People, technology, processes and risk knowledge sharing

The present global economic crisis creates doubts about the good use of accumulated experience and knowledge in managing risk in financial services. Typically, risk management practice does not use knowledge management (KM) to improve and to develop new answers to the threats. A key reason is that it is not clear how to break down the “organizational silos” view of risk management (RM) that is commonly taken. As a result, there has been relatively little work on finding the relationships between RM and KM. We have been doing research for the last couple of years on the identification of relationships between these two disciplines. At ECKM 2007 we presented a general review of the literature(s) and some hypotheses for starting research on KM and its relationship to the perceived value of enterprise risk management. This article presents findings based on our preliminary analyses, concentrating on those factors affecting the perceived quality of risk knowledge sharing. These come from a questionnaire survey of RM employees in organisations in the financial services sector, which yielded 121 responses. We have included five explanatory variables for the perceived quality of risk knowledge sharing. These comprised two variables relating to people (organizational capacity for work coordination and perceived quality of communication among groups), one relating to process (perceived quality of risk control) and two related to technology (web channel functionality and RM information system functionality). Our findings so far are that four of these five variables have a significant positive association with the perceived quality of risk knowledge sharing: contrary to expectations, web channel functionality did not have a significant association. Indeed, in some of our exploratory regression studies its coefficient (although not significant) was negative. In stepwise regression, the variable organizational capacity for work coordination accounted for by far the largest part of the variation in the dependent variable perceived quality of risk knowledge sharing. The “people” variables thus appear to have the greatest influence on the perceived quality of risk knowledge sharing, even in a sector that relies heavily on technology and on quantitative approaches to decision making. We have also found similar results with the dependent variable perceived value of Enterprise Risk Management (ERM) implementation.

The board of directors, executives and risk knowledge management

Enterprise Risk Management (ERM) and Knowledge Management (KM) both encompass top-down and bottom-up approaches developing and embedding risk knowledge concepts and processes in strategy, policies, risk appetite definition, the decision-making process and business processes. The capacity to transfer risk knowledge affects all stakeholders and understanding of the risk knowledge about the enterprise's value is a key requirement in order to identify protection strategies for business sustainability. There are various factors that affect this capacity for transferring and understanding. Previous work has established that there is a difference between the influence of KM variables on Risk Control and on the perceived value of ERM. Communication among groups appears as a significant variable in improving Risk Control but only as a weak factor in improving the perceived value of ERM. However, the ERM mandate requires for its implementation a clear understanding, of risk management (RM) policies, actions and results, and the use of the integral view of RM as a governance and compliance program to support the value driven management of the organization. Furthermore, ERM implementation demands better capabilities for unification of the criteria of risk analysis, alignment of policies and protection guidelines across the organization. These capabilities can be affected by risk knowledge sharing between the RM group and the Board of Directors and other executives in the organization. This research presents an exploratory analysis of risk knowledge transfer variables used in risk management practice. A survey to risk management executives from 65 firms in various industries was undertaken and 108 answers were analyzed. Potential relationships among the variables are investigated using descriptive statistics and multivariate statistical models. The level of understanding of risk management policies and reports by the board is related to the quality of the flow of communication in the firm and perceived level of integration of the risk policy in the business processes.

Bottom-up risk regulation? How nanotechnology risk knowledge gaps challenge federal and state environmental agencies

Nanotechnologies have been called the "Next Industrial Revolution." At the same time, scientists are raising concerns about the potential health and environmental risks related to the nano-sized materials used in nanotechnologies. Analyses suggest that current U.S. federal regulatory structures are not likely to adequately address these risks in a proactive manner. Given these trends, the premise of this paper is that state and local-level agencies will likely deal with many "end-of-pipe" issues as nanomaterials enter environmental media without prior toxicity testing, federal standards, or emissions controls. In this paper we (1) briefly describe potential environmental risks and benefits related to emerging nanotechnologies; (2) outline the capacities of the Toxic Substances Control Act, the Clean Air Act, the Clean Water Act, and the Resources Conservation and Recovery Act to address potential nanotechnology risks, and how risk data gaps challenge these regulations; (3) outline some of the key data gaps that challenge state-level regulatory capacities to address nanotechnologies' potential risks, using Wisconsin as a case study; and (4) discuss advantages and disadvantages of state versus federal approaches to nanotechnology risk regulation. In summary, we suggest some ways government agencies can be better prepared to address nanotechnology risk knowledge gaps and risk management.

