What are the steps in a risk management process and where do I begin? And once risks are identified, how are they evaluated and what are the strategies for mitigation and management?
Risk is the likelihood of an event and its consequences. Businesses face risks that can threat their very existence, which is where the risk management element comes in: the process of preparing for such eventualities. By identifying what can go wrong, risks can be reduced or prevented, and the impacts lessened, which is a central part of successful growth. Being prepared not only reduces the chance of failure, it also deepens understanding of a business’s critical success factors.
Key: paid for service registration required official
Risk management processes
Lloyds Bank
Start off with an overview of the risk management process for small businesses from Lloyds Bank.
WHEN: You or your board are seeking to implement a more robust risk management process and directors require a comprehensive overview of what’s required. Or an unexpected event has occurred that has damaged the business.
WHY: Allows better management of risks that do occur, rather than worsening a risk through chaotic management. It also improves business planning, priority and objective setting as well as management decision making.
WHAT: A guide to help you identify risks relating to all business activities and define the systems and controls to deal with the impact. It also shows you how to consider the chance of a particular event happening, and decide how to respond to risks occurrences and then finally measure the effectiveness of the risk management system.
OTHER: An overview of the risk management process from Kingston Smith Solicitors.
Risk management processes
ERMA Risk Management Organisation
Learn the risk management guidance for entrepreneurs from ERMA Risk Management Organisation.
WHEN: You are embarking on new ventures, product launches or service enhancements.
WHY: Enables entrepreneurs to position risk within the context of the array of other tasks occurring during the startup or early growth phases.
WHAT: An in-depth article which identifies key differences between strategic analysis, such as SWOT and risk management, for purposes of business planning and implementation.
OTHER: Risk insights for entrepreneurs from Entrepreneurship in a Box.
Strategic risks
Madrid Local Government
See a thorough analysis of strategic risks from Madrid Local Government.
WHEN: You want to identify strategic challenges or opportunities within the competitive environment that can impact on the customer value proposition, sales growth, customer service or proposition quality.
WHY: The competitive landscape may be tougher than you thought. Customer preferences of a market, sector or industry can quickly change, driven by technological, social or market changes.
WHAT: An analysis of the trends, barriers to entry and balance of negotiating power affecting the trading landscape of the firm, including sales, distribution and marketing.
Legal and regulatory risks
Bytestart
Review this analysis of legal and regulatory risks from Bytestart.
WHEN: Your business operates in a legal environment that is subject to wide reaching and changing laws and rules. Or, when you need to prepare for political and economic instability.
WHY: Failure to comply with relevant laws and regulations can lead to fines, sanctions, trading restrictions or closure.
WHAT: An article that details relevant compliance risks to staff, customers and other stakeholders from different perspectives including health and safety.
OTHER: Operational risks and sector specific risk guidance from Health and Safety Executive.
Financial risks
Startup.ie
Understand how to identify financial risks by Startup.ie.
WHEN: You are preparing a business plan or budget, or seeking finance. You could also be evaluating a project finance decision.
WHY: Financial risk can relate to cashflow, interest rates, currency fluctuation, profitability, investment requirements or taxation.
WHAT: A sensitivity analysis to changes in financial performance. Consideration of realistic, best and worst case financial forecasting. Excessive dependency on a single customer.
OTHER: Risk management from investor perspective from Smart Company.
Operational risks
Health and Safety Executive
Contextualise your knowledge with operational and sector-specific risk case studies from Health and Safety Executive.
WHEN: You are reviewing the risks associated with all the operational departments of the business for business continuity planning or disaster recovery processes. Operational risks will typically be the broadest and most business specific aspect of risk management.
WHY: Regulators may require this by law or investors may expect this to be a key part of day to day activity management across the firm. Also, it forms a key aspect of business continuity planning including disaster recovery.
WHAT: A range of case studies across a variety of sectors. Includes analysis of production, delivery, manufacturing supply chain, procurement, transportation and logistics, technology, data and information systems.
OTHER: Start-up Nation on different types of risk from Startup Nation.
Risk management
Entrepreneur.com
Evaluate and prioritise risks from Entrepreneur.com.
WHEN: You need to direct limited resources to the most important risks.
WHY: Evaluating risks determines the likelihood and impact and whether to accept the risk or take action to prevent or reduce it. Risks will change as the external environment changes and businesses grow or other factors alter. Risks should therefore be regularly looked at.
WHAT: An article with concise steps for risk analysis. Many businesses find that considering likelihood and impact as high, medium or low (and assigning a value of 3, 2, 1) is adequate for their needs. Multiplying likelihood by impact provides for a prioritisation.
OTHER: Overview of evaluation and prioritisation stage from HR Daily.
Risk mitigation
Business Queensland
Read guidance on how to mitigate and manage risks from Business Queensland.
WHEN: You have conducted your risk analysis and the impact of risk and now need to mitigate potential negative impacts.
WHY: Regular monitoring of your risk management process is essential as this ensures all risks have been identified and counter measures put in place. Allows businesses to establish the cost of mitigating a risk, which can be so high that doing nothing makes more financial sense. For example, if a fire or a flood means you can’t access your workplace: you can’t avoid all the risk, but you can minimise disruption.
WHAT: This guide helps you to understand how to treat risks effectively, then review and update your risk management plan.
OTHER: Process description on mitigation and management of risks from Health and Safety Executive.
Business continuity planning
HM Government
Take time to read an official guide onrisk management and business continuity planning from HM Government. (#)
WHEN: You are developing a business continuity plan or disaster recovery plan.
WHY: Having a plan to manage risks when they occur closely overlaps with business continuity planning.
WHAT: A toolkit to efficiently develop a BCP on the back of a risk management process.
OTHER: Explanation on the difference between risk management and business continuity planning from DRI International.
OTHER: Creating a business continuity plan from Federation of Small Businesses.
Risk accountability
Project Risk Coach
Discover the ins and outs of assigning ownership of risk management from Project Risk Coach.
WHEN: You are establishing where and how to assign ownership for risk management.
WHY: Without clear accountability management of risk can fail. In small businesses, the finance director or chief executive often overseas the risk management. In larger businesses, where there may be a risk management committee, this would often be led by a non-executive board member.
WHAT: A PDF risk management guide for small to medium businesses. Understanding the overall function and processes of risk management at the outset helps assign ownership.
OTHER: Where different resources exists within the risk management process from Entrepreneur.com.