5 reasons for using a risk (identification) model

A frequently asked question“Why do you insist on using a risk (identification) model as the basis for risk management? We can easily do this without a model” It’s a question that comes up on occasion when I am teaching risk management or executing a risk assessment. It’s a relevant question. I’ve put together 5 good … Continue reading 5 reasons for using a risk (identification) model

Working with inherent and residual risk

The internal audit perspectiveTo an internal auditor, a risk analysis is relevant because it provides information on the priorities within an audit universe. The auditor will look at all he has right to audit (the audit universe) and ask himself where his task, providing assurance, is best executed. You need to think this through: it’s … Continue reading Working with inherent and residual risk

Obsession without voice, or voice without obsession

What’s this about voice and obsession?I’m referring to the 2009 SXSW talk by John Gruber of Daring Fireball and Merlin Mann of (amongst others) 43Folders fame, which I recently discovered via Yuvi Zalkow’s excellent visualisation on his blog. The post below, for your information, is a curated version of a post I did a couple … Continue reading Obsession without voice, or voice without obsession

Public sector performance enhancement

Let’s not get run over againThere are quite a few performance enhancing methodologies for administrations available on the market today. Most have not proven to be that successful all the time. However, under pressure to enhance performance, the public servants hope if or rather when someone turns government around, they don’t get run over again.Potential … Continue reading Public sector performance enhancement

You are already managing risks

How do we start to manage our risks?It’s an often heard question when talking to organizations about risk management. The honest answer to that is that most organizations already manage risk. It’s often just not called risk management. Risk management by any other nameLet’s look at a number of examples of risk management which are … Continue reading You are already managing risks

Sense and nonsense of risk maturity assessments

Can you “manage” maturity?Maturity assessments are the new fad of management. You encounter them everywhere. Also, and perhaps most often, in risk management. Risk management and internal control systems need to be assessed and benchmarked and turned upside down and inside out. These tendencies appear to be indicative of an overly strong desire for micro … Continue reading Sense and nonsense of risk maturity assessments

Improving organizational leanness

Lean is not a natural state for most organizationsFew organizations can truely be defined as lean. They have no real incentive to be. Most organizations, when left to their own devices, tend to grow and focus on justifying their own existence. Any organizational structure, whether public or private, if left unchecked, will try to increase … Continue reading Improving organizational leanness