由於現代企業面臨之風險是多變的，許多有關之法令規定已過時，企業組織可用之資源、成本和效益會產生變化，故企業要能適應未來的變局更需落實風險管理。 企業實施風險管理之重要目標，是為了在損失發生前能以節約的原則，減少憂慮，符合外界規定，並善盡社會責任；在損失發生後能生存，繼續營運，維持收益穩定，以求繼續成長等。然而企業往往會多角化擴充經營範疇，甚至在各處實施特定的經營活動，如此其風險管理將更形複雜。 本文擬以風險管理與損害防阻的實務經驗，佐以理論基礎，說明導入風險管理與損害防阻之目標、策略、程序、計畫、績效評核等，期能使各企業認識、衡量風險，藉由選擇並執行最符合經濟效益之風險管理方法，達到企業永續經營的目標。 其次，以個人在集團內執行安全管理系統和損害防阻安全查勘服務計畫的個案，說明企業損害防阻管理意義、風險的確認、分析與評估、損害防阻管理的執行與考核、績效評估等。最後再以身為企業推動風險管理與損害防阻的一份子，檢視以往歷程提出建議，期能拋磚引玉，讓更多的組織、企業和相關人士重視並推動主動式的風險控制及損害防阻管理。 / Since the risks faced by the modern enterprises are changeable, the laws and stipulations are obsolete and outdated, the resources, costs and benefits used by the enterprises organizations are subject to change, and therefore the enterprises have to carry out the risk management in order to be able to adapt the future changes in situations. The major targets for the enterprises to implement the risk management are for the purposes of reducing the anxiety, conforming to the outside stipulations and fulfilling the social responsibilities sincerely before the losses occur; surviving, operating continually, maintaining the incomes and continuing to grow, etc. if the losses should occur. However, the enterprises often run their business diversified and even operate the specific business activities everywhere, that will make their risk management more complex. This article intends to be written in the view of practical experiences to engage in the risk management, loss prevention and control as well as the assists of theory foundations, depicts the implementations of goals, strategies, procedures, plans and performance evaluations, etc. in risk management, loss prevention and control, anticipating various enterprises to identify and measure the risks by means of selecting and executing the risk management methods which conform to the utmost economical benefits for the goals of running businesses continually. Next, in the case where the writer personally carried out the safety management systems and safety survey service plans of loss prevention and control in group enterprises illustrates the meaning of loss control management, the identification, analysis and evaluation of risk, and the implementation, the verification and performance evaluation of loss control management, etc. Finally, as the member of implementing enterprises risk management and loss prevention and control, the writer examines the past working processes and experiences to offer some recommendations, expecting to throw stones and bring back jade to let much more organizations, enterprises and the parties concerned think highly of and enforce the proactive risk control and loss control management.

近幾年來金融科技快速發展,傳統金融業被破壞式創新顛覆, 智能投顧的興起改變了資產管理行業的傳統模式,填補了一般大 眾理財市場的空缺。隨著互聯網理財模式在中國得到大眾認可, 智能投顧平台在中國開始萌芽,處於探索階段。在這樣的背景下, 本研究以中國智能投顧市場為研究對象,採用歸納法和對比分析 法,探究中國智能投顧業發展趨勢之相關實務。 本文根據前人的研究,對智能投顧的概念、特徵以及類型進 行了總結,歸納全球各國智能投顧業發展現況;根據中國財富管 理市場成熟程度來分析中國智能投顧業發展前景;參考美國智能 投顧發展模式和中國 P2P 網路借貸平台發展模式,歸納出適合中 國發展智能投顧業的經驗:1)讓傳統金融業者成為行業領導者, 2)明確服務範疇,規範從業證照,3)對算法進行嚴格監管,4) 發展被動型基金,財富管理市場產品多樣化,5)儘早建立完善 的風控體系;此外還根據各國智能投顧業之監管措施,對中國監 管機關􏰀出宏觀的監管建議,並希望此研究報告對之後想要進一 步研究智能投顧的學者􏰀供參考。