Before and after modelling:risk knowledge management is required

Risk and knowledge are two concepts and components of business management which have so far been studied almost independently. This is especially true where risk management is conceived mainly in financial terms, as, for example, in the banking sector. The banking sector has sophisticated methodologies for managing risk, such as mathematical risk modeling. However. the methodologies for analyzing risk do not explicitly include knowledge management for risk knowledge creation and risk knowledge transfer. Banks are affected by internal and external changes with the consequent accommodation to new business models new regulations and the competition of big players around the world. Thus, banks have different levels of risk appetite and policies in risk management. This paper takes into consideration that business models are changing and that management is looking across the organization to identify the influence of strategic planning, information systems theory, risk management and knowledge management. These disciplines can handle the risks affecting banking that arise from different areas, but only if they work together. This creates a need to view them in an integrated way. This article sees enterprise risk management as a specific application of knowledge in order to control deviation from strategic objectives, shareholders' values and stakeholders' relationships. Before and after a modeling process it necessary to find insights into how the application of knowledge management processes can improve the understanding of risk and the implementation of enterprise risk management. The article presents a propose methodology to contribute to providing a guide for developing risk modeling knowledge and a reduction of knowledge silos, in order to improve the quality and quantity of solutions related to risk inquiries across the organization.

Using XML and XSLT for flexible elicitation of mental-health risk knowledge

Current tools for assessing risks associated with mental-health problems require assessors to make high-level judgements based on clinical experience. This paper describes how new technologies can enhance qualitative research methods to identify lower-level cues underlying these judgements, which can be collected by people without a specialist mental-health background. Content analysis of interviews with 46 multidisciplinary mental-health experts exposed the cues and their interrelationships, which were represented by a mind map using software that stores maps as XML. All 46 mind maps were integrated into a single XML knowledge structure and analysed by a Lisp program to generate quantitative information about the numbers of experts associated with each part of it. The knowledge was refined by the experts, using software developed in Flash to record their collective views within the XML itself. These views specified how the XML should be transformed by XSLT, a technology for rendering XML, which resulted in a validated hierarchical knowledge structure associating patient cues with risks. Changing knowledge elicitation requirements were accommodated by flexible transformations of XML data using XSLT, which also facilitated generation of multiple data-gathering tools suiting different assessment circumstances and levels of mental-health knowledge. © 2007 Informa UK Ltd All rights reserved.

Knowledge management applied to enterprise risk management

Risk and knowledge are two concepts and components of business management which have so far been studied almost independently. This is especially true where risk management (RM) is conceived mainly in financial terms, as for example, in the financial institutions sector. Financial institutions are affected by internal and external changes with the consequent accommodation to new business models, new regulations and new global competition that includes new big players. These changes induce financial institutions to develop different methodologies for managing risk, such as the enterprise risk management (ERM) approach, in order to adopt a holistic view of risk management and, consequently, to deal with different types of risk, levels of risk appetite, and policies in risk management. However, the methodologies for analysing risk do not explicitly include knowledge management (KM). This research examines the potential relationships between KM and two RM concepts: perceived quality of risk control and perceived value of ERM. To fulfill the objective of identifying how KM concepts can have a positive influence on some RM concepts, a literature review of KM and its processes and RM and its processes was performed. From this literature review eight hypotheses were analysed using a classification into people, process and technology variables. The data for this research was gathered from a survey applied to risk management employees in financial institutions and 121 answers were analysed. The analysis of the data was based on multivariate techniques, more specifically stepwise regression analysis. The results showed that the perceived quality of risk control is significantly associated with the variables: perceived quality of risk knowledge sharing, perceived quality of communication among people, web channel functionality, and risk management information system functionality. However, the relationships of the KM variables to the perceived value of ERM are not identified because of the low performance of the models describing these relationships. The analysis reveals important insights into the potential KM support to RM such as: the better adoption of KM people and technology actions, the better the perceived quality of risk control. Equally, the results suggest that the quality of risk control and the benefits of ERM follow different patterns given that there is no correlation between both concepts and the distinct influence of the KM variables in each concept. The ERM scenario is different from that of risk control because ERM, as an answer to RM failures and adaptation to new regulation in financial institutions, has led organizations to adopt new processes, technologies, and governance models. Thus, the search for factors influencing the perceived value of ERM implementation needs additional analysis because what is improved in RM processes individually is not having the same effect on the perceived value of ERM. Based on these model results and the literature review the basis of the ERKMAS (Enterprise Risk Knowledge Management System) is presented.

