Skip to content

GCRI · 系统性风险管理

企业与公共风险

Enterprise risk management protects an organisation’s objectives; public risk management protects a population and its services. The two meet at shared infrastructure, outsourced public services, supply chains and the losses that firms cannot bear and governments end up carrying. This page sets out how each works, where their boundaries leave risks unowned, and what evidence helps executives and public servants align their management of shared exposures.

01登记

Enterprise and public risk on the record.

02问题

Enterprise and public risk: how the risk develops.

Private, sovereign and community mandates. The dossier below sets out how the risk develops, what is measured, where the data come from, how it is modelled and who decides.

机制

Firms manage their own loss

Enterprise risk management weighs risks against an organisation’s own objectives and appetite. Losses that fall on customers, communities or other firms are counted only where law, contract or reputation brings them back.

机制

Government carries residual risk

When private resilience falls short, the public sector often absorbs the loss through emergency response, bailouts, compensation or lost services. These implicit commitments are rarely priced or recorded.

机制

Outsourcing moves operations, not accountability

Public services delivered by contractors depend on the contractor’s continuity, finance and suppliers. The public body remains accountable for the service even when it no longer controls the operation.

机制

Registers do not connect

Corporate risk registers and national risk assessments describe overlapping exposures in different terms. Without a shared view, neither side sees the risks that sit between them.

03地理

亚洲的危害与暴露。

来自 NASA GIBS 的亚洲人口密度、夜间灯光和洪水水体。每个图层都带有自己的日期。

交互式地图需要JavaScript;图层列表和来源见下文。

图层 3

本页面的危害与暴露

关于本图层
证据
估计值
来源
世界网格化人口 v4.11(NASA SEDAC(哥伦比亚大学 CIESIN))
提供方
NASA SEDAC(哥伦比亚大学 CIESIN)
许可协议
CC BY 4.0
年份版本
null;基于人口普查的估算,静态(2020)
处理结果
约 1 公里网格
不确定性
基于人口普查的 2020 年每平方公里人口估算,作为风险暴露背景展示;不是受任何危害影响的人数。
经由以下途径到达
gibs.earthdata.nasa.gov,仅在您允许实时地图后访问
关于本图层
证据
观测
来源
VIIRS Black Marble(VNP46A2)(NASA LAADS DAAC)
提供方
NASA LAADS DAAC
许可协议
NASA 开放数据
年份版本
每日;卫星辐射亮度,已校正月光和大气影响
构建时的最新内容
2026-10-12
处理结果
约 500 米网格
不确定性
所示日期的卫星夜间辐射亮度;灯光是用电和停电的替代指标,并非对供应或获得电力情况的测量。
经由以下途径到达
gibs.earthdata.nasa.gov,仅在您允许实时地图后访问
关于本图层
证据
观测(云层造成缺口)
来源
VIIRS 全球洪水产品(NASA LANCE)
提供方
NASA LANCE
许可协议
NASA 开放数据
年份版本
每日;卫星探测;云层造成缺口
构建时的最新内容
2026-10-14
处理结果
约 250 米网格
不确定性
卫星探测;云层造成缺口。卫星或模型栅格数据,按提供方发布的原样呈现。云层、条带缺口和反演误差会造成缺口和噪声;数值是指标,而非某地的测量值。
经由以下途径到达
gibs.earthdata.nasa.gov,仅在您允许实时地图后访问
关于本图层
证据
观测
来源
VIIRS NOAA-20 校正反射率(NASA LANCE)
提供方
NASA LANCE
许可协议
NASA 开放数据
年份版本
每日;卫星图像
构建时的最新内容
2026-10-14
处理结果
约 250 米网格
不确定性
卫星图像。卫星或模型栅格数据,按提供方发布的原样呈现。云层、条带缺口和反演误差会造成缺口和噪声;数值是指标,而非某地的测量值。
经由以下途径到达
gibs.earthdata.nasa.gov,仅在您允许实时地图后访问
关于本图层
证据
观测(云层和过境时间造成缺口)
来源
VIIRS NOAA-20 375 米(FIRMS)(NASA LANCE FIRMS)
提供方
NASA LANCE FIRMS
许可协议
NASA 开放数据
年份版本
每日;卫星探测;云层和过境时间造成缺口
构建时的最新内容
2026-10-13
处理结果
约 500 米网格
不确定性
所示日期的卫星热点探测结果,包括天然气火炬和工业热源;并非已确认的火情、事件报告或预警。
经由以下途径到达
gibs.earthdata.nasa.gov,仅在您允许实时地图后访问
关于本图层
证据
模型生成(GIBS 发布的最新年份)
来源
MODIS Terra 和 Aqua 土地覆盖(MCD12Q1)(NASA LP DAAC)
提供方
NASA LP DAAC
许可协议
NASA 开放数据
年份版本
每年;卫星分类;GIBS 发布的最新年份
构建时的最新内容
2024-01-01
处理结果
约 500 米网格
不确定性
所示年份的卫星土地覆盖类别,含农田;该分类存在已知误差,并非农场登记册。
经由以下途径到达
gibs.earthdata.nasa.gov,仅在您允许实时地图后访问

