Функционирование системы управления рисками и внутреннего контроля на производственном предприятии

Abstract

The implementation of digital technologies and the rapid transition to Industry 4.0 have influenced the speed of information exchange, thereby increasing uncertainty and the likelihood of making ineffective management decisions. At the same time, to avoid entropy in managing a manufacturing enterprise, a transformation of tools, methodologies, procedures, and standards is necessary to ensure the company’s sustainable development. One way to increase the reliability of a company’s operations in conditions of uncertainty and risk can be the organization of a risk management and internal control system (RMIC). RMIC is defined as a set of organizational measures, methodologies, procedures, norms of corporate culture and actions aimed at achieving an optimal balance between value growth, profitability, and risks to ensure financial stability, efficient business operations, asset preservation, compliance with laws, statutes, and internal documents, timely preparation of accurate reports. Furthermore, in uncertain conditions, it is advisable to consider RMIC in the context of an integrated business-process system because, to ensure reasonable confidence in achieving the company’s goals in operational activities, reporting, and fulfilling all obligations, it implies organizing risk management primarily at the process and operational (transactional) levels, and aims at increasing the efficiency of the company’s activities as a result of integrating risk management with strategic planning processes, business planning, and decision-making. The article presents the conceptual foundations of a production enterprise’s RMIC. Key performance indicators, internal control procedures, key risk indicators, the structure of elements and system operation algorithms are justified. Theoretical conclusions of the authors are based on the results obtained within the framework of testing the proposed RMIC model for the business process “Construction Supervision Organization for Gazprom Customers”. It is concluded that, to ensure confidence in achieving goals at a production enterprise, RMIC should be developed, implemented, and continuously developed. Risk management and internal control processes should be carried out using best practices, principles, and methods. In this case, the risk management measures taken by the company will allow risks to be kept within acceptable limits and provide shareholders with sufficient guarantees to achieve their goals and objectives.