1. UNECE - MCOFE’s Change and Risk Management Project DEVELOPING RISK MANAGEMENT PRACTICES AMONG NSIs Survey on Risk management Practices Data Analysis & Comparison: Methodology

2. Page 2 Methodology: Combining inductive-deductive study 1.Quantitative method: Statistical analysis (Warsaw 28 May 2015) 2.Qualitative approach: In-depth analysis PARADIGMS: Reading Key- Criteria* ISO Quality model characteristics Risk rationalitiesFunctionality Uncertainty expertsReliability TechnologiesUsability Efficiency Maintainability Portability *supported by scientific literature (Miller & Rose, 1992; Arena, Arnaboldi, Azzone, 2010), international standards and guidances Subcharacteristics Adaptability  Replicability

3. Page 3 Qualitative approach: data analysis steps 1. Question analysis: Selection of Items for each reading key-criteria (i.e. “Training program on RM”) Identification of Descriptors for each item i.e. “Training program on RM” addressed to: i.only Top Management; ii.middle/low management iii.all employees 1. Question analysis: Selection of Items for each reading key-criteria (i.e. “Training program on RM”) Identification of Descriptors for each item i.e. “Training program on RM” addressed to: i.only Top Management; ii.middle/low management iii.all employees 2. Answer analysis: Bidimensional conceptual map: USE (U)-DEVELOPMENT (E) RM country practice identification (max 3) and map population 2. Answer analysis: Bidimensional conceptual map: USE (U)-DEVELOPMENT (E) RM country practice identification (max 3) and map population 3. Best practice analysis: Focus on ADAPTABILITY among the ISO Quality Model characteristics From ADAPTABILITY to REPLICABILITY Question Linkage: content cluster reaggregation (survey) to read and validate the best practice consistency 3. Best practice analysis: Focus on ADAPTABILITY among the ISO Quality Model characteristics From ADAPTABILITY to REPLICABILITY Question Linkage: content cluster reaggregation (survey) to read and validate the best practice consistency

4. Page 4 USE Item: Training Descriptor: addressed to all employees Item: Training Descriptor: addressed to middle/low management Item: Training Descriptor: addressed to Top Management DEVELOPMENT Low Medium High Low Medium High Bidimensional conceptual map: item population example Technologies

5. Page 5 USE Item: Training DEVELOPMENT Low Medium High Low Medium High Bidimensional conceptual map: practice population example Practice 1: Country x Practice 2: Country y Practice 3: Country z Technologies

6. Page 6 Towards the Guidelines  Selection of best practices identified by in-depth analysis  Coherence analysis by responses Chapter 1 1.1 Process 1.2 Roles & Accountabilities 1.3 Training 1.4 … 1.5 … Chapter 1 1.1 Process 1.2 Roles & Accountabilities 1.3 Training 1.4 … 1.5 …