Scribd
Unggah
68 tayangan4 halaman

Panduan Penilaian Risiko Perusahaan

Dokumen ini memberikan panduan langkah-demi-langkah untuk melakukan penilaian risiko, termasuk mendefinisikan istilah-istilah terkait seperti risiko, manajemen risiko, proses manajemen risiko, serta menjelaskan tahapan identifikasi, analisis, evaluasi, penanganan, pemantauan, dan peninjauan risiko. Dokumen ini juga menjelaskan cara menentukan tingkat risiko berdasarkan nilai dampak bisnis dan kemungkinan terja

Diunggah oleh

Dita Mega
Hak Cipta
© All Rights Reserved
Kami menangani hak cipta konten dengan serius. Jika Anda merasa konten ini milik Anda, ajukan klaim di sini.
Format Tersedia
Unduh sebagai XLSX, PDF, TXT atau baca online di Scribd
68 tayangan4 halaman

Panduan Penilaian Risiko Perusahaan

Dokumen ini memberikan panduan langkah-demi-langkah untuk melakukan penilaian risiko, termasuk mendefinisikan istilah-istilah terkait seperti risiko, manajemen risiko, proses manajemen risiko, serta menjelaskan tahapan identifikasi, analisis, evaluasi, penanganan, pemantauan, dan peninjauan risiko. Dokumen ini juga menjelaskan cara menentukan tingkat risiko berdasarkan nilai dampak bisnis dan kemungkinan terja

Diunggah oleh

Dita Mega
Hak Cipta
© All Rights Reserved
Kami menangani hak cipta konten dengan serius. Jika Anda merasa konten ini milik Anda, ajukan klaim di sini.
Format Tersedia
Unduh sebagai XLSX, PDF, TXT atau baca online di Scribd

Hanya untuk kebutuhan training

PETUNJUK PENILAIAN RISIKO


Halaman ini dimaksudkan sebagai panduan praktis langkah-demi-langkah untuk membantu pembaca dalam melakukan penilaian risiko di area tanggung jawab masing-
masing.

No Istilah / Terms Pengertian / Definition


Efek/dampak dari ketidakpastian suatu tujuan/target. Bisa konsekuensi positif/negatif. Contoh : safety, pemenuhan
Resiko
1 Risk persyaratan/perundangan, target sales, dsb
Effect of uncertainty of any targets/objectives. Can be positive or negative consequences. Eg. safety, regulatory, sales target, etc
Manajemen Resiko Aktivitas terkoordinasi untuk mengarahkan dan mengendalikan resiko organisasi
2
Risk Management Coordinated activities to direct and control an organizational with regard to risk
Penerapan sistematis untuk mengatur kebijakan, prosedur, komunikasi, penetapan konteks, identifikasi, analisa, evaluasi,
Proses Manajemen resiko penanganan, pemantauan, dan peninjauan atas resiko
3
Risk management process Systematical implementation to control policy, procedure, communication, context definition, identification, analysis, evaluation,
treatment, monitoring, and review of risk
Catatan informasi resiko Catatan informasi yang dikumpulkan selama proses identifikasi risiko. Terlampir contoh pengisian.
4
Risk Register Information records whic is collected during risk identification process. Attached is example of filing the template.
Pemilik Resiko Seseorang atau departemen dengan kewenangan dan akuntabilitas tertentu
5
Risk owner Anyone or any departments which has authority and accountability.

Proses (BPM) Aktivitas atau tujuan yang sudah diidentifikasi dalam Business Process Mapping perusahaan
6 Process activity or objective which has been identified in BPM
Objectives or process

7
Identifikasi Resiko Menjelaskan bagaimana jenis resiko, sumber, dan dampak resiko diketahui oleh pemilik resiko
Risk identification Describe how risk eventss, source, and its consequences known by risk owner
Jenis Resiko Identifikasi apa yang mungkin terjadi yang dapat mempengaruhi pencapaian tujuan
8 Risk event
Identification of anything that may occur which can affect objective achievement

Sumber resiko Suatu kejadian atau kondisi yang dapat memicu timbulnya risiko.
9
Risk source Any event or condition that can trigger risk
Dampak resiko Konsekuensi bisnis jika resiko tidak ditangani dengan baik
10 Consequences
Business consequences occured when risk is not well treated

