The Second International conference on the ISO 31000 Risk Management Standard will take place from the 28th to 31st of May, 2013 in Toronto, Canada. This will be the major risk management event of the year.
We have gathered together an outstanding panel of international experts and practitioners. Our conference will explore how the ISO 31000 standard is changing the global risk management community and the latest developments in your sector. Continue reading
On February 12th 2013, President Obama signed an executive order to promote the sharing of classified information about threats on the nation’s critical infrastructure. One week later, Mandiant (threat detection company) released a report identifying their near certainty that a unit of the Chinese military was “one of the most prolific cyber espionage groups in terms of the sheer quantity of information stolen.” Continue reading
This is probably the most important question management is asking these days. Functions and activities that don’t add value are outsourced. Quality, operational, internal, and financial audits are outsourced if they don’t add real operational and managerial value. Value means different things to different people. What is important to one organization may be different to another. One company’s best practice may be another company’s standard operating procedure. Continue reading
ALARP – As Low as Reasonably Possible.
For anyone with any experience with risk management this is one of the key terms used to make a decision about applying risk mitigations. It is used when going beyond a certain point (cost/weight/performance), open to definition by every company, that the resulting cost/performance of the product no longer makes fiscal sense.
You have nothing to fear from this article.
You think you have done a good job with disaster recovery, security, and risk management. Your employees all fulfill their interactive online training classes on time. You have documented plans for all contingencies. Plans are on the company web site. There are hard copies of key information for everyone. The detailed plans are in folders on your company shared file server with access to sensitive information properly controlled. I am not going to suggest more of the same.