top of page
Search


Do we trust our health professionals?
On the 17th of June 2022, the U.S. Food and Drug Administration authorized emergency use of the Moderna COVID-19 Vaccine and the...
2 min read


The Psychology of Risk
“There is no dearth of evidence in everyday life that people apprehend reality in two fundamentally different ways, one variously...
14 min read

How to operationalize risk management
TL;DR: It's about culture. If you have to 'operationalize' risk management, whatever you're doing isn't risk management. Risk management...
2 min read

(ISC)2 Black Swan Extinction Presentation
I've just finished giving a presentation at the ISC2 2021 Security Congress and several people asked for a copy of the slides. I hope...
2 min read


How to find a risk management consultant
The search for the elusive subject matter expert - how to find a risk management consultant when you need one.
3 min read


Are COVID-19 Vaccinations Effective?
Usually, when I come across a flawed piece of research, I note it and move on. Occasionally, however, I find a piece of research with...
4 min read


Webinar: RIP the Black Swan
If you missed the webinar, you can watch a recording of it below or on Youtube. In his 2008 book 'Fooled by Randomness' Nassim Nicholas...
2 min read


How to find money for risk treatments
We all want better risk management but how do you convince people to pay for it? That question turned into a book and series of articles.
2 min read


What's wrong with our Risk Management Policies?
"Without clear objectives ... there is no business case to justify resources for risk management." It should be no surprise that a clear,...
3 min read


Example of a Risk Management Policy
I've seen policy documents that were 50 pages long, which is crazy because nobody reads them. They often end up including procedures,...
3 min read


How to assess risk without a risk matrix
Risk assessment is a complex activity but it gets easier if you have the right tools and concepts.
1 min read

How to build a risk management framework (RMF)
When I joined the Department of Health and Ageing (yes, that's the correct spelling), my mandate was to "build a risk management...
4 min read


Ten tips on how to grow a business without burning out.
The right question for any business - and 10 answers for that question.
6 min read

What is the problem with Enterprise Risk Management (ERM)?
I've written about my version of what a fully featured enterprise risk management (ERM) system should, or at least could, look like....
10 min read


Rock pools and risk management
I often find people have varying ideas about 'enterprise risk management' and many managers think it means identifying and treating every...
1 min read


Three Steps To Deal With Uncertainty Without Killing Yourself In The Process
In 30 years of crisis management I can distill the success factors down to three things. Scenarios, lead indicators, and Plan Bs.
6 min read

How To Use A Risk Matrix
If you want to (or have to) use a risk matrix, here are some pitfalls to minimize the problems and maximize the benefits.
4 min read


Keep calm. And stop believing.
I used to believe in climate change. Growing up in the 1960s, our backyard abutted the grounds of one of the largest sugar mills in...
13 min read


The future of enterprise and risk management?
Imagine a system that monitors inputs, processes and outputs, tracking culture, and organizational behaviors.
2 min read


How to Turn a Job Interview Into a Job Offer
Job interviews are just a skill. Like any other, but more important than many because they can influence your whole life.
27 min read


Risk BowTie Method
Bow-Tie is one of the simplest but most helpful risk management tools in the risk management arsenal. And it's highly visual.
6 min read


How to measure ALARP
ALARP (As Low As Reasonably Practicable) is a fundamental concept in risk management, as it should be in life in general. It expresses...
3 min read

An example of a Risk Management Procedure
An example of a risk management procedure and some templates that you can download to customize.
7 min read


Likelihood versus consequence management...
It often seems that as a species; at least in most societies; that we spend most of our efforts on managing risks after they occur,...
6 min read
bottom of page