Avoiding tripping over the hurdles of risk

In life, it is extremely easy to forget what is important to you as a Risk Manager, may not be important to others. In addition, not only do we sometimes forget what is important, we confuse what is urgent with what is important. For those of you familiar with the “7 Habits” this will sound extremely familiar.

Showing resilience and efficiency requires the Risk Manager to be concious of the distinction between importance and urgency.

Too often Risk Managers get caught up in what is considered urgent, thereby neglecting what is important and not actually delivering true businsss value.

In this respect it is often assumed that the Risk Manager should be the first person to know and take responsibility when an issue or event arises.  They will lead the way by ensuring that everyone is aware of their responsibilities and their actions.  In addition, they will be the gatekeeper of ensuring the event or issue is managed through the process, and make key decisions.

Unfortunately if your Risk Manager is doing this then he or she is actually not helping the business manage risk but rather becoming part of the problem.  Why do we say this?

The role of the Risk Manager is not to manage your risk for you but rather to provide the platforms, spaces and thoughts to make risk management a critical component of running a successful business.  Effectively, the role of the Risk Manager is to coach and train you not to trip over the hurdles but rather jump all of the hurdles without hitting them.  But when you do happen to knock one and have an issue or event, that it does not see you or your business completely fail but rather manage through the small trip with resilience and efficiency.

This then allows the Risk Manager to focus on the next 20, 30, 50, 100 or 1,000 hurdles that may be in front of your business, and provide you with the information to better help you leap those hurdles with efficiency and effectiveness.

So, pay attention Risk Managers to the choices of importance and urgency of what you are focusing on as your true goal should be to help your business achieve ultimate business success through each employees ownership and responsibility of risk management.

More from the Reading Room

The Qantas privacy finding: a positive lesson in third-party oversight

A serious data breach does not automatically mean governance failed. The more important question is whether an organisation can demonstrate that it understood the risks,...

APRA’s CPS 230 Tweaks: Small Amendment, Big Governance Signal

APRA has released final targeted amendments to CPS 230 Operational Risk Management. The item is current and sits within APRA’s prudential framework, so boards and risk teams should treat it as a live governance and…

“Cheap and Out of Date”, a Board-Level Resilience Question

A practical risk maturity article using a current event to test ownership, evidence, controls, challenge and decision quality.

Everyone Passed. That’s Not the Point.

APRA's inaugural System Risk Stress Test found four major banks and six super funds individually resilient, but exposed concentration risk and a super-fund liquidity mechanism that could amplify a system-wide shock.