最新可用

NASA GIBS / EOSDIS · ASTER GDEM (METI, NASA) · Blue Marble (NASA) · © OpenStreetMap贡献者 (ODbL) · Natural Earth

正在加载最新的NASA影像。

拖动以移动。按住 Ctrl 或 ⌘ 并滚动、双指缩放或使用按钮缩放;悬停可查看指针下的数值;重置可返回该区域。

危害与风险暴露,以亚洲为取景。NASA 发布的卫星和模型产品,各带自己的日期。它们是指标,而非对任何地点的评估。

数据:NASA GIBS · ASTER GDEM · Blue Marble · © OpenStreetMap 贡献者 · Natural Earth · NASA EONET · 美国地质调查局 · NASA JPL OPERA DIST-ALERT来源与许可

  • We acknowledge the use of imagery provided by services from NASA’s Global Imagery Browse Services (GIBS), part of NASA’s Earth Science Data and Information System (ESDIS). Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA 开放数据
  • We acknowledge the use of imagery provided by services from NASA’s Global Imagery Browse Services (GIBS), part of NASA’s Earth Science Data and Information System (ESDIS). Colours redrawn from the published colour map; values averaged into hexagonal cells where shown (modified). NASA 开放数据
  • Center for International Earth Science Information Network (CIESIN), Columbia University. 2018. Gridded Population of the World, Version 4 (GPWv4): Population Density, Revision 11. NASA Socioeconomic Data and Applications Center (SEDAC). 采用 CC BY 4.0 许可。颜色依据已发布的色标重绘;显示处的数值已按六边形网格平均(经修改)。 doi:10.7927/H49C6VHW. CC BY 4.0
  • VIIRS Black Marble 夜间灯光,NASA 戈达德航天中心;由 NASA Level-1 与大气档案和分发系统(LAADS DAAC)分发;影像来自 NASA GIBS。颜色依据已发布的色标重绘;显示处的数值已按六边形网格平均(经修改)。 NASA 开放数据
  • VIIRS 近实时产品(洪水、地表温度、积雪覆盖、校正反射率),NASA LANCE;影像来自 NASA GIBS。颜色依据已发布的色标重绘;显示处的数值已按六边形网格平均(经修改)。 NASA 开放数据
  • NASA 资源管理火灾信息系统(FIRMS),VIIRS 375 m 活跃火点产品,NASA LANCE;矢量瓦片来自 NASA GIBS。颜色依据已发布的色标重绘;显示处的数值已按六边形网格平均(经修改)。 NASA 开放数据
  • MODIS 陆地产品(植被指数、总初级生产力、土地覆盖),NASA LP DAAC 和 LANCE;影像来自 NASA GIBS。颜色依据已发布的色标重绘;显示处的数值已按六边形网格平均(经修改)。 NASA 开放数据
  • ASTER GDEM 是 METI 和 NASA 的产品(ASTER Global Digital Elevation Model V003,NASA LP DAAC);影像来自 NASA GIBS。颜色依据已发布的色标重绘;显示处的数值已按六边形网格平均(经修改)。引用格式:NASA/METI/AIST/Japan Spacesystems and U.S./Japan ASTER Science Team (2019). ASTER Global Digital Elevation Model V003. doi:10.5067/ASTER/ASTGTM.003. NASA 开放数据
  • 使用 Natural Earth 制作。免费矢量和栅格地图数据,见 naturalearthdata.com。 公有领域
  • © OpenStreetMap 贡献者(ODbL),经由 NASA GIBS(海岸线、边界、道路和地名)。颜色依据已发布的色标重绘;显示处的数值已按六边形网格平均(经修改)。 ODbL
  • Blue Marble,NASA Earth Observatory;影像来自 NASA GIBS。颜色依据已发布的色标重绘;显示处的数值已按六边形网格平均(经修改)。 NASA 开放数据
  • 地球仪和平面地图上的背景信息:海岸线、边界、道路和地名来自 NASA GIBS 参考图层(OpenStreetMap 数据,ODbL,© OpenStreetMap contributors);Blue Marble 影像可作为可选底图;3D 地形和高程读数来自 ASTER GDEM 高程色彩指数(5 m 至 200 m 分级,为便于辨识而作了夸张处理)。边界按已发布的样式绘制,不代表对任何领土的立场。
  • 实时事件:NASA Earth Observatory Natural Event Tracker(EONET);事件仅供参考,并保留其原始来源链接。
  • 实时:NASA EONET。事件仅供参考,不是主管机构的预警。
  • 实时:美国地质调查局。事件仅供参考,不是主管机构的预警。
  • Observed (EO): NASA JPL OPERA DIST-ALERT (contains modified Copernicus Sentinel data 2026). We acknowledge the use of imagery provided by services from NASA’s Global Imagery Browse Services (GIBS), part of NASA’s Earth Science Data and Information System (ESDIS).
  • NASA GIBS: We acknowledge the use of imagery provided by services from NASA’s Global Imagery Browse Services (GIBS), part of NASA’s Earth Science Data and Information System (ESDIS).
  • 河流流量预报,30天及区间(GloFAS,经Open-Meteo):包含经修改的Copernicus Emergency Management Service 2026年信息;非洪水警报。
  • 天气数据来自 Open-Meteo.com (https://open-meteo.com/), 依据 CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). 授权。
  • 可选图层(图层列表中有 11 个来源:实时、预报、观测和背景)开启时会在地图上和此处显示其提供方署名;预报是模型输出,派生指数是估计值。

