Risk

Most of my books are about risk or security, but I write about any topics that take my interest, so I've tagged them by general categories in the links below. The Triple3 link, for example, will take you excerpts from a book I'm working on based on my experiences of How to Increase Your Income 33% every 3 Years.

I live in the UK but have lived on five continents so you can safely assume that my residence here is temporary. I travel a lot, consult, write books, speak at conferences, and work with startups.

Meanwhile, you can find the graphics and excerpts from my latest book, the Security Risk Management Aide-Mémoire (SRMAM), at this link. I also read a lot and share the more interesting articles, books, or ideas I come across via LinkedIn.

Last but not least, if you subscribe, I will send you the occasional email to let you know when I post another article or make my books available for free on Amazon (which I do from time to time).

4 min

How To Use A Risk Matrix

One of the big problems with risk matrices starts when you design the matrix. But there are ways to fix that.

2 min

The future of enterprise and risk management?

Imagine a system that monitors inputs, processes and outputs, tracking culture, and organizational behaviors.

6 min

Risk BowTie Method

Bow-Tie is one of the simplest but most helpful risk management tools in the risk management arsenal. And it's highly visual.

3 min

How to measure ALARP

ALARP (As Low As Reasonably Practicable) is a fundamental concept in risk management, as it should be in life in general. It expresses the idea that we shoul...

6 min

An example of a Risk Management Procedure

In case you haven't gathered, I'm a fan of straightforward documents. This is especially true of when you want people to take action. Fifty page procedures r...

6 min

Likelihood versus consequence management...

It often seems that as a species; at least in most societies; that we spend most of our efforts on managing risks after they occur, rather than preventing th...

3 min

Swiss Cheese Theory

I love Swiss cheese. And I’m not talking about the dairy comestible. In my view, there are better cheeses out there – but few better risk management concepts...

6 min

Why are dangerous places safe? Lessons from HROs

"I felt exactly how you would feel if you were getting ready to launch and knew you were sitting on top of 2 million parts — all built by the lowest bidder o...

4 min

Risk Semantics - aka Terms and definitions

“I define nothing. Not beauty, not patriotism. I take each thing as it is, without prior rules about what it should be.” Bob Dylan It might be tempting to sk...

4 min

Risk management should create and protect value

*It's not hard to make decisions when you know what your values are." – Roy Disney ISO31000 (Section 3, Part A) says that risk management should create and p...

3 min

Three fundamentals of Key Performance Indicators

Figure 1: Mockup of a KPI reporting dashboard Measuring performance seems complex (and it is) but let's not lose sight of the basics. The trick with key perf...

5 min

As High or Low As Reasonably Practicable (AHLARP)

The traditional view of managing risk to be as low as reasonably practicable (ALARP) is fine for negative risk. Unfortunately for ALARP, the ISO31000 definit...

18 min

Believe half of what you see and a quarter of what you read ...

I've worked on five continents, in dozens of industries, in the government, private sector and not-for-profit arena and wherever I went, one theme emerged. T...

3 min

Certainty for sale ...

“In this world there is nothing certain but death and taxes.” Benjamin Franklin Certainty, or at least the illusion of it, has become a consumer product. Mar...

6 min

Understanding Organizational Risk

My friend Stewart Hayes has been working in risk management for even longer than I have (which is longer than either of us care to remember). As well as bein...

4 min

(The Actual) Threat Advisory Levels

It seems like we've been at war for a long time. World War II drifted into the Cold War and, more recently, War on Terror, War on Drugs, War on Poverty. Fran...

3 min

Why benchmark?

Every year, we spend billions of dollars on risk management initiatives, often without any subsequent assessment of the effectiveness of those risk treatment...

4 min

“A picture is worth a thousand words.” Fred R. Barnyard

I’m a visual person, and like most of us in the 21st century, I never seem to have a lot of spare time. Perhaps you are also short of time. If so, I write fo...

2 min

As Low As Reasonably Practicable (ALARP)

As Low As Reasonably Practicable, or ALARP, is one of the fundamental principles of risk management. We neither need nor want, to manage risk to the point wh...

5 min

FAQ 2: Some more questions for ISO31000 doubters...

Following on from last weeks article about ISO31000 ... Is ISO31000 a good risk management approach for me? Chances are good that it is. I've used it for per...

JULIAN TALBOT

​

I live in the UK but have lived on five continents so you can safely assume that my residence here is temporary. I travel a lot, consult, write books, speak at conferences, and work with startups.

Meanwhile, you can find the graphics and excerpts from my latest book, the Security Risk Management Aide-Mémoire (SRMAM), at this link. I also read a lot and share the more interesting articles, books, or ideas I come across via LinkedIn.

Last but not least, if you subscribe, I will send you the occasional email to let you know when I post another article or make my books available for free on Amazon (which I do from time to time).

​

How To Use A Risk Matrix

The future of enterprise and risk management?

Risk BowTie Method

How to measure ALARP

An example of a Risk Management Procedure

Likelihood versus consequence management...

Swiss Cheese Theory

Why are dangerous places safe? Lessons from HROs

Risk Semantics - aka Terms and definitions

Risk management should create and protect value

Three fundamentals of Key Performance Indicators

As High or Low As Reasonably Practicable (AHLARP)

Believe half of what you see and a quarter of what you read ...

Certainty for sale ...

Understanding Organizational Risk

(The Actual) Threat Advisory Levels

Why benchmark?

“A picture is worth a thousand words.” Fred R. Barnyard

As Low As Reasonably Practicable (ALARP)

FAQ 2: Some more questions for ISO31000 doubters...