Search

A projektek a szervezeti változás kulcsfontosságú mozgatórugói; a kudarcuk vagy a sikereik egyaránt jelentős hatással lehetnek a szervezeti teljesítményre. Kockázatok a projekt teljes életciklusa során jelentkezhetnek. Ezeknek és a projekt-tervezés kezdeti bizonytalanságainak kezelése a projektmenedzsment fontos feladatai. A tanulmány korszerű projekt- és kockázatkezelési szabványok és ajánlások alapján ismerteti a hagyományos projektmenedzsment eszközök és módszerek kockázatelemzésben, -értékelésben és -kezelésben történő alkalmazását. A szerzők vizsgálják a klasszikus projektmenedzsment célkitűzések (átfutási idő – erőforrás - célok) és a kockázatalapú döntéshozatal közötti kapcsolatot is. A különböző méretű és hatókörű projektek kockázatai valamint az azokra adott kockázatkezelési eljárások eltérőek lehetnek. A tanulmány rávilágít az ISO 31000-es kockázatkezelési szabványcsomag lehetséges szerepére a projektek kockázatmenedzsmentjében. A szerzők szakirodalmi feldolgozás alapján elemzik a különböző projektek kockázatmenedzsmentjét beleértve a projekt érintettek kockázatokhoz való viszonyát is. A K+F és agilis projekteknek valamint a projektportfolióknak sajátos és összetett kockázati kitettségük van, de projektmenedzsmentjük több rejtett kockázatelemző és -kezelő funkciót is tud biztosítani.

Sistem Informasi Administrasi Kependudukan (SIAK) is an application used in managing personal data of residents in all cities/districts in Indonesia. Personal data becomes the public attention because if it is not managed properly it will have an impact on one's legal protection and non-compliance with regulations, i.e. Permenkominfo Nomor 20 tahun 2016 about Protection of Personal Data in the Electronic System. Risk analysis and control of personal data protection on SIAK applications are needed so that the personal data management can be carried out properly and comply with regulatory requirements. Data collected for this study are primary data, sourced from direct observations on the application, interview about assets related to SIAK along with possible risks, and also internal organizations documents. Data analysis was performed with a risk analysis using the ISO 31000: 2018 risk management process approach, where the identification of relevant risks refers to the Generic Risk Scenarios COBIT 5 For Risk, and the determination of relevant controls refers to the Department of Defense Instruction 8500.2 and NIST 800-53. This research involves the Head of Department and employees of Disdukcapil XYZ City that are related to the strategic and operational aspects of SIAK. The results of this study are the identification of 23 possible risks that are spread over 5 processes of personal data protection that classified into the medium-high risk level, and proposed risk control consisting of 19 preventive controls, 6 detective controls, and 2 corrective control.

Social projects are an important mean to reduce social problems and they have an increased relevance in contexts of high social inequalities, as it is the case of Brazil. However, the existence of these projects may not be enough, they need to be properly managed, including projects risks. In this context, this paper aims to evaluate the application of risk management in social projects in Brazil. A survey was performed with social project managers and data was analyzed through TOPSIS (Technique for Order of Preference by Similarity to Ideal Solution), to rank the items application levels, according to the ISO 31,000's guidelines. Results provide an overview of Brazilian situation. According to the findings presented, the items related to projects context analysis, and responsibility assignments in the projects were the items better applied, while the items related to the understanding of team members regarding risks in social projects and to the amplitude of risk management in the projects were the items with the worst rank positions. The findings presented here contribute to expand the debates on the subject. [ABSTRACT FROM AUTHOR]

Copyright of Risk, Hazards & Crisis in Public Policy is the property of Wiley-Blackwell and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

Organizational and technical approaches have proven successful in increasing the performance and preventing risks at socio-technical systems at all scales. Nevertheless, damaging events are often unavoidable due to a wide and dynamic threat landscape and enabled by the increasing complexity of modern systems. For overall performance and risk control at the system level, resilience can be a versatile option, in particular for reducing resources needed for system development, maintenance, reuse, or disposal. This paper presents a framework for a resilience assessment and management process that builds on existing risk management practice before, during, and after potential and real events. It leverages tabular and matrix correlation methods similar as standardized in the field of risk analysis to fulfill the step-wise resilience assessment and management for critical functions of complex systems. We present data needs for the method implementation and output generation, in particular regarding the assessment of threats and the effects of counter measures. Also included is a discussion of how the results contribute to the advancement of functional risk control and resilience enhancement at system level as well as related practical implications for its efficient implementation. The approach is applied in the domains telecommunication, gas networks, and indoor localization systems. Results and implications are further discussed. [ABSTRACT FROM AUTHOR]