Knowledge management and risk management

This article takes the perspective that risk knowledge and the activities related to RM practice can benefit from the implementation of KM processes and systems, to produce a better enterprise wide implementation of risk management. Both in the information systems discipline and elsewhere, there has been a trend towards greater integration and consolidation in the management of organizations. Some examples of this are: Enterprise Resource Planning (Stevens, 2003), Enterprise Architecture (Zachmann, 1996) and Enterprise Content Management (Smith & McKeen, 2003). Similarly, risk management is evolving into Enterprise Risk Management. KM’s importance in breaking down silos within an organization can help it to do so.

Knowledge management in support of enterprise risk management

Risk management and knowledge management have so far been studied almost independently. The evolution of risk management to the holistic view of Enterprise Risk Management requires the destruction of barriers between organizational silos and the exchange and application of knowledge from different risk management areas. However, knowledge management has received little or no attention in risk management. This paper examines possible relationships between knowledge management constructs related to knowledge sharing, and two risk management concepts: perceived quality of risk control and perceived value of enterprise risk management. From a literature review, relationships with eight knowledge management variables covering people, process and technology aspects were hypothesised. A survey was administered to risk management employees in financial institutions. The results showed that the perceived quality of risk control is significantly associated with four knowledge management variables: perceived quality of risk knowledge sharing, perceived quality of communication among people, web channel functionality, and risk management information system functionality. However, the relationships of the knowledge management variables to the perceived value of enterprise risk management are not significant. We conclude that better knowledge management is associated with better risk control, but that more effort needs to be made to break down organizational silos in order to support true Enterprise Risk Management.

Knowledge management in support of enterprise risk management

Risk management and knowledge management have so far been studied almost independently. The evolution of risk management to the holistic view of Enterprise Risk Management requires the destruction of barriers between organizational silos and the exchange and application of knowledge from different risk management areas. However, knowledge management has received little or no attention in risk management. This paper examines possible relationships between knowledge management constructs related to knowledge sharing, and two risk management concepts: perceived quality of risk control and perceived value of enterprise risk management. From a literature review, relationships with eight knowledge management variables covering people, process and technology aspects were hypothesised. A survey was administered to risk management employees in financial institutions. The results showed that the perceived quality of risk control is significantly associated with four knowledge management variables: perceived quality of risk knowledge sharing, perceived quality of communication among people, web channel functionality, and risk management information system functionality. However, the relationships of the knowledge management variables to the perceived value of enterprise risk management are not significant. We conclude that better knowledge management is associated with better risk control, but that more effort needs to be made to break down organizational silos in order to support true Enterprise Risk Management.

Maps as risk mitigation tools. Adaptation of the Swiss hazard assessment and mapping methodology to a Moroccan site: Beni Mellal

