In my 2013 book "Mastering 21st Century Enterprise Risk Management" I prophetically stated “just as the Wild West of the 1890's had disappeared without trace by the Roaring 1920s, so too will the business world of the 1990s, be long forgotten by the 2020s”. Just 5 years on and not only has the world changed emphatically but the rate of change is accelerating..
Enterprise Compliance Today
So why don’t most Enterprise Risk Management system work? Simply, they don’t “manage” risk, they just record it. Manage is a verb not a noun. It is activity not an item. Making a list might be adequate for those who want to check off regulatory compliance, but it’s does not produce a ROI.
Unfortunately, there seems to be a lack of understanding of what GRC really is. Contrary to popular belief GRC is NOT ERM, but 3 separate disciplines Governance, Risk and Compliance. Here I look at the neglected Governance component.
When starting out on the Compliance Management journey, understanding the alphabet soup of acronyms can be confusing. Here we try to explain the terms, what needs to be done, and need for compliance management software in the process.
Just like the Brexit win 2 months ago, Donald Trump’s election as US President beggars belief but has some valuable lessons to learn from both a Risk Management and corporate governance perceptive.
Last week’s simultaneous DDoS cyber-attack on major US websites from Twitter to New York Times, exposed the serious vulnerability for those with cloud based Risk & Compliance solutions. It looks like some people may be cutting off the branch they are sitting on!
Last week saw the latest in misguided innovation talkfests, the AFR Innovation Summit #Innovation16. For several days academics, public servants, journalists, and corporate employees put forward their insights into how Australia can develop an Innovation culture.
This week I digress from my usual evangelism of all things GRC for a bit of self-indulgent introspection asking the rhetorical question: Why is our only tolerance the tolerance of prejudice?
“Ultimately, America's answer to the intolerant man is diversity.” — Robert Kennedy.
I have often written on my view that there is an over emphasis these days on Black Swans in risk management. The Brexit vote on Thursday not only shot shockwaves through financial markets but has created a whole new paradigm to world economic stability both short and long term. And if Risk is defined as uncertainty then as of today, this must be one of our greatest risks.
Risk management is suffering from too much consultant-speak – mystifying what is a standard business practice. When inducting new staff in the concepts of risk management, I use the most obvious analogy which clarifies the issues simply: that of our own mortality.