Purpose: Outsourcing transactions have been arisen and evolved in the last years and purchase managers want to know if a Failure Mode Effects and Analysis (FMEA) is an effective qualitative technique to analyze supply chain risks (SCR) in a proper way. The aim of this study is to address this question developing a practicable risk management process based on the guidelines of the ISO 31000 for upstream Supply Chain Risk Management (SCRM) linking risk assessment, risk identification, risk analysis, risk evaluation, risk treatment and validate the process empirically through a case study. Design/methodology/approach: After a review of the literature on Sustainable Supply Chain Risk Management (SSCRM), a case study based on a leading manufacturer of electrical products, collects evidences of SSCRM implementation. Findings: Supply chain disruptions are one of the most critical issues which can negatively influence on firm's performance. Avoiding and mitigating disruptions in the supply chain is one of the main challenges for supply chain managers. Originality/value: This paper identifies the ISO 31000, the ISO 9001 and the use of an FMEA to analyze supply chain risks in a structured manner and to outline future research opportunities in the field of SCRM. [ABSTRACT FROM AUTHOR]

Copyright of International Journal of Engineering & Management Sciences (2498-700X) / Műszaki és Menedzsment Tudományi Közlemények is the property of University of Debrecen and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

Purpose: The purpose of this paper is to examine risk management practices and their impact on performance. Specifically, the study aimed to examine risk management practices as part of physical asset management and their impact on maintenance management and its performance. Methodology/Approach: The empirical data were obtained from 76 manufacturing companies. Partial Least Squares Path Modeling (PLS-PM) was applied to evaluate the measurement and structural model. Findings: The results emphasized the importance of integrating risk management practices into asset management processes in order to improve performance outcomes. Research Limitation/Implication: This study contributes to a better understanding of how companies could achieve higher performance results by implementing risk management practices. The results of this study can help managers identify key asset risk management practices. Despite the important implications that can be derived from this study, further research that would extend the model to include additional performance measures and/or asset management dimensions would be of great importance. Originality/Value of paper: By analyzing the interrelationships between asset risk management practices and their direct and indirect effects on maintenance performance, the study provides important insights for the development of strategies to promote the novel and important discipline of asset management.

Copyright of Cuadernos de Contabilidad is the property of Pontificia Universidad Javeriana and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

With the purpose of maintaining the success in the quality of educational services, in this work it was designed a methodology to manage risks associated to the self-evaluation processes of the master's programs offered in the Institute of Pharmacy and Food (IFAL) of the University of Havana. It was adopted the thought based on risk promoted by ISO standards, the general stages of the process described in ISO 31000 and the combination of different quality tools. It was given special attention to the planning of the process, the selection and training of the work team, the identification and consensus on the criteria established to classify the identified risks, as well as their weighting for their treatment and control. The proposed methodology can be generalized as it is flexible and applicable to similar contexts. [ABSTRACT FROM AUTHOR]

Purpose: The purpose of this paper is to examine risk management practices and their impact on performance. Specifically, the study aimed to examine risk management practices as part of physical asset management and their impact on maintenance management and its performance. Methodology/Approach: The empirical data were obtained from 76 manufacturing companies. Partial Least Squares Path Modeling (PLS-PM) was applied to evaluate the measurement and structural model. Findings: The results emphasized the importance of integrating risk management practices into asset management processes in order to improve performance outcomes. Research Limitation/Implication: This study contributes to a better understanding of how companies could achieve higher performance results by implementing risk management practices. The results of this study can help managers identify key asset risk management practices. Despite the important implications that can be derived from this study, further research that would extend the model to include additional performance measures and/or asset management dimensions would be of great importance. Originality/Value of paper: By analyzing the interrelationships between asset risk management practices and their direct and indirect effects on maintenance performance, the study provides important insights for the development of strategies to promote the novel and important discipline of asset management. [ABSTRACT FROM AUTHOR]

