Risk managers should encourage employees to openly raise risk management related issues. This is possible by spending a considerable amount of time every day communicating with their colleagues and staying up-to-date on the latest developments and emerging risks or failures in the internal control system.
Share the risk manager’s contact information with employees or provide a confidential hotline for communicating risks through the internal company website or via the phone. Risk managers should motivate and encourage staff to be proactive about identifying and preventing risks. One of the risk managers we have interviewed started a table tennis tournament to build rapport with other business units and to have regular conversations in an informal setting with other managers.
Risk managers may consider introducing a rewards programme for active participation in risk management activities. It is important to encourage a “no blame” culture and communicate it throughout the company.
Another “unorthodox” option was to join forces with internal audit department and play “good cop, bad cop” with the business to drive the behaviour to reinforce better management of risks.
USE THE CHECKLIST PROVIDED BELOW TO TURN THIS SECTION INTO ACTIONS
|
☐ |
Reward open risk communication |
|
☐ |
Encourage people to share information about risks by reaching out to them and by visiting their workplace regularly |
|
☐ |
Participate in corporate team building activities and get to know local business units and the risks they are facing on a day to day basis |
USEFUL VIDEOS
| In this video, Alex Sidorenko talks about four critical skills that every risk manager must have to start on the risk management journey. It doesn’t have to be one person with all four skills, it could be a team of people. | https://www.youtube.com/watch?v=nqmnycKZwgg |
| Alex Sidorenko from RISK-ACADEMY shares some of his practical suggestions on how to build a risk management culture. | https://www.youtube.com/watch?v=gafKiRlLGb0 |
USEFUL LINKS AND TEMPLATES
Sample assessment of risk management culture – http://www.risk-academy.ru/en/download/risk management-culture-questionnaire/
Check out other risk management books
RISK-ACADEMY offers online courses
Informed Risk Taking
Learn 15 practical steps on integrating risk management into decision making, business processes, organizational culture and other activities!
ISO31000 Integrating Risk Management
Alex Sidorenko, known for his risk management blog http://www.riskacademy.blog, has created a 25-step program to integrate risk management into decision making, core business processes and the overall culture of the organization.
Advanced Risk Governance
This course gives guidance, motivation, critical information, and practical case studies to move beyond traditional risk governance, helping ensure risk management is not a stand-alone process but a change driver for business.
