THE RISK REVOLUTION: WHY YOUR CURRENT RISK ASSESSMENT PROCESS SUCKS

Maxim Atanassov • July 10, 2024

Let’s face it: most risk assessments are about as exciting as watching paint dry. They’re outdated, ineffective, and, frankly, a waste of everyone’s time. But in today’s fast-paced, digital-first world, we can’t afford to sleepwalk through risk management. It’s time for a wake-up call to embrace effective risk management.

The Old Guard: What's Holding You Back


Traditional risk assessments are like using a flip phone in the age of smartphones. They’re:


  1. Slow and cumbersome
  2. Reliant on outdated data
  3. Disconnected from real-world dynamics
  4. Unable to capture nuanced insights
  5. Boring as hell (and that matters)


When evaluating risks, these traditional methods fall short in identifying, assessing, and mitigating potential issues effectively.

If you’re still using these methods, you might as well be trying to predict the stock market with a Magic 8 Ball.


The New Frontier: Risk Assessment 2.0


Welcome to the future, where project risk management and risk assessment are:


  1. Agile and responsive
  2. Data-driven and real-time
  3. Deeply connected to business objectives and the value drivers behind these objectives.
  4. Capable of uncovering hidden risks and opportunities
  5. Engaging and actually (gasp!) interesting


It’s time to trade in your abacus for an AI-powered supercomputer. Let’s get started.


Safe Provocation: The Art of Asking Uncomfortable Questions


Risk assessment isn't a tea party. It's time to start asking the tough questions that will make people squirm—in a good way.


Why Safe Provocation Matters


Safe provocation is like poking a bear – if the bear wore padding and you had a really long stick. It's about pushing boundaries without crossing them and challenging assumptions without alienating your team.


The Psychology of Provocation


Humans are wired to avoid discomfort. But discomfort is where growth happens. By creating a safe space for provocation, you're tapping into the psychology of innovation and honesty.


Techniques for Safe Provocation


  1. The “What If” Game: Push scenarios to their logical extremes.
  2. Role Reversal: Ask participants to argue against their own positions.
  3. The Devil’s Advocate: Assign someone to challenge every assumption.
  4. Scenario Planning on Steroids: Create wildly divergent future scenarios.


Remember, the goal isn’t to be a jerk – it’s to unlock insights that are hiding beneath the surface of politeness and groupthink by identifying risks early.


Unlocking Candour: How to Get People to Tell You What They Really Think


Candour is the holy grail of risk assessment. Without it, you're just playing a game of corporate charades.


The Candour Conundrum


People lie. They lie to themselves, to their bosses, and to risk assessors. Your job is to create an environment where the truth isn’t just accepted – it’s celebrated, enabling you to identify risks effectively. And this is where creating safety to speak up is super important.


Building a Culture of Honesty


  1. Lead by example: Share your own vulnerabilities and mistakes to foster an environment where identifying risks becomes a collective effort.
  2. Reward truth-telling: Publicly recognize those who speak up
  3. Separate the message from the messenger: Focus on solutions, not blame
  4. Create psychological safety: Make it clear that honesty won’t be punished


Tools for Unlocking Candor


  1. Anonymous surveys with provocative questions
  2. One-on-one interviews conducted by neutral third parties
  3. Group workshops with built-in anonymity features (Tip: Ensure that all of the workshop participants are at the same level within the organization. When the boss is in the room, subordinates tend to defer to what the boss thinks.)
  4. Gamification techniques that reward honesty and insight.


Remember, candour isn't just nice to have – it's essential for accurate risk assessment. Without it, you're flying blind.


The Risk Workshop Revolution: From Snoozefest to Brainstorm Bonanza


If your risk workshops feel like a trip to the DMV, you're doing it wrong. It's time to inject some life into these critical sessions.


The Problem with Traditional Workshops


Traditional risk workshops are often:


  1. Dominated by the loudest voices
  2. Constrained by hierarchies and politics
  3. Focused on known risks rather than emerging threats
  4. Boring as watching grass grow


Reinventing the Risk Workshop


Here’s how to turn your workshops from snore-fests to idea factories while effectively managing risks:


  1. Use technology to level the playing field (anonymous digital input)
  2. Employ design thinking methodologies
  3. Level set the conversation to be a dialogue and scenario planning amongst peers


The Power of Play in Risk Assessment


Don't be afraid to make it fun. Seriously. Use:


  1. Risk-themed board games
  2. Virtual reality simulations
  3. Improv exercises
  4. Competitive team challenges


Remember, engagement leads to better insights. If people are having fun, they're more likely to contribute meaningfully.


Surveys That Don't Suck: Designing Questions That Get Real Answers


Most risk surveys are about as engaging as a tax form. It's time to redesign them for the digital age.



The Survey Redesign Manifesto


  1. Keep it short and sweet
  2. Use plain language, not corporate jargon
  3. Ask provocative questions that challenge assumptions
  4. Use a mix of question types (multiple choice, open-ended, scales)
  5. Incorporate multimedia elements (images, videos, interactive scenarios) to enhance


The Art of the Follow-Up


Don't just fire and forget. Use survey responses as a starting point for deeper conversations. Follow up on interesting or concerning responses with one-on-one interviews or focused group discussions.


