Proses Manajemen Risiko ISO 31000: Penetapan Ruang Lingkup, Konteks, dan Kriteria

Summary

This video discusses risk management processes based on ISO 31000 standards, highlighting how risk management is already a part of daily life. It introduces the structured, systematic, and comprehensive approach to risk management that ISO 31000 offers. The video focuses on setting the scope, context, and risk criteria, using examples such as a single 30-year-old male named Pak Ali and a FMCG company aiming to increase sales by 50% by the end of 2023. It explains internal and external contexts, and how to establish risk criteria for evaluation and decision-making, including consequences, likelihood, control effectiveness, and risk ranking.

Takeaways

• 📚 The video discusses risk management processes based on ISO 31000 standards.
• 🌟 Risk management is a part of everyday life, making the ISO 31000 standard relatable and applicable.
• 🏢 The ISO 31000 standard helps structure, systematize, and make risk management comprehensive.
• 📈 The risk management process includes activities such as scope definition, context and criteria, risk assessment, risk treatment, and reporting.
• 📍 The script focuses on the 'scope definition' part of the risk management process.
• 👤 An example of internal context is given with a character named Pak Ali, providing personal details to illustrate context.
• 🚗 External context examples include distance from home to office and transportation methods like taxis and trains.
• 📈 A company's external context is exemplified with a FMCG company aiming to increase sales by 50% by the end of 2023.
• 🔍 Criteria for risk are established to evaluate the significance of risks and support decision-making processes.
• 📊 Risk criteria can be divided into analysis criteria and evaluation criteria, covering aspects like consequences, likelihood, control effectiveness, and risk ranking.
• 🚦 The criteria help determine risk appetite, tolerance, and priority, which are crucial for managing risks effectively.

Q & A

What is the main topic discussed in the video?

The main topic discussed in the video is the process of risk management based on ISO 31000.

What does ISO 31000 aim to achieve in risk management?

ISO 31000 aims to provide a structured, systematic, and comprehensive approach to risk management.

What are the components of the risk management process according to ISO 31000?

The components include establishing the context and criteria, risk assessment, risk treatment, and reporting.

What is meant by 'establishing the context' in risk management?

Establishing the context involves understanding the internal and external conditions relevant to the risk management process.

Can you provide an example of internal context mentioned in the video?

An example of internal context is the condition of Pak Ali, a 30-year-old single male who is less sensitive to noise when asleep and lives alone.

What is an example of external context given in the video?

An example of external context is the distance between home and office, transportation options like taxis and trains, and road conditions.

What is the role of criteria in risk management?

Criteria are used to evaluate the significance of risks and support the decision-making process in risk management.

What are the types of criteria mentioned for risk analysis?

The types of criteria include consequences, likelihood of occurrence, effectiveness of risk controls, and risk ranking.

What does 'consequences' refer to in the context of risk analysis criteria?

Consequences refer to the impact on revenue, budget, cost, profit, time, and other factors.

How are 'likelihood of occurrence' and 'effectiveness of risk controls' evaluated?

Likelihood of occurrence is evaluated based on frequency, number of occurrences within a certain time period, or percentage. Effectiveness of risk controls is evaluated based on whether existing controls are effective in design and function to prevent or mitigate risk impacts.

What is the purpose of risk ranking criteria?

Risk ranking criteria combine consequences and likelihood of occurrence to understand the risk's impact on achieving objectives.

What are the elements of risk evaluation criteria?

Risk evaluation criteria include risk appetite, risk tolerance, and risk priority.

How are risk appetite and risk tolerance used in decision-making?

Risk appetite refers to the amount and type of risk an organization is willing to pursue or retain, while risk tolerance is the degree to which variability in the achievement of objectives is acceptable.