Having designed a new set of tools and processes for managing risk in its 3000 plus IT function in 2011, our client wanted to bring them to life for its employees at a strategic and tactical level.
On the macro business level for example, digital security is critical for the organisation. A major virus that disabled its email system or crashed its datacentres could have global business-wide implications.
Part of the challenge was helping employees understand risk at a micro level too. For everyone in the function, risk management is part and parcel of running operations and infrastructure and providing applications and services to the business. And while not everyone will be involved at every stage of the risk lifecycle process, the leadership team want risk to be embedded as part of everybody's day job, not something that only Risk Managers do.
"The goal of the risk culture workshops is to understand our attitudes and behaviour relating to risk and to work out how to address the blockers and habits that sometimes stop us recognizing, raising and managing our operational risks".