Leveraging Technology for Better Surveys


Use AI-powered tools to:


  1. Analyze sentiment in open-ended responses
  2. Identify patterns and trends across responses
  3. Generate follow-up questions based on initial answers
  4. Create personalized survey paths based on respondent characteristics


Remember, a well-designed survey is like a good first date – it should leave you wanting to know more.


The Interview Evolution: From Interrogation to Exploration


Forget the stodgy Q&A sessions of yesteryear. Modern risk assessment interviews should feel more like a journey of discovery.


Setting the Stage for Openness


  1. Choose a neutral, comfortable location
  2. Start with easy, non-threatening questions
  3. Use active listening techniques
  4. Employ the "Five Whys" technique to dig deeper


Advanced Interview Techniques


  1. Cognitive interviewing: Help interviewees access deeper memories and insights as part of evaluating risks
  2. Storytelling prompts: Ask for narratives rather than facts and figures
  3. Hypothetical scenarios: Explore “what if” situations to uncover hidden risks
  4. Reverse interviews: Let the interviewee ask you


The Power of Silence


Don't be afraid of pauses. Sit in the awkwardness. Often, the most insightful comments come after a moment of reflection. Learn to embrace the awkward silence – it's where the magic happens.


Data-Driven Risk Assessment: Numbers Don't Lie (But People Do)


In the age of big data, relying solely on human input for risk assessment is like trying to predict the weather by looking out the window.


The Data Revolution in Risk Management


  1. Real-time data feeds from internal and external sources to allocate resources effectively.
  2. AI-powered predictive analytics
  3. Natural language processing for sentiment analysis
  4. Machine learning algorithms for pattern recognition


Balancing Quantitative and Qualitative Data


Numbers are powerful, but they don't tell the whole story. Use data as a foundation, but supplement it with human insights and expert judgment.


The Dangers of Data Overload


More data isn't always better. Focus on:


  1. Identifying key risk indicators (KRIs), both leading and lagging
  2. Identifying key control indicators (KCIs), both leading and lagging
  3. Establishing clear data governance policies
  4. Ensuring data quality and consistency
  5. Presenting data in clear, actionable formats


Remember, data should inform decisions, not make them for you.


The Risk Response Matrix: From Boring Spreadsheets to Dynamic Dashboards


If your risk response plan looks like a spreadsheet from 1995, it's time for an upgrade.



The Problem with Traditional Risk Matrices


  1. Static and quickly outdated: Traditional risk matrices often become static and quickly outdated, unlike a dynamic risk register that can be regularly updated to reflect current project risks.
  2. Difficult to update and share
  3. Limited in their ability to show complex relationships
  4. About as engaging as watching paint


Enter the Dynamic Risk Dashboard


Imagine a living, breathing representation of your risk landscape:


  1. Real-time updates based on new data and inputs
  2. Interactive elements allowing users to explore scenarios
  3. Visual representations of risk relationships and cascading effects
  4. Integration with other business intelligence tools


Making It User-Friendly


The best risk dashboard in the world is useless if no one uses it. Focus on:


  1. Intuitive design
  2. Customizable views for different stakeholders
  3. Mobile accessibility
  4. Clear calls to action based on risk levels


Remember, your risk response matrix should be a tool for action, not just a pretty picture.


The Feedback Loop: Turning Risk Assessment into a Continuous Process


Risk doesn't take a vacation, so why should your assessment process?


Breaking the Annual Assessment Cycle


The once-a-year risk assessment is dead. Long live continuous risk monitoring.


Implementing a Continuous Feedback Loop


  1. Set up automated alerts for key risk indicators
  2. Establish regular check-ins with key stakeholders
  3. Create a culture of ongoing risk awareness and reporting
  4. Use agile methodologies to respond to emerging risks quickly


The Role of Technology in Continuous Assessment


Leverage tools like:


  1. IoT sensors for real-time environmental monitoring
  2. Social media listening tools (like Talkwalker) for reputational risk management
  3. Blockchain for supply chain risk management
  4. AI for predictive risk modelling


Remember, in today's fast-paced world, an annual risk assessment is about as useful as an annual weather forecast.


Communicating Risk: From Snooze-Inducing Reports to Compelling Narratives


If your risk reports put people to sleep, you're doing it wrong. It's time to turn risk analysis and communication into an art form.



The Problem with Traditional Risk Reporting


  1. Dense, jargon-filled documents
  2. Lack of clear prioritization
  3. Failure to connect risks to business objectives
  4. About as engaging as reading the phone book


The Art of Risk Storytelling


Transform your risk reports into compelling narratives to mitigate risks:


  1. Use real-world scenarios to illustrate potential impacts
  2. Employ data visualization techniques to make numbers come alive
  3. Create “day in the life” stories to show how risks affect different stakeholders
  4. Use multimedia elements (videos, interactive graphics) to increase


Tailoring Communication to Your Audience


One size doesn't fit all. Customize your risk communication for:


  1. Board members (high-level, strategic focus)
  2. C-suite executives (actionable insights tied to business objectives)
  3. Middle management (operational implications and mitigation strategies)
  4. Front-line employees (practical, day-to-day risk awareness)


Remember, the best risk assessment in the world is useless if no one understands or acts on it.