Dans le contexte climatique actuel, les régions méditerranéennes connaissent une intensification des phénomènes hydrométéorologiques extrêmes. Au Maroc, le risque lié aux inondations est devenu problématique, les communautés étant vulnérables aux événements extrêmes. En effet, le développement économique et urbain rapide et mal maîtrisé augmente l'exposition aux phénomènes extrêmes. La Direction du Développement et de la Coopération suisse (DDC) s'implique activement dans la réduction des risques naturels au Maroc. La cartographie des dangers et son intégration dans l'aménagement du territoire représentent une méthode efficace afin de réduire la vulnérabilité spatiale. Ainsi, la DDC a mandaté ce projet d'adaptation de la méthode suisse de cartographie des dangers à un cas d'étude marocain (la ville de Beni Mellal, région de Tadla-Azilal, Maroc). La méthode suisse a été adaptée aux contraintes spécifiques du terrain (environnement semi-aride, morphologie de piémont) et au contexte de transfert de connaissances (caractéristiques socio-économiques et pratiques). Une carte des phénomènes d'inondations a été produite. Elle contient les témoins morphologiques et les éléments anthropiques pertinents pour le développement et l'aggravation des inondations. La modélisation de la relation pluie-débit pour des événements de référence, et le routage des hydrogrammes de crue ainsi obtenus ont permis d'estimer quantitativement l'aléa inondation. Des données obtenues sur le terrain (estimations de débit, extension de crues connues) ont permis de vérifier les résultats des modèles. Des cartes d'intensité et de probabilité ont été obtenues. Enfin, une carte indicative du danger d'inondation a été produite sur la base de la matrice suisse du danger qui croise l'intensité et la probabilité d'occurrence d'un événement pour obtenir des degrés de danger assignables au territoire étudié. En vue de l'implémentation des cartes de danger dans les documents de l'aménagement du territoire, nous nous intéressons au fonctionnement actuel de la gestion institutionnelle du risque à Beni Mellal, en étudiant le degré d'intégration de la gestion et la manière dont les connaissances sur les risques influencent le processus de gestion. L'analyse montre que la gestion est marquée par une logique de gestion hiérarchique et la priorité des mesures de protection par rapport aux mesures passives d'aménagement du territoire. Les connaissances sur le risque restent sectorielles, souvent déconnectées. L'innovation dans le domaine de la gestion du risque résulte de collaborations horizontales entre les acteurs ou avec des sources de connaissances externes (par exemple les universités). Des recommandations méthodologiques et institutionnelles issues de cette étude ont été adressées aux gestionnaires en vue de l'implémentation des cartes de danger. Plus que des outils de réduction du risque, les cartes de danger aident à transmettre des connaissances vers le public et contribuent ainsi à établir une culture du risque. - Severe rainfall events are thought to be occurring more frequently in semi-arid areas. In Morocco, flood hazard has become an important topic, notably as rapid economic development and high urbanization rates have increased the exposure of people and assets in hazard-prone areas. The Swiss Agency for Development and Cooperation (SADC) is active in natural hazard mitigation in Morocco. As hazard mapping for urban planning is thought to be a sound tool for vulnerability reduction, the SADC has financed a project aimed at adapting the Swiss approach for hazard assessment and mapping to the case of Morocco. In a knowledge transfer context, the Swiss method was adapted to the semi-arid environment, the specific piedmont morphology and to socio-economic constraints particular to the study site. Following the Swiss guidelines, a hydro-geomorphological map was established, containing all geomorphic elements related to known past floods. Next, rainfall / runoff modeling for reference events and hydraulic routing of the obtained hydrographs were carried out in order to assess hazard quantitatively. Field-collected discharge estimations and flood extent for known floods were used to verify the model results. Flood hazard intensity and probability maps were obtained. Finally, an indicative danger map as defined within the Swiss hazard assessment terminology was calculated using the Swiss hazard matrix that convolves flood intensity with its recurrence probability in order to assign flood danger degrees to the concerned territory. Danger maps become effective, as risk mitigation tools, when implemented in urban planning. We focus on how local authorities are involved in the risk management process and how knowledge about risk impacts the management. An institutional vulnerability "map" was established based on individual interviews held with the main institutional actors in flood management. Results show that flood hazard management is defined by uneven actions and relationships, it is based on top-down decision-making patterns, and focus is maintained on active mitigation measures. The institutional actors embody sectorial, often disconnected risk knowledge pools, whose relationships are dictated by the institutional hierarchy. Results show that innovation in the risk management process emerges when actors collaborate despite the established hierarchy or when they open to outer knowledge pools (e.g. the academia). Several methodological and institutional recommendations were addressed to risk management stakeholders in view of potential map implementation to planning. Hazard assessment and mapping is essential to an integrated risk management approach: more than a mitigation tool, danger maps represent tools that allow communicating on hazards and establishing a risk culture.

