Criteria for evaluating the effectiveness of the risk management system. Building risk management systems Evaluation of the effectiveness of risk management is carried out on the basis of

In the system of consistent risk management functions, the most important role is played by assessment of the effectiveness of the risk management system.

Management efficiency is the ratio of the total result of management activity to the cost of resources expended to achieve it.

The effectiveness of managerial activity is significantly influenced by a number of factors, the totality of which can be conditionally divided into two main groups.

The first group includes factors that have a direct direct impact on the effectiveness of administration, such as:

♦ management potential of the organization, ie the totality of all resources available to the management system;

♦ total costs for the maintenance and operation of the management system - are determined by the nature, method of organization, technology and scope of work to implement management functions;

♦ control effect, i.e. the totality of all economic, social and other benefits that the organization receives in the process of implementing management activities.

All of the above indicators can be defined as the main factors of management efficiency.

The second group is formed by secondary factors that have an indirect impact on the effectiveness of the management system. These factors include:

♦ qualifications of managers and executors;

♦ capital-labor ratio of the management system, i.е. the degree and quality of providing administrative employees with auxiliary means (computers, office equipment, etc.);

♦ socio-psychological conditions in the labor collective;

♦ organizational culture.

As part of the management efficiency criteria, general and particular indicators can be distinguished. General indicators characterize the final results of the organization's activities, and private indicators characterize the efficiency of the use of certain types of resources.

To assess the effectiveness of the management of commercial enterprises, it is most appropriate to use such general indicators as profit and profitability.

The total amount of profit received by an enterprise for a certain period usually consists of profit from the sale of products (works, services), profit from other sales and profit from non-sales operations.

Profit from the sale of products, services or work performed is determined as the difference between the total proceeds from the sale of products (excluding value added tax and excises) and the amount of production and sales costs included in the cost.

Profit from other sales is defined as the difference between the amount received from the sale of property or other material assets of the enterprise, and their residual value.

Profit from non-sales operations is calculated as the difference between income and expenses for operations not related to the sale of the company's products or its property.

The composition of income from non-operating operations includes:

♦ income from financial investments of the enterprise in securities;

♦ income from leased property;

♦ balance of received and paid fines;

♦ positive exchange differences on foreign currency accounts and operations in foreign currency;

♦ receipts of amounts on account of repayment of receivables written off in previous years at a loss;

♦ profit of previous years, revealed and received in the reporting year;

♦ amounts received from buyers on recalculations for products sold last year;

♦ interest received on the company's accounts with credit institutions.

Non-operating expenses of the enterprise are formed as a result of summing up:

♦ shortages and losses from the loss of material assets and funds;

♦ negative exchange rate balance on foreign currency accounts and transactions in foreign currency;

♦ losses of previous years identified in the reporting year;

♦ writing off accounts receivable;

♦ uncompensated losses from natural disasters;

♦ costs for canceled orders;

♦ legal costs;

♦ the cost of maintaining mothballed production facilities.

The balance sheet profit received by the enterprise is distributed between the state and the enterprise. After the introduction of income tax into the relevant budgets, the enterprise has at its disposal cash resources, which form its net profit. The net profit of the enterprise is directed to the accumulation fund, the consumption fund and the reserve fund.

Based on the order of profit formation, its factorial analysis is carried out. The main purpose of factor analysis is to assess the dynamics of balance and net profit indicators, to identify the degree of influence on the financial results of a number of factors, including:

♦ increase or decrease in production costs;

♦ growth or decrease in sales volumes;

♦ improving the quality and expanding the range of products;

♦ identification of reserves to increase profits.

The most important indicator characterizing the effectiveness of the management of a commercial enterprise is its profitability. Profitability is defined as the profit received from each ruble of the spent means.

The system of profitability indicators is formed on the basis of the composition of the property of the enterprise and the business operations carried out by the enterprise. From this point of view, there are:

1) the profitability of the property of the enterprise - is defined as the ratio of net profit to the average value of the assets of the enterprise;

2) profitability of non-current assets - represents the ratio of net profit to the average value of non-current assets;

3) profitability of current assets - is calculated as the ratio of net profit to the average value of current assets;

4) return on investment - the ratio of profit from investment projects to long-term costs for their implementation;

5) return on equity - the ratio of net profit to the amount of equity capital;

6) profitability of borrowed funds - is defined as the ratio of fees for the use of loans to the total amount of long-term and short-term loans;

7) profitability of sold products - the ratio of net profit to proceeds from the sale of products.

Using the above profitability indicators, it is possible to evaluate not only the overall efficiency of the organization's management system, but also the effectiveness of the use of certain types of resources (assets) of the enterprise.

It is much more difficult to assess the effectiveness of the management of non-profit organizations. From the point of view of assessing the effectiveness of functioning, all non-profit organizations can be divided into two main groups:

1) organizations whose performance can be assessed using economic indicators;

2) organizations whose performance results are expressed in non-economic terms, such as a decrease in the level of morbidity or crime, an increase in the level of education, an improvement in the environmental situation, etc.

To evaluate the effectiveness of organizations included in the first group, you can apply the same methods as for evaluating the effectiveness of commercial organizations.

It is much more difficult to evaluate the effectiveness of the functioning of organizations that are part of the second group. Currently, there are almost no methods for converting non-economic indicators into economic ones.

Even in those industries where such techniques are available, they do not find wide practical application. For example, a methodology has long been developed for calculating the economic damage caused to nature due to pollution of water sources by discharges from industrial enterprises. At the same time, when assessing the effectiveness of projects for the construction of new treatment facilities, the prevented damage is not taken into account. Thus, it turns out that most environmental programs are unprofitable from an economic point of view.

Therefore, the main direction in the development of methods for assessing the economic efficiency of non-profit organizations and programs should be the development of methods for converting non-economic indicators into economic ones. This will more objectively and fully take into account the impact of various factors on the performance of a particular organization or project.


The modern business world is dynamic. After two years of intertime (2014-2015), the features of a new reality are gradually emerging for the prospects for business development in Russia. Under the conditions of a shrinking market and a weak ruble, enterprises are forced to form and develop their export potential in every possible way, which will require additional management restructuring. In this regard, the risk management system, which one way or another will have to be created by enterprises, can become an attractive resource for investors and a success factor in foreign and domestic markets.

The essence of risk management

This article echoes the materials of the article on the topic of organizational aspects. Risk management is proposed to be understood as a set of targeted procedures for identifying, assessing and reducing risk to the values ​​​​set by the strategic choice, which involves a multi-stage implementation process. The economic goal of management is to reduce or compensate for damage to the organization in the event of adverse consequences of decisions.

Under the conditions of uncertainty in the economic activity of an enterprise, risk management is a set of regulation of strategic, tactical, design and operational-production relations. An integrated approach has a number of advantages (the corresponding diagram is located below), and from the position of management functions, almost the entire arsenal of management tools is involved, including components of financial management, logistics, economics, accounting, sales, etc. The complex of procedures is aimed at:

  • forecasting risk events and their identification;
  • rationale for risk aversion;
  • justification of risk acceptability;
  • risk minimization using the available range of tools;
  • elimination of the causes and consequences of risky events;
  • adaptation of companies that survived the crisis period to new business conditions;
  • bankruptcy protection.

