In the first of a four-part series, Alex Sidorenko, founder and CEO of Risk-Academy, explains how the key to managing corporate risks is often through dealing with the individual risks of decision-makers first.
If there is one thing I learned in my previous role as head of risk at a multibillion-dollar sovereign investment fund, risk management is not about managing risks. It’s about helping management make strategic, operational and investment decisions while keeping the risks in mind.
It sounds simple enough, but it’s anything but. Over four columns, I will share four valuable lessons about integrating risk management principles and methodologies into day-to-day decision-making.
There is a big difference between the risks that the board is concerned about, such as corporate risks, and the risks that individual managers worry about, often their personal risks. It is quite natural for humans to consider risks that can potentially impact them personally as significant, while the risks that impact the achievement of strategic objectives as somewhat remote or distant.
The important lesson I learned is that if you want management to pay serious attention to corporate risks, you should first help them deal with their individual or personal risks. And by personal risks I mean things like maintaining their area of influence, building a solid reputation, advancing their career, not losing their job and protecting themselves from investigations or prosecution.
Another aspect that has a huge impact on the quality of decision-making – and hence the quality of risk management – is remuneration policy. Many people are driven by their financial self-interest much more than any corporate values or best practices. And this has a huge implication on the work of risk managers. To address these challenges, I aim to do the following:
- Demonstrate how proactive risk management can benefit individuals within the firm and solve their personal risks. Even basic things like creating a paper trail for key decisions and risks taken by management to protect against any future enquiries;
- Review existing remuneration policies and find out how the bonus payments are calculated to understand whether it drives any excessively risky behaviour and what periods are particularly vulnerable. For example, employees usually make much riskier decisions just before bonus entitlements are calculated;
- Work with HR to ensure existing individual objectives and KPIs adequately take risks into account. This will help to cement the message that risk management is a part of normal performance management;
- Work with strategy to ensure corporate objectives and KPIs are also set based on the outcomes of risk analysis to help make the targets more realistic and achievable;
- Include risk management roles and responsibilities into existing job descriptions, policies, procedures and committee charters to reinforce ownership and accountability.
As risk managers, we need to be prepared to the fact that some managers ignore risks and take uncalculated risks for a reason. Therefore, it’s absolutely critical to understand what motivates each individual.
In my next column, I will share some practical suggestions on how to overcome cognitive biases when managing risks.
Bio:
lex Sidorenko is an expert with over 13 years of strategic, innovation, risk and performance management experience across Australia, Russia, Poland and Kazakhstan. In 2014 Alex was named the Risk Manager of the Year by the Russian Risk Management Association.
As a Board member of Institute for strategic risk analysis in decision making Alex is responsible for risk management training and certification (including creating exams) across Russia and CIS, running numerous risk management classroom and e-learning training programs. Alex represents Russian risk management community at the ISO Technical Committee 262 responsible for the update of ISO31000:20XX and Guide 73 since 2015.
Alex is the co-author of the global PwC risk management methodology, the author of the risk management guidelines for SME (Russian standardization organization), risk management textbook (Russian Ministry of Finance), risk management guide (Australian Stock Exchange) and the award-winning training course on risk management (best risk education program 2013, 2014 and 2015).
In 2012 Alex created Risk-academy www.risk-academy.ru a web portal dedicated to free risk management training for SME across Russia and CIS.
Alex worked as a Head of Risk Management at RUSNANO, one of the largest private equity funds in Russia, specializing in technology investment. Alex won an award for best ERM implementation at RUSNANO in 2014.
Prior to that Alex worked in senior risk roles at Skolkovo Foundation, Strategy Partners, PwC and Deloitte.
Alex recently published his second risk management book called “Effective Risk Management 2.0”. Alex also regularly presents at risk management conferences in Russia and Europe. In November 2012 Alex short a series of TV programs dedicated to risk management in start-ups. Alex teaches risk management at major Russian business schools including OpUS, Technopark Skolkovo, MIRBIS, MFUA, SKOLKOVO and USIB as well as corporate universities, like Gazprom.
He has successfully completed his double Bachelor degree in Risk Management and Econometrics at Monash University, Australia, achieving the top risk management and statistics student award two years in a row.
More information can be found here:
http://ru.linkedin.com/in/alexsidorenko