This article discusses critical infrastructure resilience in terms of how it could be incorporated into the existing safety and security practices, namely the ISO 31000 risk management standard. The article starts by outlining the resilience discourse, focusing on the organizational, technological, and societal domains of resilience. It goes on to present an approach to how the risk management standard can be extended to a critical infrastructure resilience management framework. Focusing in particular on the organizational and technological resilience domains, which are considered those that can most readily be controlled by critical infrastructure operators, the article presents one of the resilience assessment techniques in some detail to operationalize the overall management framework. In so doing, the article proposes a prestandardization input for critical infrastructure resilience management, tested in an operational environment. The article concludes with five maxims for this objective: no duplicate practices; tailorability; plurality of assessment techniques; measurability; and relative ease of use. [ABSTRACT FROM AUTHOR]

The likely near future creation of artificial superintelligence carries significant risks to humanity. These risks are difficult to conceptualise and quantify, but malicious use of existing artificial intelligence by criminals and state actors is already occurring and poses risks to digital security, physical security and integrity of political systems. These risks will increase as artificial intelligence moves closer to superintelligence. While there is little research on risk management tools used in artificial intelligence development, the current global standard for risk management, ISO 31000:2018, is likely used extensively by developers of artificial intelligence technologies. This paper argues that risk management has a common set of vulnerabilities when applied to artificial superintelligence which cannot be resolved within the existing framework and alternative approaches must be developed. Some vulnerabilities are similar to issues posed by malicious threat actors such as professional criminals and terrorists. Like these malicious actors, artificial superintelligence will be capable of rendering mitigation ineffective by working against countermeasures or attacking in ways not anticipated by the risk management process. Criminal threat management recognises this vulnerability and seeks to guide and block the intent of malicious threat actors as an alternative to risk management. An artificial intelligence treachery threat model that acknowledges the failings of risk management and leverages the concepts of criminal threat management and artificial stupidity is proposed. This model identifies emergent malicious behaviour and allows intervention against negative outcomes at the moment of artificial intelligence's greatest vulnerability. [ABSTRACT FROM AUTHOR]

The issue of risk management has gained attention in the field of administration due to the dissemination of international frameworks. In Brazilian federal public administration, risk management is a recent and expanding practice. This research analyzes how international corporate risk management frameworks have been adopted by the federal government through regulations and guidelines. The study adopts the concepts of coercive, normative, and mimetic forces from the neo-institutional theory, and examines the presence of international norms in the Brazilian regulations. Through a qualitative approach, content analysis in documents, norms, interviews, and seminars was used to identify traits of the COSO ERM and ISO 31000/2009 frameworks, which were chosen based on relevance. Results identify important actors pushing for the use of international frameworks, such as international organizations, professional associations, and public agencies, especially those related to government audits. Despite the strong international influence, the Brazilian norms are adapted to the organizations' context and allowing the maintenance of national autonomy. [ABSTRACT FROM AUTHOR]

Copyright of Revista Espacios is the property of Talleres de Impresos Oma and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

In order to improve national energy security and the competitiveness of the refinery industry, PT Pertamina (Persero) implements the Refinery Development Master Plan (RDMP), which is consist of revamping 4 units of existing refineries and building 2 units of new grass root refinery. In this paper we will discuss risk management for the RDMP project based PMBOK and ISO 31000 RDMP. RDMP Project management is divided into two stages, namely project development and project execution, risk management has been implemented since the project initiation until commissioning startup. The process of risk management referring to PMBOK are plan risk management, identify risks, qualitative risk analysis, quantitative risk analysis, plan risk responses, implement risk responses and monitor risks. We determined risk limit for project 5% of investment costs, while the ongoing stage is 5% of the current year's budget, those number represented our risk appetite. Furthermore, the risk identification stage followed by qualitative risk analysis obtained 170 risk events with 21% in the categories of strategy & planning aspect, 4% compliance aspect and the remaining 54% operations / infrastructure aspect. This is in line with the theory that stated at the project development stage having higher risk than at the execution stage, and the top risk category is related to business strategy risk, namely the business scheme (tolling or merchant), getting the right partner, project financing, land acquisition, most of the top risk are risk owned by Project Development Department. The quantitative risk analysis (QRA) stage has two tasks, namely numerical simulation of project economics and numerical simulation of cost & schedule. Once of the overall project risks can be seen from the QRA results, probability of completed project duration P80 for RDMP Balikpapan project is 58 months while P50 is 57 months and P90 is 59 months. To assess the effectiveness of risk management and project management, a maturity assessment has been carried out with results of level 2.65 of scale 5 for project management and 3.3 of scale 5 for project risk management. When implementing project risk management, we use for both PMBOK and also ISO 31000 frame work, this feels very complementary. As an example the need for risk maturity as a review of risk management implementation, mandate & commitment and the existence of a Risk Management Policy, the principles and risk management framework of ISO 31000 are very beneficial. On the other hand, emphasizing positive and negative risks, links with the knowledge areas and other process groups by PMBOK are very helpful in integrating project risk. When conducting risk management Pertamina equipped with web-based Enterprise Risk Management System (ERMS) to facilitate data and communication processes. From the discussion it can be concluded that ISO 31000 and PMBOK complement each other in carrying out project risk management, quantitative risk analysis can describe overall risk of the project, maturity assessment helps measuring the effectiveness of risk management and gap analysis, risk management information system is very necessary in carrying out risk management. [ABSTRACT FROM AUTHOR]