Diagram showing the benefits of a comprehensive approach to risk management

The uncertainty of activity is weakly correlated with the scale of activity. Indeed, regular management, which can be deployed in large enterprises, gives a significant "head start" in comparison with empirical methods of management in small businesses. But, firstly, the cost of management increases dramatically, and secondly, the very number of risk factors becomes much larger. Therefore, it can be confidently stated that one of the conditions for the success of the activity is the implementation by the management of the business, regardless of its size, of anti-risk measures. Another question is how systematic is risk management?

The objects of management are the actual risk, economic relations accompanying probable adverse events and risky investments. The subjects of management can be considered both in the broad and in the narrow sense of the word. From a common position, they are all members of the organization's team, including managers and employees. In a narrow sense, subjects are specially authorized managers, employees and divisions of the company. The goals and objectives of risk management are related to the stages of business development and its passage through the stages of the life cycle. The scheme for changing the composition of management objectives at the stages of the organization's activities and the tasks corresponding to them are shown in the diagram below.

Dynamics of goals and composition of risk management tasks by stages of company development

The concept and content of risk management systems

The risk management system (RMS) as a set of interrelated elements, on the one hand, contains two subsystems: managing and managed. In addition, the RMS is a component of a higher-ranking system - corporate management and is guided by the requirements of the organization's strategy. On the other hand, the system includes a technological complex of management and a complex of organizational tools and structures. Pay attention to the scheme "Buildings of the RMS" presented below. It displays the main elements of the risk management system.

Scheme "Building RMS" in the relationship of technological and organizational aspects

The enterprise risk management system is an element of the internal control and risk management mechanism, which is part of the corporate governance, a technological tool and tools that ensure the effectiveness of risk management. This system provides organizational prerequisites, principles and structures for designing, implementing and improving the organization's risk management business processes. Thus, the RMS creates an infrastructure for risk management on a regular basis.

Ensuring the minimization of the level of uncertainty regarding the achievability of the tasks set for management, the development and practical development of risk management processes is the main goal of the RMS. Under the specified tasks, the results to be achieved according to the development strategy are considered in the programs of the tactical and operational levels. The RMS serves the regulated management of assessed risks, as well as maintaining the integral risk of the company at the level of the preferred acceptable risk. The scheme of interrelation of integral risk management with stakeholders is placed below.

Conflict resolution scheme for business leaders through integral risk management

The risk management system, especially in large companies, is called the corporate risk management system (CRMS). In addition to simply expanding the abbreviation, this, as a rule, entails increased requirements for the level of regulation of activities within the system. From the position of solving the main tasks in the CRMS, the following stages are sequentially performed.

  1. RMS diagnostics at the level of business units and the entire company.
  2. Development of the main structures of the CRMS (organizational, informational, financial, etc.).
  3. Creation of regulatory and methodological support for the CRMS.
  4. Structuring databases according to identified risks and risk events that have taken place.
  5. Development of mechanisms for monitoring and reporting on emerging events.
  6. Identification, identification and assessment of risks, drawing up a plan for their minimization and compensation.
  7. Formation of a risk map.
  8. Integration of the map update procedure into the business planning process.
  9. Analysis and assessment of the facts of response to risk events.

Specifics of risk management standardization

Risk management systems at domestic enterprises are built on the basis of Western standards that are rather poorly adapted to our realities. I do not consider here the experience of banks and insurance companies. It seems that in this sector of the economy the point of no return has been passed and the pace of development of risk management and the RMS supporting them can be considered satisfactory. Are you interested in what Russian companies can rely on, primarily in the manufacturing sector, in order to quickly increase their risk management potential? To do this, you need to touch on the history of the development of a systematic approach to risk management in the world and in our country.

Diagram of the world history of the development of standards in the field of risk management

Composition of current national and international standards in the field of risk management

Above is a diagram of the history of standardization and the composition of existing standards in the field of risk management in the world. It is obvious that in order for a Russian enterprise to meet the needs of investors and inspire confidence in the international arena, the approach to building a CRMS should be at least close to world standards. And in order to meet the requirements of exchange trading platforms, international and Russian corporate legislation, the system itself must be transparent and understandable to a competent stakeholder.

The COSO ERM risk management model is not a standard and is a deep methodological development. Therefore, the COSO cube is difficult to ignore and not emphasize its main postulates. Below are two diagrams that give an overview of this concept. In the model:

  • defines the basic concepts of the internal control system;
  • the main components of the risk management process are described in detail;
  • an integrated risk management model is presented in a cubic visual form;
  • developed the principles of this management system;
  • the functions and responsibilities of participants in the risk management process are formulated;
  • the management process itself is described;
  • recommendations were given to external and internal stakeholders in ensuring the successful functioning of the RMS in companies.

Key Components of the COSO ERM Risk Management Model

The company always remains face to face with its risks and defends itself from threats and the consequences of their implementation at internal borders. Regulators also have their place on the "far approaches to the front of the fighting." And the support of regulators, of course, is necessary for business. Another thing is that domestic standards are "tracing paper" from Western counterparts. At the same time, it should be understood that the actual practice of the general mass of firms in developed countries has gone far ahead due to a longer history and a different level of managerial culture. However, as a basis, the resources provided by the regulators are useful for starting the implementation of the CRMS.

Scheme of the composition of regulators that determine the requirements for the RMS

Algorithm for building CRMS in a company

You and I remember the axiom that management and its components are connected with the company's strategy. It defines the principles of management activities and the main focus points. The specifics of risk management is that the local risk management strategy undergoes a major adjustment in the middle of the management process. To build a RMS, the company's experience in the practical application of financial and economic theory, tax and civil law, external regulatory assets and standards is important.

Internal and external pillars of building RMS in the company

Building a risk management system according to the model proposed below is based on the experience of Russian companies with a focus on the COSO methodology. This model implies the following steps of the algorithm.

  1. Analysis of the environment. First of all, they analyze the elements of the external environment (the activities of the Central Bank of the Russian Federation, the State Duma, the Ministry of Finance, the Federal Tax Service, etc.), the business environment, market conditions, and business resources. All this creates external risk factors.
  2. Establishing customer risk management processes. The success of the implementation of the CRMS depends on this. Very often in Russian companies, the customer is the financial service, which is associated with the dominant role of financial risks in the functioning of the company. In a number of cases, the customer is the general director, and it is especially valuable if his undertakings are supported by the position of the main shareholders.
  3. Determination of the organizational structure of the control subsystem. The system can be managed by a dedicated specialist or the head of a separate division, who coordinates various areas: risky investments, insurance operations, venture investments. This organizational structure is called the concentrated model. The second variant of RMS organization can be a distributed risk management model.
  4. Development of regulatory documentation of the system: risk management policies, provisions (concepts) for risk management, risk declarations. The policy serves as the main document of the CRMS and is publicly available on the corporate portal.
  5. Development and adjustment of the corporate risk map. Here, measures are cyclically implemented to identify, identify and assess the risks of the company.
  6. Development of a risk management strategy. In the strategy, in addition to the principles of choosing methods for dealing with risks, mechanisms for their financing, a special place is occupied by indicators of the effectiveness of the RMS and the distribution of areas of responsibility between the management company and business units.
  7. The actual implementation of the risk minimization and compensation program.
  8. Development of an operational risk management process.
  9. Regular audit of the CRMS.
  10. Implementation of procedures for informing about changes in the CRMS.
  11. Creation and development of control and monitoring systems.
  12. Implementation of procedures for saving and archiving information generated in the system.

