7 questions to shape the risk process
Wednesday, January 07, 2015
Anyone facing a risky and important decision or project will need to answer seven basic questions.
In fact, we could shape the risk management process around asking and answering them. If we do, then the risk process will become intuitive and natural, easy to follow, and less bureaucratic or forced.
The seven basic questions are as follows, together with the related step in the risk process:
1. What are we trying to achieve? (establish context)
We cannot start any risky venture without first clearly defining its scope and clarifying the objectives that are at risk. We also need to know how much risk key stakeholders are prepared to accept, since this gives us the target threshold for risk exposure. We must address these factors as the first step of the risk process.
2. What could affect us achieving this? (identify risks)
Once objectives and risk thresholds are agreed upon, we can start identifying risks, which are uncertainties that could affect achievement of objectives (including both threats and opportunities). There are a variety of risk identification techniques, each of which has strengths and weaknesses, so we should use more than one approach.
In addition to considering individual risks, we should also address overall risk exposure.
3. Which of those things are most important? (assess risks)
Not all risks are equally important, so we need to filter and prioritize them, to find the worst threats and the best opportunities. This will help us decide how to respond.
When prioritizing risks, we can use various characteristics, such as how likely they are to happen, what they might do to our objectives, how easily we can influence them, when they might happen, etc. We should also consider the effect of overall risk exposure on the final outcome.
4. What shall we do about them? (plan risk responses)
Now we can start to think about what actions are appropriate to deal with individual risks, as well as considering how to tackle overall risk exposure.
We might consider radical action (avoid threats or exploit opportunities), or attempt to influence the level of risk exposure (reduce threats or enhance opportunities), or decide to do nothing (accept the risk). We might also involve other parties in responding appropriately to the risks (transfer threats or share opportunities).
5. Having taken action, did it work? (implement risk responses)
We can plan to address risks, but nothing will change unless we actually do something. Planned responses must be implemented in order to tackle individual risks and change overall risk exposure, and the results of these responses should be monitored to ensure that they are having the desired effect. Our actions may also introduce new risks for us to address.
6. What has changed? (review risk)
The risk process cannot end at this point, because risk is dynamic and changing. So we have to look again at risk on a regular basis, to see whether existing risks have been managed as expected, and to discover new risks that now require our attention.
7. What did we learn? (lessons learned)
There is one more important step in the risk process, which is often forgotten.
As responsible professionals, we should take advantage of our experience with this risky situation to benefit future similar ventures. This means we will spend time thinking about what worked well and what needs improvement, and recording our conclusions in a way that can be reused by ourselves and others.
By structuring our risk process in this way, we will make it easier for people to follow the process, as they are simply addressing a set of common-sense questions. Anything that makes risk management more simple will ensure that people are more engaged, and that our risks are better managed.
- 10 negative employee behaviors that undermine success
- Millions of high school students set for success: Celebrating Career and Technical Education Month
- 3 ways to make your supply chain more resilient
- How employers are helping employees reduce student loan debt
- Report: Only 6% of US companies offer comprehensive child care benefits
- What is social capital, and how can educators help students build it?
- Selling your business? What tenants need to know about their lease
- Study: Researchers search for better ways to nix inventory errors
- Stay on track with your content marketing
- A massive no-no: Hiring to repay a favor, not because someone is the best candidate
- Has telehealth had its day? It depends on who you ask
- Is your spa menu optimized for 2020 and beyond?
- Improving in-person and remote instruction: Critical elements
See your work in future editions
Your content, Your Expertise,
Your Industry Needs YOUR Expert Voice & We've got the platform you needFind Out How