Guest Post by John Ayers (first posted on CERM ® RISK INSIGHTS – reposted here with permission)

Introduction

Risk management involves the identification of risks, prioritization of the risks based on probability of occurrence and impact of occurrence, and mitigation plans to control the risks.  Once identified and prioritized the question then becomes which risks should be incorporated into the schedule and which ones should be included in the risk register?

The general rule of thumb I have used requires risks with a 50% or greater probability of occurrence to be incorporated into the schedule. The other risks are entered into the risk register. [Read more…]

Guest Post by Greg Hutchins (first posted on CERM ® RISK INSIGHTS – reposted here with permission)

When evaluating risk response strategies, executive management along with process owners must align risk responses with the organization’s risk appetite, business objectives, costs/benefits, and overall risk strategy/tactics. Risk response strategies and tactics may involve: [Read more…]

Guest Post by Geary Sikich (first posted on CERM ® RISK INSIGHTS – reposted here with permission)

Introduction

There’s always a story that explains why an event is a “Black Swan” – after the fact. Where are the “Black Swan” prognosticators before events occur? I see “after the fact” articles and statements, such as, “we knew that was coming” or “we predicted this” – all after the fact. Generally projections and predictions seem never to hold sway until after the fact. Predictions and projections never seem to occur when the prognosticator specifies — is it just that the timing never seems to work out – until after the fact. From Nostradamus to the “Bible Code” we are enamored with predictions – after the fact. Does there seem to be a theme developing here? [Read more…]