John A. Shedd

A ship in harbor is safe — but that is not what ships are built for.

Randy Starr, Jim Newfrock, and Michael Delurey

The reliance on open borders, transnational alliances, and global markets for capital, goods, and services has generated a “just in time” economy, which, although remarkably cost-efficient, leaves companies open to a range of discontinuities that can affect operations, reputation, customer habits, legal standing, regulatory compliance, earnings performance, and ultimately shareholder value. We call these new vulnerabilities, collectively, interdependence risk, and define it as unanticipated risk … [ Read more ]

Guide to Business Continuity Management: Frequently Asked Questions

This report takes an in-depth look at the many issues and events that are driving the need for improved business continuity management practices, and the steps companies can take to implement an effective Business Continuity Management (BCM) program. It reviews in detail numerous BCM areas and strategies, including an overview of the regulatory landscape, risk assessment and business impact analysis, program design, business alignment, training, … [ Read more ]

Eric Best

Risk tolerance is a kind of index of confidence and courage: the willingness to go forward into uncertainty and operate there at length. When decisions are made collectively, the risk tolerance of the group is a measure of mutual trust. It shows what the members believe they can accomplish as a group if conditions become turbulent during, say, a difficult merger or acquisition. But it’s … [ Read more ]

A Model of Muddling Through

In business, in government, in diplomatic affairs, anywhere that you are confronted with a need for change, you have to ask: Is it effective to make large, radical changes? Or is it more advisable to merely “muddle through”?

Yossi Sheffi

Currently, in some industries, the difference in the cost of labor is such that they have no choice but to outsource to, say, China. But in other industries, the choice is not always so clear. My feeling is that in many cases not all costs in terms of increased risks are taken into account. One of the problems is that we don’t have good metrics … [ Read more ]

Simplified Security: 25 Tips to Help Companies Implement Security

This manifesto helps companies of all sizes understand and implement the necessary level of security. The 25 tips cover everything from physical security to SPAM.

Faked in China

The world’s biggest factory is also a fake goods hotbed. Here are 13 ways to protect your company. The second in a CSO series on counterfeiting.

Ross Campbell

Crisis management is only as strong as its most distant parts. The best crisis management plans have a consistent process across all an organization’s sites. A crisis manager from head office should be able to walk onto any site in that organization and play a part of the crisis response team anywhere; similarly, a member of the most distant site of that organization should be … [ Read more ]

Risk and Reward in Supply Chain Management

What should you be doing to manage supply chain risk? As supply chains grow ever more complex, the question has never been more difficult to answer.

Integrating Value and Risk in Portfolio Strategy

The idea that there is a relation between risk and returns is a cornerstone of modern portfolio theory. And yet, the concept has yet to affect the way most companies manage the real assets of the corporate portfolio. It’s an enormous missed opportunity. It is possible to integrate a rigorous assessment of uncertainty and risk into the very process of setting portfolio strategy. The result … [ Read more ]

Disarming the Value Killers

Risk management has become an area of significant concern for numerous companies in today’s volatile marketplace. However, a number of executives are still grappling with what needs to be done to protect their organizations.

A logical starting point is to gain a better understanding of the true risks facing companies. To accomplish this, Deloitte & Touche LLP and Deloitte Research, a part of Deloitte Services LP, … [ Read more ]

How a Bookmaker and a Whiz Kid Took On an Extortionist – and Won

Facing an online extortion threat, Mickey Richardson bet his Web-based business on a networking whiz from Sacramento who first beat back the bad guys, then helped the cops nab them. If you collect revenue online, you’d better read this.

Rethinking Risk: Adventures on the strategic risk frontier

Beyond earthquakes and currency fluctuations, there’s a broad array of strategic risks poised to disrupt or even destroy any business. But embracing risk is also part of the growth equation. Is your business prepared? And what are the risks you should be taking but aren’t?

Bill Huyett

Extreme competition means more volatile earnings – something that worries equity markets obsessed by predictable earnings per share. Most businesses monitor and control operational risks but pay too little attention to the more complex range of strategic ones. Four in particular merit attention: the value proposition risk (will a cheaper product knock the company out of the water?), the cost curve risk (will a low-cost … [ Read more ]

Aaron Wildavsky, Jonathan Ledgard

“The most powerful factors in how people perceive risk,” Professor Wildavsky wrote in his essay “Riskless Society,” “apparently are ‘trust in institutions’ and ‘self-rated liberal and conservative identification.'” According to the professor, left-leaning individuals are more likely to perceive true risk as potential injustice and perceive technology as exploitative, harming the poor and nature, while those who lean to the right are more likely to … [ Read more ]

The Power of Plausibility Theory

A new form of decision analysis is helping executives reevaluate risk management.

Ronald S. Jonash, Philip D. Metz, and Bruce McK. Thompson

The flip side of rewards is risk. A commitment to delegation and empowerment raises a host of thorny questions. For example: How do you strike a balance between trust and security? Senior managers want people to be bold enough to do “what’s right” for the company – but what if what’s right for the company means shutting down their project or cutting back research dollars … [ Read more ]

Power Laws & the New Science of Complexity Management

In an intricately networked world, the study of “nonequilibrium” systems is teaching companies how to overcome risk.