Substance Use and Sexual Risk Behaviors among Adolescent Detainees

During the past two decades there has been much research conducted on the relationship between the risky sexual behavior practices and substance use among U.S. adolescents. This body of research has documented the fact that substance use and not using condoms are the most important indicators associated with the risk of becoming infected with sexually transmitted diseases (STD) both among adolescents and adults (Florida Department of Public Health, 2004; Malow, Devieux, Jennings, & Lucenko, 2001; McCoy & Inciardi, 1995). Data from those reports and studies indicate that adolescents and adults who use a condom regularly and appropriately are 20 times less likely to contract an STD than those who do not (Pinkerton & Abramson, 1997). However, less empirical evidence exists about the factors that influence adolescent use of condoms, particularly among adolescents who are detained due to their criminal lifestyle. Researchers have found both a high prevalence of STD in addition to early onset of sexual activity without protection among some adolescent groups such as the detainees (D'angelo & DiClemente, 1996) and that adolescents tend to underestimate their risks of acquiring the human immunodeficiency virus (HIV) (Magura, Shapiro, & Kang, 1994). Many adolescents will experiment with alcohol and other drugs. This behavior may compromise their judgment and increase their chances of engaging in risky sex (Rotheram-Borus, 2000). Hence the need for research that investigates the influence that substance use, risky sexual attitudes, knowledge about the transmission of HIV, and both peer and parental approval of condom use have on the use of condoms among both female and male adolescent detainees. Lastly, it is important for additional research to be conducted because adolescent detainees have been identified as being at high risk of becoming infected with an STD (Malow, Rosemberg, & Devieux, 2006). The purpose of this study was to examine the relationship among adolescent substance use, gender, sexual risk attitude, attitude about personal use of condoms, knowledge associated with the transmission of HIV, peer and family approval of condom use, history of sexually transmitted diseases (STD) and the level of condom use in a sample of adolescents housed in a correctional institution. Further details of the explanatory variables, the control variables and their expected relationships can be found in the review of the Literature in Chapter 2. Also, more information about the separate analysis of the research questions is detailed in the Methods section in Chapter 3. Based on the literature detailed in Chapter 2 (e.g., Malow et al., 2006), the current study’s researcher anticipated that adolescents’ higher levels of illicit drug use would be related to higher levels of sexual risk behaviors, as measured by lower levels of condom use, than their counterparts who used no drugs. Similarly, it was hypothesized that positive attitudes toward condom use and higher levels of HIV risk knowledge would be associated with a lower level of risky sexual behaviors along with a higher level of condom use skill. It was further hypothesized that the level of approval perceived from parents and peers regarding condom use was going to be related to adolescents’ safe sex behavior (i.e., condom use). Therefore, it was expected that participants’ perception of a high level of approval to use condoms from peers and parents would be a statistically significant variable in helping explain the condom use within this sample of adolescent detainees.

Riskitiedon tehokkaampi hyödyntäminen kansainvälisessä projektiliiketoiminnassa

Tutkimuksessa selvitettiin riskitiedon siirtoon ja hyödyntämiseen käytettyjä työkaluja ja toimintatapoja projektin myynti- ja toteutusvaiheessa. Toisena tavoitteena oli tuoda esille projektiympäristössä riskitiedon tehokkaaseen siirtämiseen ja hyödyntämiseen vaikuttavat seikat. Työssä peilataan kirjallisuudessa esitettyjä riskienhallinnan käytäntöjä yrityksen riskienhallinnan toimintatapoihin ja etsitään sopivia tapoja muokata nykyisiä riskitiedon hyödyntämistapoja tehokkaammaksi. Tutkimus toteutettiin tapaustutkimuksena ja aineistoa kerättiin syventävän haastattelun avulla, päivittämällä riskien tarkastuslista, tutkimalla järjestelmistä saatavia dokumentteja sekä GPSII -kehitysyhteistyöhankkeen tuloksia. Tutkimuksen tuloksena löydettiin riskitiedon hyödyntämiseen liittyviä ongelmia. Lisäksi todettiin selkeä tarve kehittää muutoksenhallintaan liittyvää tietokantajärjestelmää että tarve lisätä riskien tarkastuslistan läpikäyntikertojen määrää ja säännöllisyyttä.