Analisa Resiko Analisa kuantitatif untuk menentukan kategori resiko melalui perkalian nilai dampak bisnis dan frekuensi kejadian
11 Risk analysis
Quantitative analysis to determine risk level through multipication of business impact value and likelihood of occurence value.
Sejauh mana risiko dari suatu peristiwa akan memengaruhi pencapaian sasaran bisnis. Untuk nilai dampak, silakan lihat "Kriteria
Nilai Dampak Bisnis Assessment" tab
12
Business impact
How severe the risk event can affect business objective achievement. For detail, please refer to "assessment criteria" tab

Nilai Frekuensi Kejadian Kemungkinan terjadinya suatu risiko. Untuk nilai frekuensi, silakan lihat "Kriteria Assessment" tab
13
Likelihood of occurence Probability of occurence of any risk, For detail, please refer to "assessment criteria" tab

Matriks Resiko Gambaran kombinasi kemungkinan dan dampak bisnis ke dalam matriks tingkatan risiko
14 Risk mapping Image combination of how likelihood of occurence and business impact multiplication in form of mapping of risk category

Kombinasi dari dampak dan kemungkinan untuk menentukan tingkat risiko. Kategori risiko dapat diklasifikasikan menjadi High
(Resiko Tinggi), Medium (Resiko Sedang), dan Low (resiko rendah).
Kategori Resiko Untuk nilai level, silakan lihat "Matrix Resiko" tab
15
Risk level
Combination of business impact and likelihood of occurence to determine risk level. Levelling of risk are High Risk, Medium Risk, and
Low Risk. For level value, please refer to "Risk Matrix" tab

Pengendalian Resiko Pilih dari empat kategori jenis pengendalian berikut :


16
Risk treatment Choose from four categories of treatments below :
Eliminasi dengan menghindari atau mencegah kemungkinan terjadinya peristiwa yang memicu risiko (contoh menarik diri dari
suatu kegiatan, menutup sebuah inisiatif).
a. Menghindar (Avoid)
Risk elimination by avoiding or preventing any possibilities of any event that can trigger risk (eg. withdrawal from any activity,
terminate an initiatives)
Mengurangi dampak dengan menurunkan kemungkinan dari peristiwa yang memicu risiko dan/atau dampak keuangan melalui
tindakan yang didefinisikan dalam rencana mitigasi (yaitu, alokasi sumber daya, perubahan strategi, penggunaan taktik, dll).
b. Mengurangi (Reduce) Reducing impact by lowering likelihood of occurence of any event that can trigger risk and/or financial risk by doing
actions/mitigation plans (eg resources allocation, change strategy, tactics use, etc)

Mengurangi dampak risiko melalui transfer ke pihak ketiga melalui kontrak hukum (yaitu pembelian asuransi, hedging, dll).
c. Memindahkan (Transfer)
Reducing impact by transferring to third party through legal contract (insurance, hedging, etc)
Menerima konsekuensi karena strategi inisiatif. Mentolerir konsekuensi karena situasi lokal / negara / kawasan (contoh tuntutan
serikat pekerja, lingkungan hukum / peraturan) dengan action plan untuk meminimasi dampak dan menyediakan dalam anggaran.
d. Menerima (Accept) Accepting consequences for initiative strategy. Tolerate consequences because local/country/regional situations (eg. labor party,
environmental law/regulation) by using action plans to minimize impact and provide budget

Deskripsi Rencana Pengendalian Penjelasan tindakan pengendalian resiko yang sudah diidentifikasi dan ditentukan tingkat resikonya
17 Description of mitigation plan
Description of mitigation plan of any risk that has been identified and determined its risk level

Pemantauan & Peninjauan Menjelaskan bagaimana hasil tinjauan dan status pengendalian dari rencana pengendalian (no.17)
18 Monitoring & review
Description of how review results and control status of mitigation plan (no.17)

Hasil Tinjauan Hasil dari review aktivitas untuk memitigasi risiko


19
Review result of mitigation plan Result of reviewing plans of mitigation

Status Status aktivitas yang memitigasi risiko, apakah belum dimulai, dalam progres, sudah selesai, atau batal.
20 Status of mitigation plan Status of mitigation plan (not started yet, on progress, closed/done, or cancel)
Hanya untuk kebutuhan training

