Identifying Risk | AccountingWEB

Identifying Risk

My last two posts have dealt with understanding risk and the application of the ERM Framework developed by COSO. Today we’re going to discuss a variety of risks and the process of identifying them. When teaching these concepts to my students I always mention that they can be applied to everyday life and not just business. Managing risk impacts everything we do.

Risk can occur from both internal and external events so the process of event identification is important. Let’s first deal with internal events. Internal events are those that occur within the entity. These include events related to infrastructure, personnel, process, and technology.

Infrastructure issues can include items such as overtime, maintenance, or equipment downtime. Personnel matters could include workplace incidents, fraud, labor agreements, or significant turnover or work stoppages. Events associated with process modification without appropriate change management practices can result in process errors, delivery disruptions, customer dissatisfaction, and the loss of business. Technology related events can include issues dealing with security, systems downtime, and fraudulent transactions.

External events can be associated with a number of different areas. These influencing factors can range from economic, natural environment, political, social, and technological. Economic considerations might include the availability of capital, competition, or introduction of substitute products and services. Natural environment factors can be varied from flood, fire, earthquake, or other factors that could impact and impede the ability to conduct business.

Political events, especially with a global economy, can result in creating opportunities in addition to creating potentially adverse business risks. Social trends also produce a variety of opportunities and threats. Technology produces an entire host of issues ranging from electronic commerce, changes to infrastructure, and increased demand for technology related products.

Once you have identified the range of risk related events you are then in position to develop an analysis of the cost versus the benefits of alternative risk responses. It is pretty easy to deal with the cost side of the equation associated with direct costs. The difficult part is developing a way to measure the indirect costs. Activity Based Costing is an option that should be considered. In addition to just looking at the negative side of risk it is essential to carefully consider the opportunity costs and resources available to take advantage of new possibilities.

How do we track and identify events that have the possibility of risk? Some organizations utilize loss event tracking techniques. These start with a focus on common historical events using internal staff perceptions. More advance techniques will utilize factual sources of observable events and feed data into projection models. Some other techniques include facilitated workshops and interviews together with process flow analysis. Data monitoring techniques will gather data to track leading event indicators to identify possible conditions that could give rise to a potential event. Loss event data methodologies using past individual loss events represent another technique. There are a variety of event identification tools that are in use.

Some examples of event categories really help to provide clarity to the process of identifying risks. The following list is only a sample:
a) Access to capital
b) Supplier effectiveness
c) Process efficiency
d) Process effectiveness
e) Litigation
f) Asset management
g) Inability to meet customer demand
h) Intellectual property
i) Leadership – getting the right people on the bus and in the right seats
j) Governance
k) Systems and IT
l) Concentration of either customers, products, geographies
m) Competition
n) Interdependencies between business units
o) Economic
p) Safety
q) Government regulations
r) Employee capabilities including the loss of key skills
s) Confidentiality of data

This provides some overview on the issues of managing risk. In my opinion more organizations should be integrating the ERM Framework into their operating functions. It should become a normal way of doing business and making decisions. We are seeing evidence where boards of directors are placing increased emphasis and focus on risk management. It is an uncertain environment in which we live and operate so risk management should be one of highest priorities. We can choose to either manage risk or let risk manage us. I like the first option.

This blog

Lynn Northrup, CPA, CPIM - Lynn's focus is on building business value for both family-owned businesses and other CPAs. I also specialize in lean accounting, process improvement, internal control, and assessment of audit risk. Other accomplishments include publishing two books, development of self study programs for Bisk Education, and an Adjunct Professorship at Villanova University. My wife Jessica and I live in southwestern Colorado and we look forward to contributing to the AccountingWEB community.

More from this blog

Bloggers crew

Steve Knowles has spent 25 years in business and practice in the UK, but he also worked in the states and the years haven't dulled his way of seeing an alternative view to everyone else, and every day is a new adventure.


Joel M. Ungar, CPA is a lifelong resident of the Detroit area and a graduate of The University of Michigan. He is a principal with Silberstein Ungar, PLLC, a Top 15 auditor of SEC public reporting companies.


Allan Boress, CPA, with over 25 years as a practitioner and consultant to the accounting profession. Mr. Boress is the author of 12 published books in 6 different languages, including a best-seller, The "I-Hate-Selling" Book.