The demands on maritime operations today are increasingly higher in terms of control, efficiency and cost. The margins for accidents and security incidents are therefore decreasing. In the area of ship safety the regulations, guidelines and methods have a history and culture of systematic research, development and implementation. In contrast, international security is highly politicized and therefore not as transparent. The result is that a tradition of ship security is not as well established. The overall aim of this thesis is to propose a method for ship security analysis that increases the overall safety of the crew and the ship. The objective is to develop a method that is systematic in order to ensure that assessment and response are complete and effective, and that the process is documented to provide evidence of decision-making. The method used is probabilistic risk assessment where quantitative analysis is central. The proposed approach is consistent with the requirements of maritime safety work. However, in the work here, the proposed methods are specifically tested for security cases. This is because hazards (without intent) and threats (with intent) evolve in different ways into risk. Therefore, they must be analysed differently in order to capture the causal relationship. The proposed approach consists of three steps: the first step consists of a threat description that documents qualitative and quantitative aspects that together describe how the threat most likely will act in relation to the ship’s vulnerability; the second step uses the threat description to define the system studied as well as the scenarios that collectively describe the harmful consequences; the third step evaluates the risk with tools from probabilistic risk assessment. The overall conclusion is that the proposed method brings the procedure and results of ship security analysis into the open and therefore allows for criticism, improvements and shared risk knowledge, not possible with less structured methods. The results also show that the calculated probabilities agree with available statistics, which indicates that the analysis succeeds in describing the central causal relationships of the scenarios modelled.

A partir des années 1970, la remise en cause du système monétaire des parités fixes entraine l'apparition de risques nouveaux sur les marchés, et conduit les opérateurs financiers à rechercher de nouvelles techniques pour en maitriser les effets : les premiers instruments financiers dérivés naissent de cette volonté. Pour autant, au moment de reconnaitre juridiquement ces instruments, le législateur quant à lui ne prévoit aucune qualification ni définition précises et adopte la technique peu concluante de l'énumération. Ce qui laisse présager que les dérivés ne peuvent fonder une notion juridique unitaire mais constituent simplement l'addition de modèles financiers hétérogènes. Dès lors, la recherche de la nature juridique du dérivé se doit de démontrer sa spécificité en tant qu'instrument de transfert du risque financier à part entière et le caractériser par rapport aux autres familles de contrats nommés. En outre, si le dérivé opère un transfert de risque, il s'avère lui-même générateur d'un risque spécifique, à la fois pour les parties qui le concluent et pour les tiers en relation avec ces dernières: par ses attributs intrinsèques, il est donc fondamentalement porteur de risque pour le système financier dans son ensemble. La nécessité de reconnaitre ce risque et de le contrôler étroitement se pose alors en objectif impérieux. / From 1970s, the questioning of the monetary system of the fixed parities causes the appearance of new risks on markets, and leads financial players to look for new techniques to master the effects: the first derivative financial instruments arise from this will. However, at the time of recognizing legally these instruments, the legislator as for him plans no precise qualification and no definition and adopts the little decisive technique of the enumeration. What leads to predict that derivatives cannot base a unitarian legal notion but constitute simply the addition of heterogeneous financial models. From then on, the research for the legal nature of derivative owes demonstrate its specificity as instrument of transfer of the full financial risk and to characterize it with regard to the other families of named contracts. Besides, if the derivative operates a transfer of risk, it turns out itself generator of a specific risk, at the same time for the parties which conclude it and for thirds in connection with the latter: by its intrinsic attributes, it is fundamentally carrying risk to the whole financial system. The necessity of recognizing this risk and of controlling it closely settles then in compelling objective.

