Risk Management on Andrew Sheves

Getting the Risk Assessment to Work For Us

Fri, 13 Dec 2024 00:00:00 +0000

I’ve had a lot of conversations about risk assessments recently and just finished a new feature in the Decis platform, both of which prompted this thought: What if we have things backwards? What if our risk assessment updated us instead of the other way around?

We spend days — sometimes weeks — building a comprehensive risk assessment to understand our risks and build mitigation measures. But these are snapshots in time and can quickly become overtaken by events. That’s when we move from risk management to incident management or at minimum, we have to review our mitigation.

Threats are accelerating: so should we

Tue, 02 Apr 2024 00:00:00 +0000

We are moving too slowly

The existential threat that businesses and many countries are facing currently is not from artificial intelligence, climate change, the danger of another financial meltdown or a conflict.

The threat they need to address most urgently is an inability to move quickly and the events that we are facing far outpace our ability to understand, orientate, make decisions, and act.

(Spoiler: it’s impossible to plan your way out of a problem. At some point, we have to take action.)

Using blockchain to validate records in DCDR

Wed, 24 Feb 2021 00:00:00 +0000

Security is a guiding principle for DCDR, and protecting user data has been baked in from the start. However, there’s more to data security than restricting access and managing user permissions. I’ve used the INFOSEC abbreviation CIA – confidentiality, integrity, and availability – as a guide to help determine the steps required to protect your data while also ensuring that the system does what it’s supposed to. Overall, the intent is to ensure:

November is risk management training month

Sun, 25 Oct 2020 00:00:00 +0000

What’s a Black Swan & why you need contingency plans

Sun, 14 Jun 2020 00:00:00 +0000

I’m sure you’ve heard people referring to COVID-19 as a ‘Black Swan’ – something that no-one could have seen coming – but is that actually the case?

Terrible though it is, I don’t think it’s accurate to describe the current situation as a Black Swan because we’ve had to deal with highly contagious, deadly diseases before.

Calling this a ‘Black Swan’ is, therefore, a way to excuse a confused response: ‘how could we have prepared for something that no-one could see coming?’

They Might Not Want a Hammer: How to Understand an Organization

Tue, 28 May 2019 00:00:00 +0000

One of the things I’ve enjoyed most as a consultant is having the opportunity to learn about organizations from a wide variety of sectors. These have ranged from schools, NGOs and the private offices of high net-worth individuals to Fortune Five oil and gas companies and governments. On the one hand, I’ve discovered that there are considerable similarities in all organizations, no matter their sector or size. However, I’ve also become acutely aware that the things that make the most significant difference – good or bad – are often very subtle.