Sadly some businesses develop excellent risk management reports and design impressive looking plans which are presented to senior management (or to the auditors) and then get filed away. Therefore RISK ACTION TRACKING and MONITORING OF RISK ACTION EFFECTIVENESS is vital to the success of any risk management process.
This is where senior management can play a crucial leadership role. The actions identified in the risk management action plan should clearly describe who is responsible for implementing the action and a date by which the action must be completed. Where appropriate specific metrics should be included in the plan (for example – numbers of safety inspections per month, numbers of transactions to be checked in accounting audits, numbers of customers included in satisfactions surveys etc.).
A complete review of a risk subject’s risk list and action plan should be undertaken at an appropriate regular interval – often this is once a year. After the first year this can focus on trying to identify any new risks which have been forgotten previously, trying to improve any ongoing risk management action plans based on experience, and learning from mistakes during the intervening period (like risks which occurred but had not been appropriately identified in the previous review).
Leadership should schedule regular risk action review meetings in which the status of any outstanding actions from the last risk review are checked and delays or incomplete actions explained by the risk action owners.
Unannounced spot checks or audits of a departments risk process and its action plan can also help to keep the process alive in the minds of those involved. Ultimately if staff consistently transgress the process should be reviewed to check that it is not unrealistic in its expectations. If the risk action owners are unable to carry out their actions their capability should be checked. In some cases additional resources may be required to ensure important actions are completed properly. If someone deliberately transgresses and there are no appropriate mitigating circumstances then disciplinary action should be considered.
Good risk management is important for the safety of employees and neighbours, for the environment and for the long term financial success of any business.
On my personal site I often write articles about risks which may be useful in helping you to identify potential risk areas. If you would like to take a look at this please follow the link here. In addition to covering business risk some of the articles relate to personal and health risk (like recent ones about child liability on ski holidays and allergic contact dermatitis from laundry additives).
All Intellectual Property Rights Owned by Chris Duggleby