Risk Management Strategy

---

Opportunity and risk come in pairs

---

A risk management strategy provides a structured and coherent approach to identifying, assessing and managing risk or uncertainties followed up by minimizing, monitoring and controlling the impact of risk realities or enhancing the opportunity potential by applying coordinated and economical resources.

Risk management is essential in any business. It lays foresight for returns on investments and projects all potential backlash a company could face by starting a new (or even routine) endeavor.

It builds in a process for regularly updating and reviewing the assessment based on new developments or actions taken. A risk management strategy can be developed and implemented by even the smallest of groups or projects or built into a complex strategy for a multi-site international organisation.

The process of identifying and reviewing the risks that you face is known as risk assessment. By assessing risks you are able to be actively aware of where uncertainty surrounding events or outcomes exists and identifying steps that can be taken to protect the organisation, people and assets concerned. How this is achieved and the level of detail which is considered can vary between organisations. In many circumstances, where staff or volunteers have a more hands-on role in the organisation, the Management Committee may not carry out the risk assessment themselves.

Risk Responses:
Management selects a risk response strategy for specific risks identified and analyzed, which may include:

• Avoidance: exiting the activities giving rise to risk
• Reduction: taking action to reduce the likelihood or impact related to the risk
• Alternative Actions: deciding and considering other feasible steps to minimize risks
• Share or Insure: transferring or sharing a portion of the risk, to finance it
• Accept: no action is taken, due to a cost/benefit decision

Monitoring is typically performed by management as part of its internal control activities, such as review of analytical reports or management committee meetings with relevant experts, to understand how the risk response strategy is working and whether the objectives are being achieved.

Common challenges include:

• Identifying executive sponsors for ERM.
• Establishing a common risk language or glossary.
• Describing the entity's risk appetite (i.e., risks it will and will not take)
• Identifying and describing the risks in a "risk inventory".
• Implementing a risk-ranking methodology to prioritize risks within and across functions.
• Establishing a risk committee and or Chief Risk Officer (CRO) to coordinate certain activities of the risk functions.
• Establishing ownership for particular risks and responses.
• Demonstrating the cost-benefit of the risk management effort.
• Developing action plans to ensure the risks are appropriately managed.
• Developing consolidated reporting for various stakeholders.
• Monitoring the results of actions taken to mitigate risk.
• Ensuring efficient risk coverage by internal auditors, consulting teams, and other evaluating entities.
• Developing a technical ERM framework that enables secure participation by 3rd parties and remote employees.

A risk management strategy provides a structured and coherent approach to identifying, assessing and managing risk or uncertainties followed up by minimizing, monitoring and controlling the impact of risk realities or enhancing the opportunity potential by applying coordinated and economical resources.

Our experts partner with clients on corporate planning, providing perspective not only on immediate value and impact, but on long-term implications. We work closely with management and other advisers to leverage and complement their knowledge and ensure maximum impact, and actively support implementation and skill building.