Practical Enterprise Risk Management: A Business Process Approach 9780470559857 在线下载 pdf mobi 2025 epub 电子版

　　The most practical and sensible way to implement ERM-while

avoiding all of the classic mistakes

Emphasizing an enterprise risk management approach that utilizes

actual business data to estimate the probability and impact of key

risks in an organization, Practical Enterprise Risk Management: A

Business Process Approach boils this topic down to make it

accessible to both line managers and high level executives alike.

The key lessons involve basing risk estimates and prevention

techniques on known quantities rather than subjective estimates,

which many popular ERM methodologies consist of.

Shows readers how to look at real results and actual business

processes to get to the root cause of key risks

Explains how to manage risks based on an understanding of the

problem rather than best guess estimates

Emphasizes a focus on potential outcomes from existing processes,

as well as a look at actual outcomes over time

Throughout, practical examples are included from various

healthcare, manufacturing, and retail industries that

demonstrate

Preface.

Acknowledgments.

Chapter 1: Corporate Governance: A Gut Check.

The Great SOX Fallacy.

The Visionary Challenged Leading the More Visionary

Challenged.

Going Back to the Future? How Not to Run IT.

Systemic Failure: Critical Shortcomings of Application Systems

Implementation.

What Is GRC Anyway?

Are You Cubin'?

Chapter 2: What ERM Is and What It Is Not.

Don’t Be Mislead: What ERM Is Not.

Key Qualities of an Effective ERM.

Primary Components of Risk Assessment.

Need for a BRAIN (Business Risk Assessment Information

Network).

Process of Creating a BRAIN.

Chapter 3: Understanding What the Business Is.

Defining the Business.

A Banking Example.

Answering the Key Question: What Is the Business?

Determining the Core Business Processes.

Setting the Structure: Creating a Physical Map.

A Medical Example: A Healthcare System.

Impact Analysis.

Chapter 4: Defining What True Business Risk Is.

It’s About the Outcome Stupid!

Risk Never Lives Alone.

Defining Baseline Categories of Business Risk.

Evaluating All of the Possibilities: The Risk Universe.

Using the Business Structure to Drive the Risks.

Distributed Risk Assessment and Management (DRAM).

Chapter 5: Objectively Defining Risk.

Defining Risk in the Context of the Business

Using the Business Defined Data Structure.

Why Use Data to Define Risk: The Three Attributes.

Data Centric ERM (DCERM).

Multi-Dimensional Risk Assessment.

Chapter 6: Building a Fluid/Dynamic Risk Model.

The Model and Why It Is Necessary.

Moving from Reactive to Proactive Risk Management.

OR Data and Why It Is Critical.

KRIs Not KPIs.

Options on How to Drive the Model.

Dashboard Indicators.

Key Early Warning Indicators.

Determining the Key Risk Indicators.

Universal Risk Indicators.

Financial, Operational, Regulatory, and Technological KRIs.

Chapter 7: Top-Down Risk Assessment: Evolving the Fluid ERM

Environment-A Step By Step Approach.

Building ERM One Step at a Time.

Mapping the Physical Structure of the Enterprise.

Defining the Business Risks of the Enterprise: Utilizing Key

Outcomes.

Developing KRIs for Assessing Risk for the Entire Enterprise.

Detailed Inventories of KRIs: When Greater

Automation/Sophistication Is Achieved.

Building a Baseline Risk Register.

Embedding Risk Registers and Key Information in the Physical

Mapping.

The Modular Approach.

Determining a Focused Outcome Group (FOG).

Net Risk versus Residual Risk.

Business Risk Analysis Techniques (BRATs).

Utilizing Logical Data Pathways to Focus on Root Cause and Resolve

It.

Chapter 8 The Future Evolution of the Model.

ERM for the Twenty-First Century.

Systems Strategies.

Design Criteria and Specifications.

Designing Risk Centric Systems for Efficiency/Governance: Step by

Step.

Dynamically Integrated Risk Evaluation (DIRE).

Triggers and MOMS.

Real Time Profiling.

Setting Standards for Future Evolution.

Chapter 9 Related Topics and Special Risk Situations.

Managing Risk/Auditing Real Time.

Monitoring Controls with Metrics.

Utilizing ERM to Reduce Audit Fees and Lower the Costs of

Operation.

Mergers and Acquisitions: Let’s Buy Some More Risk.

Outsourcing: What You Don’t Know Could Kill Your

Organization.

Debunking the Outsourcing Myths: The Ventoro Study.

Chapter 10 Maximizing Impact – Minimizing Exposure.

Who Owns the Risk Management Process?

Involving the Stakeholders: Creating a Critical Business

Tool.

Extending the Impact: Making It a Company Essential.

Strategically Linking Key Risks and Key Controls: Creating a

HOME.

Building the DREAM HOME: Automating Even Your SOX.

About the Author.

Index.

　　Gregory H. Duckert, CPA, CISA, CIA, CRISC, is?the CEO and

Founder of Virtual Governance Institute, an organization

specializing in consultation for major corporations regarding

progressive audit/consulting methodologies, data centric enterprise

risk assessment models, including financial, operational,

regulatory and IT, and continuous audit/consulting platforms. He

has developed extensive risk assessment metric inventories for

evaluating risks in all organizational areas including operations,

IT application systems, IT operations, regulatory and financial

areas,?and is currently in the process of creating a Data Centric

Risk Assessment and Management Model for a major corporation. He is

also a Senior Consultant for MIS Training Institute and a lead

instructor in their audit practice area on an independent

contractor basis. He is conducting seminars or speaking at MIS

events approximately 130 days a year.

