Complete this free risk management maturity assessment to determine whether your organization is risk management 1 or risk management 2. The assessment takes less than 3 minutes and is designed as a quick assessment to determine potential gaps in risk management integration.
Risk management 2 is about integrating risk analysis into decision making, core processes and operations. According to both ISO31000:2018 and COSO ERM:2017 risk management should be an integral part of planning, performance management and decision making. Test whether this is indeed the case at your organization.
COMPLETE SURVEY
Interpretation of results:
- 0-15 points – risk management is relatively immature still, not all risk management 1 requirements have been implemented. There is little if any evidence to suggest that risk management 2 principles are followed. The organization is generally not aligned with either ISO31000:2018 or COSO ERM:2017. The first priority should be getting all risk management 1 in place and then focus on integrating risk management into decision making.
- 16 – 30 points – looks like most of the risk management 1 requirements have been taken care of and some progress has been made on integrating risk analysis into decision making and core business processes. The first priority should be continuing the journey to integrate risk management into decision making and minimizing the effort required to maintain risk management 1.
- 31- 34 points – looks like most of the risk management 1 requirements have been taken care of and risk management has been integrated into significant business decisions and core business processes. Well done! Please share your experience or difficulties in the comments below. Your experience is very valuable for the risk management profession.
Buy the full G31000 Risk Management maturity today and save or order one of the mentoring packages to help you raise the overall level of maturity.
Check out other decision making books
RISK-ACADEMY offers online courses
Informed Risk Taking
Learn 15 practical steps on integrating risk management into decision making, business processes, organizational culture and other activities!
ISO31000 Integrating Risk Management
Alex Sidorenko, known for his risk management blog http://www.riskacademy.blog, has created a 25-step program to integrate risk management into decision making, core business processes and the overall culture of the organization.
Advanced Risk Governance
This course gives guidance, motivation, critical information, and practical case studies to move beyond traditional risk governance, helping ensure risk management is not a stand-alone process but a change driver for business.
One thought on “Free risk management maturity assessment. Find out if you are risk management 1 or risk management 2”