A question often asked is how broadly or how deeply do we need to design risk reporting in our risk management frameworks. Of course there is no easy answer. Let me give you a short anecdote before I give you my usual few dot points on the topic. I was at a UNSW Australian School
Do you block access to YouTube, Facebook, Twitter and a host of other “inappropriate” social media? Should you? I am leading with my chin here. I am running in advance of a great RMIA event on 19 May where there will be a panel of social media experts addressing this topic. So here are my
When we conduct risk assessments we are often satisfied with the outcomes based on our existing knowledge. Our knowledge however is usually based on some facts and a whole lot of assumptions, perceptions and theories. As human beings we use our five senses of sight, smell, taste, touch and hearing to maximise our knowledge about
It is inevitable for governance, risk and compliance (GRC) to converge. They are all about achieving the objectives of the organisation. For me, the greater debate is what role should an individual take as a leader in the convergence of the GRC space in an organisation? It was no surprise that the International Federation of
To ensure you have the correct risk leaders in the correct place in your organisation, you need to consciously match your employee’s appetite for risk with your organisation’s appetite for risk. Here is a brief checklist for you to consider when resourcing a business unit: Assess the risk appetite Assess the leader Adjust the team