Risk

I read, write, consult, design, deliver risk management training, build software, and travel. These are some of my favourite things to do and you'll find a lot of the results on this website.

I also enjoy helping people solve problems and become more successful, so drop me a line if you'd like some advice over a conversation. The first 15 minutes are free, so you're mad if you don't :-).

For more good ideas, my latest book has its own website and my other websites are at my FYI SmartList.

Subscribe, I will let you know when I make Kindle versions of my books free. I'll also let you know as soon as the new website is up for the Security Risk Management Body Of Knowledge (SRMBOK).

6 min

Risk management for executives and company directors

I have put all my intelligence and effort into some beautifully crafted risk assessments over my years as a practitioner and I've been...

14 min

The Psychology of Risk

“There is no dearth of evidence in everyday life that people apprehend reality in two fundamentally different ways, one variously...

2 min

How to operationalize risk management

TL;DR: It's about culture. If you have to 'operationalize' risk management, whatever you're doing isn't risk management. Risk management...

2 min

(ISC)2 Black Swan Extinction Presentation

I've just finished giving a presentation at the ISC2 2021 Security Congress and several people asked for a copy of the slides. I hope...

3 min

How to find a risk management consultant

The search for the elusive subject matter expert - how to find a risk management consultant when you need one.

2 min

How to find money for risk treatments

We all want better risk management but how do you convince people to pay for it? That question turned into a book and series of articles.

10 min

What is the problem with Enterprise Risk Management (ERM)?

I've written about my version of what a fully featured enterprise risk management (ERM) system should, or at least could, look like....

6 min

Three Steps To Deal With Uncertainty Without Killing Yourself In The Process

In 30 years of crisis management I can distill the success factors down to three things. Scenarios, lead indicators, and Plan Bs.

4 min

How To Use A Risk Matrix

If you want to (or have to) use a risk matrix, here are some pitfalls to minimize the problems and maximize the benefits.

2 min

The future of enterprise and risk management?

Imagine a system that monitors inputs, processes and outputs, tracking culture, and organizational behaviors.

6 min

Risk BowTie Method

Bow-Tie is one of the simplest but most helpful risk management tools in the risk management arsenal. And it's highly visual.

3 min

How to measure ALARP

ALARP (As Low As Reasonably Practicable) is a fundamental concept in risk management, as it should be in life in general. It expresses...

7 min

An example of a Risk Management Procedure

An example of a risk management procedure and some templates that you can download to customize.

6 min

Likelihood versus consequence management...

It often seems that as a species; at least in most societies; that we spend most of our efforts on managing risks after they occur,...

3 min

Swiss Cheese Theory

I love Swiss cheese. And I’m not talking about the dairy comestible. In my view, there are better cheeses out there – but few better risk...

6 min

Why are dangerous places safe? Lessons from HROs

"I felt exactly how you would feel if you were getting ready to launch and knew you were sitting on top of 2 million parts — all built by...

4 min

Risk Semantics - aka Terms and definitions

“I define nothing. Not beauty, not patriotism. I take each thing as it is, without prior rules about what it should be.” Bob Dylan It...

4 min

Risk management should create and protect value

*It's not hard to make decisions when you know what your values are." – Roy Disney ISO31000 (Section 3, Part A) says that risk management...

3 min

Three fundamentals of Key Performance Indicators

Figure 1: Mockup of a KPI reporting dashboard Measuring performance seems complex (and it is) but let's not lose sight of the basics. The...

5 min

As High or Low As Reasonably Practicable (AHLARP)

The traditional view of managing risk to be as low as reasonably practicable (ALARP) is fine for negative risk. Unfortunately for ALARP,...

JULIAN TALBOT