This book develops the notion that companies can succeed on the basis of risk management, much as companies compete on efficiency, costs, labor, location, and other dimensions. The reality of risk and how it impacts companies is that it is much more definite, often catastrophic and looks more like a shock. This is striking, as a difference between firms on risk different than a marginal difference in operating efficiencies, for example. Competing on Risk Management requires a discipline, a commitment to using information and recognizing shocks and then acting upon those to redistribute assets. This book will examine how leading firms that compete on risk have done this and showcase best practices and impacts to the capital structure of firms and their organizational formation.

Projects are risky undertakings, and modern approaches to managing projects recognise the central need to manage the risk as an integral part of the project management discipline. Managing Risk in Projects places risk management in its proper context in the world of project management and beyond, and emphasises the central concepts that are essential in order to understand why and how risk management should be implemented on all projects of all types and sizes, in all industries and in all countries. The generic approach detailed by David Hillson is consistent with current international best practice and guidelines (including 'A Guide to the Project Management Body of Knowledge' (PMBoK) and the 'Project Risk Management Practice Standard' from PMI, the 'APM Body of Knowledge' and 'Project Risk Analysis & Management (PRAM) Guide' from APM, 'Management of Risk: Guidance for Practitioners' from OGC, and the forthcoming risk standard from ISO) but David also introduces key developments in the risk management field, ensuring readers are aware of recent thinking, focusing on their relevance to practical application. Throughout, the goal is to offer a concise description of current best practice in project risk management whilst introducing the latest relevant developments, to enable project managers, project sponsors and others responsible for managing risk in projects to do just that - effectively.

Using the factor analysis of information risk (FAIR) methodology developed over ten years and adopted by corporations worldwide, Measuring and Managing Information Risk provides a proven and credible framework for understanding, measuring, and analyzing information risk of any size or complexity. Intended for organizations that need to either build a risk management program from the ground up or strengthen an existing one, this book provides a unique and fresh perspective on how to do a basic quantitative risk analysis. Covering such key areas as risk theory, risk calculation, scenario modeling, and communicating risk within the organization, Measuring and Managing Information Risk helps managers make better business decisions by understanding their organizational risk. Uses factor analysis of information risk (FAIR) as a methodology for measuring and managing risk in any organization. Carefully balances theory with practical applicability and relevant stories of successful implementation. Includes examples from a wide variety of businesses and situations presented in an accessible writing style.

OpRisk Awards 2020 Book of the Year Winner! The Authoritative Guide to the Best Practices in Operational Risk Management Operational Risk Management offers a comprehensive guide that contains a review of the most up-to-date and effective operational risk management practices in the financial services industry. The book provides an essential overview of the current methods and best practices applied in financial companies and also contains advanced tools and techniques developed by the most mature firms in the field. The author explores the range of operational risks such as information security, fraud or reputation damage and details how to put in place an effective program based on the four main risk management activities: risk identification, risk assessment, risk mitigation and risk monitoring. The book also examines some specific types of operational risks that rank high on many firms' risk registers. Drawing on the author's extensive experience working with and advising financial companies, Operational Risk Management is written both for those new to the discipline and for experienced operational risk managers who want to strengthen and consolidate their knowledge.

Traditional risk management programs focus on managing and mitigating harms - in other words, on avoiding failure. But survey after survey tell us this approach is not convincing executives and boards that risk management is helping them achieve their objectives. They see it as a compliance exercise: something they have to do rather than want to do. Norman Marks draws on his personal experience as an executive and builds on the thinking in his previous books, including World-Class Risk Management, Risk Management in Plain English, and Making Business Sense of Technology Risk, to explain how risk management should instead focus on achieving success. This book discusses how a consideration of what might happen can enable informed and intelligent decisions from the setting of objectives and corporate strategies through the daily execution of the business. Those decisions enable the appropriate taking of risk so that the organization has an acceptable likelihood of achieving its objectives. An assessment of risk management is recommended by a majority of corporate governance codes around the globe and required by the Standards of the Institute of Internal Auditors. The book includes a comprehensive maturity model that details the attributes of the highest level of maturity envisaged in this book, as well as management surveys that can be tailored for your organization. They can be used as the basis for an assessment by management, the risk officer, or the internal audit team.

The ultimate guide to maximizing shareholder value through ERM The first book to introduce an emerging approach synthesizing ERM and value-based management, Corporate Value of Enterprise Risk Management clarifies ERM as a strategic business management approach that enhances strategic planning and other decision-making processes. A hot topic in the wake of a series of corporate scandals as well as the financial crisis Looks at ERM as a way to deliver on the promise of balancing risk and return A practical guide for corporate Chief Risk Officers (CROs) and other business professionals seeking to successfully implement ERM ERM is here to stay. Sharing his unique insights and experiences as a recognized global thought leader in this field, author Sim Segal offers world-class guidance on how your business can successfully implement ERM to protect and increase shareholder value.

Is your business playing it safe—or taking the right risks? If you read nothing else on managing risk, read these 10 articles. We've combed through hundreds of Harvard Business Review articles and selected the most important ones to help your company make smart decisions and thrive, even when the future is unclear. This book will inspire you to: Avoid the most common errors in risk management Understand the three distinct categories of risk and tailor your risk-management processes accordingly Embrace uncertainty as a key element of breakthrough innovation Adopt best practices for mitigating political threats Upgrade your organization's forecasting capabilities to gain a competitive edge Detect and neutralize cyberattacks originating inside your company This collection of articles includes "Managing Risks: A New Framework," by Robert S. Kaplan and Anette Mikes; "How to Build Risk into Your Business Model," by Karan Girotra and Serguei Netessine; "The Six Mistakes Executives Make in Risk Management," by Nassim N. Taleb, Daniel G. Goldstein, and Mark W. Spitznagel; "From Superstorms to Factory Fires: Managing Unpredictable Supply-Chain Disruptions," by David Simchi-Levi, William Schmidt, and Yehua Wei; "Is It Real? Can We Win? Is It Worth Doing?: Managing Risk and Reward in an Innovation Portfolio," by George S. Day; “Superforecasting: How to Upgrade Your Company's Judgment," by Paul J. H. Schoemaker and Philip E. Tetlock; "Managing 21st-Century Political Risk," by Condoleezza Rice and Amy Zegart; "How to Scandal-Proof Your Company," by Paul Healy and George Serafeim; "Beating the Odds When You Launch a New Venture," by Clark Gilbert and Matthew Eyring; "The Danger from Within," by David M. Upton and Sadie Creese; and "Future-Proof Your Climate Strategy," by Joseph E. Aldy and Gianfranco Gianfrate.