished profits. For example, poor services levels rendered is a risk that is very often overlooked and unaccounted for and could be as detrimental to a company bottom line as unplanned downtime of an IT system.
"Companies need to consider how much more profitable they could be if they tackled these softer risk issues," says Skivington. "Shareholders should be no less concerned if a company suffered a substantial once-off loss of R120m than if the company lost R120m over a 12 month period.
"In addition, companies need to be honest and ask themselves whether they are allocating risk management costs appropriately or are they passing them on to their customers."
A sound operational risk management programme is imperative for every organisation in order to facilitate the identification of where losses could be occurring - which is probably the greatest operational risk management challenge for any company, according to Skivington.
Once it has been established where the losses are emanating from it is easier to determine what to do about them. Guidelines for risk management are stipulated in the King II report, however operational risk management should be no less of a concern to shareholders than corporate risks.
Skivington is of the opinion that most South African financial institutions do not follow the trend of their global counterparts when it comes to risk management.
"Generally speaking, most South Africans financial organisations do have a risk management programme, however closer attention needs to be given to operational risk management," he said.
