RISK UNIVERSE – Company B
Strategic Operational
S1. Governance
•Board structure & performance
•Tone at the top
•IT governance
•Control environment
•Corporate social responsibility
S2. Planning allocation
•Organization structure
•Strategic planning
•Annual budgeting
•Forecasting
•Technology enablement
S3. Key relationship management •Master planning and forecasting
•Station operators
•Strategic Suppliers
•Government Relations
•Aircraft manufacturers
•JVs/special purpose entities
•Inter-company contracts
•Pilots Union
•AMC
S4. Major initiatives
•Vision and direction
•Process improvement
•Planning and execution
•Measurement and monitoring
•Technology implementation
•Business acceptance
•Merger, acquisition and divesture •Natural events
•Valuation and pricing
•Targeting and due diligence
•Execution and integration
S5. Market dynamics
•Competition
•Macro-economic factors
•Lifestyle/business trends
•Socio-political
S6. Brand and communication
•Brand(s) policy
•Customer relations
•Government relations
•Crisis communication
•Corporate reputation & image
ADR1953511SYN © 2011 The Corporate Executive Board Company. All Rights Reserved.
Compliance Financial Information Technology
C1. Standards of business
O1. Sales and marketing conduct F1. Market T1. IT Governance T8. Support
•Marketing •Ethics •Interest rates •IT & business alignment •Problem management
•Capacity planning •Company policy •Foreign currency •Mission •Vendor/third party
•Advertising and promotion •Fraud •Fuel •Policy •End-User computing
•Service and product developmen •Financial instruments •Software licensing
•Sales, pricing & revenue mgmt C2. Legal T2. IT Strategy & Planning
•Customer satisfaction •Contracts F2. Liquidity management •Planning T9. Disaster recovery
•Customer solvency •Security •Cash management •IT organization •Business impact analysis
•Charter price point development •Data management •Funding and investment •Asset Management •Disaster recovery planning
•Pipeline management •SLAs •Hedging •Crisis management & testing
•ACMI lease renew/early cancel •Credit and collection T3. Architecture •Maintenance & updates
•Other customer services •Liability •Insurance •Technology planning
•Intellectual property •Access to capital •Architecture design T10. Infrastructure
O2. Purchasing and supply •Document retention •Vendor/Product selection •Operating systems
•Anti-corruption F3. Accounting and reporting •Standards •Databases
•Procurement strategy •Financial reporting •Networks
•Vendor selection C3. Regulatory •Data integrity – books & records T4. Project Management (PM) •Hardware
•Expenditure approval •Trade •Billing &/or collection •PM life cycle •Locations
•Cost control/reduction •Customs •Payroll •SDLC •Tools (email, messaging)
•Contracting •Labor •Disclosure
•Environment •Internal control requirements T5. Enterprise Security
O3. People/human resources •Data protection and privacy •Shared services •Security configuration
•Culture/change management •Company/employee compliance •Spreadsheets •Identity & access management
•Recruiting and retention •Health and safety •Threat & vulnerability
•Development and performance •Competitive practices/anti-trust F4. Tax •Security strategy
•Succession planning/key person •Tax •Tax strategy and planning
•Compensation and benefits •Sales and marketing •Value added taxes T6. Application & Databases
•Labor relations •Reporting •Income tax provision •Change management
•Contractors •Sales and marketing •Income tax return •Patch management
•QA/QC •Transfer pricing •Data quality
O4. Hazards •Tax reserves •Interface validation & integrity
•Resources/expertise
•Labor strike T7. Operations
•Political unrest F5. Capital structure •Data processing
•Terror & malicious acts •Debt •Application/databasse
•Business continuity planning •Equity •Facilities management
•Pension funds •Date retention/backup
O5. Physical assets •Stock options
•Real estate
•Property & equipment inventory
1