RMS Implementation Principles

The principles of the functioning of the RMS in the company also determine the processes of its implementation and development. These principles are subject to compliance by managers responsible for the implementation of the system procedures by specialists and all employees of the company.

  1. The principle of goal orientation. The goals are written in the company's strategic documents: development strategies, strategic action plan, corporate maps, business plans.
  2. The principle of balancing risks and profits. The RMS should promote a balance between risk and profitability (profitability) of the business, taking into account the requirements of legislative acts and the provisions of internal regulations.
  3. The principle of accounting for uncertainty. Uncertainty is present in any business activity and is an integral part of the decisions made in the company. RMS serves to systematize information about the sources (factors) of uncertainty and helps to reduce it.
  4. The principle of system. A systematic approach allows you to timely and fully identify, identify and assess risks, reduce their negative consequences or compensate for the impact on performance.
  5. The principle of quality information. RMS requires timely, secure and accurate information to function. When making decisions, however, it is necessary to take into account the limitations and assumptions of the sources of information, the possible subjectivity of the position of experts and the peculiarities of the methods used for assessing and modeling risk situations.
  6. The principle of assigning responsibility for risk management. The concept of "risk owner" is introduced, this status is assigned to one of the company's managers. He is given responsibility for the appropriate management procedures within the given powers and functional composition.
  7. The principle of efficiency. The RMS should provide a reasonable and economically justified combination of management effectiveness and costs for its organization and production.
  8. The principle of continuity. The RMS functions in conditions of regularity (cyclicity) of the main processes and their continuity. The processes of the system originate at the time of the development of the company's strategy and cover all areas of its activity.
  9. The principle of integration. The decision-making system at all levels of management should include the subject area of ​​RMS. Decisions are developed and approved taking into account the circumstances and the likelihood of adverse consequences associated with their adoption.
  10. The principle of expansion. RMS involves the identification, assessment and settlement of all possible threats to activities, not limited to financial and insured risks. According to the last three principles, the schemes of their main elements are presented below.

Composition of procedures of the RMS continuity principle

Scheme of the main elements of the RMS expansion principle

Assessment of the company for risk management

What should a company do if it is only thinking about implementing RMS or if elements of the system are already present, but it is not clear how and in what direction to move on? Experts recommend in this case to analyze the risk management system at the enterprise in order to determine its strengths and weaknesses and ways for further development.

It would be very useful for current and potential stakeholders in the company's activities and in investing in it to learn about the real state of affairs from the position of regular risk management. In 2015, the KPMG consulting group conducted a study “Risk Management Practices in Russia”, in which 48 respondents were asked about RMS diagnostics. The results of the answers are presented in the diagram below.

Results of a survey of 48 Russian companies on the diagnosis of SUR.

Risks can be mitigated in various ways. As an example illustrating the diversity of approaches to the same problem, consider the risk management situation of a large industrial installation. The purpose and principle of its operation in this case do not play a special role.

The main hazardous event is a plant accident, which may be accompanied by fire, explosion, damage to components and assemblies, human casualties, etc. Of course, first of all, preventive measures to reduce the risk, as well as measures to reduce the scale of possible damage, should be carried out. Reliability-critical components and mechanisms, fire and explosive materials are identified, and measures are taken to improve the safety of the installation. Various systems are also installed; monitoring the development of hazardous processes, smoke sensors, temperature sensors, etc. An action plan is being developed for the evacuation of personnel in the event of an accident, and employees are trained in the rules of conduct in such situations.

The situation with risk management at the first stage is simplified due to the fact that there are technical standards for the safety of various machines and devices, the observance of which is mandatory for industrial enterprises. Therefore, it is relatively easy to determine the list of risk reduction measures that need to be implemented in the first place.

However, then the question inevitably arises of how to further reduce the level of risk. And in this case, the implementation of additional preventive measures no longer seems obvious, since all of them are associated with certain costs. Risk reduction requires the introduction of safe technologies and materials, the renewal of the technical park, the improvement of control and warning systems, insurance - the payment of an insurance premium, self-insurance - deductions to the reserve fund. At the same time, the final effect of these measures can be assessed by the degree of compensation or elimination of possible losses in the future. If we correlate the costs of risk management and the degree of reduction of future losses, then we can obtain an assessment of the effectiveness of risk management measures from an economic point of view.

You can also evaluate the effectiveness of risk management in terms of ensuring the overall sustainability of the enterprise. As an example, consider a situation where an organization decides to invest in improving the reliability and continuity of a manufacturing plant or industrial plant. Financial measures, such as insurance, are more suitable for these purposes. It is known that, starting from a certain level, the costs of direct risk reduction with the help of organizational and technical measures grow at a faster rate than the risk itself decreases. In other words, if increasing the reliability of a device from 97 to 98% requires a certain amount S , then increasing the reliability from 98 to 99% requires several times more costs, for example, 2 S . One hundred percent reliability, as is known, is never achieved, i.e., in this case, the costs are equal to infinity.

In this situation, risk insurance seems to be a more preferable procedure, since the costs of it are usually proportional to the volume of risks (provided that they are homogeneous).

The above example illustrates that, starting from a certain level of risk reduction, the enterprise faces the problem of comparative evaluation of various methods of influencing risk and choosing the best one. Methods can be compared on the basis of various criteria, including economic ones.

General approaches to evaluating the effectiveness of risk management methods

Evaluation of the effectiveness of applying one or another risk management method depends on the criterion that underlies the comparison. There are two most common approaches to developing criteria:

    selection of a critical parameter that should not go beyond acceptable limits;

    economic benefit.

The first approach is closely related to compliance with safety standards and ensuring the sustainability of the enterprise. For example, there are safety standards for workers in hazardous industries or environmental pollution for the population. Within the framework of this approach, various risk management activities are evaluated on the assumption that they all reduce the level of a critical parameter to the required value.

Purely financial mechanisms, such as insurance and self-insurance, are aimed primarily at compensating for the consequences of adverse events. Their comparison with other methods of risk management is possible if a certain financial parameter is chosen as a criterion, for example, the maximum amount of losses leading to the ruin of an enterprise.

An enterprise can benefit economically by improving its own safety. In this case, various options for organizing risk management measures are evaluated according to the same principle as investment projects: first, the costs are determined, and then the absolute profit or the rate of return per unit of costs. The level of security achieved in this case does not play a special role, it is determined by the most economically advantageous option chosen.

Economic criteria for evaluating the effectiveness of risk management

The use of any of the risk management methods leads to a redistribution of current and expected financial flows within an enterprise or a financial project. For example, when insuring, part of one's own funds is diverted to pay insurance premiums, as a result of which the project is underinvested and profits are lost. On the other hand, there is an expected future inflow of funds in the form of compensation for losses in the event of an insured event.

The redistribution of financial flows leads to a change in the value of the net assets of the enterprise or project, calculated taking into account the expected cash receipts. Thus, as a criterion for the economic efficiency of applying risk management methods, one can use an assessment of their impact on the change in the value of the enterprise, calculated at the beginning and end of the financial period. For an investment project, the criterion is the impact of risk management methods on the change in the net present value of the project.

