{"id":2900,"date":"2020-06-17T10:59:03","date_gmt":"2020-06-17T10:59:03","guid":{"rendered":"http:\/\/www.goatrisk.com\/?p=2900"},"modified":"2021-01-01T11:15:50","modified_gmt":"2021-01-01T11:15:50","slug":"using-data-to-deliver-risk-maturity","status":"publish","type":"post","link":"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/","title":{"rendered":"Using data to deliver risk maturity"},"content":{"rendered":"
\n

The risk maturity journey is a problem the risk profession has been grappling with for far too long. It\u2019s time to focus on data<\/p>\n<\/div>\n

\n

I benchmarked, modelled and studied risk maturity for three years, engaging with over 150 organisations and picking up many great tips, anecdotes but also hearing the questions and frustrations of senior business and risk leaders.<\/p>\n

One over-arching pain-point was that many felt stuck, having implemented best practice frameworks and templates but feeling they still needed to do better in terms of influence and affect in the boardroom, decision making, and delivering real value through risk management. The proverbial risk maturity journey is the problem our profession has been grappling with for far too long.<\/p>\n

Most of us know risk management must be simple so that we can engage a wide audience of senior, busy, impatient non-risk experts but what we often overlook is that the output needs to deliver value in terms of helping these same senior stakeholders make better decisions.<\/p>\n

It is important to consider the C-suite persona and think carefully about their needs, fears, personality traits, what they read, hear, say and in particular how they think about and make decisions.<\/p>\n

In the shoes of your key stakeholders, you need to look at your risk register templates and the content within and consider this: Is it really about culture, influence, personal style or gravitas, or is the content in your risk registers simply insufficient to help them make real business decisions?<\/p>\n

There are\u00a0two improvements<\/strong>\u00a0that we can all make to have greater impact.<\/p>\n

1) The risks themselves are often too high-level.<\/strong><\/p>\n

When analysing the C-suite persona, they are used to seeing clear problem statements and business context explained to them. Instead of, \u201cRisk of a cyber attack or data breach\u201d, how about something that uses SMART principles and plain English i.e. \u201cRecent IT security attacks affecting other companies have targeted outdated equipment. Our network so far hasn\u2019t been hit but has a lot of unpatched legacy systems and equipment.\u201d<\/p>\n

2) No real data in risk registers.<\/strong><\/p>\n

The scores are not real data, they are best guess judgements against broad definitions and should be used for prioritising where to focus. Instead, bring in data in the dialogues and interactions with stakeholders. Natural follow-on questions from the above risk problem statement is: \u201cWhat % of our systems are unpatched\u201d and from that, a clear action is to improve on this. Take a performance management approach to tracking the risk. Each quarter we can lead by the numbers to show true progress.<\/p>\n

When I speak to clients, executives, boards and committees I always ask them to support a data-led approach to risk management. This will automatically lead to better transparency and accountability of risks. It will also highlight areas of the business where data is not mature or unavailable, leading to other decisions on whether we should standardise or automate processes, align systems and improve data quality.<\/p>\n

We might agree that for a particular risk, data is not feasible and we will have to revert to anecdote and narrative reporting by exception.<\/p>\n

There may be some resistance. Some stakeholders will not appreciate increased transparency, after all, even in performance management terms, there will always be a small population that are under-performing.<\/p>\n

Looking at your risk register, do you know which risks are \u201cunder-performing\u201d? Perhaps answering this question, backed up by data, can tell them something they don\u2019t actually know, which is valuable. Such an approach will begin shifting the tide from a risk maturity journey to a data-maturity journey.<\/p>\n

Danny Wong is an enterprise risk management practitioner and CEO of GOAT Risk Solutions<\/em><\/p>\n<\/div>\n

 <\/p>\n

See original article here<\/a><\/strong><\/h4>\n","protected":false},"excerpt":{"rendered":"

