Proses Manajemen Risiko menggunakan SNI ISO 31000 - Pemantauan dan Tinjauan (Monitoring & Review)

Summary

The video discusses the process of risk management and the importance of monitoring and reviewing activities in line with ISO 31000 standards. It emphasizes the need for continuous evaluation of risk identification, context changes, and risk treatment effectiveness. Key points include distinguishing between 'monitoring' and 'review,' with monitoring ensuring activities are on track and review focusing on the effectiveness of actions taken. The discussion also covers the roles and responsibilities of different organizational layers in managing risk, from operational units to internal audit and management teams.

Takeaways

• 😀 Monitoring in risk management ensures that activities are executed according to the established design and plan.
• 😀 Review focuses on evaluating the effectiveness of risk management actions and identifying areas for improvement.
• 😀 Monitoring tracks whether risk identification, treatment, and mitigation are being carried out on schedule and as intended.
• 😀 Review involves assessing whether the results of risk management are in line with the expected outcomes, and adjusting accordingly.
• 😀 Effective risk management requires both monitoring (tracking progress) and review (evaluating effectiveness) to ensure continuous improvement.
• 😀 The process of risk management is dynamic and needs to be adapted based on changes in internal and external contexts.
• 😀 The three lines of defense in risk management include: 1) Operational units managing their risks, 2) Support functions providing methodologies, and 3) Internal audits ensuring control effectiveness.
• 😀 The roles of different units in risk management are clearly defined, ensuring accountability for risk monitoring and reviews.
• 😀 The importance of timely adjustments in risk management is emphasized, particularly when environmental or organizational changes occur.
• 😀 Monitoring and review should be conducted in parallel throughout the risk management process to maintain its relevance and effectiveness.

Q & A

What is the main focus of the discussion in this video?

The main focus is on the role of monitoring (pemantauan) and review (tinjauan) in the risk management process, specifically within the ISO 31000 framework. The discussion also covers the roles of various organizational units in ensuring effective risk management.

What is the difference between 'monitoring' and 'review' in the context of risk management?

Monitoring focuses on ensuring that risk management activities are carried out as planned, including adherence to schedules and involvement of the correct personnel. Review, on the other hand, evaluates the effectiveness and appropriateness of the activities, assessing whether the expected outcomes are achieved and if any changes in the context affect the process.

Why is monitoring and review important in the risk management process?

Monitoring and review are crucial to ensure that risk management activities are not only implemented correctly but also remain effective over time. They help identify issues early, assess the impact of any changes, and ensure the process is continuously aligned with organizational objectives.

How do monitoring and review contribute to the overall effectiveness of risk management?

By continuously monitoring the risk management activities, organizations can ensure they are carried out as designed. The review process, however, takes a deeper dive into evaluating the effectiveness of these activities, considering the outcomes and any changes in internal or external contexts that might affect them.

What are the three primary questions to consider during monitoring and review?

1) Are the activities being conducted as planned? 2) Are the outcomes meeting the expected results? 3) Are there any changes in internal or external contexts that could influence the effectiveness of the risk management process?

What roles do different organizational units play in monitoring and reviewing risk management activities?

Different organizational levels have distinct roles: 1) The first line consists of risk owners who ensure that processes align with their needs. 2) The second line includes support functions that provide guidance and methodology. 3) The third line is responsible for internal audits to ensure the effectiveness of risk management processes. 4) Management oversees the entire process to ensure it aligns with the organization's objectives.

What is the 'Twilight Model' or '3 Lines of Defense' mentioned in the discussion?

The 'Twilight Model' or '3 Lines of Defense' is a framework that emphasizes accountability in risk management by dividing responsibilities across different organizational levels. The model ensures that risk management is both effective and accountable, with each line playing a crucial role in the process.

How does the 'Twilight Model' enhance the management of risks in an organization?

The Twilight Model divides the responsibility for managing risk across three levels: 1) Risk owners manage risks directly. 2) Support functions help enhance risk management effectiveness. 3) Internal audits ensure controls are effective. This division of labor ensures that risk management is comprehensive and well-structured.

Why is it necessary to monitor and review risk management activities continuously?

Continuous monitoring and review ensure that risk management activities remain relevant and effective, adapting to any changes in the internal or external environment. This ongoing evaluation helps identify potential issues early and adjust processes as needed to achieve desired outcomes.

What specific aspects of the risk management process should be monitored and reviewed?

Monitoring and review should focus on the implementation of risk management activities, their effectiveness, and any changes in internal or external contexts that could impact their success. This includes assessing whether the activities are being performed as planned and whether the outcomes align with expectations.