Let's give two examples from the field of financial risks.

Example 1. Investment project

Investment project risks are taken into account as part of the discount rate for equity, which is used to calculate the net present value of the project (NPV - net present value). Insurance reduces risk, thereby lowering the discount rate and increasing NPV. On the other hand, insurance implies additional costs for the payment of insurance premiums during the life of the project, which ultimately lead to a decrease in the profit of the project.

The resulting influence of these two opposing factors leads either to an increase or decrease in NPV, thus making it possible to judge the effectiveness of insurance application.

However, investors may demand that the risks of the project be reduced to the necessary limits. In this case, the starting point for evaluating the effectiveness of risk management methods will be to compare the costs of their implementation while ensuring the same required level of risk.

Example 2. Investing in securities

When investing in exchange-traded assets, an investor, based on past years' data on exchange rate fluctuations, can assess with what probability he will receive the required level of income. After that, he can determine his future economic benefit in the form of a mathematical expectation, i.e. as the product of probability and expected profit.

After that, the investor can use hedging methods to reduce risk or insure future profits in the usual way. In the first case, the investor will fix a smaller profit, but with a higher probability, and will also incur the costs of the hedging operation. In the second case, he will fix the desired profit, but will incur significant costs for paying the insurance premium.

In practical terms, for a comparative assessment of the effectiveness of various risk management methods, you can use the method of pairwise comparison and then build a hierarchy of results based on the application of the selected criteria.

Analysis of the economic efficiency of insurance and self-insurance

Analysis Method

Let us consider a method for comparative evaluation of the effectiveness of the two most common financial risk management mechanisms - insurance and self-insurance, which has received the name of the Houston method in Western literature. Its essence lies in assessing the impact of various methods of risk management on the "value of the organization" (value of organization).

The value of the enterprise can be determined through the value of its free assets. Free (or net) assets of an enterprise is the difference between the value of all its assets and liabilities. Decisions to insure or self-insure risk change the value of an enterprise because the costs of these activities reduce the cash or assets that the organization could invest in and make a profit. The model under consideration also takes into account the occurrence of losses in the future from the considered risks.

It is also assumed that both financial mechanisms equally cover the considered risk, i.e. provide the same level of compensation for future losses.

When insuring, the company pays an insurance premium at the beginning of the financial period and guarantees itself compensation for losses in the future. The value of the enterprise at the end of the financial period in the implementation of insurance is expressed by the following formula:

S I = S – P + r (S – P), (33.1)

where S I is the value of the enterprise at the end of the financial period under insurance;

S is the value of the enterprise at the beginning of the financial period;

P is the amount of the insurance premium;

r is the average return on operating assets.

The amount of losses does not affect the value of the enterprise, since they are assumed to be fully compensated by the paid insurance claims.

With self-insurance, the enterprise retains its own risk in full and forms a special reserve fund - the risk fund. The impact on the amount of free assets of fully preserved risk can be estimated by the following formula:

S R = S – L + r(S – L – F) + iF, (33.2)

where S R is the value of the enterprise at the end of the financial period with fully preserved risk;

L - expected losses from the considered risks;

F is the value of the risk reserve fund;

i is the average return on the assets of the risk fund.

With self-insurance, the company suffers two types of losses - direct and indirect. Direct losses are expressed as expected annual losses L . In addition to the expected losses L, certain funds must be directed to the reserve fund F in order to compensate for the expected losses, and with some margin. Assets are assumed to be held in a reserve fund in a more liquid form than assets invested in production, so they generate less income. Comparison of the values ​​of S I and S R makes it possible to judge the comparative economic efficiency of insurance and self-insurance.

It should be noted that for greater accuracy of calculations, it is necessary to take into account the discounting of cash flows due to the distribution of losses over time, delays in the payment of insurance compensation associated with the preparation and presentation of claims, and the presence of inflation.

Performance Analysis Results

Let us set ourselves the goal of determining from the Houston model the condition for the effectiveness of using insurance in an enterprise to protect against risks. Mathematically, this condition can be written in the following form:

S I > S R . (33.3)

This suggests that the value of the enterprise at the end of the financial period with insurance should be higher.

Substituting expressions (33.1) and (33.2) into inequality (33.3) and making some transformations, we obtain the following expression:

where P is the insurance premium;

L cp - reduced average expected losses;

F is the size of the risk fund in case of self-insurance;

r is the average return on operating assets;

i is the average return on the assets of the risk fund.

From inequality (33.4) it is already possible to determine the maximum allowable size of the insurance premium, if certain assumptions are made about the values ​​included in it.

The two key parameters on which the compliance or non-compliance with this inequality depends are the average expected losses Lcp and the size of the risk reserve fund F . Let us consider the main patterns characteristic of these quantities.

In order to calculate correctly, in formula (33.4) it is necessary to use the value of expected losses Lcp given at the beginning of the financial period. Real losses are distributed over the observation period, and those that occurred earlier in time have a stronger effect on the change in the value of the enterprise. In this case, to adjust the value of Lcp, you can use the standard procedures for discounting financial flows.

The required size of the risk fund F, which must be formed by the enterprise during self-insurance, can be estimated based on the following considerations. The funds of the risk fund, as already mentioned, are also used by the enterprise to make a profit, since they are “temporarily free” until they are needed to compensate for losses. If the efficiency of using the risk fund were equal to the efficiency of using productive assets (i.e. r = i), then the insurance efficiency condition given by inequality (33.4) would never be met, since the insurance premium P is always greater than the average expected losses: L cp : P > Lcp .

This circumstance follows from the structure of the insurance rate, since in addition to the average losses, it includes the costs of doing business and the profit of the insurance company (as well as other components). Insurance would always be less cost effective than self-insurance. However, as a rule, r > i , since the assets in the risk fund should be kept in a more liquid, and therefore less profitable form. Therefore, there is a range of values ​​of those variables in which insurance will be a more cost-effective mechanism, which will result in an increase in the value of the enterprise.

The size of the risk fund is determined in accordance with the subjective perception of the risk by the insured. To assess this factor, the model uses the previously mentioned concept of the maximum acceptable level of loss L max . It would be logical to set the size of the risk fund equal to the maximum acceptable loss: F = L max

It is important to note that the inequality determines the maximum acceptable insurance premium for the insured based on the internal properties of the insured risks, which are described in the model by the parameters L max and L cp . These parameters can be determined based on statistical data. In their absence, as approximate values ​​of L max and L cp, you can use the available data on other enterprises of a similar profile, or take the values ​​of the maximum and average annual loss from the risks under consideration for a sufficiently long period of time (in amounts reduced to the level of the reference year), adjusted by the coefficient determined by experts.

Based on the analysis of inequality, the following conclusions can be drawn about the impact of various conditions on the effectiveness of the use of insurance in the enterprise.

1. The larger the size of the risk fund formed by the enterprise, the less effective is self-insurance.

2. The effectiveness of self-insurance falls with an increase in the profitability of the enterprise and grows with an increase in the profitability of liquid highly reliable investments. This provision has an obvious economic meaning: with an increase in the profitability of its activities, it is more profitable for an enterprise to invest in production than to divert them to create a risk fund.

