Using the factor analysis of information risk (FAIR) methodology developed over ten years and adopted by corporations worldwide, Measuring and Managing Information Risk provides a proven and credible framework for understanding, measuring, and analyzing information risk of any size or complexity. Intended for organizations that need to either build a risk management program from the ground up or strengthen an existing one, this book provides a unique and fresh perspective on how to do a basic quantitative risk analysis. Covering such key areas as risk theory, risk calculation, scenario modeling, and communicating risk within the organization, Measuring and Managing Information Risk helps managers make better business decisions by understanding their organizational risk. - Uses factor analysis of information risk (FAIR) as a methodology for measuring and managing risk in any organization. - Carefully balances theory with practical applicability and relevant stories of successful implementation. - Includes examples from a wide variety of businesses and situations presented in an accessible writing style.

Is your business playing it safe—or taking the right risks? If you read nothing else on managing risk, read these 10 articles. We've combed through hundreds of Harvard Business Review articles and selected the most important ones to help your company make smart decisions and thrive, even when the future is unclear. This book will inspire you to: Avoid the most common errors in risk management Understand the three distinct categories of risk and tailor your risk-management processes accordingly Embrace uncertainty as a key element of breakthrough innovation Adopt best practices for mitigating political threats Upgrade your organization's forecasting capabilities to gain a competitive edge Detect and neutralize cyberattacks originating inside your company This collection of articles includes "Managing Risks: A New Framework," by Robert S. Kaplan and Anette Mikes; "How to Build Risk into Your Business Model," by Karan Girotra and Serguei Netessine; "The Six Mistakes Executives Make in Risk Management," by Nassim N. Taleb, Daniel G. Goldstein, and Mark W. Spitznagel; "From Superstorms to Factory Fires: Managing Unpredictable Supply-Chain Disruptions," by David Simchi-Levi, William Schmidt, and Yehua Wei; "Is It Real? Can We Win? Is It Worth Doing?: Managing Risk and Reward in an Innovation Portfolio," by George S. Day; “Superforecasting: How to Upgrade Your Company's Judgment," by Paul J. H. Schoemaker and Philip E. Tetlock; "Managing 21st-Century Political Risk," by Condoleezza Rice and Amy Zegart; "How to Scandal-Proof Your Company," by Paul Healy and George Serafeim; "Beating the Odds When You Launch a New Venture," by Clark Gilbert and Matthew Eyring; "The Danger from Within," by David M. Upton and Sadie Creese; and "Future-Proof Your Climate Strategy," by Joseph E. Aldy and Gianfranco Gianfrate.

A comprehensive framework for assessing strategies for managing risk and uncertainty, integrating theory and practice and synthesizing insights from many fields. This book offers a framework for making decisions under risk and uncertainty. Synthesizing research from economics, finance, decision theory, management, and other fields, the book provides a set of tools and a way of thinking that determines the relative merits of different strategies. It takes as its premise that we make better decisions if we use the whole toolkit of economics and related fields to inform our decision making. The text explores the distinction between risk and uncertainty and covers standard models of decision making under risk as well as more recent work on decision making under uncertainty, with a particular focus on strategic interaction. It also examines the implications of incomplete markets for managing under uncertainty. It presents four core strategies: a benchmark strategy (proceeding as if risk and uncertainty were low), a financial hedging strategy (valuable if there is much risk), an operational hedging strategy (valuable for conditions of much uncertainty), and a flexible strategy (valuable if there is much risk and/or uncertainty). The book then examines various aspects of these strategies in greater depth, building on empirical work in several different fields. Topics include price-setting, real options and Monte Carlo techniques, organizational structure, and behavioral biases. Many chapters include exercises and appendixes with additional material. The book can be used in graduate or advanced undergraduate courses in risk management, as a guide for researchers, or as a reference for management practitioners.

