Enhancing business continuity management capacities in the insurance industry : a Southeast Asian perspective

As a resilience enhancing practice, business continuity management (BCM) can play an important role in aiding preparation of the insurance industry for coping with the losses incurred by major discontinuity incidents: regardless of cause. Acknowledging the increasing frequency of unpredictable man-made disasters and natural catastrophes, the insurance industry would benefit from examining and implementing, where suitable, key elements of BCM. Such strategic decisions would assist insurers and re-insurers collectively to enhance mutual capability to respond to, and recover from, the impact of significant losses. This paper presents a comparison of opinions about BCM practitioners in both retail and re-insurance companies on the importance of generic continuity practices with actual levels of BCM practice across the two industry groups in Southeast Asia. It suggests means by which multi-lateral cooperation across Asian economies and between retail and re-insurance market segments might enhance the viability of the insurance industry in the face of increased stress from major natural and socio-technical hazards.

Controlling chaos? The value and the challenges of applying complexity theory to project management

The literature abounds with descriptions of failures in high-profile projects and a range of initiatives has been generated to enhance project management practice (e.g., Morris, 2006). Estimating from our own research, there are scores of other project failures that are unrecorded. Many of these failures can be explained using existing project management theory; poor risk management, inaccurate estimating, cultures of optimism dominating decision making, stakeholder mismanagement, inadequate timeframes, and so on. Nevertheless, in spite of extensive discussion and analysis of failures and attention to the presumed causes of failure, projects continue to fail in unexpected ways. In the 1990s, three U.S. state departments of motor vehicles (DMV) cancelled major projects due to time and cost overruns and inability to meet project goals (IT-Cortex, 2010). The California DMV failed to revitalize their drivers’ license and registration application process after spending $45 million. The Oregon DMV cancelled their five year, $50 million project to automate their manual, paper-based operation after three years when the estimates grew to $123 million; its duration stretched to eight years or more and the prototype was a complete failure. In 1997, the Washington state DMV cancelled their license application mitigation project because it would have been too big and obsolete by the time it was estimated to be finished. There are countless similar examples of projects that have been abandoned or that have not delivered the requirements.

Improving information security management in nonprofit organisations

All organisations, irrespective of size and type, need effective information security management (ISM) practices to protect vital organisational in- formation assets. However, little is known about the information security management practices of nonprofit organisations. Australian nonprofit organisations (NPOs) employed 889,900 people, managed 4.6 million volunteers and contributed $40,959 million to the economy during 2006-2007 (Australian Bureau of Statistics, 2009). This thesis describes the perceptions of information security management in two Australian NPOs and examines the appropriateness of the ISO 27002 information security management standard in an NPO context. The overall approach to the research is interpretive. A collective case study has been performed, consisting of two instrumental case studies with the researcher being embedded within two NPOs for extended periods of time. Data gathering and analysis was informed by grounded theory and action research, and the Technology Acceptance Model was utilised as a lens to explore the findings and provide limited generalisability to other contexts. The major findings include a distinct lack of information security management best practice in both organisations. ISM Governance and risk management was lacking and ISM policy was either outdated or non- existent. While some user focused ISM practices were evident, reference to standards, such as ISO 27002, were absent. The main factor that negatively impacted on ISM practices was the lack of resources available for ISM in the NPOs studied. Two novel aspects of information security dis- covered in this research were the importance of accuracy and consistency of information. The contribution of this research is a preliminary understanding of ISM practices and perceptions in NPOs. Recommendations for a new approach to managing information security management in nonprofit organisations have been proposed.

The risks and returns of new public management : political business

Purpose – This article aims to consider success in terms of the financial returns and risks of new public management (NPM) in state-owned enterprises (SOEs). Design/methodology/approach – Financial returns of New Zealand SOEs were examined through a review of their annual reports over a five-year period. Dimensions of risk were examined through interviews conducted in two phases over a two-year period with senior executives from 12 of the (then) 17 SOEs operating in New Zealand. Findings – Findings indicate the potential for SOEs to operate as profitable government investments, with clear support for positive financial returns under NPM. However, variations noted within individual SOEs also indicate that profitable and commercial operations may not be possible in all cases. An examination of the risks associated with SOEs’ operations reveals a number of dimensions of risk, encompassing financial, political (including regulatory), reputational, and public accountability aspects. Practical implications – There is a need for an enhanced awareness on the part of internal and external stakeholders (such as the government and general public) of the risks SOEs face in pursuing higher levels of profitability. Also required, is a more acute understanding on the part of internal and external stakeholders (e.g. government and the public) of the need for SOEs to manage the range of risks identified, given the potentially delicate balance between risk and return. Originality/value – While previous studies have considered the financial returns of SOEs, or the risks faced by the public sector in terms of accountability, few have addressed the two issues collectively in a single context.