In the system of consistent risk management functions, the most important role is played by assessment of the effectiveness of the risk management system.

Management efficiency is the ratio of the total result of management activity to the cost of resources expended to achieve it.

The effectiveness of managerial activity is significantly influenced by a number of factors, the totality of which can be conditionally divided into two main groups.

The first group includes factors that have a direct direct impact on the effectiveness of administration, such as:

♦ management potential of the organization, ie the totality of all resources available to the management system;

♦ total costs for the maintenance and operation of the management system - are determined by the nature, method of organization, technology and scope of work to implement management functions;

♦ control effect, i.e. the totality of all economic, social and other benefits that the organization receives in the process of implementing management activities.

All of the above indicators can be defined as the main factors of management efficiency.

The second group is formed by secondary factors that have an indirect impact on the effectiveness of the management system. These factors include:

♦ qualifications of managers and executors;

♦ capital-labor ratio of the management system, i.е. the degree and quality of providing administrative employees with auxiliary means (computers, office equipment, etc.);

♦ socio-psychological conditions in the labor collective;

♦ organizational culture.

As part of the management efficiency criteria, general and particular indicators can be distinguished. General indicators characterize the final results of the organization's activities, and private indicators characterize the efficiency of the use of certain types of resources.

To assess the effectiveness of the management of commercial enterprises, it is most appropriate to use such general indicators as profit and profitability.

The total amount of profit received by an enterprise for a certain period usually consists of profit from the sale of products (works, services), profit from other sales and profit from non-sales operations.

Profit from the sale of products, services or work performed is determined as the difference between the total proceeds from the sale of products (excluding value added tax and excises) and the amount of production and sales costs included in the cost.

Profit from other sales is defined as the difference between the amount received from the sale of property or other material assets of the enterprise, and their residual value.


Profit from non-sales operations is calculated as the difference between income and expenses for operations not related to the sale of the company's products or its property.

The composition of income from non-operating operations includes:

♦ income from financial investments of the enterprise in securities;

♦ income from leased property;

♦ balance of received and paid fines;

♦ positive exchange differences on foreign currency accounts and operations in foreign currency;

♦ receipts of amounts on account of repayment of receivables written off in previous years at a loss;

♦ profit of previous years, revealed and received in the reporting year;

♦ amounts received from buyers on recalculations for products sold last year;

♦ interest received on the company's accounts with credit institutions.

Non-operating expenses of the enterprise are formed as a result of summing up:

♦ shortages and losses from the loss of material assets and funds;

♦ negative exchange rate balance on foreign currency accounts and transactions in foreign currency;

♦ losses of previous years identified in the reporting year;

♦ writing off accounts receivable;

♦ uncompensated losses from natural disasters;

♦ costs for canceled orders;

♦ legal costs;

♦ the cost of maintaining mothballed production facilities.

The balance sheet profit received by the enterprise is distributed between the state and the enterprise. After the introduction of income tax into the relevant budgets, the enterprise has at its disposal cash resources, which form its net profit. The net profit of the enterprise is directed to the accumulation fund, the consumption fund and the reserve fund.

Based on the order of profit formation, its factorial analysis is carried out. The main purpose of factor analysis is to assess the dynamics of balance and net profit indicators, to identify the degree of influence on the financial results of a number of factors, including:

♦ increase or decrease in production costs;

♦ growth or decrease in sales volumes;

♦ improving the quality and expanding the range of products;

♦ identification of reserves to increase profits.

The most important indicator characterizing the effectiveness of the management of a commercial enterprise is its profitability. Profitability is defined as the profit received from each ruble of the spent means.

The system of profitability indicators is formed on the basis of the composition of the property of the enterprise and the business operations carried out by the enterprise. From this point of view, there are:

1) the profitability of the property of the enterprise - is defined as the ratio of net profit to the average value of the assets of the enterprise;

2) profitability of non-current assets - represents the ratio of net profit to the average value of non-current assets;

3) profitability of current assets - is calculated as the ratio of net profit to the average value of current assets;

4) return on investment - the ratio of profit from investment projects to long-term costs for their implementation;

5) return on equity - the ratio of net profit to the amount of equity capital;

6) profitability of borrowed funds - is defined as the ratio of fees for the use of loans to the total amount of long-term and short-term loans;

7) profitability of sold products - the ratio of net profit to proceeds from the sale of products.

Using the above profitability indicators, it is possible to evaluate not only the overall efficiency of the organization's management system, but also the effectiveness of the use of certain types of resources (assets) of the enterprise.

It is much more difficult to assess the effectiveness of the management of non-profit organizations. From the point of view of assessing the effectiveness of functioning, all non-profit organizations can be divided into two main groups:

1) organizations whose performance can be assessed using economic indicators;

2) organizations whose performance results are expressed in non-economic terms, such as a decrease in the level of morbidity or crime, an increase in the level of education, an improvement in the environmental situation, etc.

To evaluate the effectiveness of organizations included in the first group, you can apply the same methods as for evaluating the effectiveness of commercial organizations.

It is much more difficult to evaluate the effectiveness of the functioning of organizations that are part of the second group. Currently, there are almost no methods for converting non-economic indicators into economic ones.

Even in those industries where such techniques are available, they do not find wide practical application. For example, a methodology has long been developed for calculating the economic damage caused to nature due to pollution of water sources by discharges from industrial enterprises. At the same time, when assessing the effectiveness of projects for the construction of new treatment facilities, the prevented damage is not taken into account. Thus, it turns out that most environmental programs are unprofitable from an economic point of view.

Therefore, the main direction in the development of methods for assessing the economic efficiency of non-profit organizations and programs should be the development of methods for converting non-economic indicators into economic ones. This will more objectively and fully take into account the impact of various factors on the performance of a particular organization or project.


conclusions

♦ From the point of view of the process approach, risk management can be viewed as a continuous series of interrelated management functions.

♦ The basis of the process approach is the management technology, ie the set of techniques and methods for implementing the management process.

♦ The main elements of management technology are the subject of labor (ie information that ensures the adoption of management decisions); product of labor (management decisions); means of labor (knowledge and experience of the manager); labor force (intellectual and physical energy of the leader).

♦ The main element of the management process is the managerial function.

♦ In its most general form, the management function is a separate homogeneous type of activity aimed at achieving the goals of the organization's functioning.

♦ Most researchers divide management functions into general and special. At the same time, general management functions are understood as functions that form the management cycle and reflect the specifics of managerial work, regardless of the nature and specifics of the organization's activities.

♦ In addition to general and special management functions, there are also mixed functions, such as planning the release of finished products, monitoring the progress of production, organizing sales of products, etc.

♦ Depending on the time of action, all control functions can be divided into two groups. The first group includes sequential functions that are carried out discretely (i.e., are repeated at certain intervals), sequentially replacing each other. The second group is formed by continuous functions, the implementation of which is carried out continuously throughout the entire period of enterprise management.

The article is also available (this article also available):

Financing

The study was carried out with the grant support of the Russian Foundation for Basic Research (Department of Humanities and Social Sciences), project 16-02-00531a.

Dyatlov S.A. , Shchugoreva V.A. , Lobanov O.S.

