Risk

"The discussion of strategy cannot be separated from risk, as how risk is addressed impacts objective achievement... practicing 'nose in, fingers out'." 

- Norman Marks, Risk Academy

• Poor understanding of organisational risk appetite, capacity and tolerance
• Inadequate definitions for risk likelihood/impact levels, type and category, making it difficult to prioritise risk activities
• Poorly defined risks triggers and controls and visibility thereof
• Roles misaligned to the three lines model of defence (ownership, oversight, assurance)

• Clear visibility of risk appetite, capacity and tolerance
• Clear definitions to manage risks throughout their lifecycle and enable effective
• Well defined risks, treatments and reporting relevant to the audience
• Roles empowered and capable of providing effective risk ownership, oversight and assurance

• Foundation - Foundational roles, definitions, templates, processes and practices
• Establish - Supporting you to implement foundational elements
• Oversight - Review risk practices to identify improvement opportunities and improve maturity
• Reporting - Risk reporting templates for projects and governance
• Coaching - Helping risk