Smaller organisations, especially those with less than 100 people, often struggle with putting in place the right-size effective risk management practices that do not take up too much of their time and resources.

What I have often seen and experienced is that small-size organisations implement the ‘standard’ risk management practices that are commonly found in larger organisations without much thought as to whether it is fit-for-purpose to enable better organisational performance given their unique context or operating environment. Continue reading →