Not-for-profits and risk accountability : insuring the third sector

Not for profit organisations face significant challenges in managing organisational risk. In this regard not-for-profits are not unique but they are distinguishable from their 'for-profit' counterparts in that they are less likely to have the resources to find sufficient risk management strategies and plans, are very vunerable to cyclical changes in the insurance market and are not usually in a position to pass on the costs of increased premiums to third parties such as consumers of their services. This article explores the nature and extent of risks faced by the not-for-profit sector; the appropriateness and scope of risk management to reduce and manage the likelihood and incidence of risk; and the types of insurance and options to cover risks that materialise. It concludes with a recommendation for a potential course of action.

Towards an orchestration theory in business transformation management (research in progress)

Business transformations are large-scale organisational change projects that, evidence suggests, are often unsuccessful. This study aims to develop a conceptual model that explains how management services that are required for a business transformation are orchestrated during such a initiative. We classify management services such as (but not limited to) change management, risk management, IT management, financial management, program management and so forth as bearing transformational and/or transactional capabilities in a transformation initiative. We then draw upon three principles of musical composition, namely melody, harmony and rhythm, and illustrate how they apply to the orchestration of management services in the management of business transformations. In order to illustrate our emerging model, we examine the case of Malaysia Airlines, who have managed to successfully turnaround the near-bankrupt organisation beyond survival. We demonstrate how the notions of melody, harmony and rhythm can be used to describe their endeavour. We conclude by discussing next steps of our research.

Proactive management of collision risks in port waters using navigational traffic conflicts

Navigational collisions are one of the major safety concerns in many seaports. To address this safety concern, a comprehensive and structured method of collision risk management is necessary. Traditionally management of port water collision risks has been relied on historical collision data. However, this collision-data-based approach is hampered by several shortcomings, such as randomness and rarity of collision occurrence leading to obtaining insufficient number of samples for a sound statistical analysis, insufficiency in explaining collision causation, and reactive approach to safety. A promising alternative approach that overcomes these shortcomings is the navigational traffic conflict technique that uses traffic conflicts as an alternative to the collision data. This paper proposes a collision risk management method by utilizing the principles of this technique. This risk management method allows safety analysts to diagnose safety deficiencies in a proactive manner, which, consequently, has great potential for managing collision risks in a fast, reliable and efficient manner.

Navigational safety in port waters: Techniques for modeling collision risk

Navigational collisions are one of the major safety concerns for many seaports. Continuing growth of shipping traffic in number and sizes is likely to result in increased number of traffic movements, which consequently could result higher risk of collisions in these restricted waters. This continually increasing safety concern warrants a comprehensive technique for modeling collision risk in port waters, particularly for modeling the probability of collision events and the associated consequences (i.e., injuries and fatalities). A number of techniques have been utilized for modeling the risk qualitatively, semi-quantitatively and quantitatively. These traditional techniques mostly rely on historical collision data, often in conjunction with expert judgments. However, these techniques are hampered by several shortcomings, such as randomness and rarity of collision occurrence leading to obtaining insufficient number of collision counts for a sound statistical analysis, insufficiency in explaining collision causation, and reactive approach to safety. A promising alternative approach that overcomes these shortcomings is the navigational traffic conflict technique (NTCT), which uses traffic conflicts as an alternative to the collisions for modeling the probability of collision events quantitatively. This article explores the existing techniques for modeling collision risk in port waters. In particular, it identifies the advantages and limitations of the traditional techniques and highlights the potentials of the NTCT in overcoming the limitations. In view of the principles of the NTCT, a structured method for managing collision risk is proposed. This risk management method allows safety analysts to diagnose safety deficiencies in a proactive manner, which consequently has great potential for managing collision risk in a fast, reliable and efficient manner.

