The problem with control self-assessment
I've done a lot of work in developing metrics for control self-assessment and designing benchmarking protocols so it's not unusual that I...
JULIAN TALBOT
Books, consulting, training, and starting businesses. You can contact me via this link or the button above. Resources are under the DOWNLOADS menu, my FYI SmartList or SRMAM.com.
If you subscribe, I will keep you posted with new articles and let you know when I make Kindle versions of my books available for free download from Amazon.
Search
- 6 min
Dealing with nebulous risks and risk adaptation
I’d just scrambled off a long-distance bus ride in India at the typical chaotic celebration of life that is an Indian bus station. I've...
- 4 min
Peter Drucker was wrong
"What gets measured gets managed." - Peter Drucker [1] Like many cliches, "what gets measured gets managed" is correct enough to be...
- 5 min
Audits are useful, but auditing is essential
“Auditing is essential – and as far I am concerned it should be inquisitive auditing. If you read the report of a major incident you will...
- 7 min
What's wrong with quantitative risk assessment?
Quantitative risk assessment (QRA) is a practical approach for evaluating and analyzing risk. Some proponents of QRA argue that it is the...
- 3 min
Existential Risk as a Process
In Ernest Hemingway’s novel The Sun Also Rises, a passage in which a character named Mike is asked how he went bankrupt. “Two ways,” he...
- 2 min
Do we invest enough in training?
Our lack of investment in security and risk management training is becoming a societal risk. We are woefully underprepared for climate...
- 6 min
Some risk(y) thoughts
Let's start with the three most common errors when doing a risk assessment: Inadequate risk identification. Will the real risk please...
- 6 min
Risk Management for Executives and Company Directors
I have put all my intelligence and effort into some beautifully crafted risk assessments over my years as a practitioner and I've been...
- 2 min
Do we trust our health professionals?
On the 17th of June 2022, the U.S. Food and Drug Administration authorized emergency use of the Moderna COVID-19 Vaccine and the...
- 14 min
The Psychology of Risk
“There is no dearth of evidence in everyday life that people apprehend reality in two fundamentally different ways, one variously...
- 2 min
How to operationalize risk management
TL;DR: It's about culture. If you have to 'operationalize' risk management, whatever you're doing isn't risk management. Risk management...
- 2 min
(ISC)2 Black Swan Extinction Presentation
I've just finished giving a presentation at the ISC2 2021 Security Congress and several people asked for a copy of the slides. I hope...
- 3 min
How to find a risk management consultant
The search for the elusive subject matter expert - how to find a risk management consultant when you need one.
- 4 min
Are COVID-19 Vaccinations Effective?
Usually, when I come across a flawed piece of research, I note it and move on. Occasionally, however, I find a piece of research with...
- 2 min
Webinar: RIP the Black Swan
If you missed the webinar, you can watch a recording of it below or on Youtube. In his 2008 book 'Fooled by Randomness' Nassim Nicholas...
- 2 min
How to find money for risk treatments
We all want better risk management but how do you convince people to pay for it? That question turned into a book and series of articles.
- 3 min
What's wrong with our Risk Management Policies?
"Without clear objectives ... there is no business case to justify resources for risk management." It should be no surprise that a clear,...
- 3 min
Example of a Risk Management Policy
I've seen policy documents that were 50 pages long, which is crazy because nobody reads them. They often end up including procedures,...
- 1 min
How to assess risk without a risk matrix
Risk assessment is a complex activity but it gets easier if you have the right tools and concepts.
- 4 min
How to build a risk management framework (RMF)
When I joined the Department of Health and Ageing (yes, that's the correct spelling), my mandate was to "build a risk management...
- 6 min
Ten tips on how to grow a business without burning out.
The right question for any business - and 10 answers for that question.
- 10 min
What is the problem with Enterprise Risk Management (ERM)?
I've written about my version of what a fully featured enterprise risk management (ERM) system should, or at least could, look like....
- 1 min
Rock pools and risk management
I often find people have varying ideas about 'enterprise risk management' and many managers think it means identifying and treating every...