Risk Management: Moving the Framework to Implementation

This briefing provides highlights of a study of how government organizations have brought their risk management policies to life. It explores successful risk management driven by experimentation, the support of corporate leadership and the incorporation of risk management into how each organization operates.

Document Highlight

This briefing provides highlights of a recent Signal49 Research–Deloitte study of how government organizations in Canada and in several countries around the world have brought their risk management policies to life.

The briefing looks at eight common risk management implementation practices:

• Plan to Adapt and Learn

1. : Develop and refine the implementation process through experimentation, real organizational learning, and the engagement of staff and stakeholders.

1. 1. Provide Leadership Support: Demonstrate visible and continuous senior leadership.

1. 1. Adequately Resource and Manage: Ensure the right mix of skills at the right levels.

1. 1. Make It Real: Keep risk management pragmatic and relevant to day-to-day operations.

1. 1. Integrate into Management Processes: Incorporate risk management into existing planning and decision-making processes.

1. 1. Engage Stakeholders: Include and communicate with stakeholders early in the process.

1. 1. Make It Transparent: Build transparency into the risk management design.

1. Establish Risk Tolerances: Provide a forum to discuss risks and reach a shared understanding of thresholds.