Risk Management Takes A Commitment From Everyone

These days, it seems all we hear about in the risk management arena is the advent of enterprise risk management. Now, I am sure that the qualification of risk management on all levels of an organization has great merit, and that the quantification at each level is very important.

The issue I have is the same issue that any good risk manager has with this premise: Risk management, to be effective, must be identified at all levels of the organization, or it won't work. It has always been like this, way before we started calling it "enterprise risk management." If your company does not have an awareness of the need for risk control in the backroom as well as the boardroom, then production needs will outweigh all concerns, and preventable losses will occur.

An owner and chief executive ask me why I thought the company wasn't making any money. I replied that the organization was motivated by production at all costs. "Well," came the reply, "if we don't have production, we have no company." I replied that it was not the production side of the equation that concerned me, it was the "at all costs" part that was troublesome.

Only with a top-down commitment can a risk management program succeed at all levels of the organization. The risk manager who has that commitment in words and deeds will be able to elicit systematic changes in the production chain, leading to a healthier workforce and reduced costs. If not, then let's face facts—at that point, all you're really doing is insurance.