Evaluation of management tools for the effectiveness of banking risk management// Modern control technologies. ISSN 2226-9339. - . Article number: 7704. Publication date: 2017-05-30. Access mode: https://site/article/7704/

Introduction

The current situation is characterized by the unfolding of the global financial and economic crisis, the transformation of the world and national economic and financial and banking systems, the aggravation of hypercompetitive struggle in world markets. Today, there is a need to develop a new paradigm, a transition to a new negentropic model of economic development, a new risk management model in the face of increased global innovative hypercompetition. The main paradigm of banking experience in risk management was that the protective function is primarily a control function, requiring key decisions from top management to protect banks from various financial consequences. However, the management was not able to effectively ensure the level of global decision-making so correct as to develop the business and, at the same time, also successfully reduce losses from risks. More fine-tuning of processes was required. The old paradigm required rethinking and modernization.

The development of new information banking technologies, the widespread use of electronic payment systems, the active introduction of remote services, the multiple growth of banking transactions, incl. on bank cards is accompanied by an increase in the risks of hacker attacks, an increase in the number of fraudulent schemes to steal money from customer accounts via the Internet. So, on May 12-15, 2017, a large-scale hacker attack (infection with the WannaCry computer ransomware virus) was launched on computers and servers of companies in various countries, including electronic payment systems of large banks in industrialized countries of the world, including China, Russia, the USA, EU countries.

The most important tool for reducing electronic vulnerabilities, risks and overcoming the digital divide in the financial and banking sector is the convergence of information spaces, institutions and services of public and private electronic payment systems. Leading banks began to introduce a three-level line of protection into their electronic banking systems, which involved not only bank managers, but also employees working with clients (the first line of defense), risk managers of the bank (the second line of defense) and the internal control service (the third line).

The risk management system, like any system, consists of elements. People, processes, tools and models. Building this system requires a clear understanding of the goals that the system must fulfill. The goals of the system are determined by the requirements of the regulator, as well as by the shareholders of a commercial bank. By itself, achieving these goals does not mean that the risk management system is working effectively. Compliance with the requirements of the regulator is an important and necessary part of building a system, without which the existence of a commercial organization is at least illegal, but an important role is played by the goals set by the shareholders, realizing that the risk management system should protect the bank from unforeseen threats, at the same time without interfering business to perform basic banking tasks. Building a balanced system of goals is a very complex and extremely important part of building the interaction of elements of the risk management system.

The bank needs to understand what the maximum amount of risk is acceptable for doing business, allowing you to receive the planned income. Moreover, this size can be regularly changed and reviewed depending on the current conjuncture and the economic situation. This size is called risk appetite or risk appetite.

Risk appetite can be defined as the aggregate maximum level of risk (possible losses) a bank is willing to accept in the process of creating value, achieving established goals, including target profitability, implementing strategic initiatives and fulfilling its mission.

The system of risk appetite limits and the procedure for its functioning should be fixed in the internal regulatory documents of the bank.

If the task is to evaluate the effectiveness of the risk management system, then it is necessary to determine the tools that can be used in this system to achieve the required risk appetite indicators.

Purpose of the study– identify and evaluate the existing means of managing the effectiveness of bank risk management. At the moment, there are many different tools, models, approaches and indicators that, to one degree or another, can assess the current state of risk management in a Russian bank, as well as directly or indirectly influence the change in this state. The object of research is a joint-stock commercial bank. The subject of the study is the system of banking risk management.

Research methods

If we consider in more detail the methods used by Russian banks, then to assess the effectiveness, we will highlight several tools used in banks and significantly affecting the risk management system:

Indicators:

  1. Risk-adjusted return on equity (RAROC);
  2. Key risk indicators.
  1. Application of stress testing methods;
  2. Self-esteem;
  3. Introduction of risk culture.

Each of these indicators or methods is a modern tool for assessing and influencing the risk management system. Banks themselves choose which of these tools to use in their activities. One of the objectives of the study is to identify those tools that require improvement, within the framework of such a task, an integral indicator was proposed and developed that takes into account the features of all tools, as well as those qualities that directly affect the risk management system as a business process.

This integral indicator was calculated expertly using the point-weight approach and the method of expert assessments, which was proposed by S.S. Belikov to assess the quality of the risk management system. To evaluate the system of tools S.S. Belikov identified 4 groups of criteria:

  • the level of the documentation base,
  • the level of interaction between departments and personnel,
  • level of organization of the management system,
  • level of business continuity.

At the same time, the tools in this study were divided into types of risks. The developed analysis system was based on 6 key criteria:

  • performance,
  • overall economy,
  • rationality and expediency
  • reliability and functional adaptability,
  • compliance with norms and standards,
  • quality of organizational and information support.

At the moment, these criteria do not fully cover the properties of tools that directly affect the risk management system. The proposed method is proposed to be supplemented and refined by the following criteria, typical for the current stage of development of the banking sector:

  • the level of correlation of the indicator and the financial damage of the bank,
  • the availability of the possibility of an automated system that allows you to manage the tool and calculations, cost, availability,
  • the possibility of creating a user interface and roles at all levels of personnel in the AS,
  • a transparent reporting and decision-making system,
  • the rigor of hardware mathematical calculations (the level of formalization of calculations),
  • the impact of the size of the bank on the indicator or instrument,
  • dependence of the instrument on the documents and instructions of the Central Bank,
  • international practice of using the tool,
  • using an instrument in the Central Bank to take into account their risks,
  • integration of the indicator to the bank staff (coverage level),
  • accounting for all types of risk.

Now let's consider these tools and evaluate them according to the proposed criteria (scores 1…10). The weights are proposed by experts based on a survey of risk managers with at least 3 years of experience in the banking risk management system and are presented in Table 1.

Table 1 - Criteria for evaluating instruments

Risk Adjusted Return on Capital (RAROC)

One of the most popular indicators both in foreign banks and in the Russian banking business is risk adjusted return on capital (RAROC). This indicator can be used by banks as part of the Risk Adjusted Performance Management (RAPM) system. RAROC is calculated using the following formula (1):

In essence, RAROC shows how much a bank, taking into account risk, earns per period per ruble of capital consumed.

RAROC appeared in the banking industry as a more advanced alternative to the classic return on equity (ROE) indicator. To calculate RAROC, the accounting indicators used in the calculation of ROE and associated with the level of risk - the cost of reserves for possible losses and equity (capital) - are replaced with economic indicators that more objectively reflect the risks taken: expected losses (EL) and economic capital ( ECap, EC).

Due to this, in comparison with ROE, RAROC allows a more detailed analysis of the bank's activities in terms of the ratio of risk and return, since it can be calculated at low levels of segmentation.

The RAROC calculation uses both accounting and economic indicators. At the same time, it is important to use components of the calculation that are comparable with each other, taken over the same period of time and obtained on the basis of the same array of borrowers or transactions.

Calculation and analysis of the RAROC indicator creates prerequisites for more efficient use of the bank's capital through its redistribution into business units that bring the highest return, taking into account risk.

Firstly, RAROC allows you to influence business development in a balanced and targeted manner. Secondly, RAROC allows for more efficient use of the capital buffer (the difference between sources of capital and capital requirements). Thirdly, both during the period of excess capital and during the crisis period, when there is a shortage of capital, the use of RAROC will help limit/reduce the least efficient areas.

