Le risk management d’entreprise (ERM) est un ensemble de politiques, de structures et de pratiques infuses d’idéaux sociaux de bonne gouvernance et de contrôlabilité. Nous nous demandons ici dans quelles mesures le travail des acteurs permet l’adoption durable de l’ERM dans l’organisation. Dans le cas du Groupe La Poste, l’appropriation des pressions externes par les auditeurs internes a été cruciale. Une fois introduit dans l’organisation postale, l’ERM a d’abord été confronté à l’indifférence du management. Les contenus réglementaires et normatifs ont été adoptés sans être mis en œuvre. Des structures partielles d’ERM ont été peuplées de risk managers détenant les compétences nécessaires pour répondre aux attentes externes. Ces risk managers ont ensuite travaillé à légitimer et structurer le dispositif conformément aux « meilleures pratiques » en réalisant un travail de recouplage – action intentionnelle des individus visant à aligner le risk management organisationnel avec les traits externes et abstraits de l’ERM. L’étude du cas La Poste suggère ainsi une explication organisationnelle au fait que l’ERM ne puisse être révoqué une fois en place. / Enterprise-wide risk management (ERM) is a set of policies, structures and practices infused with social ideals of good governance and controllability. In this research, we seek to know how actors’ work allows ERM lasting adoption in the organization. In La Poste, the enactment of external pressures by internal auditors turned out to be critical. When introduced in the postal organization, ERM first encountered management disregard. As a consequence, ERM regulatory and normative meanings and categories were adopted but not implemented in the business. Partial ERM structures were created and inhabited by risk managers who hold necessary skills to help organizational compliance with external expectations. Newly appointed risk managers worked internally to legitimize and structure the device consistently with external “best practices” performing what we named recoupling work - the purposive action of individuals and organizations aimed at aligning organizational risk management with external ERM abstract features. Thus, our case suggests an organizational explanation to the fact that risk management could not be rescinded after its initial settlement.

Disaster researchers have established the determinants of preparedness and mitigation at the household level of analysis. However, at the organizational level, there is limited research and no theory to guide research on the determinants of preparedness and mitigation. The main goal of this study is to answer the question "what are the determinants of mitigation and preparedness at the organizational level?" The data come from a survey of 227 organizations in Memphis, Tennessee. This study uses Tobit regression technique to identify the determinants. This study finds that organizational size and concern over disaster impact are strong positive determinants of mitigation and preparedness in organizations. In addition, there is a significant and non-linear relationship between organizational obstacle and mitigation and preparedness activities. The study concludes with policy implications and recommendations for future studies.

The occurence of procurement fraud requires from the management of the enterprise, the risk manager of the enterprise as well as the internal auditor to effectively address procurement fraud risks within the enterprise risk management concept. The purpose of the study is to set a procurement fraud risk management process in place which will serve as a comprehensive framework for the enterprise risk manager as well as the internal auditor to limit the enterprise's exposure to procurement fraud risks as far as possible. The study firstly focus on the analysis of the steps within the procurement process which is the starting point for the identification of the fraud risks. Secondly the enterprise risk management model is applied in the format of a procurement risk matrix within the procurement function. The study is an indication that procurement fraud cannot be completely prevented but that the appearance thereof can be limited by means of the extensive procurement fraud risk management model. Recommendations for future studies include the application of the enterprise risk management model in other functional areas within the enterprise. / Die voorkoms van aankoopbedrog vereis van die onderneming se bestuur, ondernemingsrisikobestuurder en interne ouditeur om aankoopbedrogrisiko's effektief binne die konteks van die ondernemingsrisikobestuurskonsep aan te spreek. Die doel van die studie is om `n aankoopbedrogrisikobestuursproses daar te stel wat as `n omvattende raamwerk vir die ondernemingsrisikobestuurder en interne ouditeur kan dien om die onderneming se blootstelling aan aankoopbedrogrisiko's so ver as moontlik te beperk. Die studie fokus eerstens op die ontleding van die stappe in die aankoopproses wat as vertrekpunt vir die identifisering van bedrogrisiko's dien. Tweedens word die ondernemingsrisikobestuursmodel in die vorm van `n aankoopbedrogrisikomatriks in die aankoopfunksie toegepas. Die studie dui daarop dat alhoewel aankoopbedrog nie volkome verhoed kan word nie, die voorkoms daarvan wel beperk kan word deur die toepassing van `n omvattende aankoopbedrogrisikobestuursmodel. Aanbevelings vir verdere studies sluit die toepassing van die ondernemingsrisikobestuursmodel op ander funksionele terreine van die onderneming in. / Auditing / M. Com. (Auditing)

Disaster researchers have established the determinants of preparedness and mitigation at the household level of analysis. However, at the organizational level, there is limited research and no theory to guide research on the determinants of preparedness and mitigation. The main goal of this study is to answer the question "what are the determinants of mitigation and preparedness at the organizational level?" The data come from a survey of 227 organizations in Memphis, Tennessee. This study uses Tobit regression technique to identify the determinants. This study finds that organizational size and concern over disaster impact are strong positive determinants of mitigation and preparedness in organizations. In addition, there is a significant and non-linear relationship between organizational obstacle and mitigation and preparedness activities. The study concludes with policy implications and recommendations for future studies.

