Simplifying Risk Management

Recent decades have seen much greater attention paid to risk management at an organizational level, as evidenced by the proliferation of legislation, regulation, international standards and good practice guidance. The recent experience of Covid-19 has only served to heighten this attention. Growing interest in the discipline has been accompanied by significant growth in the risk management profession; but practitioners are not well served with suitable books to guide them in their work or challenge them in their professional development. This book attempts to place the practice of risk management within organizations into a broader context, looking as much at why we try to manage risk as how we try to manage risk. In doing so, it challenges two significant trends in the practice of risk management: • The treatment of risk management primarily as a compliance issue within an overall corporate governance narrative; and • The very widespread use of qualitative risk assessment tools (“heat maps” etc.) which have absolutely no proven effectiveness. Taken together, these trends have resulted in much attention being devoted to developing formalized systems for identifying and analyzing risks; but there is little evidence that this is driving practical, cost-effective efforts to actually manage risk. There appears to be a preoccupation with the risks themselves, rather than a focus on the positive actions that can (and should) be taken to benefit stakeholders. This book outlines a simple, quantitative approach to risk management which refocuses attention on treating risks; and presents choices about risk treatment as normal business decisions.

I have been involved with workplace and process risk management for over 30 years and I have always found the subject fascinating and rewarding. However, I am still surprised at the lack of deep understanding within Organisations about risk management. Regardless of Organisation size, many see it as just “managing risks” because it’s easier to explain and perhaps reactionary since it has the word “management”. Risk management is more than just “managing risks”. Successful risk management requires a holistic approach based upon Elements that make up a Risk Management Framework. Let’s pretend you are my Client and I’ve asked you these 7 questions: 1. Do you know the relationship between attitude and risk management? 2. Do you know how to control workplace and process risks? 3. Do you know the difference between hazard identification and risk assessment? 4. Do you know what or who is a risk owner? 5. Do you know what you are measuring for successful risk management? 6. Do you know what or when you are monitoring for risk management? 7. Do you know what to do when reviewing risk management? Did you answer “YES” to all of them? If you did, you don’t need this book. If you had even just one “NO” as an answer, this book is worth reading. This is a reference book and not a novel. In this book, risk management is focused on workplace and process related risks. However, the approach and techniques can be applied for risk management generally. My goal is to share valuable lessons learnt and my experience of getting risk management successfully embedded within your Organisation. My intended audiences are risk and safety management practitioners, trainers, managers, leaders in Organisations and anyone interested in successfully managing risks.

This is a highly practical 'how to' guide that gives a simple, straightforward, but thorough process which, if followed, will make your business more resilient.

Cybersecurity Risk Management In Cybersecurity Risk Management: Mastering the Fundamentals Using the NIST Cybersecurity Framework, veteran technology analyst Cynthia Brumfield, with contributions from cybersecurity expert Brian Haugli, delivers a straightforward and up-to-date exploration of the fundamentals of cybersecurity risk planning and management. The book offers readers easy-to-understand overviews of cybersecurity risk management principles, user, and network infrastructure planning, as well as the tools and techniques for detecting cyberattacks. The book also provides a roadmap to the development of a continuity of operations plan in the event of a cyberattack. With incisive insights into the Framework for Improving Cybersecurity of Critical Infrastructure produced by the United States National Institute of Standards and Technology (NIST), Cybersecurity Risk Management presents the gold standard in practical guidance for the implementation of risk management best practices. Filled with clear and easy-to-follow advice, this book also offers readers: A concise introduction to the principles of cybersecurity risk management and the steps necessary to manage digital risk to systems, assets, data, and capabilities A valuable exploration of modern tools that can improve an organization’s network infrastructure protection A practical discussion of the challenges involved in detecting and responding to a cyberattack and the importance of continuous security monitoring A helpful examination of the recovery from cybersecurity incidents Perfect for undergraduate and graduate students studying cybersecurity, Cybersecurity Risk Management is also an ideal resource for IT professionals working in private sector and government organizations worldwide who are considering implementing, or who may be required to implement, the NIST Framework at their organization.

First published in 2000, Risk Management is a two volume set, comprised of the most significant and influential articles by the leading authorities in the studies of risk management. The volumes includes a full-length introduction from the editor, an internationally recognized expert, and provides an authoritative guide to the selection of essays chosen, and to the wider field itself. The collections of essays are both international and interdisciplinary in scope and provide an entry point for investigating the myriad of study within the discipline.

The industrial workplace should be an environmentally sound and reliable operation with established safety and health policies and practices. Most companies work hard to achieve this goal by having Industrial Safety and Risk Management programs in place. The key benefits of a first-class ISRM program are the reduction of risk to people, environment, assets and production for company personnel, contractors, the public and investors. Professors Wilson and McCutcheon offer an integrated approach to industrial safety and risk management and explain the elements of practice required to manage health, safety and environmental risk effectively. Contributors from industry and government add their expertise to provide a comprehensive examination of issues concerning industrial health, safety and risk management programs; risk assessment and management; causation models and systematic incident investigation; and human factors. Case studies of industrial disasters offer lessons in how to proactively reduce risks in operations or projects. Industrial Safety and Risk Management provides a solid base for students and industry to implement, manage and improve their understanding and knowledge of safety and risk management programs. It provides an excellent training program for new professionals, junior managers and supervisors working in industry.

An updated review of the theories and applications of corporate risk management After the financial crisis of 2008, issues concerning corporate risk management arose that demand new levels of oversight. Corporate Risk Management is an important guide to the topic that puts the focus on the corporate finance dimension of risk management. The author—a noted expert on the topic—presents several theoretical models appropriate for various industries and empirically verifies theoretical propositions. The book also proposes statistical modeling that can evaluate the importance of different risks and their variations according to economic cycles. The book provides an analysis of default, liquidity, and operational risks as well as the failures of LTCM, ENRON, and financial institutions that occurred during the financial crisis. The author also explores Conditional Value at Risk (CVaR), which is central to the debate on the measurement of market risk under Basel III. This important book: Includes a comprehensive review of the aspects of corporate risk management Presents statistical modeling that addresses recent risk management issues Contains an analysis of risk management failures that lead to the 2008 financial crisis Offers a must-have resource from author Georges Dionne the former editor of The Journal of Risk and Insurance Corporate Risk Management provides a modern empirical analysis of corporate risk management across industries. It is designed for use by risk management professionals, academics, and graduate students.