Lately, everyone, from the government agencies to regulators to corporate board members, seem to be talking about the need for better, more effective risk management. The challenging part is that, despite the guidance provided in ISO 31000:2009, the concept of risk management effectiveness still remains vague. This article attempts to summarize the basic components of effective risk management which should help risk managers to respond to the challenges set by regulators and shareholders. Continue reading →