Workshop Summary

Organizations take risks all the time but fail to monitor and manage these risks effectively in an environment that demands agility. Too often, risk management is seen as a compliance exercise and not truly integrated with the organization’s strategy, decision-making, and objectives. It results in the inevitable failure of risk management, providing case studies for future generations on how poor risk and resiliency management leads to the demise of organizations – even those with strong brands.

Keeping risk, complexity, and change in sync is a significant challenge for the organization’s boards, executives, and management professionals. This challenge is even greater when risk management is buried in the depths of departments and approached from a compliance or audit angle, not as an integrated discipline of decision-making that has a symbiotic relationship with performance and strategy.

This is further compounded when business continuity programs are completely disconnected and not part of risk management. Organizations need to understand how to monitor risk-taking, measure that the associated risks are the right risks, and review whether the risks are managed effectively to ensure the organization’s resilience.

The ecosystem of business objectives, uncertainty/risk, and integrity is complex and interconnected and requires a holistic, contextual awareness of the organization – rather than a dissociated collection of processes and departments.

Change in one area has cascading effects that impact the entire ecosystem. This interconnectedness of business demands 360° contextual awareness in the organization’s risk and resilience processes to reliably achieve objectives, address uncertainty, and act with integrity.

Organizations must see the intricate intersection of objectives, risks, and boundaries across the business. Firms globally and across industries are focused on integrating risk management and resilience (historically business continuity/disaster recovery) programs.

This is becoming a key regulatory requirement in some industries. Delivering this requires a holistic view of the objectives and processes of the organization in the context of uncertainty and risk and the symbiotic interaction of risk management and business continuity.

This workshop aims to provide a blueprint for attendees on successful risk and resilience management with an integrated strategy, process, information, and technology architecture.

Part 1: Risk & Resilience by Design

Why Risk & Resilience Management Matters

• Risk and Resilience in Disarray: how organizations mismanage risk and resilience
• Risk Exposure: how mismanaged risk expose the organization
• Current drivers & trends on organizations in risk and resilience management
• Different ways organizations approach risk and resilience management
• What Effective Risk & Resilience Management Achieves

Part 2:  Risk & Resilience Governance

Blueprint for Effective Risk & Resilience Management

• Risk & Resilience Governance Committee: bringing together the range of risk and resilience roles and responsibilities in the organization
• Risk & Resilience Management Charter: defining a structure to govern risk and resilience across the organization
• How to Develop a Risk & Resilience Management Strategic Plan

Part 3: Risk & Resilience Management Lifecycle

Managing Risk & Resilience in Context of Business Change

• Risk identification
• Ongoing risk and internal/external business context monitoring
• Risk assessment, business impact assessments, and scenario planning
• Risk treatment and engagement with the business
• Risk & resilience metrics & reporting
• Risk & resilience evaluation, benchmarking & assurance

Part 4: Risk & Resilience Management

Architecture Enabling Information & Technology Management for Risk & Resilience Management

• Risk & Resilience Management Information Architecture: Blueprint for Managing Risk & Resilience Content and Related Data
  • Types of risk and resilience management information and how it integrates into risk management processes
  • Components and requirements for a compliance information architecture

• Risk & Resilience Management Technology Architecture: Blueprint for Enabling Risk & Resilience Management Processes with Technology
  • Kinds of risk and resilience management technologies and what best serves the organization
  • Capabilities and requirements of risk and resilience management platforms
• Risk & Resilience Management Business Case: Articulating the Value of Effective Risk & Resilience Management