Enterprise-wide risk management

May 2002 Security Services & Risk Management

Effective risk assessment and management, implemented across the complete risk spectrum, needs to be a more integral component of all businesses. The previous focus on insurable-type risk exposures by most companies has given way to a more integrated approach to company risk management with a move towards business wide risk assessment forming its basis. Companies are now considering all risks in their business, not just asset-based ones, when formulating their risk management strategies.

"The enterprise-wide risk management approach holds that a risk is a risk, no matter what the type. All risks need to be understood and effectively managed in a consistent manner," says Paul Skivington, director, Alexander Forbes Business Risk Solutions.

This approach requires the assistance of multidisciplinary teams of specialists to ensure complete and accurate risk assessment. Although risk management may be centrally monitored, all aspects of the business should be involved in the risk assessment and management process (eg information technology, treasury and banking, internal audit, etc). As risks are often not confined to only one business area, a collective awareness and sound approach to possible problem situations is essential.

The Turnbull Report (UK) promoted this business wide approach to corporate risk management and South Africa is now following suit. "The King Report will stipulate that publicly listed companies report on enterprise-wide risk exposures in their annual reports. Shareholders now require information on existing and possible company-wide risk exposures and how these are being managed. Enterprise-wide risk management is therefore becoming increasingly essential to the achievement of business objectives," says Skivington.

"Ensuring that the risks associated with your existing and envisioned business are properly assessed could go a long way to ensuring both sound business decisions and stakeholder confidence. Companies should all be utilising enterprise-wide risk management strategies with a view to mitigating possible business risk exposures," concludes Skivington.





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

The security debt hidden in residential estates
Security Services & Risk Management Integrated Solutions Residential Estate (Industry)
Many residential estates undermine their own security not through a lack of technology, but through hidden weaknesses in gate design, fragmented systems, recurring software dependence, weak operational ownership, and insufficient estate management input.

Read more...
Verification is reshaping South Africa’s labour market
Security Services & Risk Management Asset Management Commercial (Industry)
Hiring faster, trusting less: in a labour market defined by both constraint and potential, the ability to hire with confidence may well become one of the most important competitive advantages.

Read more...
Africa’s opportunity to shape the future of human-centred AI
AI & Data Analytics Security Services & Risk Management
Across the Global South, countries are not yet locked into decades of legacy AI systems, energy-intensive infrastructure, or governance frameworks designed for a different technological era. That creates something rare in technology development: a cleaner slate.

Read more...
AURA appoints Taryn Winer as global head of people
News & Events Security Services & Risk Management
Following its €13,5 million Series B funding round last year and accelerating international expansion, particularly across the United States, AURA has appointed Taryn Winer as global head of people.

Read more...
95% do not have full trust in cybersecurity vendors
Information Security Security Services & Risk Management
Trust in cybersecurity vendors is fragile, difficult to measure, and increasingly shaping risk posture at both operational and board levels. Lack of verifiable transparency undermines cybersecurity decision-making, according to Sophos-backed research.

Read more...
Enhancing control room operations
iFacts Security Services & Risk Management Surveillance
As South Africa faces complex and more advanced security challenges, the demand for advanced surveillance solutions, including CCTV and security control rooms, continues to surge, but what about the people in front of the screens?

Read more...
Understanding the Shared Responsibility Model
Infrastructure Security Services & Risk Management
While the cloud can certainly be a growth enabler in many ways, it can also introduce new security risks. Companies want to have a clear understanding of where their security duties end and where their cloud service provider’s begin.

Read more...
“This Is Theft!” SASA slams Mafoko Security
News & Events Security Services & Risk Management Associations
The Security Association of South Africa (SASA) has issued a stark warning that the long-running Mafoko Security Patrols scandal is no longer an isolated case of employer misconduct, but evidence of a systemic failure in South Africa’s regulatory and governance structures.

Read more...
Making a mesh for security
Information Security Security Services & Risk Management
Credential-based attacks have reached epidemic levels. For African CISOs in particular, the message is clear: identity is now the perimeter, and defences must reflect that reality with coherence and context.

Read more...
Privacy by design or by accident
Security Services & Risk Management Infrastructure
Africa’s data future depends on getting it right at the start. If privacy controls do not withstand real-world conditions, such as unstable power, fragile last-mile connectivity, shared devices, and decentralised branch environments, then privacy exists only on paper.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.