Managing Risk in Organizations offers a proven framework for handling risks across all types of organizations. In this comprehensive resource, David Frame—a leading expert in risk management—examines the risks routinely encountered in business, offers prescriptions to assess the effects of various risks, and shows how to develop effective strategies to cope with risks. In addition, the book is filled with practical tools and techniques used by professional risk practitioners that can be readily applied by project managers, financial managers, and any manager or consultant who deals with risk within an organization. Managing Risk in Organizations is filled with illustrative case studies and Outlines the various types of risk—pure, operational, project, technical, business, and political Reveals what risk management can and cannot accomplish Shows how to organize risk management efforts to conduct risk assessments, manage crises, and recover from disasters Includes a systematic risk management processrisk management planning, risk identification, qualitative impact analysis, quantitative impact analysis, risk response planning, and monitoring control Provides quantitative and qualitative tools to identify and handle risks This much-needed book will enable organizations to take risk seriously and act proactively.

STRATEGIC RISK MANAGEMENT Having just experienced a global pandemic that sent equity markets into a tailspin in March 2020, risk management is a more relevant topic than ever. It remains, however, an often poorly understood afterthought. Many portfolios are designed without any thought given to risk management before they are handed off to a dedicated—but separate—risk management team. In Strategic Risk Management: Designing Portfolios and Managing Risk, Campbell R. Harvey, Sandy Rattray, and Otto Van Hemert deliver a reimagining of the risk management process. The book envisions a marriage between the investment and risk processes, an approach that has proven successful at the world’s largest publicly listed hedge fund, Man Group. The authors provide readers with a new framework for portfolio design that includes defensive strategies, drawdown risk controls, volatility targeting, and actively timing rebalancing trades. You will learn about how the book’s new approach to risk management fared during the recent market drawdown at the height of the COVID-19 pandemic. You will also discover why the traditional risk weighting approach only works on certain classes of assets. The book shows you how to accurately evaluate the costs of defensive strategies and which ones offer the best and most cost-effective protection against market downturns. Finally, you will learn how to obtain a more balanced return stream by targeting volatility rather than a constant notional exposure and gain a deeper understanding of concepts like portfolio rebalancing. Perfect for people working in the asset management industry and financial policy makers, Strategic Risk Management: Designing Portfolios and Managing Risk will also earn a place in the libraries of economics and finance scholars, as well as casual readers who take an active approach to investing in their savings or pension assets. PRAISE FOR STRATEGIC RISK MANAGEMENT “Strategic Risk Management shows how to fully embed risk management into the portfolio management process as an equal partner to alpha. This should clearly be best practice for all asset managers.” —Jase Auby, Chief Investment Officer, the Teacher Retirement System of Texas “This book shows the power of integrating risk and investment management, rather than applying risk management as an afterthought to satisfy set limits. I was pleased to shepherd some of the key ideas in this book through the publication process at The Journal of Portfolio Management.” —Frank J. Fabozzi, Editor, The Journal of Portfolio Management “Financial markets today are quite different from those of the last century. Understanding leverage, correlations, tails, and other risk parameters of a portfolio is at least as important as work on signals and alpha. In that sense, bringing risk management from ‘control’ to ‘front office’ should be a priority for asset managers. This book explains how to do it.” —Marko Kolanovic, Chief Global Market Strategist, J.P. Morgan A powerful new approach to risk management in volatile and uncertain markets While the COVID-19 pandemic threw the importance of effective risk management into sharp relief, many investment firms hang on to a traditional and outdated model of risk management. Using siloed and independent portfolio management and risk monitoring teams, these firms miss out on the opportunities presented by integrated risk management. Strategic Risk Management: Designing Portfolios and Managing Risk delivers a fresh approach to risk management in difficult market conditions. The accomplished author team advocates for the amalgamation of portfolio design and risk monitoring teams, incorporating risk management into every aspect of portfolio design. The book provides a roadmap for the crucial aspects of portfolio design, including defensive strategies, drawdown risk controls, volatility targeting, and actively timing rebalancing trades. You will discover how these techniques helped the authors achieve remarkable results during the market drawdown in the midst of the COVID-19 pandemic and how they can help you protect your assets against unpredictable—but inevitable—future bear markets. Ideal for professionals in the asset management industry, Strategic Risk Management: Designing Portfolios and Managing Risk is a valuable resource for financial policy makers, economics and finance scholars, and anyone with even a passing interest in taking an active role in investing for their future.

