O que é gestão de risco? - ISO 31000 | QMS Brasil

Summary

In this video, Flávio Oliveira, a managing partner at PM Análises Consultoria e Treinamento, discusses risk management. He explains the concept of risk as the result of uncertainty in achieving goals, highlighting its potential positive or negative outcomes. Oliveira outlines the key steps in risk management, including risk identification, prioritization, and treatment. He emphasizes preventive and mitigation actions, referring to international standards like ISO 31000 and sector-specific guidelines. The video also touches on the integration of risk management processes across various levels within organizations, from operational to strategic risks.

Takeaways

• 😀 Risk is defined as the result of uncertainty in the pursuit of a particular objective, which could be personal or professional.
• 😀 Risk can manifest in both positive and negative ways, depending on how uncertainties unfold during a project or goal pursuit.
• 😀 Risk management involves identifying risk scenarios, prioritizing them based on their impact and frequency, and then treating them accordingly.
• 😀 The treatment of risk includes both preventive actions to avoid risks and mitigating actions to manage risks once they occur.
• 😀 ISO 31000 is a globally recognized standard for risk management, and it has been translated into Brazilian Portuguese as ABNT NBR 31000.
• 😀 Other specific sectors, such as automotive, food, and aerospace industries, have tailored guidelines for risk management.
• 😀 The risk management process generally follows the PDCA cycle: Planning, Identifying risks, Analyzing and prioritizing risks, Acting on them, and Checking the effectiveness of actions taken.
• 😀 Companies usually implement risk management strategies for various categories, such as employee safety, financial risks, compliance, and more.
• 😀 Risk management frameworks can be integrated across different types of risks, regardless of their nature, helping with decision-making and prioritization.
• 😀 Risks affect organizations at various levels, from operational risks to tactical and strategic risks that could impact an organization's long-term success.

Q & A

What is the definition of risk in the context of this video?

Risk is defined as the result of uncertainty in the pursuit of a specific objective. These objectives can vary from personal goals, such as building a house or having a family, to professional ones, like implementing a project or delivering a service.

What are the key steps involved in risk management?

The key steps in risk management are: identifying risk scenarios, prioritizing risks based on their impact or frequency, and then managing those risks through preventive actions and mitigation strategies if the risk event occurs.

What is the importance of identifying risk scenarios?

Identifying risk scenarios is crucial because it helps in understanding what could go wrong during a project or the pursuit of an objective, allowing for a more targeted approach to manage and mitigate those risks.

What is the difference between preventive actions and mitigation actions in risk management?

Preventive actions aim to avoid the occurrence of a risk scenario, while mitigation actions focus on minimizing the impact or damage if the risk event actually takes place.

What are some of the references and standards for risk management mentioned in the video?

One of the most well-known standards is ISO 31000, which is an international standard for risk management. It has been translated into Portuguese as ABNT NBR 31000. Additionally, there are sector-specific guidelines like Cozzo RM for financial risks and compliance, as well as sector-specific manuals for industries like automotive, food, and aerospace.

How is the PDCA cycle related to risk management?

The PDCA (Plan-Do-Check-Act) cycle is an essential part of risk management. It involves planning and identifying risk scenarios, executing risk analysis, taking actions based on priority, checking the effectiveness of those actions, and finally, closing the cycle with lessons learned and monitoring results.

Why is integrating risk management across different sectors important?

Integrating risk management across different sectors within an organization allows for a unified approach. Even though the risks may vary by sector (e.g., safety, financial, compliance), the criteria for prioritization and decision-making can be aligned to enhance overall risk management effectiveness.

What are the three levels of risk within an organization?

The three levels of risk in an organization are: operational risks, which are day-to-day risks; tactical risks, which are medium-term risks; and strategic risks, which can significantly affect the organization’s continuity and long-term objectives.

What is the role of management in ensuring the effectiveness of risk management?

Management plays a critical role in ensuring the effectiveness of risk management by overseeing the identification, prioritization, and treatment of risks. They must also ensure that risk management is integrated into the organizational strategy and continuously monitored.

What is the significance of the continuous monitoring process in risk management?

Continuous monitoring is vital because it ensures that the effectiveness of the risk management actions is checked regularly. It allows for adjustments based on evolving risks and provides valuable feedback for future decision-making and improvements in the risk management process.