Skip to main content
ERM Leadership and Governance

Compiling and Presenting Interview Data from Risk Interviews

After conducting 80-90 interviews seeking the identification of major risk exposures facing the company, David Hughes, Assistant VP of ERM and Business Continuity Planning at Hospital Corporation of America (HCA) has a massive amount of data to compile and disseminate.

During our discussion with David, he speaks about how HCA breaks down the top ten risks by the type of risk and by level of management who identifies a risk to be a major risk. Hughes also tells how HCA informs its board members about what the top risks that the corporation faces as a whole.

Key Points:

  1. Initial Interview Approach:

    • Initially, interviews were conducted with the executive management team and key middle management.
    • Due to positive feedback, the scope expanded to include board members, division middle managers, and facility-level officers, providing a comprehensive view of risks.

  2. Interview Methodology:

    • All interviews are conducted one-on-one, primarily face-to-face, with some over the phone.
    • Interviews typically last 30 minutes, though durations may vary slightly.

  3. Core Questions:

    • Participants are asked to identify their top three business risks over the next 24 months that could impact the company’s strategic goals.
    • Over time, a follow-up question was added: “What is the company doing to address these risks, and is it effective?”

  4. Interview Logistics:

    • Two people are present during each interview: one asks questions, and the other transcribes responses.
    • Interviews are conducted annually, starting in late August or early September, to align with the company’s budgeting and planning phases.

  5. Volume of Responses:

    • HCA now conducts over 80 interviews annually and collects survey results from approximately 170 individuals.

  6. Data Management:

    • Responses are stored in a database using an internal survey tool.
    • Significant effort goes into interpreting, categorizing, and classifying qualitative data to ensure accurate representation.

Conclusion

David Hughes shared insights into HCA’s evolving interview-based approach for identifying risks and integrating findings into enterprise risk management. The process highlights the importance of stakeholder engagement and effective data handling to enhance organizational risk oversight.

Original Article Source: Transcript of Interview with David Hughes on Compiling and Presenting Interview Data from Risk Interviews“, David Hughes and Mark Beasley, January 2012