May 1, 2009
Seven Question Guide to Assessing Your Enterprise Risk Management Practices
Risk professionals should consider seven questions in evaluating risk management tools, improving risk management practices, and assessing the state of ERM in an organization. Professionals should ask these seven questions: (1) if the risk management process really assesses risk; (2) if the risk assessment is context-driven; (3) if the risk management process address root causes of failure; (4) what business performance says about risk; (5) what the organization's risks say about its controls; (6) what the organization's controls say about its risks; and (7) if the professionals and their organizations are up for the task of risk management.