Category Archives: Enterprise Risk Management

RIMS ERM Conference Preview: Q&A with Keynote Dr. Andrea Bonime-Blanc

Posted on by

This year’s RIMS ERM Conference will be held virtually on November 4 and 5, 2020, promising two days packed with informative sessions featuring global risk leaders. The conference kicks off November 4th with a live keynote delivered by Dr. Andrea Bonime-Blanc, founder of GEC Risk Advisory and the author of Gloom to Boom: How Leaders Transform Risk Into Resilience and Value. She will also answer questions from the audience during a live session on November 5th.

Andrea Bonime-Blanc

Dr. Bonime-Blanc recently appeared on RIMScast to discuss her upcoming keynote; the role technology has played in environmental, social and governance risks (ESG); and what risk practitioners must do to succeed today. Check out some highlights below, and download RIMScast episodes 100 and 101 for a deeper dive with Dr. Bonime-Blanc into topics such as diversity, strategic risk management and ways ERM practitioners can generate and retain value. If you’d like to watch her keynote and join RIMS for the rest of the ERM Conference 2020, registration is now open for all attendees.

How did you first begin using and implementing ERM in your career?

Dr. Andrea Bonime-Blanc: I was the general counsel of a startup within a much larger utility company, and we were the global division that was going all over the world in the mid- to late-1990s and early 2000s looking for electric power generation distribution opportunities. I became the risk manager because…[someone] needed to put the risk hat on. We ended up creating programs, policies, procedures to really perform risk management. Building power plants in the middle of the jungle of Colombia or negotiating a joint venture with a Chinese government corporation running a coal mine in northern China presents a number of risks.

When did you notice how vital it was to “wear the risk hat”? 

AB-B: I’ll give you the example of an environmental, health and safety risk: When I was at PSEG, we went into a lot of different countries, including at least six or seven major Latin American countries that were privatizing their electric assets. There were competitions to acquire those assets in the first place, which created a whole bunch of risks from a standpoint of fraud and government corruption. I supervised the legal teams, and also led audit and finance teams. We had utility folks who understood the environmental, health and safety aspects of the assets we were looking at. There were cross-functional and cross-disciplinary teams that would work with the legal department and the general counsel’s office to figure out the risks involved with acquiring those potential assets. It showed how ERM done properly provides that way of collating and collecting really important, strategic information that is necessary at the highest levels of an organization.

How can diversity—of people and perspective—influence ERM in an organization?

AB-B: ERM is a collaborative process. It requires many different minds. A good ERM program will draw upon the knowledge of other key people and functions within an organization. If it’s a standalone program, it won’t work. Drawing on the knowledge and expertise and experience of your colleagues in different parts of the organization is crucial. Likewise, ESG plus T is all about understanding your non-financial issues as well as the risks that will have a financial impact.

You noted the addition of “T,” which stands for “technology”—why is technology so integral to ERM now, and how does it tie into your keynote?

AB-B: The technology piece has become so overwhelming, so suffusing, so minute-by-minute for us in the world that we live in—whether it’s negative like cyberattacks, or positive things, and there are so many other issues in between. We’re just starting to scratch the surface of both the negative and the positive in these technology issues.

Risk professionals have a role to play in creating the information that reaches the management and the board, and building a risk savvy culture. This includes building ERM that is integrated with the strategy of understanding the ESG+T issues that are part of your business, and how you integrate with crisis management and business continuity, for example. These are all pieces of the resilience model that I will share at the end of the keynote. It is something that risk professionals really need to understand, because it not only liberates you from your silo—if you’re in a silo—but it also demonstrates your value to the rest of the organization.

How to Leverage Risk Management to Influence Positive Business Outcomes

Posted on by

Business strategy and risk management occupy separate spaces in most organizations. Business strategy sits at an enterprise or executive level, but risk management usually functions at a tactical and operational level. A chasm often exists between the two groups, removing important risk-based context from pivotal business decisions.

To bridge the chasm, risk management professionals must demonstrate to business leaders the value of the information they possess for one primary reason: the long-term growth and good of the business. Risk management today, bolstered by advances in technology, contains vital data that can inform executive decision-making to support business strategy, reduce risks and ensure long-term growth. To that end, risk management professionals need to take four steps.

