CHAPTER 5

Embedding Risk Management in the Business

Put at its most basic, as a business I do not need the greatest risk management function; rather, I need the greatest risk management and that requires risk management to be embedded within the business units themselves (the front line of the business or the first line of defense).

This is an easy thing to say, but a difficult thing to actually achieve. Staff will only understand what the purpose of risk management is if they both see its value and that senior management really believe in it and its importance. Embedding is never easy and many great risk management programs have failed for this simple reason.

If you were appointed risk management of a team that had failed to embed risk management, ...

Get Enterprise Risk Management in a Nutshell now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.