Operational Risk

The better question is whether the organisation can show how conflicts are identified, declared, challenged, escalated and evidenced before an external inquiry, regulator or media story exposes the gap.

Coles, Woolworths and IAG each faced regulatory action over pricing for the same reason: a gap between what customers were told and what the pricing system actually did. This post uses those cases to ask whether your organisation can show how pricing decisions are owned, challenged and tested for customer outcomes — before a regulator does it for you.

A practical risk management article using a current source event to test ownership, evidence, controls and maturity.

A practical risk management article using a current source event to test ownership, evidence, controls and maturity.

The deeper lesson is that cyber risk maturity must be embedded into normal strategic, operational, supplier and technology assessments.

For boards and management teams, the deeper issue is not the technology headline. It is whether the organisation can clearly evidence how it understands its systems, suppliers, critical processes, data pathways, control environment and escalation triggers.

Introduction Today marks a momentous occasion in the world of financial services as the Prudential Regulator APRA releases the final version of CPS230. This milestone heralds a critical step in the development of operational risk...

Operational resilience is a critical factor in the success of any organisation, both strategically and operationally