Guest Post by Greg Caroll (first posted on CERM ® RISK INSIGHTS – reposted here with permission)

The 2009 release of ISO 31000 was the first step across the threshold into 21^st century risk management. Unfortunately the industry that has developed around it has firmly grabbed the doorway and won’t let go.  Although the latest revisions make references to decision making and integration into functional purpose, it totally misses the point of risk management, which is to assist navigating a complex world. [Read more…]

Heightened Awareness or Reactive, Backwards Looking?

Guest Post by Geary Sikich (first posted on CERM ® RISK INSIGHTS – reposted here with permission)

From financial crises to energy catastrophes to earthquakes and threats of terrorism, we hear a lot about events that challenge our ability to identify and manage risk.  Unfortunately, some of the things that emerge from many of these events are reactive regulatory rules and requirements. [Read more…]

Guest Post by Geary Sikich (first posted on CERM ® RISK INSIGHTS – reposted here with permission)

Introduction

It is mid-year 2014 as I write this article.  We have recognized the need to better manage supply chain risks for the better part of a decade now.  Yet, we still seem to be deluded into thinking that the modern supply chain is resilient to the point of invulnerability.  Most organizations have a supply chain that is a mix of competencies, from manufacturing to professional advisory services.  [Read more…]

Guest Post by James Kline (first posted on CERM ® RISK INSIGHTS – reposted here with permission)

The National Institute of Standards and Technology (NIST) just issued the 2017-2018 Baldrige Excellence Frame Work.  There were modifications to a number of categories such as Category 1 Leadership, Category 2, Strategy and Category 6 Operations.  Included in the modifications were substantive additions for Cyber Attacks and Enterprise Risk Management (ERM).

In the discussion of the changes from the 2015- 2016 framework it is noted: “The future competitive advantage that will flow from good ERM is based on the holistic addressing of risk and the actions taken – including the pursuit of intelligent risks – as part of an overall strategic approach to managing organization performance.” (Baldrige.2017.45)

This statement makes two things clear.  First, ERM is seen as contributing to the competitive advantage for any organization.  Second, ERM is a holistic approach.  The inclusion of ERM in the Baldrige Excellence Frame Work does two other things.  It reinforces the momentum created by the inclusion of Risk Based Thinking in ISO 9001:2015 and the issuance by OMB of Circular A-123.   Both actions expanded the reach and ultimately the interest in ERM.  In addition, it signals that ERM is considered part of best practice. This means its use increasingly will become a standard by which all organizations can be evaluated by regulators and stakeholders. [Read more…]