The occurence of procurement fraud requires from the management of the enterprise, the risk manager of the enterprise as well as the internal auditor to effectively address procurement fraud risks within the enterprise risk management concept. The purpose of the study is to set a procurement fraud risk management process in place which will serve as a comprehensive framework for the enterprise risk manager as well as the internal auditor to limit the enterprise's exposure to procurement fraud risks as far as possible. The study firstly focus on the analysis of the steps within the procurement process which is the starting point for the identification of the fraud risks. Secondly the enterprise risk management model is applied in the format of a procurement risk matrix within the procurement function. The study is an indication that procurement fraud cannot be completely prevented but that the appearance thereof can be limited by means of the extensive procurement fraud risk management model. Recommendations for future studies include the application of the enterprise risk management model in other functional areas within the enterprise. / Die voorkoms van aankoopbedrog vereis van die onderneming se bestuur, ondernemingsrisikobestuurder en interne ouditeur om aankoopbedrogrisiko's effektief binne die konteks van die ondernemingsrisikobestuurskonsep aan te spreek. Die doel van die studie is om `n aankoopbedrogrisikobestuursproses daar te stel wat as `n omvattende raamwerk vir die ondernemingsrisikobestuurder en interne ouditeur kan dien om die onderneming se blootstelling aan aankoopbedrogrisiko's so ver as moontlik te beperk. Die studie fokus eerstens op die ontleding van die stappe in die aankoopproses wat as vertrekpunt vir die identifisering van bedrogrisiko's dien. Tweedens word die ondernemingsrisikobestuursmodel in die vorm van `n aankoopbedrogrisikomatriks in die aankoopfunksie toegepas. Die studie dui daarop dat alhoewel aankoopbedrog nie volkome verhoed kan word nie, die voorkoms daarvan wel beperk kan word deur die toepassing van `n omvattende aankoopbedrogrisikobestuursmodel. Aanbevelings vir verdere studies sluit die toepassing van die ondernemingsrisikobestuursmodel op ander funksionele terreine van die onderneming in. / Auditing / M. Com. (Auditing)

Made available in DSpace on 2016-08-17T14:53:21Z (GMT). No. of bitstreams: 1 Sergio Augusto.pdf: 2350058 bytes, checksum: 7c3c67925b0b27a77105c3cb0799c4e6 (MD5) Previous issue date: 2012-05-04 / Conselho Nacional de Desenvolvimento Científico e Tecnológico / This work provides a framework to obtain the optimal bidding strategy for a GENCO in long-term electricity auction. The tool is based on intelligent techniques for optimizing the proposed Utility Function. The goal is to find the optimal strategy that maximizes the expected payoff of GENCO and simultaneously minimize the risks. The risks are modeled by two classical metrics: the Variance (Portfolio Theory) and Value at Risk (VaR). The proposed methodology is applied to auctions for long-term forward contracts, such that used in the Brazilian power system for buying and selling energy in the regulated market. The Bidding Strategy is formed through a Supply Curve which relates the optimal amount of energy to different offer prices. Thus, it allows the GENCO define the best bid (offer) for a given offer price. The proposed approach is validated for three test cases: First, concerning the variation of generation and price of energy scenarios for evaluation of the bidding strategy and the GENCOS risk perception; The second, consider a cascade hydro-term system for evaluation of MRE; and The third, considers the northeastern Brazilian subsystem where the supply curve is formed for the CHESF company's power plants portfolio. The results show how the offer may be changed according the variation of the spot prices and physical generation and demonstrate the efficacy of meta-heuristics proposed to optimize the supply model. / Este trabalho apresenta uma ferramenta de auxílio e suporte à tomada de decisões na formação de estratégias de oferta para agentes geradores (GENCOS) participantes de leilões de eletricidade de longo-prazo. A ferramenta é baseada em técnicas inteligentes para a otimização da Função de Utilidade proposta média-risco . O objetivo é encontrar a Estratégia Ótima que maximize o retorno esperado da GENCO e, simultaneamente, minimize os riscos relacionados às incertezas no montante de energia produzida e no preço spot, modelados por duas métricas clássicas de risco: a Variância (teoria dos portfólios) e o Valor em Risco (VaR). A abordagem proposta é aplicada ao mercado brasileiro de eletricidade, especificamente, ao ambiente de Leilões de Energia Existente na categoria Quantidade de Energia, tais quais os leilões aplicados pelo órgão regulador brasileiro para compra e venda de energia no mercado regulado. Sugere-se aqui a formação de uma Curva de Oferta que relacione a quantidade de energia ótima para diferentes preços de oferta. E, deste modo, permita a GENCO definir qual o melhor lance (oferta) para dado preço de oferta durante o processo do leilão. Para a avaliação da abordagem foram utilizados três casos testes: O primeiro considera cenários de geração física e preço de energia a fim de avaliar a estratégia de oferta e a percepção ao risco de contratação da GENCO quanto à variação de tais cenários; o segundo, considera um sistema em cascata onde é possível observar o efeito do Mecanismo de Realocação de Energia (MRE) sobre a oferta das GENCOS; e o terceiro considera o subsistema nordeste brasileiro onde a curva de oferta é formada para o portfólio de usinas pertencentes à empresa CHESF. Os resultados demonstram como a oferta de energia pode ser alterada de acordo com cenários de oferta gerados e comprovam a eficiência da meta-heurística proposta para otimização do modelo de oferta.

