| In the past decade, the need to improve | | | | negative implications of business events and |
| organizations' capability of coping with the changing | | | | preventing it. However, the risk management |
| environment and multiple uncertainty factors has | | | | standard rules that exposure to risks may have a |
| risen significantly. Managers from different market | | | | positive outcome for an organization based on the |
| sectors are implementing various methods and | | | | definition of risk as an exposure to uncertainty |
| processes in order to handle uncertain events | | | | results, or a deviation from the planned or the |
| with an emphasis on managing their negative | | | | anticipated. |
| impact on organizations and projects managed | | | | Risk Management Process |
| within them. | | | | The process described in the new standard is |
| The reasons for this are many. Technology and | | | | presented in Figure 1 below. As it was mentioned |
| work methods are becoming more complex, while | | | | above, it fits the internationally acceptable |
| the business landscape is characterized by | | | | standards and processes to operational risk |
| competitive play rules and regulatory norms, such | | | | management and to the risk management |
| as the Sarbanes- Oxley (SOX) Act and Bazel | | | | definition of the PMI®. The process comprises |
| regulations, and international models, such as | | | | several iterative phases that have to be |
| CMMI®. Recent research has demonstrated | | | | assimilated into the procedures and culture of an |
| that those organizations that are implementing | | | | organization for achieving continuous improvement |
| effective risk management processes are | | | | and the best management practice. |
| significantly increasing their chance to reach the | | | | Risk Management Process - Main Components |
| goals set before them by reducing operational | | | | Establishing Context |
| costs. | | | | The analysis of the internal and external contexts |
| While attempting to meet the challenge, a project | | | | of the risk management process that form the |
| manager is confronted witha myriad of tools and | | | | process landscape setting up measurements and |
| methodologies hosted under the same roof of | | | | criteria required for risk measurement and |
| "Risk Management" promising streamlined solutions | | | | analysis. |
| to managing operational uncertainty within an | | | | Risk Identification |
| organization. It is not surprising that Googling for | | | | Identifying the risks the organization/project |
| "risk management software" yields not less than | | | | process are exposed to, including their |
| 135 million results. | | | | characteristics- period of occurrence, possible |
| In the course of many years, national and | | | | reasons for occurrence, ways of expression and |
| international risk management regulations aimed at | | | | impact on organizational activities, including their |
| streamlining risk management methodologies have | | | | impact on preventing the realization of |
| been circulated in several countries, Australia, the | | | | organizational goals, or, on the contrary, their |
| UK, Canada, the US, and Japan among them. In | | | | contribution to it. |
| addition to that, many international institutions, | | | | Risk Analysis |
| such as the Project Management Institute, the | | | | Evaluating the relative significance of identified |
| Institute of Electrical and Electronic Engineers, the | | | | risks, the probability of their occurrence and |
| International Electro Technical Commission and the | | | | implications. This analysis will be performed versus |
| Federation of European Risk Management have | | | | the probability of risk occurrence results. |
| done the same. | | | | Risk Ranking and Evaluation |
| The Israel Standard for Risk Management | | | | A comparative risk level assessment calculated |
| The Israel Standards Institute established a | | | | against the measurements periodically defined, or |
| Technical Committee for Risk Management aiming | | | | a calculated comparison of possible gains versus |
| to assess the ways this issue is regulated in the | | | | losses, thus, enabling one to make management |
| country. The committee set two tasks before | | | | decisions tailored to the required risk handling |
| itself:o Formulating the Israel risk management | | | | scope. |
| standard customized to the public needs and | | | | Risks Treatment |
| cultureo Knowledge flow related to risk | | | | Establishing and implementing action plans |
| management and emphasizing assistance to | | | | assessed in terms of costs benefits aimed at |
| institutions operating on the international market | | | | increasing the possible benefits and reducing the |
| After two years of extended research activities it | | | | possible costs. |
| was decided to base the new Israel risk | | | | Monitoring & Reviewing |
| management standard on the existing one of the | | | | The monitoring of risk management phases is |
| Standards Institute of Australia and New Zealand | | | | aimed at achieving the state of continuous |
| - AS/NZS 4360:2004. This standard has been | | | | improvement. Moreover, there is a commitment |
| updated several times reflecting very well the | | | | to monitoring the risks themselves and |
| leading methodologies in this field. The new | | | | effectiveness of the actions taken to handle |
| standard is not intended for certification purposes. | | | | them. The monitoring process enables an |
| It has an instructive purpose for different | | | | organization to use relevant action methods |
| organizations that target establishing operational | | | | versus the changing circumstances. |
| risk management processes on the basis of best | | | | Communication and Consulting |
| practices worldwide. | | | | Consulting with different stakeholders within the |
| The standard is compatible with a wide range of | | | | organization in relation to the relevant information |
| international standards and its process related | | | | derived from the risk management process, |
| concept is similar to the one found in the quality | | | | across all of its phases. |
| group of standards. The standard contains | | | | Summary - Added Value to the Organization |
| relatively general instructions; therefore, | | | | Working According to the New Standard |
| organizations adopting it can customize tools and | | | | Implementing the risk management standard as |
| methods to its needs implementing the proposed | | | | part of organizational procedures and tailoring it to |
| process across its different phases. The standard | | | | the specific needs of the organization will yield |
| is accompanied by an instruction guide that details | | | | improved functioning, better organizational culture |
| the tools that can be used for implementing the | | | | and more effective resource allocation. |
| process the way it is set forth in the standard. | | | | Organizations will be better geared to identify |
| The New Israel Standard - Major Characteristics | | | | threats and utilize the untapped positive potential |
| and Updates | | | | of uncertainty. PME TEFEN is well-familiar with |
| Risk Management Concept | | | | many market sectors and business landscapes. |
| The standard defines risk management within an | | | | The company consultants (many are |
| organization as an iterative process aimed at | | | | PMP®-certified) have accumulated extensive |
| reaching an appropriate balance between profit | | | | experience in implementing risk management in |
| opportunity utilization and reduced losses on the | | | | leading companies. Our professionals are well |
| one hand, and improving decision making and | | | | experienced training instructors that will assist |
| organizational performance on the other. | | | | your organization in establishing a risk |
| The standard positions risk management as an | | | | management training program and workshops, |
| integral part of organizational management and | | | | coaching your stakeholders and supporting the |
| culture relating it both to setting up streamlined | | | | process from the plan preparation phase to |
| work processes and customized tools that will | | | | customized implementation integrating the process |
| enable the organization to manage them. In | | | | itself within the organizational procedures and |
| management circles, it has been customary to | | | | culture. |
| regard risk management as dealing with the | | | | |