Articles
Tag: norman marks
-
Are Your Business Decisions Failing Because They Are Biased?
The essential first step in combating biases is recognizing our own fallibility, our own biases.
Continue reading...
-
How to Assess the Effectiveness of Risk Management
Few organizations are seen as having effective risk management, so there is no exemplar against which to measure success.
Continue reading...
-
CEOs Aren't Idiots When it Comes to Risk Management
Management needs to take risks to survive and thrive, and that means balancing the potential harms that may occur against the potential rewards.
Continue reading...
-
If Risk Management Is the Answer, What Is the Question?
We need to stop coming up with new words and phrases when all we need to address is the effectiveness of management.
Continue reading...
-
Time (Again) for the IIA Standards to Be Corrected
IIA standards need to be updated so audit providing assurance on enterprise-level risks, not what matters to middle management alone.
Continue reading...
-
The Cost of a Cyber Breach
Deciding how much to invest in cybersecurity requires considering the likelihood of achieving objectives given all sources of risk, not just cyber.
Continue reading...
-
A Board That Would Fail Any Test of Its Governance Practices
Ten principles for what constitutes effective oversight of risk management by a board.
Continue reading...
-
The Positive Side of Risk
If we can’t agree on what the terms risk and opportunity mean, how can we have a constructive conversation?
Continue reading...
-
The Problem With Software for GRC
Even if it were possible to have one piece of software that included everything in GRC, very few companies claim to have integrated their related technologies.
Continue reading...
-
Are We Taking Risk, Making a Decision or Gambling?
What's the difference between taking a risk, making a decision or gambling?
Continue reading...
-
Transforming Risk Management in 2019 and Beyond
Will 2019 be the year we finally drop the word "risk" from risk management?
Continue reading...
-
Stop Managing and Start Taking Risks
Risk isn't something to be managed, it's something to study to establish the positive or negative effects it will have on business objectives.
Continue reading...
-
Who Is Taking the Cyber Risk?
When we look at who in an organization assumes cyber risk, it's everyone who touches it.
Continue reading...
-
A Basic Principle Most People Don't Understand About Risk
Can you limit your risk assessment to one exact point? Risk carries a range of potential outcomes.
Continue reading...