The Second Edition of Assessing and Managing Risk in Psychological Practice: An Individualized Approach adds significant new content to its coverage of the basic principles of risk management and its descriptions of how risk management strategies can be applied to specific areas of professional practice. This includes work with children and families, forensic psychology, assessment, psychotherapy, and other emerging areas of practice. Special attention is given to applying risk management principles in accordance with overarching ethical principles with the goal of improving the quality of services provided. The Second Edition will help readers: • Identify the contexts or circumstances that increase the risk of a disciplinary complaint; • Integrate the risk management strategies (documentation, informed consent, and consultation) based on overarching ethical principles into their practices; • Adapt patient-focused risk management strategies according to Bloom’s Taxonomy of Learning; • Describe unique ethical and legal risks and practice concerns when considering issues of competence, multiple relationships, and confidentiality; • Describe unique ethical and legal risks and practice concerns when treating couples, children or families, patients who threaten to harm themselves or others, or other difficult patients; • Describe unique ethical and legal risks and practice concerns when engaging in assessment, court appearances, or acting as a consultant or supervisor; and • Describe unique ethical and legal risks and practice concerns when billing for services, considering retirement, or purchasing professional liability insurance. Note that this publication is available in eBook formats.

Projects are risky undertakings, and modern approaches to managing projects recognise the central need to manage the risk as an integral part of the project management discipline. Managing Risk in Projects places risk management in its proper context in the world of project management and beyond, and emphasises the central concepts that are essential in order to understand why and how risk management should be implemented on all projects of all types and sizes, in all industries and in all countries. The generic approach detailed by David Hillson is consistent with current international best practice and guidelines (including 'A Guide to the Project Management Body of Knowledge' (PMBoK) and the 'Project Risk Management Practice Standard' from PMI, the 'APM Body of Knowledge' and 'Project Risk Analysis & Management (PRAM) Guide' from APM, 'Management of Risk: Guidance for Practitioners' from OGC, and the forthcoming risk standard from ISO) but David also introduces key developments in the risk management field, ensuring readers are aware of recent thinking, focusing on their relevance to practical application. Throughout, the goal is to offer a concise description of current best practice in project risk management whilst introducing the latest relevant developments, to enable project managers, project sponsors and others responsible for managing risk in projects to do just that - effectively.

Major accidents are rare events due to the many barriers, safeguards and defences developed by modern technologies. But they continue to happen with saddening regularity and their human and financial consequences are all too often unacceptably catastrophic. One of the greatest challenges we face is to develop more effective ways of both understanding and limiting their occurrence. This lucid book presents a set of common principles to further our knowledge of the causes of major accidents in a wide variety of high-technology systems. It also describes tools and techniques for managing the risks of such organizational accidents that go beyond those currently available to system managers and safety professionals. James Reason deals comprehensively with the prevention of major accidents arising from human and organizational causes. He argues that the same general principles and management techniques are appropriate for many different domains. These include banks and insurance companies just as much as nuclear power plants, oil exploration and production companies, chemical process installations and air, sea and rail transport. Its unique combination of principles and practicalities make this seminal book essential reading for all whose daily business is to manage, audit and regulate hazardous technologies of all kinds. It is relevant to those concerned with understanding and controlling human and organizational factors and will also interest academic readers and those working in industrial and government agencies.

This book describes philosophies, principles, practices and techniques for managing risk in projects and procurements, with a particular focus on complex or large-scale activities. The authors cover the basics of risk management in the context of project management, and outline a step-by-step approach. They then extend this approach into specialised areas of procurement (including tender evaluation, outsourcing and Public-Private Partnerships), introducing technical risk assessment tools and processes for environmental risk management. Finally they consider quantitative methods and the way they can be used in large projects. International case studies are included throughout.

This second edition provides a comprehensive overview of the SSCP Risk, Response, and Recovery Domain in addition to providing a thorough overview of risk management and its implications on IT infrastructures and compliance. Written by industry experts, and using a wealth of examples and exercises, this book incorporates hands-on activities to walk the reader through the fundamentals of risk management, strategies and approaches for mitigating risk, and the anatomy of how to create a plan that reduces risk. It provides a modern and comprehensive view of information security policies and frameworks; examines the technical knowledge and software skills required for policy implementation; explores the creation of an effective IT security policy framework; discusses the latest governance, regulatory mandates, business drives, legal considerations, and much more. --