The risk maturity journey is a problem the risk profession has been grappling with for far too long. It\u2019s time to focus on data I benchmarked, modelled and studied risk…<\/p>\n","protected":false},"author":2,"featured_media":582,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[9],"tags":[],"class_list":["post-2900","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-thought-leadership"],"yoast_head":"\nUsing data to deliver risk maturity | GOAT Risk Solutions<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Using data to deliver risk maturity\" \/>\n<meta property=\"og:description\" content=\"The risk maturity journey is a problem the risk profession has been grappling with for far too long. It\u2019s time to focus on data I benchmarked, modelled and studied risk...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/\" \/>\n<meta property=\"og:site_name\" content=\"GOAT Risk Solutions\" \/>\n<meta property=\"article:published_time\" content=\"2020-06-17T10:59:03+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-01-01T11:15:50+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/staging3.zealousys.com\/wp-content\/uploads\/2019\/01\/strategic-logo.png\" \/>\n\t<meta property=\"og:image:width\" content=\"504\" \/>\n\t<meta property=\"og:image:height\" content=\"141\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Zeolous\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https:\/\/staging3.zealousys.com\/goatrisk\/#organization\",\"name\":\"GOAT Risk Solutions\",\"url\":\"https:\/\/staging3.zealousys.com\/goatrisk\/\",\"sameAs\":[\"https:\/\/www.linkedin.com\/company\/18949403\",\"https:\/\/www.youtube.com\/channel\/UCLAlQ30CBAuRRexoAdsyvDg\"],\"logo\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/staging3.zealousys.com\/goatrisk\/#logo\",\"inLanguage\":\"en-GB\",\"url\":\"\/wp-content\/uploads\/2021\/07\/Goat-Logo_White-on-Red-Elongated_CMYK.png\",\"contentUrl\":\"\/wp-content\/uploads\/2021\/07\/Goat-Logo_White-on-Red-Elongated_CMYK.png\",\"width\":3601,\"height\":4287,\"caption\":\"GOAT Risk Solutions\"},\"image\":{\"@id\":\"https:\/\/staging3.zealousys.com\/goatrisk\/#logo\"}},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/staging3.zealousys.com\/goatrisk\/#website\",\"url\":\"https:\/\/staging3.zealousys.com\/goatrisk\/\",\"name\":\"GOAT Risk Solutions\",\"description\":\"Easy to use, low cost risk management software\",\"publisher\":{\"@id\":\"https:\/\/staging3.zealousys.com\/goatrisk\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/staging3.zealousys.com\/goatrisk\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-GB\"},{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/#primaryimage\",\"inLanguage\":\"en-GB\",\"url\":\"https:\/\/staging3.zealousys.com\/goatrisk\/wp-content\/uploads\/2019\/01\/strategic-logo.png\",\"contentUrl\":\"https:\/\/staging3.zealousys.com\/goatrisk\/wp-content\/uploads\/2019\/01\/strategic-logo.png\",\"width\":504,\"height\":141},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/#webpage\",\"url\":\"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/\",\"name\":\"Using data to deliver risk maturity | GOAT Risk Solutions\",\"isPartOf\":{\"@id\":\"https:\/\/staging3.zealousys.com\/goatrisk\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/#primaryimage\"},\"datePublished\":\"2020-06-17T10:59:03+00:00\",\"dateModified\":\"2021-01-01T11:15:50+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/staging3.zealousys.com\/goatrisk\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Using data to deliver risk maturity\"}]},{\"@type\":\"Article\",\"@id\":\"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/#webpage\"},\"author\":{\"@id\":\"https:\/\/staging3.zealousys.com\/goatrisk\/#\/schema\/person\/ab8e8fe1f01bf71a85aa6efcc5ea45ef\"},\"headline\":\"Using data to deliver risk maturity\",\"datePublished\":\"2020-06-17T10:59:03+00:00\",\"dateModified\":\"2021-01-01T11:15:50+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/#webpage\"},\"wordCount\":618,\"publisher\":{\"@id\":\"https:\/\/staging3.zealousys.com\/goatrisk\/#organization\"},\"image\":{\"@id\":\"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/staging3.zealousys.com\/goatrisk\/wp-content\/uploads\/2019\/01\/strategic-logo.png\",\"articleSection\":[\"Thought Leadership\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/staging3.zealousys.com\/goatrisk\/#\/schema\/person\/ab8e8fe1f01bf71a85aa6efcc5ea45ef\",\"name\":\"Zeolous\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Using data to deliver risk maturity | GOAT Risk Solutions","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/","og_locale":"en_GB","og_type":"article","og_title":"Using data to deliver risk maturity","og_description":"The risk maturity journey is a problem the risk profession has been grappling with for far too long. It\u2019s time to focus on data I benchmarked, modelled and studied risk...","og_url":"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/","og_site_name":"GOAT