Blog

Thoughts on ERM Software

Over the past year, I’ve had several conversations on the value of ERM-focused software. Some of these organizations are actively pursuing software while others are just checking in. Most of these organizations are currently using Excel and PowerPoint. In looking at the various products on the market, there were two general classes. One group was …

Thoughts on ERM Software Read More »

Effort or Outcome?

Many organizations will spend considerable effort developing a detailed list of mitigations. They have developed a list of risks, assessed the impact and likelihood of each risk, and then worked diligently to detail all of the mitigations. But the focus is entirely on effort. A few months back, I was talking with the director of …

Effort or Outcome? Read More »

A New Take on Risk Appetite

Why does one automaker retire its sedans while another doubles down on electric cars? Why does one big box retailer nurture young families while another pushes low prices for everyone? Those are radically different strategic choices. And each can be just as successful. Those strategies are so different, despite similar capabilities and markets, in part …

A New Take on Risk Appetite Read More »

A Year into COVID-19

A year ago, I wrote about 5 things I’m doing during the COVID-19 pandemic. My region had just entered a period of restrictions and I was adjusting as were many organizations. I stayed on course with my five things (see blog). Now it’s time for some new observations. Some Were Sought Out – Others Ignored …

A Year into COVID-19 Read More »

The ERM Team

I’ve been reading a lot on people’s views of current trends impacting risk management. As you’d expect, there is a lot of discussion on disruption and cyber risk. Some are focusing on the pros and cons of a three line of defense model. There is also a common thread of talking about risk analytics and …

The ERM Team Read More »

The Value of ERM

Over the past few weeks I’ve read a lot of discussions on ERM and the value of heat maps, approaches for tackling cyber-risk, the importance of understanding third-party exposures, the use of risk in decision-making, amongst others. Yet, the one discussion that seems to be missing is how ERM is actually going to help an …

The Value of ERM Read More »