The purpose of this paper is to determine how a Risk Management Model could be applied in Intellectual Property Management (IPR) or Patent Management. Implementing the Risk Management in IPR Management is the challenge that we intend to research in this paper. In this order, authors are using ISO 31000:2018 Risk Management Model, having in mind that it is easier to integrat it in organizations that have already implemented other ISO managament systems (quality, environment, energy, anti-bribery). Firstly the paper presents the necessity of using a Risk Management process in Merging & Acquisitions departments when Intellectual Property Rights are important in transations. Then there are presented Risk Management Model according ISO 31000, with emphasis on integrating Risk Management into a strategic and operational management system, Risk Management process stages: risk assessment, treatment and recording and reporting and examples of Risk Management Model implementation. In the future research it will be important to prepare the structure of the IPR Management so that the introduction of the Risk Management to be consistent with ISO 31000. [ABSTRACT FROM AUTHOR]

Copyright of 3C Empresa is the property of Area de Innovacion y Desarrollo, SL and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

The future of business development relies on the effective management of risks, opportunities, and energy and water resources. Here, we evaluate the application of best practices to identify, analyze, address, monitor, and control risks and opportunities (R/O) according to ISO 31000 and 50000. Furthermore, we shed light on tools, templates, ISO guides, and international documents that contribute to classifying, identifying, formulating control, and managing R/O parameterization in a comprehensive management system model, namely CMS QHSE3+, which consists of quality (Q), health and safety (HS), environmental management (E), energy efficiency (E2), and other risk components (+) that include comprehensive biosecurity and biosafety. By focusing on the deployment of R/O-based thinking (ROBT) at strategic and operational levels, we show vulnerability reduction in CMS QHSE3+ by managing energy, efficiency, and sustainability.

This paper seeks to explain how companies can apply risk management from an operational approach and the necessary guidelines to carry out an efficient management of it (Bromiley et al., 2015). Therefore, we first work out the risk in operations and explain the types of events, the factors that cause it, and details measurement tools such as severity. Then, the theory about management standards related to risk management, such as iso 37001, iso 31000 and COSO, in their latest versions, is reviewed. The research paper proposes an application in the area of risks, through a proposal of a general risk scheme and a structure of risk management for organizations. Finally, new aspects are developed to consider the case of cybernetic risk.

The standards are crucial part of any activity on nowadays life. The necessity of education about standardization is already recognized at European level. As the culture sector evolves and changes, so do the skills required of individuals active in the sector. These changes can only be met by relevant and demand sensitive vocational and continuous vocational education and training (VET and C-VET). Application of the standards for information security and risk management systems in the digitization of cultural and scientific heritage and its preservation and relevant presentation is an issue of key importance. The current paper presents the main outcomes and results achieved so far in the framework of the Erasmus+ Project “International Standards training in VET for promotion of market relevant education” – ISTRA No 2016-1-BG01-KA202-023738 aiming at the development and piloting of innovative training approaches and contents for VET and C-VET training on two widely applicable series of standards - ISO/IEC 27000 and ISO 31000.

