Opening the black box : what makes risk management pervasive in organisations?

This thesis is concerned with what pervasive risk management is, and how it can be achieved in practice. Specifically, it examines the effect of social processes and cultural factors on how risk management can be coordinated across and embedded within business processes and organisational culture. A growing literature addresses what is termed risk management maturity: the capability of an organisation to assess, manage, communicate and govern risk (and opportunity). Notwithstanding its benefits, the emphasis of this literature on risk management benchmarking and standardisation has led, arguably, to a bureaucratisation of risk management process. Research followed a case study strategy and data were gathered through semi-structured interviews. A total of 43 interviews were conducted in one private and one public sector organisation. The findings describe a number of social processes and related cultural factors that significantly affected risk management pervasiveness in the two organisations. (1) Shared experience and respect for experience facilitated flexible coordination between operational and strategic risk management. (2) Informal, lateral communication integrated the knowledge of diverse stakeholders required to manage complex environmental risks. (3) Lack of common understanding of the purpose and function of risk management undermined coordination of risk management practice. These findings progress the debate on the balance between standardisation and informal social process to achieve pervasive risk management, and contribute to a richer description of organisational risk management maturity. The findings are of value to risk managers wishing to embed the adaptive and coordinated risk management required in dynamic and complex environment

Effective risk governance for environmental policy making: a knowledge management perspective

Effective risk management within environmental policy making requires knowledge on natural, economic and social systems to be integrated; knowledge characterised by complexity, uncertainty and ambiguity. We describe a case study in a (UK) central government department exploring how risk governance supports and hinders this challenging integration of knowledge. Forty-five semi-structured interviews were completed over a two year period. We found that lateral knowledge transfer between teams working on different policy areas was widely viewed as a key source of knowledge. However, the process of lateral knowledge transfer was predominantly informal and unsupported by risk governance structures. We argue this made decision quality vulnerable to a loss of knowledge through staff turnover, and time and resource pressures. Our conclusion is that the predominant form of risk governance framework, with its focus on centralised decision-making and vertical knowledge transfer is insufficient to support risk-based, environmental policy making. We discuss how risk governance can better support environmental policy makers through systematic knowledge management practices

Protecting asset value and driving performance with a dynamic, risk-based contingency fund

We present a risk-based contingency fund management methodology to mitigate the impact of external risks on asset value and performance. Many asset intensive industries, such as water and energy utilities, are significantly affected by external risks such as extreme weather events. We put the case for a centrally held risk-based contingency fund that would mitigate against ‘medium’ impact ‘medium’ probability events that fall outside of large losses covered by insurance and smaller ‘normal’ operating losses. Our risk-based contingency approach is appropriate for short-term business planning (1–5 years) and would complement longer term planning, for example climate change adaptation and mitigation strategies. Our approach offers a risk-based methodology to manage contingency that is explicit and defensible. Critically, our methodology allows contingency to be managed dynamically as risk probabilities and impacts change, creating a mechanism for contingency funds to be periodically released if risk exposure reduces. The long-term benefit of dynamic, risk-based contingency is to reduce the impact of external risks and support long-term sustainability