Australian Diabetes Foot Network : management of diabetes-related foot ulceration — a clinical update

Summary Appropriate assessment and management of diabetes-related foot ulcers (DRFUs) is essential to reduce amputation risk. Management requires debridement, wound dressing, pressure off-loading, good glycaemic control and potentially antibiotic therapy and vascular intervention. As a minimum, all DRFUs should be managed by a doctor and a podiatrist and/or wound care nurse. Health professionals unable to provide appropriate care for people with DRFUs should promptly refer individuals to professionals with the requisite knowledge and skills. Indicators for immediate referral to an emergency department or multidisciplinary foot care team (MFCT) include gangrene, limb-threatening ischaemia, deep ulcers (bone, joint or tendon in the wound base), ascending cellulitis, systemic symptoms of infection and abscesses. Referral to an MFCT should occur if there is lack of wound progress after 4 weeks of appropriate treatment.

Assessing Cardiovascular Risk in Regional Areas: The Healthy Hearts – Beyond City Limits Program

Background: Cardiovascular disease (CVD) is more prevalent in regional and remote Australia compared to metropolitan areas. The aim of Healthy Hearts was to determine age and sex specific CVD risk factor levels and the potential value of national risk clinics. Methods: Healthy Hearts was an observational research study conducted in four purposefully selected higher risk communities in regional Victoria, Australia. The main outcome measures were the proportion of participants with CVD risk factors with group comparisons to determine the adjusted likelihood of elevated risk factor levels. Trained personnel used a standardized protocol over four weeks per community to measure CVD risk factor levels, estimate absolute CVD risk and provide feedback and advice. Results: A total of 2125 self-selected participants were assessed (mean age 58 ± 15 years, 57% women). Overall, CVD risk factors were highly prevalent. More men than women had ≥ 2 modifiable CVD risk factors (76% vs. 68%, p < .001), pre-existing CVD (20 vs. 15%, p < .01) and a major ECG abnormality requiring follow-up (15% vs. 7%, p < .001) . Less men reported depressive symptoms compared to women (28% vs. 22%, p < .01). A higher proportion of women were obese (adjusted OR 1.36, 95% CI 1.13 to 1.63), and physically inactive (adjusted OR 1.32, 95% CI 1.07 to 1.63). Conclusions: High CVD risk factor levels were confirmed for regional Victoria. Close engagement with individuals and communities provides scope for the application of regional risk management clinics to reduce the burden of CVD risk in regional Australia.

Risk modelling in quality clinical registries : Monitoring lesion treatment failure rate in percutaneous coronary interventions

Aims: This paper describes the development of a risk adjustment (RA) model predictive of individual lesion treatment failure in percutaneous coronary interventions (PCI) for use in a quality monitoring and improvement program. Methods and results: Prospectively collected data for 3972 consecutive revascularisation procedures (5601 lesions) performed between January 2003 and September 2011 were studied. Data on procedures to September 2009 (n = 3100) were used to identify factors predictive of lesion treatment failure. Factors identified included lesion risk class (p < 0.001), occlusion type (p < 0.001), patient age (p = 0.001), vessel system (p < 0.04), vessel diameter (p < 0.001), unstable angina (p = 0.003) and presence of major cardiac risk factors (p = 0.01). A Bayesian RA model was built using these factors with predictive performance of the model tested on the remaining procedures (area under the receiver operating curve: 0.765, Hosmer–Lemeshow p value: 0.11). Cumulative sum, exponentially weighted moving average and funnel plots were constructed using the RA model and subjectively evaluated. Conclusion: A RA model was developed and applied to SPC monitoring for lesion failure in a PCI database. If linked to appropriate quality improvement governance response protocols, SPC using this RA tool might improve quality control and risk management by identifying variation in performance based on a comparison of observed and expected outcomes.

Profiling event logs to configure risk indicators for process delays

Risk identification is one of the most challenging stages in the risk management process. Conventional risk management approaches provide little guidance and companies often rely on the knowledge of experts for risk identification. In this paper we demonstrate how risk indicators can be used to predict process delays via a method for configuring so-called Process Risk Indicators(PRIs). The method learns suitable configurations from past process behaviour recorded in event logs. To validate the approach we have implemented it as a plug-in of the ProM process mining framework and have conducted experiments using various data sets from a major insurance company.

