|
They are not the same, but are very similar. Both types of risk
management address operational risks and information security, but true
enterprise risk management includes larger issues such as credit and
other financial risks that fall outside the realm of e-business risk
management. E-business risk management assumes that these strict
financial risks are properly managed through controls elsewhere in the
organization.
On the other hand, the events of September 11th showed us that there are
significant exposures that fall within the e-business operations risk
that will directly affect credit and capital risk. In fact, in December
2001 the Basel Committee on Banking Supervision announced a significant
modification in how they will identify operational risk management
deficiencies that have a direct negative impact on a bank?s capital
requirements. In the New Basel Capital Accord, banks all over the world
will be advised to meet higher capital reserve requirements if they don?
t employ basic e-business risk management controls such as disaster
recovery, intrusion detection, cryptography, etc.
New Basel Capital Accord reference
|