图层与日期

  • 人口密度,2020 年:人口:哥伦比亚大学 CIESIN,世界网格化人口 v4.11(2018),NASA SEDAC, CC BY 4.0 · 静态
  • 夜间灯光,每日:VIIRS Black Marble(VNP46A2),NASA LAADS DAAC · 2026年10月12日
  • 洪水水体,3 日合成:VIIRS 全球洪水产品,NASA LANCE · 2026年10月14日
  • 真彩色:VIIRS NOAA-20 校正反射率,NASA LANCE · 2026年10月13日
  • 活跃火点与热异常:VIIRS NOAA-20 375 m(FIRMS),NASA LANCE FIRMS · 2026年10月13日
  • 土地覆盖类型(IGBP),年度:MODIS Terra 和 Aqua 土地覆盖(MCD12Q1),NASA LP DAAC · 2024

04跨领域

Public and enterprise risk meet in shared infrastructure and services.

Findings are designed for the Global Sector Risk and Resilience 系列. The page sets out how ERM practice under COSO and ISO 31000 connects to national 风险评估 under the OECD Recommendation of 2014.

  • Cases where enterprise and public risk management were joined up.
  • National risk assessment methods that draw on firms’ data.
05监测

Risk register.

团队跟踪该主题时会使用的界面:其指标、状态与决策。名称为示例,数值仅作示意。

风险登记册

Enterprise and public risk · Enterprise A · Review cycle Q4

三项高于风险偏好的风险GCRI · 系统性风险管理

剩余风险

可能性 × 影响,每个单元格的风险数

每个单元格的风险数量。底色按风险偏好区间显示。

超出风险偏好

供应商集中度采购高▲ 1
数据中心受淹运营高▲ 0
定价中的模型误差金融中▲ 1
关键人员流失人口中▼ 1

依据国际标准的风险管理流程

  1. 范围、背景、准则设置
  2. 标识分类体系
  3. 分析可能性 · 影响
  4. 评估相对风险偏好
  5. 处置计划
  6. 监测与审查KRI
  7. 记录与报告理事会

处置行动

  1. T-11双源关键部件负责人:采购 · 已逾期6 天逾期
  2. T-14将备份站点迁至洪水水位之上负责人:运营due 16 天后到期
  3. T-17独立模型验证负责人:财务due 38 天后到期
Risk register: the screen’s structure, terms and states for Enterprise and public risk.示例名称和示意数值;是设计方案,并非记录或实时系统。
06指标

衡量什么,以及衡量得如何。

每个指标都注明其单位、频率、背后的来源类型以及数值将附带的证据标签。此处不显示数值:数值由计划依据其自身权限提供。

指标单位节奏来源类型标签
Contingent liabilities disclosedcount and type in public accounts年度Government financial statements and 财政风险 statements已发布统计
Critical public services delivered by contractorscount of services年度Contract registers已发布统计
Contracts with continuity and exit clausespercent of critical contracts年度Contract management records已报告
Principal risks linked to national risk categoriespercent of disclosed principal risks年度Disclosure analysis估算
Public-private exercises held计数年度Exercise programme records已报告
Emergency support provided to firmscount of support measures by type每个事件Public budget and aid records已发布统计
07孪生与级联模拟器

Model enterprise and public risk as a system. Run the cascade.

