Compliance

Identifying Risks

Are you evaluating all the risks to make the best decisions?

The past two years have been rough. There is no question about that. The challenges we have faced have come in a variety of forms. For my family, many of those challenges came in the form of making choices for my 10-year-old daughter. She has a slew of health issues that causes her to be considered “high risk”. As a result, trying to decide if we should send her to school, make her wear a mask to Walmart, or allow her to spend the night at a friend’s house took a lot of time and energy. All that to say – so far, she has avoided getting sick. We may never be completely out of the woods, but we will continue to evaluate each risk and try to make the best decision for her! We have so much to be thankful for.

I use this as an illustration because I could not think of a better example of risk analysis. It is something we do daily in life and in the business world, sometimes intentionally and other times without much thought. Either way, we must analyze risk consistently and meaningfully to ensure we are making appropriate business decisions. Risk – like it or not – plays a huge role in the Tribal Casino industry. Understanding types of risk and how to mitigate those risks goes a long way in ensuring operational success.

Understanding Inherent Risks

Inherent risk – as its name suggests – are the elements of business that you have little or no control over.

The location of your casino, number of tables games in the operation, or even the weather are examples of things that could impact inherent risks. The first step to mitigating inherent risk is simply recognizing it. Because these components of business are often “part of life” we are not quick to view them as risks. As a result, we learn to deal with it and potentially handicap business success in the process. To be clear, it may be determined that having tables on your gaming floor creates risk for a different method of committing fraud or there is a risk your slot revenue will decrease.  We call these inherent risks because they are natural consequences of having tables on your gaming floor. Obviously, you can remove the table games and you remove the risk; however, if you have tables, you inherently have new risks to deal with.

This does not mean everyone should get rid of table games – everything you do has some inherent risks! Risk analysis is the process of understanding those risks to find new ways of mitigating the potential negative impacts. Once we’ve come to terms with the inherent risks and recognize their potential impact, step two is to implement regular and routine checks to ensure the benefits of these decisions outweigh costs. In other words, is a risk so high that it is not worth having table games on your floor? There is no magical formula for this. It takes discernment, experience, and good data to know measure the risks and the associated costs (including money, resources, time, and compliance, to name a few).

Understanding Control Risks

Good news!

We are not as helpless when it comes to control risk. Essentially, control risks are the risks in your operation that are there because you don’t have effective internal controls in place. For auditors, this is specifically the risk of mistakes on your financial report due to lack of internal controls. For the sake of this article, let’s apply that logic globally. When effective internal controls are not in place, your risk potential increases exponentially. Not just for misstatements on financial statements, but also for fraud, inefficiency, and general non-compliance.

Minimizing control risk is not difficult – it is as simple as creating and implementing effective internal controls for the operation. This may come through updating policies and procedures. It may mean a new form or log is implemented. In 2022, it often comes through technological resources that can be utilized. Can you automate some tasks to eliminate the potential for human error? Determining which internal controls to implement really comes down to understanding the cost benefit vs. cost risk. In other words, it may be worth spending a little extra to mitigate the risk of losing a lot more.

Summary

Risk is inevitable. We will never be able to eliminate it completely. Instead, we need to embrace it and do our best to understand it, then make business decisions that minimize that risk. One of the simplest ways of getting started is a risk assessment. Having an independent third party come in and evaluate risk is a great way to get started on mitigating the risks at your property.

Don’t get tangled up in a mess of risks, let me help.  

Doug Parker
Business Consultant, Finley & Cook
dparker@finley-cook.com

Click here to catch the interview by Chris Faria as she welcomes back industry compliance expert Doug Parker of Finley & Cook to discuss types of risk and how risk assessments allow us to proactively approach and evaluate our operational goals.

Back to list

Leave a Reply

Your email address will not be published.