- mengacu pada ISO 31000:2018 Risk Management - Guidelines)


- (as described in ISO 3100:2018 Risk Management terminology)
Hanya untuk kebutuhan training

High
3 HIGH HIGH HIGH
(3) (6) (9)

Likelihood
2 MED HIGH HIGH
(2) (4) (6)

1 LOW MED HIGH


(1) (2) (3)
1 2 3
Low High
Severity / Business Impact
Risk Level Action (contoh) Reported to (contoh)

Perlu tindakan segera, koordinasi dgn [Link] Management dan dimonitor EXCOM
: High Risk (Need immediate action, coordination with Risk Management Dept and Monitoring by EXCOM) Direktur
: Medium Risk Perlu pengendalian lebih efisien (Need more efficient Control) Manajer
: Low Risk Dimonitor berkala (Frequently monitoring) Head Dept
Hanya untuk kebutuhan training

RISK REGISTER

Pemilik Resiko / risk owner :

Pengendalian
Identifikasi Resiko/Peluang Analisa Resiko/Peluang Pemantauan & Peninjauan
Resiko/Peluang
No. Proses
Sumber Severity Likelyhood Kategori Deskripsi Rencana Periode
Jenis Resiko/Peluang Dampak Resiko/Peluang PIC
Resiko/Peluang (Dampak) (Keseringan) Resiko Pengendalian Pemantauan

Page 4 of 4

Common questions

Didukung oleh AI

Coordinated risk management aligns and directs risk control activities to ensure that they are in support of achieving business objectives. By systematically identifying, evaluating, and mitigating risks through aligned strategies and monitoring, organizations can protect against uncertainties that could derail their goals .

Monitoring and reviewing are critical to the risk management process as they ensure that mitigation plans are effectively implemented and adjust strategies as needed. This allows an organization to assess the status and efficacy of control measures, optimize resource allocation, and respond to changes in risk levels timely, thereby maintaining control over potential risk impacts .

Risk is reported at various levels based on its severity: High Risk is reported to the Director, demanding immediate action and coordination with the Risk Management Department; Medium Risk is reported to a Manager, suggesting more efficient control measures; Low Risk is monitored by the Department Head, emphasizing regular oversight .

A risk owner is someone or a department with specific authority and accountability, responsible for understanding and managing risks within the organization. They identify risk events, sources, and consequences, and document this information in the risk register during the risk identification process .

The four categories of risk treatment are: 1) Avoid - preventing risk by abstaining from activities that trigger it, e.g., withdrawing from a risky initiative; 2) Reduce - lowering risk likelihood or impact through mitigation plans, e.g., resource reallocation; 3) Transfer - transferring risk via legal contracts, e.g., purchasing insurance; 4) Accept - tolerating the risk while minimizing its impact through action plans, e.g., budgeting for potential labor disputes .

A risk register is crucial in the risk management process as it documents all information collected during risk identification. It serves as a comprehensive record allowing organizations to track, review, and update risk details, including risk events, sources, and impacts. As such, it forms the foundation for effective risk analysis and management .

The risk mapping matrix combines the likelihood of occurrence and business impact to categorize risks into High, Medium, and Low levels. This visual representation helps organizations prioritize their responses and allocate resources effectively to mitigate high-priority risks while efficiently managing lower-level ones .

The risk analysis process determines the risk level by performing a quantitative analysis that multiplies the business impact value by the likelihood of occurrence. This categorization places the risks into High, Medium, or Low risk levels based on this combination. The matrix risk mapping visualizes this relationship, facilitating better understanding and management of risks .

The risk management process involves systematic implementation of policy, communication, context definition, risk identification, analysis, evaluation, treatment, monitoring, and review. Each element plays a critical role in directing and controlling organizational risks comprehensively. This ensures cohesive risk management across all levels of the organization .

Failing to address business consequences from poorly treated risks can lead to significant organizational setbacks, including financial losses, reputational damage, regulatory penalties, and operational disruptions. Effective risk management and mitigation plans are essential to minimize these impacts and secure business objectives .

Anda mungkin juga menyukai