The report describes the development of a new risk management culture within professions, companies and governments. The obsession with managing risk is creating organisations which are not so much risk averse as ‘responsibility averse’. In medicine, doctors are practising ‘defensive medicine’ where opinions are heavily qualified with caveats and patients left to make big decisions. The report also refers to growing evidence that since Enron’s failure, major accountancy firms are declining to work with ‘high risk’ clients - the very ones that should be thoroughly audited. “When disclaimer paragraphs are longer than the professional opinions they follow, we know something has gone wrong,” says author Professor Michael Power, a director of the ESRC Centre for Analysis of Risk and Regulation at the London School of Economics. “In the interests of transparency, small print should be made large and ruled out as a secondary risk management ploy. “The trends in professions such as medicine and auditing signal a withdrawal of individual judgement from the public. Minimal records are kept, staff are cautioned about the use of email, and normal correspondence is littered with disclaimers. The risk management of everything implies a society of ‘small print’.” Power sees the rise of the ‘risk management of everything’ as a related trend to the audit culture, which included the government’s now widely criticised love of targets as a policy tool. The Audit Explosion, Power’s previous Demos pamphlet, predicted that the overuse of audit leads to a focus on measurable outputs rather than real outcomes. “The most influential dimension of the audit explosion is the process by which [organisations] are made auditable and structured to conform to the need to be monitored,” Power wrote in 1994. Power’s new book argues that risk management is the ‘new audit’ and is having a similar distorting effect on the performance of professionals, companies and government.

OpRisk Awards 2020 Book of the Year Winner! The Authoritative Guide to the Best Practices in Operational Risk Management Operational Risk Management offers a comprehensive guide that contains a review of the most up-to-date and effective operational risk management practices in the financial services industry. The book provides an essential overview of the current methods and best practices applied in financial companies and also contains advanced tools and techniques developed by the most mature firms in the field. The author explores the range of operational risks such as information security, fraud or reputation damage and details how to put in place an effective program based on the four main risk management activities: risk identification, risk assessment, risk mitigation and risk monitoring. The book also examines some specific types of operational risks that rank high on many firms' risk registers. Drawing on the author's extensive experience working with and advising financial companies, Operational Risk Management is written both for those new to the discipline and for experienced operational risk managers who want to strengthen and consolidate their knowledge.

This guide is intended to help organisations put in place effective frameworks for taking informed decisions about risk. It brings together recommended approaches, checklists and pointers to more detailed information on tools and techniques. The topics covered include: the principles of risk management; how risks are managed; managing risks at the strategic, programme, project and operational level; techniques and examples of the benefits of risk management. The publication draws on the experience of experts from both the private and public sector.

Traditional risk management programs focus on managing and mitigating harms - in other words, on avoiding failure. But survey after survey tell us this approach is not convincing executives and boards that risk management is helping them achieve their objectives. They see it as a compliance exercise: something they have to do rather than want to do. Norman Marks draws on his personal experience as an executive and builds on the thinking in his previous books, including World-Class Risk Management, Risk Management in Plain English, and Making Business Sense of Technology Risk, to explain how risk management should instead focus on achieving success. This book discusses how a consideration of what might happen can enable informed and intelligent decisions from the setting of objectives and corporate strategies through the daily execution of the business. Those decisions enable the appropriate taking of risk so that the organization has an acceptable likelihood of achieving its objectives. An assessment of risk management is recommended by a majority of corporate governance codes around the globe and required by the Standards of the Institute of Internal Auditors. The book includes a comprehensive maturity model that details the attributes of the highest level of maturity envisaged in this book, as well as management surveys that can be tailored for your organization. They can be used as the basis for an assessment by management, the risk officer, or the internal audit team.

Since the mid-1990s risk management has undergone a dramatic expansion in its reach and significance, being transformed from an aspect of management control to become a benchmark of good governance for banks, hospitals, schools, charities and many other organizations. Numerous standards for risk management practice have been produced by a variety of transnational organizations. While these many designs and blueprints are accompanied by ideals of enterprise, value production, and good governance, it is argued that the rise of risk management has also coincided with an intensification of auditing and control processes. The legalization and bureacratization of organizational life has increased because risk management has created new demands for proof and evidence of action. In turn, these demands have generated new risks to reputation. In short, this important book traces the rise of the managerial concept of risk and the different logics and values which underpin it, showing that it has much less to do with real dangers and opportunities than might be thought, and more to do with organizational accountability and legitimacy.

With step-by-step guidelines, this bestselling reference discusses the management of project opportunities by expanding the traditional risk management process to address opportunities alongside threats. It offers valuable tools and techniques that expose and capture opportunities, minimize threats, and deal with all types of uncertainty in your business and projects. Written by an experienced consultant and risk management specialist, this guide emphasizes that risk processes must cover both opportunities and threats if they are to assist in accomplishing project objectives and maximizing business benefits.

