Transcript
SPEAKER 1
So good risk management is really about are we taking specific, timely action on the risks that we've identified to allow us to achieve the results that we set out to do.
SPEAKER 2
It's always difficult to tell if you're doing good risk management, because a sign that you're doing it well is that you don't have incidents, and things don't happen.
SPEAKER 1
Is there a regular review of those risks? So it's not about having, maybe on Friday afternoon- what are the risks this week? It's actually about trying to build it into the everyday conversations so that it becomes part of how we set out to manage businesses.
SPEAKER 3
In certain organisations, you often hear the phrase "we weren't aware that that was happening" or "we didn't know about that." so part of good risk management is about making sure that there isn't anything that's going to catch you unawares.
SPEAKER 1
Are the actions that are being taken actually helping to reduce the risks?
SPEAKER 4
It isn't about ticking boxes, filling in forms, and having reports. There's a reason why we do that, but that isn't risk management. That's just risk reporting.
SPEAKER 5
Less things will go wrong because I do cognisant decisions right at the front, so going, OK, this could happen, so I put countermeasures in place. Or I say this could happen, and I would be OK with that happening. So I actually say- I take that money aside or whatever because I can accept. I can live with it. So eventually, I will see less surprises, less incidents, things that hit me unprepared.
SPEAKER 6
I would say good risk management is happening when issues that might affect an organisation are being raised comfortably, confidently, early as well.
SPEAKER 4
If you hear, in conversation, people challenging assumptions, and conversing about risk, and asking probing questions, and trying to understand what could go wrong, what needs to go right, what are the things we've got in place- it's all around conversation. That gives me an indication that an organisation and people within the organisation kind of live and breathe and really understand what the purpose of risk management is.