Research in risk awareness has been relatively neglected in the health informatics literature, which tends largely to examine project managers’ perspectives of risk awareness; very few studies explicitly address the perspectives held by senior executives such as directors. Another limitation evident in the current risk literature is that studies are often based on American data and/or they are restricted to American culture. Both factors highlight the need to examine how senior executives (i.e., directors) who oversee or direct eHealth projects in Canada perceive risk awareness. This research explores and discusses the perspectives of risk awareness (i.e., identification, analysis, and prioritization) held by directors and project managers who implement Canadian eHealth projects. Semi-structured interviews with nine directors and project managers uncovered six key distinctions in these two groups’ awareness of risk. First, all project managers valued transparency over anonymity, whereas directors believed that an anonymous reporting system for communicating risks had merit. Secondly, most directors emphasized the importance of evidence-based planning and decision making when balancing risks and opportunities, an aspect none of the project managers voiced. Thirdly, while project managers noted that the level of risk tolerance may evolve from being risk-averse to risk-neutral, directors believed that risk tolerance evolved toward risk-seeking. Directors also noted the importance of employing risk officers, a view that was not shared by project managers. Directors also believed the risk of too little end-user engagement and change management was the most important risk, whereas project managers ranked it as the least important. Finally, when directors and project managers were asked to identify and define the root cause(s) of eHealth risks, directors identified the complexity of health care industry, while project managers attributed it to political pressure and a lack of resources where eHealth projects are concerned. This research proposes that the varied perspectives of risk awareness held by directors and project managers must be considered and integrated to properly align expectations and build partnerships for successful eHealth project outcomes. Understanding risk awareness offers a means to systematically identify and analyze the complex nature of eHealth projects by embracing uncertainties, thereby enabling forward thinking (i.e., staying one step ahead of risks) and the ability to prevent avoidable risks and seize opportunities. / Graduate / 0723 / 0489 / 0454 / randbpark@gmail.com

South Africa presently experiences high levels of crime daily. Although crime is accepted as an everyday occurrence for its citizens, it affects the economy of the country. This study analysed security measures implemented on Commercial Private Game Reserves (CPGRs) in Limpopo and the impact of crime thereof. CPGRs are enclosed areas containing various species of fauna and flora. Visitors from domestic and foreign origins visit these reserves to enjoy nature and its tranquillity. This study analysed the security measures to determine their effectiveness for CPGRs. The study further explored the use of security risk management strategies and risk assessments as crime reduction tools. The study was carried out using a case study research design. Data were collected by the researcher using three methods: observation, onsite checklists and semi-structured one-on-one interviews which were conducted on site. Validity and reliability indicate the trustworthiness of the study. The researcher reduced the data gathered through the use of thematic data analysis. Interviews were transcribed and themes were created and identified by the researcher. The comprehensive data indicated the importance of a security risk manager on a CPGR. The research found that very few security risk managers are employed and that managers of security risks employed on CPGRs have various titles. However, while the CPGRs have similar risks, their risk reduction strategies vary. The most commonly used measures are people, physical and technological measures with each having various subdivisions. The security measures implemented by CPGRs in the Limpopo province which were analysed are not formulated using a scientific approach as most properties do not make use of a formal security risk assessment. The study is deemed valuable as a model was developed from the findings that could be used by game reserves to guide them to apply relevant security measures. A formal security programme is often limited due to financial constraints of the reserve or the reserve owners, however, not all strategies should be considered as a financial expense as much can be done without exhausting financial reserves. The findings contributed to making recommendations to improve the overall security of CPGRs. This study encourages more research into the subject to improve the security industry and to stimulate the tourism industry. / Security Risk Management / M. Tech. (Security Management)