Assembled from the Nexus Standards area profile 全球与系统性风险: the hazards it names, the 系统 and sectors that carry the loss, the controls that dampen it and the data that observe it. Choose the components, pick an initiating hazard and step through the cascade. The Map view places the run on an example geography with open data. Every coupling weight is a stated assumption you can change. A teaching model, not a forecast, an assessment or a certification. To model a place of your own choosing, open the full System Builder.

灾害

  • 溃坝
  • 金融传染
  • 河流洪水 (在下游引发)
  • Flash flood (set off downstream)
  • 大规模流离失所(在下游引发)
  • 大范围停电(在下游引发)
  • 供水短缺(在下游引发)
  • Sovereign debt crisis (set off downstream)
  • Currency crisis (set off downstream)

控制措施

  • NS-0 章程与原则
  • NS-3 风险记录 UNI(语法、旧编码对照、分配机构)
  • NS-9 情境 UNI(部署、实例、计划实例)
  • NS-10 政策和条款(机器可读的义务:定义、约束、评估和执行)
  • NS-11 验证与监测(证据、证明、零信任符合性观测)
  • NS-14 符合性及与外部标准的对照
  • NRS-H120 危害族:互联系统的结构性脆弱(NHS-1 sys.fragility)
  • NRS-C6 系统性风险与级联风险
  • NRS-H61 危害族:级联失效(NHS-1 sys.cascade)
  • NRS-H62 危害类别:复合与多危害事件(NHS-1 sys.compound)
  • NRS-H94 危害族:系统性网络事件(NHS-1 cyber.systemic-cyber)
  • NRS-H60 危害类别:供应链与流动中断(NHS-1 sys.supply-chain)

观测

  • INFORM Risk Index(仅列作参考)
  • World Bank Open Data 和 World Development Indicators API(仅列作参考)
  • IMF 数据服务(WEO、IFS、FSI,通过 SDMX)(仅列作参考)
  • 灾害造成的直接经济损失与全球国内生产总值之比
  • 宏观经济仪表板

示例地理范围

  • 孟加拉国:134 个六边形单元
  • 今夜夜间灯光与停电(VIIRS 昼夜波段),NASA GIBS
  • 穿透云层的地表水,30 m(OPERA DSWx-S1 雷达),NASA GIBS
  • 过去半小时降雨率(IMERG),NASA GIBS
  • 地表土壤湿度(SMAP),NASA GIBS
08来源

证据来自何处。

具名公共数据集与机构记录,各自注明许可类别。依协议获得的来源仅按其条款使用,绝不再次发布。

来源它提供什么许可类别
IMF Fiscal Transparency Code and 财政风险 statementsStandards for disclosing fiscal risks and contingent liabilitiesPublic, IMF terms of use
Government financial statements and public accountsRecorded provisions, guarantees and contingent liabilitiesPublic records, licence per government
Public contract registers and procurement portalsWhich services are contracted out and to whomOpen data where published, licence per portal
Corporate annual reports and principal risk disclosuresHow firms describe their risks and dependencies公共记录,条款因发布方而异
OECD reports on the governance of critical risksPractice on public-private cooperation in risk managementPublic, OECD terms of use
09方法与证据

How enterprise and public risk is modelled, measured and tested.

模型、其假设、数据和不确定性,以科学家或工程师会核查的形式呈现。结构遵循已发表的方法。所取数值仅为示意,不是研究发现。

模型、方程与假设

The model structure used for enterprise and public risk, the assumptions it makes and how each is tested.

要素 i 的风险Ri = f(Hi, Ei, Vi, Ci)危害、风险暴露、脆弱性和应对能力
预期年度损失EAL = ∑k pk · Lk对年概率为 pk
耦合系统xt+1 = A xt + B ut + εtA carries the couplings, u the shock, ε the error
假设为何制作如何检验
在一次事件中,危害与暴露相互独立使损失积分保持可计算与基于联合记录拟合的 copula 进行比较
耦合在工作点附近是线性的让冲击通过 A 传播在线性范围之外施加扰动并比较
脆弱性曲线可以在不同地点之间迁移使用很少有本地曲线可用在有观测损失的地方据此进行验证
输入
带溯源信息的版本化数据集
成果
分布,绝不是单一数字
代码
连同模型卡和测试一起发布
复现
相同的数据、代码、环境和随机种子
标准的风险与状态空间表述;所列假设是该方法的典型假设,供审查之用,并非结果。
FAIR 指导原则 · GO FAIR 和 FORCE11W3C PROV · 万维网联盟关于一致处理不确定性的指南 · IPCCCEOS 分析就绪数据 · 地球观测卫星委员会
10决定

由谁决定,以及证据服务于什么。

系统性风险 Management prepares evidence. The decisions below are taken by the authorities named, under their own rules, and never by the platform.

