Risk management is ultimately about creating a culture that would facilitate risk discussion when performing business activities or making any strategic, investment or project decision.
In this free book, Alex Sidorenko and Elena Demidenko talk about practical steps risk managers can take to integrate risk management into decision making and core business processes. Continue reading
Introduction:
I have been an RABQSA (Exemplar Global) lead auditor for twenty years. My auditing experience includes conducting over 500 audits for worldwide organizations and providing dozens of Internal Auditor training classes. I am currently assisting several companies in upgrading to the ISO 9001:2015 quality management system (QMS) requirements. While the previous ISO 9001 revisions had their share of interpretation issues, the latest revision, ISO 9001:2015, has many issues which are hampering the transition to the new standard in my opinion. Continue reading
An audit system manager recently told me that it was relatively easy to identify quality auditors who had good technical skills for collecting and evaluating data. What was really hard was to find auditors with good people skills (perhaps auditors need to go to charm school). Even though an auditor is not trying to win a popularity contest, the impressions that the auditor makes with auditee management, interviewees, and escorts can influence the audit and its effectiveness.
There has been a lot written lately of the “Gig Economy” – the notion that, in the future of earning a living, there will no longer be jobs, just work. It’s an earnings environment where the supply and demand for skillsets are contracted between those that have a need and those who can fulfill that need. Continue reading
Introduction
Business Continuity professionals need to rethink some of the paradigms of the practice. All too often we tend to fall back on what are considered the tried and true ways of doing things. This essentially leaves us in two camps; the first, evolved out of information technology and disaster recovery and the second, evolved out of emergency preparedness (tactical planning), financial risk management (operational) and strategic planning (strategic). These two camps each offer much to be desired. Continue reading