Using the factor analysis of information risk (FAIR) methodology developed over ten years and adopted by corporations worldwide, Measuring and Managing Information Risk provides a proven and credible framework for understanding, measuring, and analyzing information risk of any size or complexity. Intended for organizations that need to either build a risk management program from the ground up or strengthen an existing one, this book provides a unique and fresh perspective on how to do a basic quantitative risk analysis. Covering such key areas as risk theory, risk calculation, scenario modeling, and communicating risk within the organization, Measuring and Managing Information Risk helps managers make better business decisions by understanding their organizational risk. - Uses factor analysis of information risk (FAIR) as a methodology for measuring and managing risk in any organization. - Carefully balances theory with practical applicability and relevant stories of successful implementation. - Includes examples from a wide variety of businesses and situations presented in an accessible writing style.

State of the art risk management techniques and practices—supplemented with interactive analytics All too often risk management books focus on risk measurement details without taking a broader view. Quantitative Risk Management delivers a synthesis of common sense management together with the cutting-edge tools of modern theory. This book presents a road map for tactical and strategic decision making designed to control risk and capitalize on opportunities. Most provocatively it challenges the conventional wisdom that "risk management" is or ever should be delegated to a separate department. Good managers have always known that managing risk is central to a financial firm and must be the responsibility of anyone who contributes to the profit of the firm. A guide to risk management for financial firms and managers in the post-crisis world, Quantitative Risk Management updates the techniques and tools used to measure and monitor risk. These are often mathematical and specialized, but the ideas are simple. The book starts with how we think about risk and uncertainty, then turns to a practical explanation of how risk is measured in today's complex financial markets. Covers everything from risk measures, probability, and regulatory issues to portfolio risk analytics and reporting Includes interactive graphs and computer code for portfolio risk and analytics Explains why tactical and strategic decisions must be made at every level of the firm and portfolio Providing the models, tools, and techniques firms need to build the best risk management practices, Quantitative Risk Management is an essential volume from an experienced manager and quantitative analyst.

People Risk Management provides unique depth to a topic that has garnered intense interest in recent years. Based on the latest thinking in corporate governance, behavioural economics, human resources and operational risk, people risk can be defined as the risk that people do not follow the organization's procedures, practices and/or rules, thus deviating from expected behaviour in a way that could damage the business's performance and reputation. From fraud to bad business decisions, illegal activity to lax corporate governance, people risk - often called conduct risk - presents a growing challenge in today's complex, dispersed business organizations. Framed by corporate events and challenges and including case studies from the LIBOR rate scandal, the BP oil spill, Lehman Brothers, Royal Bank of Scotland and Enron, People Risk Management provides best-practice guidance to managing risks associated with the behaviour of both employees and those outside a company. It offers practical tools, real-world examples, solutions and insights into how to implement an effective people risk management framework within an organization.

Whether man-made or naturally occurring, large-scale disasters can cause fatalities and injuries, devastate property and communities, savage the environment, impose significant financial burdens on individuals and firms, and test political leadership. Moreover, global challenges such as climate change and terrorism reveal the interdependent and interconnected nature of our current moment: what occurs in one nation or geographical region is likely to have effects across the globe. Our information age creates new and more integrated forms of communication that incur risks that are difficult to evaluate, let alone anticipate. All of this makes clear that innovative approaches to assessing and managing risk are urgently required. When catastrophic risk management was in its inception thirty years ago, scientists and engineers would provide estimates of the probability of specific types of accidents and their potential consequences. Economists would then propose risk management policies based on those experts' estimates with little thought as to how this data would be used by interested parties. Today, however, the disciplines of finance, geography, history, insurance, marketing, political science, sociology, and the decision sciences combine scientific knowledge on risk assessment with a better appreciation for the importance of improving individual and collective decision-making processes. The essays in this volume highlight past research, recent discoveries, and open questions written by leading thinkers in risk management and behavioral sciences. The Future of Risk Management provides scholars, businesses, civil servants, and the concerned public tools for making more informed decisions and developing long-term strategies for reducing future losses from potentially catastrophic events. Contributors: Mona Ahmadiani, Joshua D. Baker, W. J. Wouter Botzen, Cary Coglianese, Gregory Colson, Jeffrey Czajkowski, Nate Dieckmann, Robin Dillon, Baruch Fischhoff, Jeffrey A. Friedman, Robin Gregory, Robert W. Klein, Carolyn Kousky, Howard Kunreuther, Craig E. Landry, Barbara Mellers, Robert J. Meyer, Erwann Michel-Kerjan, Robert Muir-Wood, Mark Pauly, Lisa Robinson, Adam Rose, Paul J. H. Schoemaker, Paul Slovic, Phil Tetlock, Daniel Västfjäll, W. Kip Viscusi, Elke U. Weber, Richard Zeckhauser.