暂无出版社相关信息，正在全力查找中！

暂无相关书籍摘录，正在全力查找中！

在线阅读地址：Practical Enterprise Risk Management: A Business Process Approach 9780470559857在线阅读

在线听书地址：Practical Enterprise Risk Management: A Business Process Approach 9780470559857在线收听

在线购买地址：Practical Enterprise Risk Management: A Business Process Approach 9780470559857在线购买

暂无原文赏析，正在全力查找中！

暂无其它内容！

• 作者：贾斯汀 发布时间：2015-11-17 14:51:11

  对于这个价位来说，这本书很超值，不但内容很实用，印刷也十分清晰，线条和笔触都看的很清楚，确实是一本实用的教程。

• 作者：二兜 发布时间：2022-10-30 16:55:48

  要加油哦！

• 作者：Gomu 发布时间：2016-06-09 21:04:29

  【￥42.3 Amazon】2016.6.3-2016.6.9

• 作者：SnapeFleur 发布时间：2018-04-01 10:14:40

  我觉得争论是不是伪作根本毫无意义，三晋学风本就不太受儒家影响，况且也距尧舜禹时期甚远，真真假假说不清，但是纪年对于战国时期的记载比史记还是要靠谱的。我觉得史书间有矛盾是很正常的，毕竟年代久远，不能说因为纪年和正统流传的史书相悖就说哪个是假的，无论尧舜禹是禅让还是阴谋论，真假其实还是要靠考古证实的，光靠后人记载和网友拌嘴也得不出个所以然。何况我觉得纪年最难能可贵的就是他脱离儒学的束缚，从某种程度上来说，我觉得纪年更能取信于我。

• 作者：年糕崽 发布时间：2022-03-14 23:10:13

  虚竹.（有父母ver），让“无我”的人参破绝学，金庸好妙。

  越女剑好凌厉，爱一些阿青x西施！！！娇憨剑客和温柔学姐一起放羊去可以吗？

• 作者：伯克希尔 发布时间：2015-11-14 20:49:35

  琴棋书画无一不精厨艺尤佳还健气乐天，这样的人设挺苏的，脑补苏轼用川普吟《卜算子》>0

• 写给所有人的童年回忆

  作者：Maggie 发布时间：2020-05-20 22:24:37

• 任何一个人的问题，都不是一个人的问题

  作者：肉松＆可乐 发布时间：2022-09-16 08:48:03

  任何一个人的问题，都不是一个人的问题，一定是一个系统的问题。家庭里出问题的那个人，往往只是家庭问题的“替罪羊”。这是家庭治疗的核心观点。

  家庭治疗内部分了很多流派，米纽庆是结构派家庭治疗的创始人，他的《家庭与夫妻治疗案例与分析》这本书是家庭系统治疗学习的必读书目，豆瓣评分9.4分。但因为它有很多案例，很好读，因此也很适合有相关困扰的人群。

  什么叫“结构”呢？米纽庆认为，家庭是一个通过交往模式来运作的系统。家庭互动千百次沉淀下来的模式，就是家庭的结构，这个家庭结构又会进一步塑造家庭成员的互动模式。

  因此，米纽庆关注家庭的此时此刻，通过当下家庭结构的“横截面”，去看家庭过去的发展，并作出根本性改变。他认为，挖掘阻碍家庭实现目标的障碍、帮助家庭明确实现目标的路径非常重要。他将这个工作过程拆分成4个步骤，结构清晰。

  1、拓展目前的主诉：一般家庭去寻求咨询时，都有一个“被认定的病人”，比如父母认为是孩子出了问题，叛逆、厌学等。既然家庭治疗认为，一个人的问题一定是家庭系统的问题，那就需要将当前“某一个人”的问题，拓展至整个家庭系统，从不同角度审视这个问题，探索这个问题背后的原因，重构家庭成员对问题的理解。

  2、着重探索使问题持续存在的互动：一个症状或问题出现后，它是如何在家庭互动中被保存下来的呢？这一步会重点探索家庭成员的哪些言行，导致了问题的持久存在。与我们一般认知相反，家庭成员解决问题的方式，往往维持了问题。比如孩子不爱吃饭，养育者天天追着喂饭，反而让孩子没有吃饭的动力，变得更加不爱吃饭。

  3、结构化地集中探索过去：对家庭中的成年成员（如父母）的过去进行简短、有重点的探索，帮助他们理解，他们现在看待自己以及他人的观点是如何形成的。当我们对过往的模式有了足够理解，我们就有了更多空间去松动当前的模式。这一步类似精神动力取向的操作。

  4、探索相关的改变方式：治疗师与家庭一起工作，和家庭成员一起讨论谁需要改变、改变什么以及谁愿意改变、谁不愿意改变。明确家庭想去的地方，以及如何到达那里。

  作者用了10个家庭案例来呈现，他们如何通过以上4个步骤实现治疗，将焦点从病人的症状，转移到围绕这些症状的家庭动力上来。家庭系统中的张力比个体咨询很大，而这种张力的改变也很微妙、迅速，需要治疗师进行精准的把握，整体节奏也比一般的个体治疗更快