Copyright of El-Bahith is the property of University of Kasdi Merbah Ouargla and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

Using referential ISO standards of management systems, the author makes a succinct and schematic commentary on the issue of risk management as a challenge or good practice. The article is illustrated with a flow chart for the application of risk and opportunity-based thinking and a scheme that includes the stages of risk-based and opportunity-based thinking. In conclusion, a risk-management plan is presented that solves the implementation stages of risk-based thinking, such as: establishing treatment actions, planning for the integration and implementation of actions, implementing actions and assessing their effectiveness. [ABSTRACT FROM AUTHOR]

ISO 31000 has become essential for the practical implication of risk engineering to industry in Indonesia. The National Standardization Body has decided to make ISO 31000 the National standard for the principle and guidance of risk engineering in industry. Meanwhile, the reference for implementating ISO 31000 is very limited, especially in the footwear industry which has significant volume in Indonesian industry. This article gives a description of the implementation and impact of ISO 31000 with respect to a company's risk engineering strategy on the production floor in the footwear industry. The implementation of risk engineering begins with establishing a context to determine any analysis consideration. The next step is the execution of the risk engineering process, which consists of four major steps: risk identification, risk analysis, risk evaluation and risk treatment. Some techniques used in the risk engineering process are semi-structured interview, root cause analysis, consequence/probability matrix, and cost benefit analysis. Fourty five risks are identified from the company studied. From the risk evaluation, 14 risks are identified as risks that require special treatments. Those risks shall become the priority of management. The process of risk engineering discovered risk in safety. Therefore, safety engineering was implemented to improve the system. [ABSTRACT FROM AUTHOR]

Copyright of Revista Producao Online is the property of Associacao Brasileira de Engenharia de Producao and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

The purposes of this study were to analyze problem maps in drilling activity, iden­tifying and mapping drilling risks, and analyze risk management strategy which should be prepared for drilling activity. The re­search was conducted at the TJG-HZ1 wells, Asset 5 Region PT Pertamina EP, South Kalimantan. The tools used measurement and map­ping risks according to Godfrey (1996). Data collection con­sisted of five stages: obser­vation, interview, questionnaire, literature review, and focus group discussion. The results showed there are 24 identified risks which were divided into four risk categories which is financial, strategic, operational, and hazard. From the 24 risks, there were eight risks in the extreme level, five risks in the high level, five risks in the medium level, and six risks in the low le­vel.

Industri penerbangan LCC (Low Cost Carrier) merupakan salah satu industri yang diminati di Indonesia. Walaupun demikian, setiap perusahaan yang bergerak di industri penerbangan khususnya LCC (salah satunya PT XYZ) perlu untuk menerapkan suatu sistematisasi formulasi manajemen risiko, salah satunya berbasis ISO 31000. Penelitian ini dilaksanakan sesuai dengan basis yang tertera pada Manajemen Risiko Korporat Terintegrasi menurut ISO 31000. Hasil dari penelitian ini ditemukan 52 kejadian risiko dengan 11 divisi pada perusahaan yang terpapar risiko-risiko terkait. Selain itu, penelitian ini pun menghasilkan pemetaan risiko-risiko pada perusahaan. Risiko-risiko krusial pada perusahaan meliputi risiko fluktuasi nilai tukar rupiah dan USD serta risiko fluktuasi harga avtur. The aviation industry LCC (Low Cost Carrier) is one of the industries that highly demanded in Indonesia. However, every company engaged in the aviation industry in particular LCC (one of which is PT Citilink Indonesia) need to implement a systematizing formulation of risk management, one of them based on ISO 31000. This research was conducted by reference Integrated Enterprise Risk Management according to ISO 31000. The results of this study found 52 occurrences of risk with 11 divisions in company that are exposed to risks associated. In addition, this study also resulted in risk mapping of the company risks. The main risks of company are financial risks, such as the risk of fluctuation in eschange rate of IDR and USD also the risk of fuel price fluctuation.