Larry Perry, CPA, CPA Firm Support Services, LLC, is the author of accounting and auditing manuals, author and presenter of live staff training seminars, and author of webcast and self-study CPE programs. He blogs about small audits, reviews, and compilations.

Sandra Wiley, COO and Shareholder, is ranked by Accounting Today as one of the 100 Most Influential People in Accounting as a result of her prominent role as an industry expert on HR and training as well as influence as a management and planning consultant. She is also a founding member of The CPA Consultant's Alliance. Sandra is a certified Kolbe™ trainer who advises firms on building balanced teams, managing employee conflict and hiring staff.

Maria Calabrese, CIR, Human Resources manager for Fazio, Mannuzza, Roche, Tankel, LaPilusa, LLC in Cranford, New Jersey, Maria's topics revolve around the world of: Mentoring, Performance management, and The "Y Generation," a.k.a. "The whY generation".


William Brighenti is a CPA, Certified QuickBooks ProAdvisor, and Certified [Business] Valuation Analyst, operating an accounting, tax, and QuickBooks consulting firm in Hartford, Connecticut, Accountants CPA Hartford.


Ken Garen, CPA, is the co-founder and President of Universal Business Computing Company (, a software development firm of high-volume, high-productivity accounting and payroll technology.


Eva Rosenberg, MBA, EA, is the publisher of, and author of the weekly syndicated Ask TaxMama column. She provides answers to tax questions from taxpayers and tax professionals worldwide.


Amy Vetter, CPA, CITP is the CPA Programs Leader for Intacct Corporation responsible for leading the CPA/BPO Partners nationally.

Brian Strahle is the owner of LEVERAGE SALT, LLC where he provides state and local tax technical services to accounting firms, law firms and tax research organizations across the United States. He also writes a weekly column in Tax Analysts State tax Notes entitled, "The SALT Effect." For more info, visit his website:
Scott H. Cytron, ABC, is president of Cytron and Company, known for helping companies and organizations improve their bottom line through a hybrid of strategic public relations, communications, marketing programs and top-notch client service. An accredited consultant, Scott works with companies, organizations and individuals in professional services (accounting, finance, medical, legal, engineering), high-tech and B2B/B2C product/service sales.

Rita Keller is a nationally known CPA firm management consultant, speaker, author, mentor and blogger. She has over 30 years hands-on experience in CPA firm management, marketing, technology and administrative operations.

Stacy Kildal is the mom of two fantastic kids, an Advanced Certified QuickBooks ProAdvisor, Certified Enterprise Solutions ProAdvisor, Sleeter Group Certified Consultant, a nationally recognized member of the Intuit Trainer and Writer Network, and co-host of RadioFree QuickBooks.
Michael Alter's blog specializes in providing practical advice to those who seek greater profitability and practice management tactics that enhance deeper client relationships.

Sally Glick, CMO, Principal, Marketer of the Year in 2003 and AAM Hall of Famer in 2007, leads a lively discussion of the constantly expanding roles of marketing and the professional marketers that drive this initiative in accounting firms of all sizes.


The IMA Young Professionals Blog features the insights of IMA’s Young Professionals Committee. Committee members share advice and experiences on careers, continuing education, work/life balance, and other issues affecting young accounting and finance professionals.


FEI Financial Reporting Blog provides highlights from SEC, PCAOB, FASB, IASB, and other regulatory news, including reporting under Sarbanes-Oxley Sect 404. It is written by Edith Orenstein, Director of Technical Policy Analysis at FEI.


Sue Anderson has 30 years of experience in continuing education for accountants. Currently she is the program director for online CPE provider CPE Link.


Jim Fahey is COO of Apple Growth Partners, a regional CPA firm in Ohio. His focus is on the effective and efficient use of technology within the firm by all team members.

Caleb Newquist is the Editor-in-Chief of Sift Media US, overseeing content for both AccountingWEB and Going Concern.

Leita Hart-Fanta, CPA, CGFM, and CGAP is the author of "The Yellow Book Interpreted" and owner of a website devoted to training for governmental auditors.


AccountingWEB is more than just a U.S. team of journalists and financial and technology experts - we have an international side, too! Members of our British team who publish share their ideas, insights, and perspectives from across the pond.