The lighthouse of risk management

Every once in a while we consider an area of management as critical to success.  However, the reality is all areas of management are just as critical to each other.

Risk management does however play its part in one key way – it is the lighthouse for running a business.  So what do I mean by this?

Essentially, risk management’s role is to show the business the good and the bad things out there on the horizon, either internally generated or externally generated.  This is not always the most glamorous of positions, and can sometimes make you downright unliked.  But, that is why risk management is such an important role in the business landscape.

Returning to the metaphor of the lighthouse, if one does not maintain the lighthouse appropriately, you will find that risk management will be ineffective.  And just like any lighthouse, if people chose to ignore the light being projected, or even worse, elect to travel in a place with the security of the lighthouse, then the complexity of compliance with the law, operational risks, strategic risks, reputational risks, technology risks and traditional banking risks (credit, non-traded, market) could potentially cause significant damage to the business.

So, now lets lay across the scope of the lighthouse the world of innovation.  Many people would now state that lighthouses are no longer needed because someone invented deep sea mapping and GPS systems.  However, what they neglect to realise here is this is the innovation of the lighthouse, to then help the business to manage the new ships or vessels they are innovating.  What amazes me, moving away from the metaphor slightly, is that some people think that risk management means you cannot innovate.  If that were true, then how do people successfully innovate and comply with the laws and risks surrounding innovation?  Because, they utilise all the experts they can to make the best solution.  These people, utilise the lighthouse to assist them, and then generate an even better outcome.

So, what does the lighthouse bring to the table for the business to continue to rely on it?  The risk management framework is all about assisting the business to understand the risks for the business as usual or for new initiatives.  The framework is essentially a process of working through what are the potential risks and what controls need to be develop to manage these risks effectively.  Risk management utilise the subject matter experts and the broad understanding of potential failures, through research (internally and externally) to work through these risks effectively with the business.

There is no golden rule that states you must use the lighthouse, or even pay attention to it, but history has shown that the many boats that did not utilise the lighthouse, well, they ended up somewhere at the bottom of the ocean.

More from the Reading Room

The Qantas privacy finding: a positive lesson in third-party oversight

A serious data breach does not automatically mean governance failed. The more important question is whether an organisation can demonstrate that it understood the risks,...

APRA’s CPS 230 Tweaks: Small Amendment, Big Governance Signal

APRA has released final targeted amendments to CPS 230 Operational Risk Management. The item is current and sits within APRA’s prudential framework, so boards and risk teams should treat it as a live governance and…

“Cheap and Out of Date”, a Board-Level Resilience Question

A practical risk maturity article using a current event to test ownership, evidence, controls, challenge and decision quality.

Everyone Passed. That’s Not the Point.

APRA's inaugural System Risk Stress Test found four major banks and six super funds individually resilient, but exposed concentration risk and a super-fund liquidity mechanism that could amplify a system-wide shock.