谁来决定问题本页面服务的证据
财政部门Which contingent liabilities to record, limit or provision财政风险 notes; support measures in past events
Commissioning public bodiesWhich continuity and exit terms to require in critical service contractsContract continuity reviews; supplier dependency maps
Corporate boardsWhich of the firm’s risks fall on public services or communitiesShared exposure maps; national risk crosswalks

该主题产生的产出

  • Maps of shared exposures between firms and public services
  • Fiscal risk notes on implicit public commitments
  • Contract continuity reviews for outsourced critical services
  • Crosswalks between corporate and national risk categories
11核心问题

What experts ask about mandates.

  • Which risks does each mandate cover, and which fall between them?
  • When a firm reduces its own risk, where does that risk go?
  • How do governments act as insurers of last resort, and how does that change private behaviour?
  • How can communities, which bear many consequences, take part in decisions about risk?
12机制

How risk moves between mandates.

Each mandate has its own objectives, accountability and tools. Because none of them sees the whole system, risk tends to flow towards whoever is least able to refuse it or least able to see it coming.

Enterprise

风险转移

Firms transfer risk through contracts, insurance and outsourcing. The risk does not disappear; it moves.

主权

Implicit backstop

When losses are too large for others, public budgets absorb them, which can encourage risk-taking elsewhere.

社群

剩余风险

Households and communities carry what no one else covers, often with little voice in the decisions that created it.

13方法与局限

How cross-mandate risk is analysed.

  1. 01

    Enterprise risk frameworks

    Structured processes for organisational risk. Limits: they focus inward and seldom capture risks imposed on others.

  2. 02

    National risk assessments

    Government assessments of major risks to a country. Limits: quality and openness vary, and private dependencies are often unclear.

  3. 03

    分配分析

    Tracing who bears losses across groups. Limits: data on household exposure is often weak.

  4. 04

    Participatory methods

    Involving affected communities in 风险评估, supported by decision analysis. Limits: requires time, trust and resources.

14方法

如何研究,以及方法无法说明的内容。

  1. 不确定性下的决策分析多准则处置选择 · 用于应急计划的决策树在此应用
  2. 情景设计与压力测试跨部门情景设计 · 反向压力测试 · 二轮效应在此应用
  3. 网络科学与传染依赖网络映射 · 中心性与集中度 · 失效传播模拟在此应用
15Where this page’s references

Where this page’s references lead.

阅读本页时所对照的机构和文件。状态和版本会变化;每个链接都指向发布机构。

16问题

问题与解答。

What is enterprise risk management?
A coordinated approach an organisation uses to identify, assess, treat and monitor risks to its objectives across all its activities, usually under a framework such as ISO 31000 or COSO.
What is a contingent liability?
An obligation that depends on a future event, such as a loan guarantee or an implicit commitment to support a failing service, which may or may not become a cost.
Why connect corporate and public risk registers?
Because firms and public bodies often depend on the same infrastructure and suppliers. Linking their registers shows shared exposures that neither would see alone.
Why does risk transfer matter systemically?
Because transferred risk can concentrate in a few places, such as a single insurer, supplier or public budget, creating new points of failure.
Is public risk management different in kind?
It has broader objectives, including fairness, rights and public trust, and the government often cannot transfer its risks to anyone else.
Does the platform advise governments?
It publishes methods and evidence. Bounded technical assistance under a defined scope is a separate GCRI service that opens only with its terms and team.
报告贡献

从本页贡献证据。

报告 is the Consortium’s quarterly publication. What you know about this subject can become evidence, a case or a correction in the next edition, credited to you and published under CC BY 4.0 where it is your own work.

GCRI系统性风险管理情景与压力测试方法与技术组合与准备度
系统性风险管理

带来一种方法、一个数据集或一个问题。

信息和咨询现已开放。每项咨询都会获得一个编号,并告知下一步;申请、付款、算力分配和注册只有在相应团队、条款和审查能力就绪时才会开放。