Risk Solutions","article_published_time":"2020-06-17T10:59:03+00:00","article_modified_time":"2021-01-01T11:15:50+00:00","og_image":[{"width":504,"height":141,"url":"https:\/\/staging3.zealousys.com\/wp-content\/uploads\/2019\/01\/strategic-logo.png","path":"D:\\home\\site\\wwwroot\/wp-content\/uploads\/2019\/01\/strategic-logo.png","size":"full","id":582,"alt":"","pixels":71064,"type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Written by":"Zeolous","Estimated reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Organization","@id":"https:\/\/staging3.zealousys.com\/goatrisk\/#organization","name":"GOAT Risk Solutions","url":"https:\/\/staging3.zealousys.com\/goatrisk\/","sameAs":["https:\/\/www.linkedin.com\/company\/18949403","https:\/\/www.youtube.com\/channel\/UCLAlQ30CBAuRRexoAdsyvDg"],"logo":{"@type":"ImageObject","@id":"https:\/\/staging3.zealousys.com\/goatrisk\/#logo","inLanguage":"en-GB","url":"\/wp-content\/uploads\/2021\/07\/Goat-Logo_White-on-Red-Elongated_CMYK.png","contentUrl":"\/wp-content\/uploads\/2021\/07\/Goat-Logo_White-on-Red-Elongated_CMYK.png","width":3601,"height":4287,"caption":"GOAT Risk Solutions"},"image":{"@id":"https:\/\/staging3.zealousys.com\/goatrisk\/#logo"}},{"@type":"WebSite","@id":"https:\/\/staging3.zealousys.com\/goatrisk\/#website","url":"https:\/\/staging3.zealousys.com\/goatrisk\/","name":"GOAT Risk Solutions","description":"Easy to use, low cost risk management software","publisher":{"@id":"https:\/\/staging3.zealousys.com\/goatrisk\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/staging3.zealousys.com\/goatrisk\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-GB"},{"@type":"ImageObject","@id":"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/#primaryimage","inLanguage":"en-GB","url":"https:\/\/staging3.zealousys.com\/goatrisk\/wp-content\/uploads\/2019\/01\/strategic-logo.png","contentUrl":"https:\/\/staging3.zealousys.com\/goatrisk\/wp-content\/uploads\/2019\/01\/strategic-logo.png","width":504,"height":141},{"@type":"WebPage","@id":"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/#webpage","url":"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/","name":"Using data to deliver risk maturity | GOAT Risk Solutions","isPartOf":{"@id":"https:\/\/staging3.zealousys.com\/goatrisk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/#primaryimage"},"datePublished":"2020-06-17T10:59:03+00:00","dateModified":"2021-01-01T11:15:50+00:00","breadcrumb":{"@id":"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/staging3.zealousys.com\/goatrisk\/"},{"@type":"ListItem","position":2,"name":"Using data to deliver risk maturity"}]},{"@type":"Article","@id":"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/#article","isPartOf":{"@id":"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/#webpage"},"author":{"@id":"https:\/\/staging3.zealousys.com\/goatrisk\/#\/schema\/person\/ab8e8fe1f01bf71a85aa6efcc5ea45ef"},"headline":"Using data to deliver risk maturity","datePublished":"2020-06-17T10:59:03+00:00","dateModified":"2021-01-01T11:15:50+00:00","mainEntityOfPage":{"@id":"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/#webpage"},"wordCount":618,"publisher":{"@id":"https:\/\/staging3.zealousys.com\/goatrisk\/#organization"},"image":{"@id":"https:\/\/staging3.zealousys.com\/goatrisk\/using-data-to-deliver-risk-maturity\/#primaryimage"},"thumbnailUrl":"https:\/\/staging3.zealousys.com\/goatrisk\/wp-content\/uploads\/2019\/01\/strategic-logo.png","articleSection":["Thought Leadership"],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/staging3.zealousys.com\/goatrisk\/#\/schema\/person\/ab8e8fe1f01bf71a85aa6efcc5ea45ef","name":"Zeolous"}]}},"_links":{"self":[{"href":"https:\/\/staging3.zealousys.com\/goatrisk\/wp-json\/wp\/v2\/posts\/2900","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/staging3.zealousys.com\/goatrisk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/staging3.zealousys.com\/goatrisk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/staging3.zealousys.com\/goatrisk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/staging3.zealousys.com\/goatrisk\/wp-json\/wp\/v2\/comments?post=2900"}],"version-history":[{"count":3,"href":"https:\/\/staging3.zealousys.com\/goatrisk\/wp-json\/wp\/v2\/posts\/2900\/revisions"}],"predecessor-version":[{"id":3840,"href":"https:\/\/staging3.zealousys.com\/goatrisk\/wp-json\/wp\/v2\/posts\/2900\/revisions\/3840"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/staging3.zealousys.com\/goatrisk\/wp-json\/wp\/v2\/media\/582"}],"wp:attachment":[{"href":"https:\/\/staging3.zealousys.com\/goatrisk\/wp-json\/wp\/v2\/media?parent=2900"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/staging3.zealousys.com\/goatrisk\/wp-json\/wp\/v2\/categories?post=2900"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/staging3.zealousys.com\/goatrisk\/wp-json\/wp\/v2\/tags?post=2900"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}