1: Understand Enterprise-level Objectives, Outcomes, and Metrics.

buy xtandi online orthomich.com/img/blog/jpg/xtandi.html no prescription pharmacy

Objectives might include increasing revenue, launching a new product or providing customer support in a timelier fashion. These objectives are strategic in nature and can be broken down into specific business outcomes such as increasing production by a certain percentage or publishing a set number of technology upgrades or enhancements each year. The business outcomes, in their own turn, are tracked and measured using business metrics.
buy lexapro online orthomich.com/img/blog/jpg/lexapro.html no prescription pharmacy

2: Correlate Business Objectives with Risk Management Activities. Risk management professionals can assess how enterprise-level concerns correlate to what risk management is doing on a day-to-day basis. This requires a distinct shift in perspective, since activities such as conducting risk assessments, establishing controls to mitigate the impact of risks and assessing residual risk—while incredibly important for risk managers—do not directly tie into the enterprise’s business objectives and strategies.

3: Establish Leading Key Indicators that Tie to Business Outcomes. Risk management personnel need to establish a leading key risk indicator (KRI) that has a direct relationship with the desired business outcome. Typically, key indicators tend to be lagging in nature, such as tracking the number of cyberattacks that happened over the past quarter. This is useful information, but it is not effective in influencing business metrics or business outcomes. A leading indicator, in contrast, is one which provides advance notice of a situation before a risk event is experienced so that action can be taken to avoid or mitigate the impact of the event.

4: Present Metrics that Support Decision-Making.
Risk management professionals must also present these metrics in such a way that it supports decision-making by the target audience. In particular, risk metrics and key indicator need to be presented in their business context and in a manner that drives action.

buy rotacaps online orthomich.com/img/blog/jpg/rotacaps.html no prescription pharmacy

When a risk metric or key indicator shows that action must be taken to avoid loss or achieve gain, it becomes valuable to business leaders and decision makers.

Driving value related to business strategy requires both time and commitment on the part of risk management professionals. Once that value is proven, target audiences will begin to rely on and request KPIs and KRIs to support decision-making. They will understand the relationships between risk metrics and business outcomes. With this deeper understanding, risk management will no longer be viewed solely as an operational risk mitigation function. It will also be seen as a strategic function that contributes vital intelligence necessary for the long-term growth of the enterprise.

Mitigating Construction Risks with Advanced Training Techniques

Posted on by

Construction is consistently ranked as one of the riskiest jobs in the United States. Fluid workforces, high-risk scenarios and a communication disconnect between home office and front-line workers all result in the very real possibility of serious injury or even death.

One of the major challenges in the construction industry is getting information and training to the front-line workers who face the most risk, but are often the least informed. Company emails and company-issued phones go as far as the foremen but do not always make it down to the crew themselves. Training is not always readily available or is more compliance-based than it is practical for the day’s work. This creates major risks for front-line workers, contractors, insurers and anyone involved with ensuring construction projects are safely and accurately completed. As a result, the construction industry is increasingly turning to new virtual and mobile technology tools. In an effort to improve its communication and training practices and provide critical information to its workers.

Visualizing High-Risk Scenarios

New, interactive modules are allowing safety teams to offer more effective and engaging job-site training in the form of videos, quizzes, virtual reality and 3D simulators. Exposure-based training platforms can also provide a “hands-on” experience, giving front-line workers the opportunity to encounter different situations while in a safe environment.

For example, a 3D simulation of a “hazard hunt” tests workers by having them identify all of the potential hazards on a building such as tilt, unsafe conditions and proximity to power lines and how to mitigate those risks. Fire safety prevention can be made into an immersive experience to help a worker identify the proper fire extinguisher based on the simulated fire, increasing the likelihood that they will make the right choice in the event of an emergency.

Simulations can also take tradesmen step-by-step through the process of working on specific tasks, allowing them to learn the process from start to finish and monitoring for the most common risk exposures. To become a signalman when working with cranes, the current process is to watch videos and memorize the hand motions. With simulators, workers can now be put into specific scenarios and learn how to proceed in the safest way and without endangering the person or equipment. Ultimately, new exposure-based training helps workers overcome any natural inclinations that put them in harm’s way and increases their awareness of all the risks of a specific task or job site.