Terbatasnya sumber dana formal yang mampu mengatasi kebutuhan kredit masyarakat lapisan bawah yang berpenghasilan rendah merupakan alasan pendorong berkembangnya perusahaan pembiayaan konsumen. Melalui sistem pembiayaan konsumen, masyarakat lapisan bawah berpenghasilan rendah dapat memenuhi kebutuhan hidup layak yang sesuai dengan tingkat kemampuannya. Sepeda motor adalah salah satu kontribusi pertumbuhan perusahaan pembiayaan konsumen tersebut. Kemudahan dalam memperoleh pembiayaan untuk pembelian sepeda motor secara kredit menjadi salah satu penyebab peningkatan penjualan sepeda motor di Indonesia yang dapat menimbulkan potensi risiko bagi perusahaan pembiayaan, tidak terkecuali dengan PT XYZ. Dalam kurun waktu 2010 sampai tahun 2011 PT XYZ mengalami penurunan kualitas kesehatan khususnya dari sisi pembiayaan dimana terjadi peningkatan Non Performing Loan (NPL) dari tahun ke tahun. Tujuan dari penelitian ini adalah untuk mengidentifikasi, menganalisa, merumuskan dan menyusun rencana implementasi peningkatan efektivitas manajemen risiko operasional di divisi kredit PT XYZ. Dalam penelitian ini pendekatan yang dilakukan dengan pendekatan kualitatif dan mengacu pada ISO 31000 tahun 2009. Berdasarkan hasil analisa manajemen risiko operasional divisi kredit PT XYZ yang teridentifikasi dari penelitian ini memiliki 8 risiko, yang paling tinggi dari dampak dan kemungkinan yang terjadi ada 2 risiko, yaitu : turnover Direksi dan key employee dalam Divisi Kredit serta keterlambatan dalam penarikan data yang diperlukan untuk laporan reguler setiap bulan.

The work is devoted to the analysis of accessibility, usefulness and the possibilities of introducing a number of risk management methods into medical institutions on the basis of the choice of heads medical institutions, after getting to know them with the main methods, proposed by the ISO 31000: 2009 standard. The conducted research has shown advantages of methods of "brainstorming" and the analysis of cause-effect relations by heads of medical institutions.

Las Instituciones Prestadoras de Servicios de Salud (IPS) en Colombia están reglamentadas por el Sistema Obligatorio de Garantía de la Calidad (SOGC). El componente de Acreditación en Salud de este sistema contempla que se adelanten acciones para gestionar los riesgos asistenciales de las IPS, pero también que se integre el manejo de los riesgos derivados de los procesos administrativos; para gestionar estos últimos, las empresas del sector público deben cumplir con lo establecido por el Modelo Estándar de Control Interno (MECI) y la Norma Técnica de Calidad de la Gestión Pública (NTCGP 1000), con el fin que las Instituciones mejoren continuamente su desempeño y realicen un control razonable de su gestión. Esta investigación propone una herramienta de gestión o matriz de control, que a través del enfoque de un sistema de gestión del riesgo, contribuye a: identificar y valorar los riesgos (positivos y negativos), establecer un plan de acción por áreas de la organización, controlar el seguimiento y evaluación de las acciones encaminadas a cumplir altos estándares de calidad, lo cual propicia la optimización de recursos en la IPS, identifica riesgos antes invisibles y facilita la implementación de los diferentes estándares. La recolección de la información para poner a prueba la hipótesis de investigación se realizó mediante encuestas, análisis de documentación y revisión de referencias bibliográficas relacionadas con el sistema obligatorio de garantía de la calidad en salud y la gestión del riesgo según se establece en la norma técnica ISO 31000:2009.

La seguridad del paciente ha cobrado gran importancia durante los últimos años, en razón a que los daños causados durante la prestación de servicios asistenciales impactan la calidad de vida de las personas y generan sobrecostos en los sistemas de salud. Estos daños pueden ser prevenidos dependiendo de la importancia que las instituciones y sus profesionales den a la gestión del riesgo. El reporte de los eventos adversos en áreas ambulatorias como la odontología debe cobrar mayor importancia, ya que el gran número de pacientes y la extensa duración de los tratamientos exponen a los pacientes a la materialización de un riesgo, representado en un evento adverso. El presente estudio determina los eventos adversos en ortodoncia desde la perspectiva de la norma técnica ISO 31000 (ICONTEC, 2011) y proporciona un listado que facilita su identificación y sirve para estimular el reporte y promover la gestión del riesgo durante el ratamiento de ortodoncia. Se utilizó la técnica de grupos focales, con 4 grupos de expertos. La información fue codificada cualitativamente, con saturación de categorías y reducción de ítems. La clasificación de los riesgos se realizó según la International Classification for Patient Safety 1.0 de la Alianza mundial para la seguridad del paciente de la OMS, adaptada a Colombia. Se evidenció el desconocimiento de los conceptos de riesgo y evento adverso entre los profesionales de ortodoncia, así como de un sistema de gestión. Se consolidó un listado preliminar de 154 eventos adversos que se clasificaron en 24 categorías.