全民健保自1995年施行以來，已成為照顧國人健康最重要的社會安全措施之一，更創造世界各國稱羨的社會健康保險奇蹟。然由於全民健保的保障，使國人忽略平時對個人健康管理之風險控制，因被保險人心理危險所導致之醫療浪費極為嚴重，醫療費用不斷增加，造成健保財務負擔與效率低落，若不進行調整，將危及健保的永續經營。 從社會福利國演進歷史觀之，社會連帶思想與分配正義原則，雖強調人民具人性尊嚴生存之權利及國家之保護義務，但並非單純將個人風險轉由社會共同承擔，而是以國民對於自我社會責任的履行為前提，因天賦或環境等因素，對於無法以自身能力來克服及排除社會風險所帶來的負面影響，使其無法維持「具人性尊嚴之生存」時，始將該風險轉由社會共同承擔，且以保障其基本生活為原則，以求「禁止過度侵害」與「禁止保護不足」原則間之平衡。因此全民健保雖為社會連帶原則之體現，但仍應以個人責任為基礎。 國內外研究皆指出，與個人直接相關之生活型態及遺傳等因素，為影響健康的主要風險來源，醫療服務的影響力約僅佔一成，而加重被保險人責任可有效抑制心理危險因素，透過部分負擔，誘導被保險人重視個人健康責任，以健康之生活型態配合政府之健康檢查與各種篩檢措施，降低罹病率或及早治療，即使不幸罹患重病亦應遵從醫囑，以最經濟的手段達到必要之治療成效。因此，全民健保為達其增進全體國民健康之目的，應以國人之健康風險控制為主，而非將資源過度投注於醫療費用補助，始為根本之道。 反觀我國全民健保，將絕大多數資源用於治療疾病，卻忽略了預防保健的重要性，亦未強調被保險人對自身健康風險之控制責任，近來健保改革聲浪亦多集中於保費收取、藥價、支付制度等議題，忽略個人健康風險控制與心理危險防範之重要性，造成被保險人對個人健康風險控制的不重視，以及預防保健篩檢率偏低、醫療成本負擔逐漸龐大等種種效應。 本文建議，應強化全民健保健康促進功能，免費提供經濟效益高而侵犯性低之預防保健項目，此外，政府應建立重大遺傳疾病通報制度，提供高風險民眾諮詢與檢測等相關服務。再者，健保給付應以基本醫療需求為限，並兼採自負額與共保制，加重被保險人承擔個人健康風險控制責任，且在制度上與社會救助明確區隔，廢除免部分負擔制度，對無力支付部分負擔者改由社會救助支付，以降低被保險人心理危險因素，藉由健康促進之生活方式與配合政府推行保健措施等健康風險控制手段，降低疾病發生率及健康風險損失幅度，始能達成全民健保增進國人健康之目的，並大幅降低健保醫療支出。

Text in English / Violent crime and more specifically armed robberies constitute a growing threat to shopping centres in terms of their vulnerability to such criminal acts. These violent crimes are becoming ever more organised and sophisticated. Shopping centres across South Africa have become the latest targets for these syndicates. Due to the increasing number of armed robberies and violent crimes at shopping centres and the nature of violence used in these attacks, it points to a need for improvements to be made to the security measures that are in place at shopping centres. This study explored the risks and vulnerabilities at shopping centres that have led to the phenomenon of armed robberies at shopping centres in Gauteng; evaluated the current physical protection systems that are in place at shopping centres in Gauteng in order to assist with the reduction of shopping centre armed robberies; and recommendations were made for the implementation of effective security risk control measures at shopping centre’s across South Africa and specifically the province of Gauteng. Self-administered questionnaire surveys were used to explore the phenomenon from the perspectives of both retail employees and customers. The data collected from the questionnaires, utilising the non-experimental research design, were quantitatively analysed. Based on the findings from the study recommendations for the improvement of shopping centre security were formulated along with recommendations for future research. / Security Risk Management / M.Tech. (Security Management)