Facilitating Effective Communication

Construction workers may be on a site for three months, or they might work on a job for one day. In both cases, contractors take on the same level of risk when it comes to ensuring each employee is appropriately trained. And with a workforce that is constantly in motion, construction managers face the challenge of tracking who has been trained on what. Paper filing systems and limited access to the training records while onsite can lead to oversights when it comes to identifying improperly trained workers.

Virtual training allows contractors to more easily track exactly who is trained on what, and store the important documents in a digital archive. By keeping critical information readily available digitally, onsite managers can more quickly confirm and step in if someone is not properly trained and manage overall communication for the duration of the project even as the job site’s workforce changes.    

Builders are also using digital communication platforms to address the communication disconnect between the home office and the front-line workforce, and in order to reduce the risk of miscommunication. These apps allow teams to send messages, emergency alerts and even just-in-time training videos that can highlight safety hazards specific to the job site to individuals or entire crews in an instant, helping to reduce unnecessary work stoppages and operational friction. They can also deliver micro-training refresher courses so that workers can better retain and implement the new knowledge and skills they have learned.

By deploying new types of digital training techniques, companies can improve communication and provide the front-line workforce with the right information to make safe decisions on a job site, reducing overall risk and most importantly, ensuring that their workers get home safely.

Ahead of RIMS ERM Conference, Keynote Speaker Gretchen Anderson Talks Culture Change

Posted on by

At next month’s RIMS ERM Conference 2019, the opening keynote speaker will be Gretchen Anderson, director of the Katzenbach Center at PwC and co-author of The Critical Few: Energize Your Company’s Culture by Choosing What Really Matters. Her address will aim to provide risk professionals with a playbook for successful enterprise-wide culture change. She recently sat down with Risk Management Monitor for a preview, discussing the relationship between culture and productivity and the role of risk management in helping drive change.

Many companies have hired you to help them institute culture changes. What are some unrealistic goals you encounter?

online pharmacy robaxin with best prices today in the USA

Gretchen Anderson: The unrealistic goals that we hear about when we’re talking about culture change often have to do with speed and type. Regarding speed, the mistake I often hear leaders make is when they say something like: ‘I need my company’s whole culture to change by a deadline.’ That could be in time for them to roll out a new operating model or in time for a new CEO who’s about to take charge. And I tell them it takes much longer than they think it will take. Nevertheless, there are ways you can think about speeding that up as long as you accept that you’re working on a timeframe of years, and not months.
The other unrealistic goal is thinking you can implant another organization’s culture into yours. You can’t just copy another culture and expect that to spark innovation. Think of an enterprise as an organism that has to adapt or reject new tissue; an idea will be rejected if it doesn’t line up with the ways that people already like to work.

Is culture change easier for smaller or larger enterprises?

GA: A small company has the ability to test and learn really quickly, especially if they need to shift the culture into one where its people can work more virtually or even where they hold meetings more effectively. Small organizations have the advantage of moving quickly but they don’t have as much evidence and data points later, and so they don’t always see the cumulative effects over time simply because they have comparatively fewer employees than larger enterprises.

What are the top factors/traits you have noticed that companies possessed when implementing a successful culture change?

GA: Everything about a cultural evolution involves taking it out of the realm of faith and bringing it into the realm of proof. It can’t just be about people liking their work better, organizations [need to get] people to really understand how their behaviors, habits, norms and way of working are going to help their business be successful.

As a consultant, what has your experience with risk professionals been like?

GA: The people in risk management are such careful observers of the way that we work, the way that work gets done and what people can bring to a solution. I think their voice needs to be really strong to facilitate a discussion about how culture supports the business.

One of the key takeaways from the 2018 ERM Conference was that risk managers need to earn their seat at the table, but they can also be the drivers of culture change. Which do you think should come first?

online pharmacy rogaine with best prices today in the USA

GA: I would absolutely say a seat at the table has to come first. Once risk managers earn that seat, they can track how effective the change is and then that becomes the case for further change. I think it’s really authentic to act your way into a new way of thinking because it acknowledges there’s always a level of experimentation and proof in trying to evolve your behavior.

online pharmacy amoxicillin with best prices today in the USA

For Anderson’s full interview and a deeper dive into culture change, click here to check out her episode of RIMScast.