Riskivastuullisuus turvallisuuskasvatuksen kulttuurissa. Oppilaiden vastuullisuus, turvallisuustaju ja tuottamistoiminnan riskiraja peruskoulun käsityön opetuksessa

Riskit ja riskittömyys uhkaavat yksilöitä, käsityötä ja yhteiskuntaa. Käsityökasvatukselleon haaste toimia kulttuurissa, joka tavoittelee täyttä riskittömyyttä. Käsityössä kasvatetaan kekseliäisyyteen ja varautumaan sen aiheuttaman riskin kohtaamiseen sekä ottamaan siitä vastuuta. Tämän tutkimuksen tehtävänä on riskivastuullisuuden mallin rakentamiseksi selvittää, kuinka oppilaiden vastuullisuus selittää riskirajaa käsityön turvallisuuskasvatuksen kulttuurissa. Välinearvojen saavuttamiseksi on siedettävä välineriskiä, joka ei ylitä turvallisuuskulttuurin riskirajaa. Välinearvot ovat välineiden laatua lisääviä ominaisuuksia, joilla pyritään peittämään välineriskejä. Siedettävän riskin rajan ratkaisemiseen tarvitaan tietoa käsityön tuottamisesta ja todellisuutta havainnoivien tiedonalojen tietoa. Viime kädessä ratkaisu tehdään rakentavalla ajattelulla, johon kuuluu välinearvojen tavoittelua ohjaava käsityötaju ja välineriskeihin varautumista ohjaava turvallisuustaju. Käsityössä onnistuminen kannustaa kohti uusia haasteita ja epäonnistumisen riski asettuu mittasuhteisiinsa. Kekseliäässä käsityön kulttuurissa kokeillaan omia ja ympäröivän todellisuuden mahdollisuuksia ottamalla oivaltaen riskejä, jotka saavat aikaan rakentavan kokemuksen riskistä. Käsityö on riskioivallusten oppiaine. Tutkimustehtävän toteuttamiseksi tässä tutkimuksessa rakennetaan uusi riskivastuullisuuden malli, jossa vastuullisuus selittää riskirajaa. Mallin vastaavuutta selvitetään valtakunnallisesti peruskoulun käsityön 6. ja 9. luokan käsityön opetuksessa (n = 393). Aineisto on analysoitu rakenneyhtälöanalyysein konfirmatorisella faktorianalyysilla ja polkumallinnuksella. Tutkimusaineisto ja riskivastuullisuuden malli vastaavat toisiaan. Vastuullisuuden selitysosuus turvallisuustajun ja käsityötajun ratkaisemasta riskirajasta on mallin mukaan 35 %. Oppilaat osoittivat tuntevansa oman tuottamisensa vaikutuksia ja vastuuta niistä. Vastuullisuus osoittautui tärkeäksi riskirajan selittäjäksi, joten käsityön turvallisuuskasvatuksen kulttuuri voi kohota uudelle tasolle riskivastuulliseksi. Käsityön turvallisuuskasvatus on kokonaisvaltaista turvallisuustajun kasvatusta. Riskivastuullisuus luo turvallisuuskulttuuriin yhteisen käsityksen siedettävän riskin rajasta. Oppilaiden mahdollisuuksia kekseliääseen tutkivaan tuottamiseen on vahvistettava eikä rajoitettava. Riskivastuullisessa käsityön turvallisuuskasvatuksen kulttuurissa opettajan tehtävänä ei ole estää mitään tapahtumasta vaan saada mahdollisimman paljon tapahtumaan, sillä vastuullisuus kasvaa vastuuta ottamalla. Se on kasvatuksen – käsityökasvatuksen – keino turvallisuustyössä.

Le dispositif institutionnel et la relation thérapeutique en salle d'accouchement : entre le risque, le savoir hégémonique et les rapports de pouvoir.

Ce mémoire vise à établir la complexité de la relation thérapeutique entre l’infirmière et le couple en salle d’accouchement. Sachant que la relation thérapeutique est essentielle à la réussite du processus de soins, sa conceptualisation demeure primordiale pour une meilleure compréhension de son impact et pour mener à bien les soins. Cette recherche ethnographique a voulu documenter les relations des infirmières avec des couples en salle d’accouchement dans un hôpital de l’île de Montréal. Ce mémoire aborde un thème central de l’anthropologie : les relations humaines. La question clef de ce mémoire questionne les facteurs qui entravent et qui favorisent la relation thérapeutique entre l’infirmière et le couple en salle d’accouchement. Cette recherche démontre des lacunes théoriques qui technicisent la relation thérapeutique et indique que la notion du risque, les normes institutionnelles, l’hégémonie du savoir obstétrical et le pouvoir médical sont des facteurs qui semblent avoir une grande influence dans la relation thérapeutique.