The Human Factor: Why People Are Your Greatest Risk (and Asset)


In the rush to embrace technology, don't forget that humans are still at the heart of risk management systems.


The Double-Edged Sword of Human Involvement


Humans are:


  1. The source of many risks (errors, fraud, biases)
  2. The best defence against unforeseen risks
  3. Capable of insights that AI can't match
  4. Prone to cognitive biases that skew risk perception


Harnessing the Power of Human Insight


  1. Create channels for anonymous risk reporting
  2. Implement crowdsourcing techniques for risk identification
  3. Use gamification to encourage risk awareness and reporting
  4. Provide ongoing training and education on managing risk


Overcoming Cognitive Biases in Risk Mitigation


Be aware of and actively counteract:


  1. Confirmation bias
  2. Availability heuristic
  3. Optimism bias
  4. Groupthink


Remember, your people are your first line of defence against risk – but they're also your biggest vulnerability.


The Ethics of Risk: Navigating the Moral Minefield


In an era of increased scrutiny and social responsibility, ethical considerations must be at the forefront of risk assessment.



The Rising Importance of Ethical Risk


  1. Reputational risks tied to ethical lapses
  2. Legal and regulatory risks from unethical behaviour
  3. Employee morale and retention risks
  4. Customer trust and loyalty risks


Incorporating Ethics into Risk Assessment


  1. Include ethical considerations in the risk management plan and risk identification processes
  2. Use scenario planning to explore potential ethical dilemmas
  3. Establish clear ethical guidelines and decision-making frameworks
  4. Conduct regular ethics audits alongside traditional


The Role of Leadership in Ethical Risk Management


Leaders must:


  1. Set the tone from the top
  2. Make tough decisions that prioritize long-term ethical considerations over short-term gains.
  3. Create a culture where ethical concerns can be raised without fear of retribution.
  4. Lead by example in ethical decision-making.


Remember, in the age of social media and instant communication, an ethical lapse can become a major crisis in the blink of an eye.


The Global Perspective: Risk in an Interconnected World


In today's globalized economy, your risk landscape doesn't stop at your country's borders.


The Challenges of Global Risk Assessment


  1. Geopolitical uncertainties
  2. Cultural differences in risk perception and management
  3. Varying regulatory environments
  4. Complex, interconnected supply chains



Strategies for Global Risk Management


  1. Develop a global risk intelligence network through effective project planning
  2. Use scenario planning to prepare for geopolitical shifts
  3. Implement country-specific risk assessment tools
  4. Leverage local expertise in different markets


The Power of Diversity in Global Risk Assessment


Diverse teams:


  1. Bring varied perspectives to risk identification
  2. Can better understand cultural nuances in different markets
  3. Are more likely to spot emerging global trends
  4. Can provide insights into local risk mitigation strategies


Remember, in a global economy, what happens on the other side of the world can impact your bottom line.


The Future of Risk: Embracing Uncertainty in a Rapidly Changing World


The only constant is change, and that's especially true when it comes to risk. It's time to evaluate and future-proof your risk assessment process.


Emerging Risks on the Horizon


  1. Climate change


Building Adaptability into Your Risk Assessment Process


  1. Embrace scenario planning and "what if" thinking
  2. Develop flexible risk models that can adapt to new types of risks
  3. Foster a culture of innovation in risk management
  4. Invest in ongoing education and training for risk professionals


The Role of Technology in Future Risk Assessment


  1. Quantum computing for complex risk modeling
  2. Advanced AI for predictive risk analytics
  3. Blockchain for secure, transparent risk data management
  4. Virtual and augmented reality for immersive risk scenario planning


Remember, the risks of tomorrow won't look like the risks of today. Your assessment process needs to be as dynamic as the world it's trying to assess and navigate.


Conclusion: The Risk Revolution Starts Now


It's time to stop treating risk assessment like a compliance checkbox and start seeing it as a competitive advantage. By modernizing your approach, you can turn risk management from a necessary evil into a powerful tool for strategic decision-making.


The future belongs to those who can confidently navigate uncertainty. By embracing safe provocation, unlocking candour, leveraging technology, and focusing on continuous improvement, you can transform your risk assessment process from a relic of the past into a beacon for success in the future.


Remember, in the words of Peter Drucker, "The greatest danger in times of turbulence is not the turbulence itself, but to act with yesterday's logic." It's time to embrace the risk revolution. Are you ready?

Share

Maxim Atanassov

Maxim Atanassov, CPA-CA

Serial entrepreneur, tech founder, investor with a passion to support founders who are hell-bent on defining the future!

I love business. I love building companies. I co-founded my first company in my 3rd year of university. I have failed and I have succeeded. And it is that collection of lived experiences that helps me navigate the scale up journey.


I have found 6 companies to date that are scaling rapidly. I also run a Venture Studio, a Business Transformation Consultancy and a Family Office.