11 Tips to Effectively Conducting a Virtual Risk Assessment Workshop

The onset of the COVID-19 pandemic just over a year ago sent companies scrambling to shift their operations to remote work as much as possible. Although working from home has been a growing trend for many years, the pandemic undoubtedly accelerated it dramatically. Response has been positive with significant numbers of both employers (83%) and…
Read More
signpost analysis

Signpost Analysis – An Easy Way to Anticipate Long-Term Risks

With information and other demands for our attention bombarding us each day, it can be hard to think about the long-term. As a growing number of examples show, ignoring long-term risks to strategic objectives can be devastating, especially considering the world of Volatility, Uncertainty, Complexity, and Ambiguity (VUCA) we find ourselves in. While discussing the…
Read More

ERM for Small and Midsize Business: It’s Just NOT the Same

We’ve all heard it from politicians and the press, but it’s true – small and midsize business (SMB) constitutes the lion’s share of the economy. They account for 64% of new jobs created in the U.S. and over 90% of the “business population” according to this report. Gartner defines small businesses as those firms with…
Read More
recommendations

3 Questions to Consider if Management Rejects Recommendations Due to Cost

Occasionally, I examine local or national events with a risk lens to see what went right and wrong, such as this example of poor vendor risk management in my local community. Doing so can help us better understand areas we may need to improve in our own organizations to avoid similar consequences. Quick Synopsis of…
Read More
ERM standards

Making Sense of ERM Standards in a Volatile and Dynamic Environment

When we are new to something, our natural tendency is to seek out well-established, reputable sources for guidance. As a yummy example, once upon a time, I decided I wanted to make my own homemade chocolate chip cookies. My first step was to refer to the recipe on the back of the bag of Nestle-brand…
Read More

Performance-Focused Risk Management: Tying It All Together

Today’s article is a reprint of the last of four guest editorials originally published in The Demotech Difference, a journal targeting small- to midsize property and casualty insurance companies. The first three articles in the series delved into the foundations of building a performance-focused risk management process, specifically the importance of culture, identifying the company’s…
Read More
risk owners

3 Steps to Ensuring Risk Owners Ultimately Fulfill Their Obligations

It’s all too common…we ask someone to help with something just to be disappointed later. It’s frustrating…believe me I know. When it comes to managing risks and opportunities, we assign an “owner” to manage the day-to-day and ensure someone is responsible for the risk (and oversee the mitigation activities). As I discuss in this article…
Read More

Auditing your BCP and DR Program – Just How Resilient is your Organization?

This week’s article was provided by long-time auditor and IT expert Dan Swanson. See: Auditing your BCP and DR Program – Just How Resilient is your Organization? Why would I be sharing an article on business continuity planning (BCP) and disaster recovery (DR) you may ask? When companies were forced to abruptly shift to remote…
Read More

29 Biases and Traps that Prevent Good Decision-Making

It seems like bias is everywhere in our world… Some bias is healthy and normal. We may have a bias for or against a certain sports team or those of us who are parents will naturally be biased toward our children. But when it comes to decision-making in our organizations, bias can lead to putting…
Read More
technology risk

Is Technology Risk Bigger Than “Cyber” Risk?

It’s not an earth-shattering thing to say that news of hacks, data breaches, and other technology hiccups has grown exponentially in recent years. Between January and September 2019, 7.9 billion records were exposed, marking a 33% increase from the same period in 2018. A few of last year’s data breaches include: An error in pharmacy…
Read More

Meet Carol

​As an enterprise risk management consultant, my goal – and a real passion! – is ensuring companies have the tools they need to identify and properly manage threats and opportunities to business objectives ... Read More

Get our latest blogs directly in your inbox!

Menu