Reporting and managing risk:a look at current practice at Tesco, RBS, local and central government

These case studies from CIMA highlight the need to embed risk management within more easily understood behaviours, consistent with the overall organisational culture. In each case, some form of internal audit team provides either an oversight function or acts as an expert link in that feedback loop. Frontline staff, managers and specialists should be completely aligned on risk, in part just to ensure that there is a consistency of approach. They should understand instinctively that good performance includes good risk management. Tesco has continued to thrive during the recession and remains a robust and efficient group of businesses despite the emergence of potential threats around consumer spending and the supply chain. RBS, by contrast, has suffered catastrophic and very public failures of risk management despite a large in-house function and stiff regulation of risk controls. Birmingham City Council, like all local authorities, is adapting to more commercial modes of operation and is facing diverse threats and opportunities emerging as a result of social change. And DCMS, like many other public sector organisations, has to handle an incredibly complex network of delivery partners within the context of a relatively recent overhaul of central government risk management processes. Key Findings: •Risk management is no longer solely a financial discipline, nor is it simply a concern for the internal control function. •Where organisations retain a discrete risk management cadre – often specialists at monitoring and evaluating a range of risks – their success is dependent on embedding risk awareness in the wider culture of the enterprise. •Risk management is most successful when it is explicitly linked to operational performance. •Clear leadership, specific goals, excellent influencing skills and open-mindedness to potential threats and opportunities are essential for effective risk management. •Bureaucratic processes and systems can hamper good risk management – either as a result of a ‘box-ticking mentality’ or because managers and staff believe they do not need to consider risk themselves.

Risk management in organizations:an integrated case study approach

In any organization, risk plays a huge role in the success or failure of any business endeavour. Measuring and managing risk is a difficult and often complicated task and the global financial crisis of the late noughties can be traced to a worldwide deficiency in risk management regimes. One of the problems in understanding how best to manage risk is a lack of detailed examples of real world practice. In this accessible textbook the author sets the world of risk management in the context of the broader corporate governance agenda, as well as explaining the core elements of a risk management system. Material on the differences between risk management and internal auditing is supplemented by a section on the professionalization of risk – a relatively contemporary evolution. Enterprise risk management is also fully covered. With a detailed array of risk management cases – including Tesco, RBS and the UK government – lecturers will find this a uniquely well researched resource, supplemented by materials that enable the cases to be easily integrated into the classroom. Risk managers will be delighted with the case materials made available for the first time with the publication of this book.