Effective Risk Management

>controlled through a variety of methods. For
Risk is embedded in every opportunity a businessexample, traditional insurance is one way to
faces. And poor risk management can result inremove hazard risk. Financial risks can be
large financial costs, or even failure. Risk pointsmanaged through capital market hedging
can emerge anywhere: small scale project delays,transactions. Operational risks are minimized by
the misguided actions of an employee, or a fire inclear check and balance procedures and
an inventory warehouse.management oversight within the company.
This article will help any small business owner orStrategic risks can be minimized by better
manager better understand what risks are outdocumentation, such as protecting intellectual
there, and more importantly, how to betterproperty rights.
control them.How I Have Managed Risk
First, I’ll explain why a systematic analysisMy experiences have given me a clear
of risks is important and illustrate a simple riskappreciation for the importance of systematic and
management architecture. Then, I’ll talkrobust risk management. What I talk about next
about how I helped companies better identify andis how I identified, evaluated, and mitigated
manage a variety of risks.various risks at three different companies in three
What is Risk Management?different industries.
Simply, risks are threats to your business orWhile I managed a Midwestern real estate
project. They are situations or events that canportfolio for Cohen-Esrey, risk emerged in several
affect the outcome of your decisions and actions.areas. The easiest risks to identify and mitigate
Therefore, risk management is the identification,were the hazard points, such as fire and water
evaluation, and mitigation of risks to a business ordamage for an apartment building. More complex
project.issues, such as “Slips and Falls” on icy steps
Why is Risk Management Important?required us to put traditional insurance in place
All businesses exist for one clear reason: Towith a covenant that said employees would also
make a profit. Poorly managed risks have tangiblework to minimize any liability by removing snow in
and dramatic effects on the bottom line.a timely fashion. Other problems and solutions
Therefore, sound risk management is importantwere less clear cut. At one point we had issues
to ensure that your business can overcome anywith employees “walking off” with tools
problems and continue to grow profitably.from the property workshops. To mitigate this
Threats to a small business or project can comeproblem, we restructured our recruitment and
from a variety of sources. In 2002, The Riskselection process. Vendor relationships also
Management Standard categorized risks into fourbecame a liability issue. Only clear communication
areas: Financial, Operational, Strategic, and Hazard.on a timely basis minimized such vulnerability.
Strategic risks can emerge from competitors,Although most small businesses won’t
customers, or markets of a company. Forencounter the risks I mitigated at HSBC brokering
example, the technological features of afinancial derivatives, the experience built my
companies’ product may become obsolete.appreciation for risk. Our team worked on behalf
Operational risks can affect how the companyof many global banks hedging financial market risk.
operates internally. Systems such as IT, materialAlthough the market place conventions and
procurement, and accounting responsibilities can becontracts were similar, each transaction was done
compromised by employees. Financial risks canfor a different reason. We analyzed the interest
hinge on financial market performance, such asrate environment, advised traders as to how to
foreign exchange fluctuations. The last type-better hedge their risk, and then brokered very
Hazard risk- can be the most damaging. Eventslarge transactions. These experiences instilled in
like natural disasters, manmade disasters, andme the importance of understanding and
crime can permanently disable a company.transferring risk.
How to Build an Effective Risk ManagementManaging a Customer Relationship Project for
StrategyReuters is where my risk management became a
An effective risk management strategy must beformalized business process. My job was to
systematic and robust. It also must becoordinate and implement a CRM initiative that
straight-forward, and simple to implement.stretched over 10 months and included staff on
An effective risk management strategy will haveseveral continents. To better understand what
three stages:issues would affect the timetable and budget, the
•Identifyteam put together a Risk Matrix. This illustrated
•Evaluatethree key issues: what each risk point was,
•Mitigateits’ potential occurrence and severity, and
During the Identify stage, owners and/or seniorwho was responsible for mitigating it. At every
managers need to thoroughly examine themeeting the team would review the Risk Matrix
business from many different perspectives. Alland identify any future risk points. As with most
risks facing all areas of a company need to beprojects, communication is key, and this
identified. This should be done with as manyencouraged a high degree of communication and
people involved as realistically possible to give aaccountability.
complete picture.Risk is embedded in every opportunity a business
During the Evaluate stage, each risk is given afaces, and poor risk management can have
probability of occurrence and a severity ofprofound effects on the outcome of any business
occurrence ranking (This can be done with aendeavor.
simple 1 to 5 scale; 1 being “rarely occurring”Putting an effective risk management system in
and “minimal damage”). This allows seniorplace is the first step for a small business owner,
management to more clearly understand thewho can then confidently exploit new business
extent of potential damage.opportunities.
During the Mitigate stage, the resulting risks are