Do something, not anything, about risk

摘要

The trouble with the current enthusiasm for risk management is that, while everybody seems to be talking about it and some organisations are even doing something about it, not many seem to be doing it well. Risk management has emerged in recent years from the dimly-lit back room occupied only by the corporate doomsayers into the full light of top management attention. That of course is a good thing, but the problem seems to be that it has fallen foul of the tendency to oversimplify what is a highly complex process that requires both a good understanding of the operation being managed and an appropriate level of competence in the techniques involved.