Risk management has evolved significantly over the last 10 years and we probably haven’t seen the last of the changes just yet. Norman Marks recently called for a leap change in risk management guidance. Alex Sidorenko, one of the authors of this guide, has also published a series of articles calling for a major change in risk management thinking, moving away from a stand-alone risk management process to a tool integrated into day to day decision making. Alas, it’s unlikely to happen any time soon, the resistance of some old-fashioned risk managers and consultants, who have little comprehension of how risk management works in real life, is very strong, pushing back on a lot of very valid and sound ideas. And while the leap change is not likely to happen, the progress is obvious. Significant changes are already coming in the updated ISO31000.
Just as risk management is evolving, risk managers need to continuously build and improve their own skills as well. This means understanding the science behind how humans think in situations of uncertainty, how they behave and make decisions. Studying quantitative risk analysis tools and techniques is also becoming more and more important, given the abundance of data. And of course, understanding the company’s core business, what drives its performance and applicable industry trends.
Nowadays, senior management expect risk managers to actively participate in the decision-making process, taking ownership of the risk analysis and sharing the responsibility for the decisions outcome. As a result, some risk managers need a major upgrade to their teams and their own thinking. The times of qualitative risk assessments, risk registers and heat maps are finally over.
HERE IS A QUICK CHECKLIST TO TURN THIS SECTION INTO ACTIONS
| ☐ | Develop a skills matrix for the risk management team that should include soft skills related to ability to think independently and be stress resistant, and skills related to quantitative risk analysis, risk perception and risk psychology, core business processes and sales and marketing |
| ☐ | Consider participating in an international risk management certification programme that covers all aspects of future risk management |
USEFUL VIDEOS
Check out other risk management books
RISK-ACADEMY offers online courses
Informed Risk Taking
Learn 15 practical steps on integrating risk management into decision making, business processes, organizational culture and other activities!
ISO31000 Integrating Risk Management
Alex Sidorenko, known for his risk management blog http://www.riskacademy.blog, has created a 25-step program to integrate risk management into decision making, core business processes and the overall culture of the organization.
Advanced Risk Governance
This course gives guidance, motivation, critical information, and practical case studies to move beyond traditional risk governance, helping ensure risk management is not a stand-alone process but a change driver for business.