L’objet de ce travail est de proposer une démarche d’évaluation puis de réduction du risque de fraude. Cette démarche est basée sur la notion d’appropriation, c’est-à-dire le degré d’intériorisation de son environnement par l’individu. Il s’agit d’améliorer les appropriations respectives (ce que nous appelons « appropriation croisée ») des opérateurs (gérants ou traders) et des contrôleurs. Promouvoir cette appropriation croisée permettra aux opérateurs et aux contrôleurs de développer des interrelations attentives et permettra aux opérateurs de s’affranchir de l’idée de mythe dans laquelle ils peuvent se sentir enfermés, ces deux points devant conduire à diminuer le risque de fraude. L’appropriation, par elle-même, permettant également de développer des capacités difficilement imitables, notre idée est que l’appropriation croisée favorise une performance économique de long terme de l’organisation. La démarche que nous proposons s’effectue en trois temps, il s’agit tout d’abord de faire en sorte que les acteurs concernés aient une connaissance partagée des rôles de chacun, ce qui permettra ensuite de déterminer les facteurs critiques à améliorer. Le troisième temps consistant à mesurer le déficit d’appropriation croisée à l’aide d’un outil : la balance appropriative et à diriger les appropriations afin de rééquilibrer cette balance. / The aim of this work is to suggest an appropriation-related framework for evaluating and reducing the risk of fraud in financial markets. Its purpose is to improve respective appropriations (what we call “cross appropriation”) of operators (traders or fund managers) and controllers (in charge of controlling operator’s position and operations). The enhancement of this cross appropriation should lead to heedful interactions which will permit operators to escape from the heavy mythological suit they might wear, resulting in less psychological pain. This appropriation, by itself, providing a competitive advantage, this approach should then give a long-term economic performance to the organization because appropriation is involved and respective appropriations are well balanced, resulting in less fraud. This framework is three-steps. The first one is to make sure every stakeholder has a shared understanding of the organization, which will allow a right selection of critical factors. The third step consist in measuring the quality of the cross-appropriation with a tool: the appropriation scales and to direct appropriations towards a better equilibrium of the scales if needed.

The diploma thesis is focused on of its presentation in accordance with IFRS/IAS, respectively, for the fulfilling the requirements of IFRS 8 – Operational Segments. In this diploma thesis, the effects and advantages of financial statements transformation on IFRS/IAS are explained. Process of this transformation all its consequences are also elaborated here. For the conclusion, possible approaches to modelling of risk and to risk measurement are suggested here.

Diploma thesis is interested in the business plan of the development of the company of Martin Stříž, who focuses on the publishing of books and other press products. On the basis of the survey of contemporary status and identification of the objective, which is to be achieved, are proposed ways leading to such identified objective. After selecting of optimal options, the financial status and level of demand are evaluated subsequently, and time schedule of individual investments is presented. Finally, potential problems, which can occur after the implementation of the investment are identified, together with linked tasks, which must be further fulfilled (monitoring of development, inspection etc.).

The smart grid is forecasted to be the future of the grid by integrating the traditional grid with information and communication technology. However, the use of this technology has not only brought its benefits but also the vulnerability to cyber-attacks. False data injection (FDI) attacks are a new category of attacks targeting the smart grid that manipulates the state estimation process to trigger a chain of incorrect control decisions leading to severe impacts. This research proposes the use of cognitive dynamic systems (CDS) to address the cyber-security issue and improve state estimation. CDS is a powerful research tool inspired by certain features of the brain that can be used to study complex systems. As two of its special features, Cognitive Control (CC) is concerned with control in the absence of uncertainty, Cognitive Risk Control (CRC) uses the concept of predictive adaptation to bring risk under control in the presence of unexpected uncertainty. The primary research objective of this thesis is to apply the CDS for the SG with emphasis on state estimation and cyber-security. The main objective of CC is to improve the state estimation process while CRC is concerned with mitigating cyber-attacks. Simulation results show that the proposed methods have robust performance for both state estimation and cyber-attack mitigation under various challenging scenarios. This thesis contributes to the body of knowledge by achieving the following objectives: proposes the first theoretical work that integrates the CDS with the DC model of the SG for control and cyber-attack detection; demonstrates the first experimental work that brings a new concept of CRC for cyber-attack mitigation for the DC state estimator; introduces a new CDS architecture adapted for the AC model of the SG for state estimation and cyber-attack mitigation which builds upon all the research efforts made previously. / Thesis / Doctor of Philosophy (PhD) / The smart grid is forecasted to be the future of the grid by integrating the traditional grid with information and communication technology. However, the use of this technology has not only brought its benefits but also the vulnerability to cyber-attacks. False data injection attacks is a new category of attacks targeting the smart grid that can cause serious damage by manipulating the state estimation process and starting a chain of incorrect control decisions. The cognitive dynamic system is a powerful research tool inspired by the brain that can be used to study real time cyber physical systems. The key goal of this thesis is to apply cognitive dynamic systems to the smart grid to improve the state estimation process, detect cyber-attacks and mitigate their effects. Simulation results show that the proposed methods have robust performance in both state estimation and cyber-attack mitigation under various challenging scenarios.