The scores for each criterion and the overall score for the instrument are presented in Table 2.

Table 2 - Evaluation of the RAROC tool

I 1I 2I 3I 4I 5I 6I 7I 8I 9I 1 0I 1 1Total
10 3 2 5 9 0 5 3 3 2 5 4,65

Key risk indicators

Key Risk Indicators (KRIs), as their name implies, are indicators of the key risks to which a bank is exposed. They are part of the information that serves as an indicator of a bank's exposure to a particular type of risk.

Key risk indicator (Key Risk Indicator, KRI) is a quantitative indicator calculated at a given frequency and used to assess the current level of risk, correlate the current level with an acceptable (threshold) value, identify problem areas and prevent possible losses by developing and implementing preventive measures.

There are three main types of CIs:

  1. Single CIs. For example, the number of dissatisfied customers.
  2. Mixed CIs. Contain two or more single IRCs combined using the appropriate algorithm. For example, the ratio of the total number of customers to the number of dissatisfied customers gives the level of customer dissatisfaction.
  3. Quality KIRS. KRIs such as "audit rating" are an assessment of the level of risk: "high", "medium" or "low".

There are also indicators focused not on losses, but on business processes. For example, increased employee turnover in a bank is difficult to attribute to any specific loss because it reflects a process. Such indicators help to assess the quality of operations for all types of risk. They tend to be historical as well, in that they inform us of what has already happened and do not indicate where we should focus our efforts in the future.

Environmental indicators are predictive, such as the number of complaints from customers, staff satisfaction with their work, the number of trainings conducted for department employees.

In real life, there are thousands of different KRIs corresponding to the main processes, lines of business, losses and events occurring in the bank, so the evaluation process must be carried out based on historical data and using statistical techniques that identify relationships between data. Thus, as a result of a successful analysis of IRRs, the most important indicators remain, which are key for this type of risk.

In practice, the effective use of indicators involves the simultaneous use of both historical and leading indicators. The more specific they are and the more accurately they reflect the profile of the relevant risk, the more important it is to work with indicators. The so-called "sensitivity" of the indicator reflects the effectiveness of its work. It is not easy to measure sensitivity, so in practice the optimal risk indicator thresholds are first quantified and then adjusted during the modeling process.

The scores for each criterion and the overall score for the instrument are presented in Table 3.

Table 3 - Evaluation of the KIR tool

I 1I 2I 3I 4I 5I 6I 7I 8I 9I 1 0I 1 1Total
7 6 7 3 3 3 3 6 4 8 5 5,40

stress testing

Stress testing can be an important tool for assessing the impact of extraordinary events on the financial stability of a bank. This tool allows you to analyze the impact on the bank of especially large losses, the probability of which is outside the confidence interval on which the bank calculates its economic capital. Stress is understood as the establishment of very unfavorable values ​​for macroeconomic factors affecting the bank, in particular, values ​​that are more negative than those adopted for the pessimistic scenario of the bank's business plan.

Stress testing can be performed based on historical and hypothetical scenarios. Based on the foregoing, we can give the following definition of stress testing - this is an assessment of risk indicators and parameters of portfolios of assets and liabilities under conditions of unlikely, but possible, pessimistic scenarios, in particular, in order to determine the sufficiency of the bank's sources of capital to cover potential losses. It can be carried out both in the context of individual types of risks, and aggregated.

Stress testing is used in various areas of risk management to solve the following diverse tasks:

  • capital Management,
  • liquidity management,
  • business planning,
  • portfolio management,
  • definition of risk appetite.

Stress testing allows you to assess the impact of pessimistic scenarios on all key performance indicators of the bank: financial result and profitability, capital adequacy, liquidity ratios, loan portfolio quality, etc. .

The scores for each criterion and the overall score for the instrument are presented in Table 4.

Table 4 - Evaluation of the stress testing tool

I 1I 2I 3I 4I 5I 6I 7I 8I 9I 1 0I 1 1Total
3 2 2 4 3 6 0 8 6 3 7 4,25

Self-assessment of risks and controls

Self-assessment of risks and controls is the process of identifying, describing and evaluating potential risks and their associated controls. While the fundamental principles for conducting self-assessment are fairly well developed around the world, however, ideas about the best approach at the micro level can vary widely. The self-assessment process is primarily intended to identify and evaluate potential rather than current risks and incidents.

First of all, the self-assessment process is carried out to identify and document the list of the most significant risks and related controls, increase business awareness of the bank's risks by broadcasting the results of the self-assessment. Thus, the main objectives of self-assessment are:

  • identification of significant risks and deficiencies in control systems, including the development of risk indicators and control indicators for risk monitoring and the development of measures to minimize risk;
  • raising awareness of the level of operational risk and forming a risk profile of the bank, structural divisions;
  • formation of input data for scenario analysis, monitoring of risk indicators and modeling of capital requirements to cover operational risk.

According to generally accepted international standards, self-assessment should be carried out at least once a year.

The first stage of self-assessment is to determine the degree of exposure of the bank to a particular risk. Risk exposure can be determined by one or more of the following methods:

  • interviewing authorized employees of the assessed business;
  • questioning;
  • analysis of the database of operational risk incidents (historical data);
  • analysis of third party reports (external and internal audit, regulator, consultants, etc.);
  • analysis of external data sources, such as the press and reviews of world practices;
  • use of data available on the internal portal of the bank;
  • brainstorming workshops.

One of the most effective is the last method. Representatives of structural divisions, including both management staff and specialists, are involved in the seminars. Participants are asked what they consider to be their risks.

In the process of self-assessment, similar to risk assessment, the effectiveness of control procedures is assessed (a 5-point scale is used with an assessment from zero to high efficiency). Together with the overall assessment of the impact of the risk, the assessment of the effectiveness of control procedures determines the rating of this risk.

The scores for each criterion and the overall score for the instrument are presented in Table 5.

Table 5 - Evaluation of the risk and control self-assessment tool

I 1I 2I 3I 4I 5I 6I 7I 8I 9I 1 0I 1 1Total
3 4 8 7 2 6 2 7 4 10 4 5,05

risk culture

Despite the fact that the concept of risk culture appeared a long time ago, there is no clear and unambiguous definition of this term in banking practice as such. However, already in 2016, in accordance with the Risk Management policy, the Bank of Russia recognized the risk culture as one of the most important elements of the risk management system. So, according to the regulator, the risk culture can be defined as a set of values, beliefs, understandings, knowledge, norms of behavior and practices regarding the risks of the organization and their management, shared and accepted by all employees of the organization. It is worth noting that the risk culture is based on the values ​​and beliefs of a person, which can only be accepted voluntarily. An important difference from other tools is that you cannot force an employee to comply with the requirements of the risk culture.

This definition provides a framework for understanding what risk culture means in an organization, but still this definition is poorly formalized. One of the main problems of all organizations that implement risk culture approaches is the lack of parametric assessment methods that would allow assessing the level of informal principles and beliefs.

For most employees, employees who work in the risk management system, risk managers, appear to be people with specific mathematical knowledge that is not available to the majority. The decisions of risk managers can be incomprehensible, especially to those who perform business functions. Risk culture proposes to overcome these misunderstandings between risk managers and other employees.

