|
Article 19
|
(Risk identification)
Each operating unit shall perform risk identification in respect of the short-, mid-, and long-term objectives and business functions of the unit to which it belongs, in accordance with the strategic objectives of the company and the risk management policy and procedures approved by the board of directors.
For the performance of risk identification, it is advisable that practicable analytical tools and methodssuch as process analysis, scenario analysis, questionnaire survey, PESTLE analysis etc.be employed, and that to perform based on previous experience and information and taking into account internal and external risk factors and stakeholders' primary concerns, to conduct analyses and discussions in a "bottom-up" and "top-down" approach, and integrate strategic risksand operational risk, in order to identify all potential risk events which may prevent the accomplishment of company objectives, occasion losses to the company, or cause a negative impact on the company.
|