Enterprise Risk Management (1) - 風險的定義與概念

稍微google一下"風險管理"這個詞
可以發現各行各業的人都可來談風險管理，各自表述

風險其實是個很抽象的概念，我發現把很多談論風險評估的專家，往往僅止於背誦風險=嚴重度*發生機率 外加使用嚴重度*發生機率的風險矩陣

以下我想嚐試藉由一系列專題文章，看看能否讓風險的另外的樣貌與更深一層的意涵被大家發覺...

對此一議題沒有興趣的有緣人士請在此留步。
風險的定義

維基百科的解釋


Risk：
http://en.wikipedia.org/wiki/Risk
Risk is a concept that denotes the precise probability of specific eventualities. Technically, the notion of risk is independent from the notion of value and, as such, eventualities may have both beneficial and adverse consequences. However, in general usage the convention is to focus only on potential negative impact to some characteristic of value that may arise from a future event.

RISK can be defined as “the threat or probability that an action or event, will adversely or beneficially affect an organisation's ability to achieve its objectives”[1]. In simple terms risk is ‘ Uncertainty of Outcome ’, either from pursuing a future positive opportunity, or an existing negative threat in trying to achieve a current objective.

備註：
這裡風險定義的概念上，比較接近所謂的危機(危險+機會)，意味著：
1.高風險高報酬/天下沒有白吃的午餐
2.因為承擔不確定性與可能的負面後果(undesirable outputs)，所以可以享有一定的報酬
3.如果一件事情只有負面後果，而沒有正面的產出與利益，那麼一定沒有(理性的)人會做這件事

網路英英字典
Risk：
http://wordnetweb.princeton.edu/perl/webwn?s=risk
S: (n) hazard, jeopardy, peril, risk, endangerment (a source of danger; a possibility of incurring loss or misfortune) "drinking alcohol is a health hazard"
S: (n) risk, peril, danger (a venture undertaken without regard to possible loss or injury) "he saw the rewards but not the risks of crime"; "there was a danger he would do the wrong thing"
S: (n) risk, risk of infection (the probability of becoming infected given that exposure to an infectious agent has occurred)
S: (n) risk, risk of exposure (the probability of being exposed to an infectious agent)
S: (v) risk, put on the line, lay on the line (expose to a chance of loss or damage) "We risked losing a lot of money in this venture"; "Why risk your life?"; "She laid her job on the line when she told the boss that he was wrong"
S: (v) gamble, chance, risk, hazard, take chances, adventure, run a risk, take a chance (take a risk in the hope of a favorable outcome) "When you buy these stocks you are gambling"

OHSAS 18001條文的名詞解釋：

「危害」係指一個潛在傷害(包括人員受傷或疾病、財產損失、工作場所環境損害、或上列各項之組合)的來源或狀況；
「風險」係一個特定危害事件發生之可能性及後果的組合。可能性即指特定危害事件發生的機率，而後果則代表其影響的嚴重性。
BS-2599-1:2006的定義
Risk為「something that might happen and its effect（s） on the achievement of objectives」

只要是（可能發生的）事件，而此一事件可能會影響組織目標的達成，都是”風險”。

小結：所以如果跳脫出環安的角度，從以上較為廣泛的定義來思考所謂風險與何謂風險，不難發現環安領域講的往往只看或只能談負面產出的那一半，而忽略了：這些( 環境衝擊與安全衛生)風險，其實只是基於公司想要生產特定產品與獲取某些經濟利益的大前提下而產生。

風險管理的策略不單單只有(保險)轉嫁、工程改善降低嚴重度、行政管理降低發生機率乃至於忽略與承擔。就公司與產品的角度，其實可以"選擇"=>選擇相對利益大/負面產出小的產品(只不過這點是屬於老闆的決策權責範疇，不是一個環安幕僚職責範圍內所能插嘴抽手乃至於有所影響)

不要只把風險當成一件完全負面的事，用盡吃奶的力氣與各種手段，想把風險降到最低欲除之而後快；而是否能換個角度思考：如果能讓公司承擔最大的風險，相對的公司所獲得的利益也才是最大？

以上是第一個必須思考的觀念問題。