Implementing an effective risk management strategy based upon knowledge Peter Scott.

Slides:



Advertisements
Similar presentations
Chapter 7 Managing Risk.
Advertisements

Managing Risk CHAPTER SEVEN Student Version Copyright © 2011 by The McGraw-Hill Companies, Inc. All rights reserved. McGraw-Hill/Irwin.
A Joint Code of Practice Objectives and Summary Presentation
How to put in place a compliance plan
Appendix H: Risk training slides (sample). What is Risk? “ Risk is the effect of uncertainty on objectives ” AS/NZS ISO31000:2009.
2006 TEA Conference Terry Berends, PE Assistant State Design Engineer Washington State Department of Transportation Risk Based Estimating Tools at WSDOT.
1 The critical challenge facing banks and regulators under Basel II: improving risk management through implementation of Pillar 2 Simon Topping Hong Kong.
Project Management Gaafar 2007 / 1 This Presentation is uses information from PMBOK Guide 2000 Project Management Risk Management* Dr. Lotfi Gaafar.
Project Management.
Outcomes focused regulation and compliance in practice Peter Scott Peter Scott Consulting
IOR Scottish Chapter Annual Conference Glasgow Caledonian University – 1 st November 2013 Relevance of Operational Risk to the FCA Jill Savager Manager,
How to Audit an ERP System via the Risk Management Route Presented by: Gabriel Lung ISACA London Chapter Events 2003/2004 ABN-AMRO, 250 Bishopsgate, London.
Tax Risk Management Keeping Up with the Ever-Changing World of Corporate Tax March 27, 2007 Tax Services Bryan Slone March 27, 2007.
Chapter 7: Managing Risk
Assessing firm risk September 2012 Andrew Garbutt Director of Risk, SRA.
Computer Security: Principles and Practice
The Information Systems Audit Process
Managing Project Risk.
Service Design – Section 4.5 Service Continuity Management.
PETER SCOTT CONSULTING Business Management Systemize your compliance with Rule 5 Peter Scott Peter Scott Consulting
Systemise your compliance management Peter Scott Consulting
Effective Identification and Management of Compliance Risks Peter Scott, 1 Peter Scott Consulting.
Chapter 2 A Strategy for the Appraisal of Public Sector Investments.
Disaster Recovery Policy & Procedures An Overview for Staff Prepared by MSM Compliance Services Pty Ltd.
Implementing an effective risk management strategy in a law firm
Project Risk Management
WHERE WE ARE 22 member associations in 20 countries Over 4300 individual members who are responsible for risk management and/or insurance in their organisations.
PMI Knowledge Areas Risk Management.
Project Risk Management. The Importance of Project Risk Management Project risk management is the art and science of identifying, analyzing, and responding.
Project Risk Management Supplement. The Importance of Project Risk Management  Project risk management is the art and science of identifying, assigning,
Audits & Assessments: What are the Differences and How Do We Learn from the Results? Brown Bag March 12, 2009 Sal Rubano – Director, Office of the Vice.
SMS Operation.  Internal safety (SMS) audits are used to ensure that the structure of an SMS is sound.  It is also a formal process to ensure continuous.
HIT241 - RISK MANAGEMENT Introduction
Managing Risk. Objectives  To Describe Risk Management concepts and techniques  To calculate and analyze a project using Probability of completion 
CDS Operational Risk Management - October 28, 2005 Existing Methodologies for Operational Risk Mitigation - CDS’s ERM Program ACSDA Seminar - October 26.
How to be an effective COLP Peter Scott Consulting
1 Chapter Three IT Risks and Controls. 2 The Risk Management Process Identify IT Risks Assess IT Risks Identify IT Controls Document IT Controls Monitor.
Risk Management Project Management Digital Media Department Unit Credit Value : 4 Essential Learning time : 120 hours.
Risk Management For the Board of The Law Society 16 February 2005.
2010 Virginia RIMS and PRIMA Conference October 5, 2010 Business Impact Analysis: The Road Map to Managing Risks.
Hartley, Project Management: Integrating Strategy, Operations and Change, 3e Tilde Publishing Chapter 10 Risk Management Proactively managing the positive.
Risk Management. IT Controls Risk management process Risk management process IT controls IT controls IT Governance Frameworks IT Governance Frameworks.
Chapter 11: Project Risk Management
IT Project Management, Third Edition Chapter 11 1 Chapter 6: Project Risk Management.
Risk Management in the Built Environment Qualitative and Quantitative Risk Management By Professor Simon Burtonshaw-Gunn – licensed under the Creative.
Risk Management Policy & Procedures An Overview for Staff Prepared by MSM Compliance Services Pty Ltd.
The Connection between Risk Management and Internal Control in Organizations Mag. Norbert Wagner Budapest,
Risk & Opportunity Management Putting theory into Practice Susy Austin MQM Business Consultant.
Managing Risk CHAPTER SEVEN Student Version Copyright © 2011 by The McGraw-Hill Companies, Inc. All rights reserved. McGraw-Hill/Irwin.
Risk Management, FUIEMS, 30 December 2009 Engineering Economics Risk Management Lecture 16 Engineering Economics Risk Management Lecture 16.
University of Minnesota Internal\External Sales “The Internal Sales Review Process” An Overview of What Happens During the Review.
Project Risk Management Planning Stage
Introduction to Project Management Chapter 9 Managing Project Risk
Risk Management for Small & Medium Sized Enterprises
Risk. Step 1-Risk identification Analyze the project to identify the source of risk Step 2-Risk Asessment Assess risk interms of Severity of impact Likely.
RISK MANAGEMENT. CONTENTS  DEFINITION  WHAT IS RISK  TYPES OF RISK  RISK MANAGEMENT PROCESS  APPROACHES TO RISK MANAGEMENT.
Managing Uncertainty, Creating Opportunity Enterprise Risk Management J. Brown, CEO.
Current risk and compliance priorities for law firms PETER SCOTT CONSULTING.
Dolly Dhamodiwala CEO, Business Beacon Management Consultants
INFORMATION SECURITY MANAGEMENT L ECTURE 8: R ISK M ANAGEMENT C ONTROLLING R ISK You got to be careful if you don’t know where you’re going, because you.
ON “SOFTWARE ENGINEERING” SUBJECT TOPIC “RISK ANALYSIS AND MANAGEMENT” MASTER OF COMPUTER APPLICATION (5th Semester) Presented by: ANOOP GANGWAR SRMSCET,
Financial Risks David Wong Friday 21 May 2004, Staple Inn Hall wp c.
The process of identifying and controlling the risks is called Risk Management.
Risk Management and Assessment
CompTIA Security+ Study Guide (SY0-401)
Risk Management Policy & Procedures
CHAPTER11 Project Risk Management
Recognization and management of RISK in educational projects
RISK MANAGEMENT MARKET & SOCIAL RESEARCH
Effective Risk Management in Decision Making Process
Presentation transcript:

Implementing an effective risk management strategy based upon knowledge Peter Scott

PETER SCOTT CONSULTING What is Risk? “Chance of bad consequences” The concise Oxford Dictionary

PETER SCOTT CONSULTING What is Knowledge? “The sum of what is known” The concise Oxford Dictionary

PETER SCOTT CONSULTING Risk Management Knowledge Management An integrated strategy

PETER SCOTT CONSULTING Law Firm Risks People Operational Regulatory IT Competition /business Economic, political, fiscal Financial Asset Reputational Management

PETER SCOTT CONSULTING Risk/KM Risks are inter-related Failure to manage knowledge involves widespread risk KM is an essential part of an integrated risk management strategy

PETER SCOTT CONSULTING Example: Reputational Risk Operational People Regulatory IT Competition & Business Markets Economic, Political & Fiscal Financial Assets Interaction with Knowledge/KM?

PETER SCOTT CONSULTING Law Firm Risks People Operational Regulatory IT Competition /business Economic, political, fiscal Financial Asset Reputational Management

PETER SCOTT CONSULTING Management Risks Is your management in control of its knowledge and managing your risk?

PETER SCOTT CONSULTING Your Risks? Where does the knowledge relating to your risks reside? Can you access it? Can you capture it? Can you maintain and upgrade it?

PETER SCOTT CONSULTING Implementing a Risk Strategy DIAGNOSIS Identification and assessment MITIGATION Control, transfer and avoidance MONITORING Tracking and reporting When a risk crystallises LIMITATION Minimising the effect of crystallised risks

PETER SCOTT CONSULTING Risk Identification Involves: Being management driven Brainstorming Facilitated discussions Questionnaires Top down/bottom up

PETER SCOTT CONSULTING Risk Diagnosis Assess severity of high-level risks Identify high level risks Set criteria for assessing risks Identify detailed risks Assess severity of detailed risks Risk map Risk summary

PETER SCOTT CONSULTING Risk Assessment Incidence - probability Impact - severity

PETER SCOTT CONSULTING Risk Mapping

PETER SCOTT CONSULTING Risk Mitigation Designed to: Reduce Avoid Accept Transfer

PETER SCOTT CONSULTING Risk mitigation Risk map Risk summary Consider impact/probability correlation Required controls summary Insurance requirements summary Contingency plan requirements Residual risk summary Consider available mitigation techniques

PETER SCOTT CONSULTING Monitoring involves Tracking and reporting Comparing actual outturns to preset indicators Confirming effectiveness of risk responses Reporting compliance and exceptions

PETER SCOTT CONSULTING Risk monitoring Required controls summary Contingency plan requirements Insurance requirements summary Set risk indicators and methods to monitor them Annual Risk Management Report

PETER SCOTT CONSULTING Limitation involves Risk crystalisation scenarios Contingency plans Limitation procedures Post event assessment

PETER SCOTT CONSULTING Use of IT Use an integrated risk management system to quantify, assess and control risk by : streamlining diagnosis, mitigation and monitoring embedding common risk management procedures providing information access to all who need it creating and maintaining one central, up to date risk database

PETER SCOTT CONSULTING Example – Risk Summary – an overview of risks

PETER SCOTT CONSULTING Example – Detailed Risks

PETER SCOTT CONSULTING Example - Controls

PETER SCOTT CONSULTING Example - Questionnaires

PETER SCOTT CONSULTING Example – Final Evaluation

PETER SCOTT CONSULTING Advantages of a formal risk management process? Structured approach focuses on key risks Elimination of redundant procedures Comfort / assurance to PI insurers Universal application to all risk areas Continuous monitoring ensures management of risk is “lived” day to day

PETER SCOTT CONSULTING Risk/KM Risk Management Knowledge Management

PETER SCOTT CONSULTING Implementing a Risk Strategy DIAGNOSIS Identification and assessment MITIGATION Control, transfer and avoidance MONITORING Tracking and reporting When a risk crystallises LIMITATION Minimising the effect of crystallised risks

PETER SCOTT CONSULTING Any questions?