1. Implementing an effective risk management strategy based upon knowledge Peter Scott

2. PETER SCOTT CONSULTING What is Risk? “Chance of bad consequences” The concise Oxford Dictionary

3. PETER SCOTT CONSULTING What is Knowledge? “The sum of what is known” The concise Oxford Dictionary

4. PETER SCOTT CONSULTING Risk Management Knowledge Management An integrated strategy

5. PETER SCOTT CONSULTING Law Firm Risks People Operational Regulatory IT Competition /business Economic, political, fiscal Financial Asset Reputational Management

6. PETER SCOTT CONSULTING Risk/KM Risks are inter-related Failure to manage knowledge involves widespread risk KM is an essential part of an integrated risk management strategy

7. PETER SCOTT CONSULTING Example: Reputational Risk Operational People Regulatory IT Competition & Business Markets Economic, Political & Fiscal Financial Assets Interaction with Knowledge/KM?

8. PETER SCOTT CONSULTING Law Firm Risks People Operational Regulatory IT Competition /business Economic, political, fiscal Financial Asset Reputational Management

9. PETER SCOTT CONSULTING Management Risks Is your management in control of its knowledge and managing your risk?

10. PETER SCOTT CONSULTING Your Risks? Where does the knowledge relating to your risks reside? Can you access it? Can you capture it? Can you maintain and upgrade it?

11. PETER SCOTT CONSULTING Implementing a Risk Strategy DIAGNOSIS Identification and assessment MITIGATION Control, transfer and avoidance MONITORING Tracking and reporting When a risk crystallises LIMITATION Minimising the effect of crystallised risks

12. PETER SCOTT CONSULTING Risk Identification Involves: Being management driven Brainstorming Facilitated discussions Questionnaires Top down/bottom up

13. PETER SCOTT CONSULTING Risk Diagnosis Assess severity of high-level risks Identify high level risks Set criteria for assessing risks Identify detailed risks Assess severity of detailed risks Risk map Risk summary

14. PETER SCOTT CONSULTING Risk Assessment Incidence - probability Impact - severity

15. PETER SCOTT CONSULTING Risk Mapping

16. PETER SCOTT CONSULTING Risk Mitigation Designed to: Reduce Avoid Accept Transfer

17. PETER SCOTT CONSULTING Risk mitigation Risk map Risk summary Consider impact/probability correlation Required controls summary Insurance requirements summary Contingency plan requirements Residual risk summary Consider available mitigation techniques

18. PETER SCOTT CONSULTING Monitoring involves Tracking and reporting Comparing actual outturns to preset indicators Confirming effectiveness of risk responses Reporting compliance and exceptions

19. PETER SCOTT CONSULTING Risk monitoring Required controls summary Contingency plan requirements Insurance requirements summary Set risk indicators and methods to monitor them Annual Risk Management Report

20. PETER SCOTT CONSULTING Limitation involves Risk crystalisation scenarios Contingency plans Limitation procedures Post event assessment

21. PETER SCOTT CONSULTING Use of IT Use an integrated risk management system to quantify, assess and control risk by : streamlining diagnosis, mitigation and monitoring embedding common risk management procedures providing information access to all who need it creating and maintaining one central, up to date risk database

22. PETER SCOTT CONSULTING Example – Risk Summary – an overview of risks

23. PETER SCOTT CONSULTING Example – Detailed Risks

24. PETER SCOTT CONSULTING Example - Controls

25. PETER SCOTT CONSULTING Example - Questionnaires

26. PETER SCOTT CONSULTING Example – Final Evaluation

27. PETER SCOTT CONSULTING Advantages of a formal risk management process? Structured approach focuses on key risks Elimination of redundant procedures Comfort / assurance to PI insurers Universal application to all risk areas Continuous monitoring ensures management of risk is “lived” day to day

28. PETER SCOTT CONSULTING Risk/KM Risk Management Knowledge Management

29. PETER SCOTT CONSULTING Implementing a Risk Strategy DIAGNOSIS Identification and assessment MITIGATION Control, transfer and avoidance MONITORING Tracking and reporting When a risk crystallises LIMITATION Minimising the effect of crystallised risks

30. PETER SCOTT CONSULTING Any questions?