In the conditions of a developed risk culture, each employee, firstly, knows what he does and what the risk manager is responsible for; secondly, understands that the decision of the risk manager is also based on the goals of the well-being of the organization; thirdly, it is motivated for the practical application of risk management system solutions.

Risk management, like any other management process, is clearly regulated. Organizational structures, roles, procedures, tools and models should work as a coherent mechanism. But in today's difficult economic conditions, relying on formal mechanisms is not enough to ensure the stability of the bank's risk management system and its adaptability to the constantly changing external and internal environment. Knowledge, values, principles and beliefs in the field of risk management help to reliably close possible gaps and gray areas in regulation.

In banks, risk management is often dominated by either formal procedures or informal principles and beliefs. The most successful banks develop both.

Thus, the development of a risk culture is a very important stage in the development of the entire risk management system.

In practice, the level of risk culture varies from bank to bank. If an organization has a sufficiently strong risk culture, risk management permeates everything: processes, systems, management decisions, models, etc. In banks with a less developed risk culture, risk management is reduced to formal conclusions and recommendations of risk managers, often who do not have a say in business decisions.

Thus, the entire set of risk management tools, no matter how perfect it may be, is only as effective as the culture of risk management in the organization is developed.

One of the reasons for the slow development of risk culture may be the weak support of risk management from the top management of the organization. Understanding the importance of implementing risk management tools, management is not always aware that risk management concerns not only risk managers, but also the rest of the organization's employees.

Another insurmountable barrier to the development of a risk management culture is that people in business often resist attempts to look at their actions from a different angle, to predict alternative scenarios for the development of events. That is why much needs to be done to properly communicate the role of risk managers as partners and as a constructive balance in the process of preparing and making business decisions.

Currently, banks are at different stages of risk culture development.

The period following the global financial crisis of 2008-2009 marked the beginning of the transition of the global banking industry to a balanced risk culture. The concept of an organization's risk appetite has been developed. The widespread introduction of metrics that combine risk and return has significantly reduced the degree of conflict between business functions and risk management functions, uniting them with common goals at all levels of the organizational hierarchy.

But the path of the world's largest banks to a balanced risk culture has proved difficult. Some banks have overcome difficulties, others have ceased to exist due to the lack of risk culture.

The concept of risk culture in a large bank is more focused on the tasks that are set for employees as part of the risk management system. For example, in PJSC Sberbank, a risk culture is defined as a system of employee behavior norms that is well-established in an organization, aimed at identifying risks and managing them. At the same time, a fairly formalized model has been developed, consisting of four areas that describes this tool and allows you to work with it - risk awareness, response, respect for the client, the bank and yourself, and full transparency of all processes.

The scores for each criterion and the overall score for the instrument are presented in Table 6.

Table 6 - Evaluation of the risk culture tool

I 1I 2I 3I 4I 5I 6I 7I 8I 9I 1 0I 1 1Total
1 4 7 3 2 6 2 6 6 4 3 3,8

The final table of the effectiveness of tools (1 ... 10) is presented in table 7.

Table 7 - The final table of the effectiveness of tools

Conclusion

For each instrument, an integral indicator has been derived, which shows how effective this instrument can be and, first of all, used to assess and improve the banking risk management system.

The main conclusion that can be drawn from these calculations is that such a tool as risk culture is the least developed and, therefore, is now in demand on the Russian banking market. Calculations have shown that at the moment formal risk management procedures are strongly dominated, and only superficial attention is paid to informal ones. This is explained by the fact that informal tools are difficult to parameterize and apply any information technology. But for modern banks, which set themselves the task of progressive risk management methods that achieve maximum efficiency, it is necessary to develop both formal management methods and informal ones based on principles and beliefs.

One of the main and promising effects of the development of the banking risk culture is the improvement of the operational risk management system, as it is this type of risk, where the features of human views and values ​​are manifested both from the positive and negative sides, that can be minimized through the development of tools of the same nature of influence.

Bibliographic list

  1. Dyatlov S. A. Global innovative hypercompetition as a factor in the transformation of the world economy // Philosophy of Economics.- 2010.- No. 4.- P. 113-131.
  2. Dyatlov S. A. Inflation targeting and the Goodhart effect / World Science: Problems and Innovations: collection of articles of the VIII international scientific and practical conference. In 2 parts. Part 2. - Penza: MCNS "Science and Education", 2017. - P. 163-167.
  3. Dyatlov S. A., Lobanov O. S. Convergence of information spaces as a factor in reducing digital inequality in the Eurasian Economic Union // Regional Economics and Management: electronic scientific journal. ISSN 1999-2645. - No. 2 (50) . Publication date: 2017-04-11.
  4. Lobanov O. S. CASE-technologies for designing information systems // In the collection: Information technologies in economics, management and education. - St. Petersburg. - 2010. - S. 298-299.
  5. Lobanov O. S. Economic rationale for the use of software solutions that implement the function of budgeting in organizations // In the collection: Application of the results of diploma design of students of St. Petersburg universities in the interests of the socio-economic development of the city. - St. Petersburg. - 2010. - S. 95-99.
  6. Lobanov O. S., Artemyev A. V., Tomsha P. P. Separation of information systems into subclasses as a basis for the rationalization of the information space // International Research Journal = Research Journal of International Studies. - 2014. - No. 6-2 (25). - S. 20-21.
  7. Lobanov O. S., Ryabtsev I. V. Modeling business processes in the Casewise environment // In the collection: Development of the Russian economy: an innovative future. - St. Petersburg. - 2007. - S. 83-84.
  8. Lobanov O. S., Ryabtsev I. V. Strategic management and its support by means of Carewise on the example of BSC // In the collection: Modernization of the Russian economy and society in the context of national-state and global changes. - St. Petersburg. - 2008. - S. 92-97.
  9. International Convergence of Capital Measurement and Capital Standards: Refined Framework Approaches, 2004. Available at: http://www.cbr.ru/today/ms/bn/basel.pdf.
  10. Melnikova E. F., Lobanov O. S., Basha N. V. Prioritization of projects in an engineering company as a tool for making operational management decisions // International Research Journal = Research Journal of International Studies. - 2014. - No. 8-1 (27). - S. 65-66.
  11. Minakov V. F., Lobanov O. S., Artemyev A. V. Clusters of consumers of telecommunication services // International Research Journal = Research Journal of International Studies. - 2014. - No. 6-1 (25). - S. 60-61.
  12. Minakov V. F., Lobanov O. S., Ostroumov A. A. Deployment of cloud infrastructure in the regional information space // Scientific Review. - 2014. - No. 11-1. - S. 103-106.
  13. Sazykin BV Operational risk management in a commercial bank. – M.: Vershina, 2008. – P. 272.
  14. Socio-economic transformation of the economic system of Russia. Collective monograph. St. Petersburg, 1997.
  15. Shchugoreva VA Criteria and the need for the implementation of an automated operational risk management system in a Russian bank. Solution examples // International Research Journal = Research Journal of International Studies. - 2015. - No. 3-3 (34). -FROM. 94-96.
  16. Shchugoreva V. A., Basha N. V., Minakov V. F. A conceptual model of the influence of risk culture on the effectiveness of bank business management // Economics and Management of Management Systems. - 2016. - T. 19. - No. 1.3. - S. 352-358.