Natural disaster risk-informed for a better public infrastructure asset planning in Indonesian Central Government

The natural disasters incident that frequently hit Indonesia are floods, severe droughts, tsunamis, earth-quakes, volcano, eruptions, landslides, windstorm and forest fires. The impact of those natural disasters are significantly severe and affecting the quality of life of the community due to the breakdown of the public as-sets as one source to deliver public services. This paper is aimed to emphasis the importance of natural disaster risk-informed in relation to public asset management in Indonesian Central Government, particularly in asset planning stage where asset decision is made as the gate into the whole public asset management processes. A Case study in the Ministry of Finance Indonesia as the central government public asset manager and in 5 (five) line ministries/governmental agencies as public asset users was used as the approach to achieved the research objective. The case study devoured three data collection techniques i.e. interviews, observations and document archival which will be analysed by a content analysis approach. The result of the study indicates that Indonesian geographical position exposing many of public infra-structure assets as a high vulnerability to natural disasters. Information on natural-disaster trends and predictions to identify and measure the risks are available, however, such information are not utilise and integrated to the process of public infrastructure asset planning as the gate to the whole public asset management processes. Therefore, in order to accommodate and incorporate this natural disaster risk-information into public asset management processes, particularly in public asset planning, a public asset performance measurements framework should be adopted and applied in the process as one sources in making decision for infrastructure asset planning. Findings from this study provide useful input for the Ministry of Finance as public asset manager, scholars and private asset management practitioners in Indonesia to establish natural disaster risks awareness in public infrastructure asset management processes.

Rethinking emergency management and climate adaptation policies

Emergency management and climate change adaptation will increasingly challenge all levels of government because of three main factors. First, Australia is extremely vulnerable to the impacts of climate change, particularly through the increasing frequency and/or intensity of disasters such as floods and bushfires. Second, the system of government that divides powers by function and level can often act as a barrier to a well-integrated response. Third, policymaking processes struggle to cope with such complex inter-jurisdictional issues. This paper discusses these factors and explores the nature of the challenge for Australian governments. Investigations into the 2009 Victorian bushfires, the 2011 Perth Hills bushfires, and the 2011 Brisbane floods offer an indication of the challenges ahead and it is argued that there is a need to: improve community engagement and communication; refocus attention on resilience; improve interagency communication and collaboration; and, develop institutional arrangements that support continual improvement and policy learning. These findings offer an opportunity for improving responses as well as a starting point for integrating disaster risk management and climate change adaptation policies. The paper is based on the preliminary findings of an NCCARF funded research project: The Right Tool for the Job – Achieving climate change adaptation outcomes through improved disaster management policies, planning and risk management strategies involving Griffith University and RMIT.

Forecasting the future risk of Barmah Forest Virus disease under climate change scenarios in Queensland, Australia

BACKGROUND Mosquito-borne diseases are climate sensitive and there has been increasing concern over the impact of climate change on future disease risk. This paper projected the potential future risk of Barmah Forest virus (BFV) disease under climate change scenarios in Queensland, Australia. METHODS/PRINCIPAL FINDINGS We obtained data on notified BFV cases, climate (maximum and minimum temperature and rainfall), socio-economic and tidal conditions for current period 2000-2008 for coastal regions in Queensland. Grid-data on future climate projections for 2025, 2050 and 2100 were also obtained. Logistic regression models were built to forecast the otential risk of BFV disease distribution under existing climatic, socio-economic and tidal conditions. The model was applied to estimate the potential geographic distribution of BFV outbreaks under climate change scenarios. The predictive model had good model accuracy, sensitivity and specificity. Maps on potential risk of future BFV disease indicated that disease would vary significantly across coastal regions in Queensland by 2100 due to marked differences in future rainfall and temperature projections. CONCLUSIONS/SIGNIFICANCE We conclude that the results of this study demonstrate that the future risk of BFV disease would vary across coastal regions in Queensland. These results may be helpful for public health decision making towards developing effective risk management strategies for BFV disease control and prevention programs in Queensland.