Introduction

Having not only identified and analysed risks but also compared the risks faced with the stated risk appetite, the next stage is to respond to those risks. The responses to risk are generally placed into one of four categories:

1. • reduce;

2. • remove;

3. • transfer; or

4. • accept.

There is little point in trying to fit every potential risk response into one of these categories, since there is often ambiguity about where a particular treatment belongs. The main purpose of detailing these four groups is to ensure that all potential responses are considered in relation to a risk as it arises.

Risk Reduction

Risk reduction involves taking active steps to limit the impact of a risk occurring. This group of risks includes approaches such as diversification. Diversification involves combining a risk with other uncorrelated risks, or at least with one or more risks whose correlation with the original risk is less than one. At the extreme, it can involve taking on risks which have a high negative correlation with the original risk faced, in which case it becomes hedging rather than just risk reduction. Whilst this approach is most obviously connected to investments, it can also relate to the choice of projects on which a firm embarks. Risk reduction can also involve the creation of more robust systems and processes, in order to reduce the chance of a risk emerging, or to limit the impact of a risk if it does emerge.

Risk Removal

Removing a risk means ensuring that an institution is no longer exposed to that risk at all. To achieve this, a firm can choose to avoid a project or an investment altogether, or can decide to achieve its aims differently. For example, a firm concerned about counter-party risk from over-the-counter OTC swaps could instead use exchange traded derivatives.

Risk Transfer

Risk transfer is a key response to risk. It involves, as the name suggests, transferring the consequences of a risk event to another party. Two important categories are non-capital market and capital market risk transfer.