• Home
  • About
  • Subscribe
  • Conference
  • Events Calendar
  • Webcast151
  • MOTB
  • Log In
  • Register

Room 151

  • Treasury
  • Technical
  • Funding
  • Resources
  • LGPS
  • Development
  • 151 News
  • Blogs
    • David Green
    • Agent 151
    • Dan Bates
    • Richard Harbord
    • Stephen Sheen
    • James Bevan
    • Steve Bishop
    • Cllr John Clancy
    • David Crum
    • Graham Liddell
    • Ian O’Donnell
    • Jackie Shute
  • Interviews

Graham Liddell: Mastering risk management and not box ticking

0
  • by Graham Liddell
  • in Blogs · Technical
  • — 30 Mar, 2017

Photo (cropped): Wokandapix/pixabay

Councils can find it difficult to grasp risk management. Graham Liddell argues its time for local authorities to undertake an honest appraisal of their management processes.

Why do local authorities so often get risk management wrong? They are exposed to a range of challenging and diverse risks: declining financial resources, keeping vulnerable adults and children safe, providing other essential services, keeping sensitive data secure and so on. But all too often risk management is treated as a yet another box ticking corporate process. How often do senior managers have meaningful conversations about how to manage their key risks?

The text book answer to assessing the effectiveness of risk management is to review the risk maturity of an organisation. And there are a range of diagnostic tools, full of worthy questions, to do this:

  • Is responsibility for risk management included in job descriptions?
  • Does the board regularly review its risks?
  • Has the organisation defined its risk appetite?

But assessing risk management in this way often gives false assurance. Does ticking all the “risk mature” boxes mean that we have identified all our risks and are managing them effectively? I doubt it.

Furthermore, I am not sure that a positive internal audit report on risk management is always that helpful. We auditors like systems and might well report that expected controls are in place and operating as they should. But how often does this consider the quality of the thinking, or the robustness of the risk register? I think it’s time for an honest appraisal of the effectiveness of our risk management arrangements.

Emotions

Pretty much all senior management teams spend some time reviewing their strategic risks, even if it is just once a quarter. So the simplest starting point is to reflect on your emotions following one of these meetings. Which of the following best represents how you feel?

  • Blissfully ignorant, we don’t really bother with the risk register.
  • Gnawing with doubt: we’ve ticked the box but not much more.
  • Cautiously optimistic: we’re beginning to understand some of this stuff.
  • Enthusiastic: some great discussion and now we need to translate these into robust actions.
  • Confident: we’ve identified our key risks and robust plans are in place to bring risks down to an acceptable level.

And just to show that this is a well thought out management tool and not something been dreamt up on a sunny Sussex afternoon, here is a picture to help you decide.

 

 

I suspect that most senior officers would assess themselves as cautiously optimistic. My job as an auditor is to instil some gnawing doubt. So, let’s revisit that self-assessment. Here are four challenge questions. If you want to skip the detail scroll down to another diagram.

1 Does your risk management system really identify all your key risks?

  • What has your risk register management system missed in previous years?
  • Are you fixing stuff that could have been prevented?
  • What are you spending money on that would not have been needed if only pre-emptive action had been taken 5 or 10 years ago?
  • What is your risk register missing now?
  • Does your risk register set out clearly the main things that keep you awake at night?

2 Do you have clear mitigating controls in place?

  • Are these summarised clearly?
  • Can you tell whether these bring the risk down to an acceptable level?

3 Are robust plans in place?

  • Have you set out what level of risk you need to get to?
  • Is there a robust, time bound, action plan in place to achieve this?
  • Does the action plan address both likelihood and impact?

4 Do you have robust assurance that controls are working and actions are on track?

  • How quickly would you find out if controls weren’t working or actions not addressed?
  • Does progress on the action plan form a key part of your one to one meetings with managers?
  • Is the risk register updated on a regular basis?
  • If you have adopted the three lines of defence model, how robust is the assurance you get from your second and third lines?

 

Still feeling confident? If not, perhaps it’s time to start taking risk management seriously. Don’t get me wrong, I’m all for a well-structured risk management process. But don’t be fooled, risk management is about managing risks. It’s not about ticking boxes.

Graham Liddell

Graham Liddell is head of Internal Audit at Brighton & Hove City Council.

Get the Room151 Newsletter

Share

You may also like...

  • Mrs Yellen and her testimony to Congress Mrs Yellen and her testimony to Congress 23 Jul, 2014
  • What happens if Greece leaves Euroland? Part 1 What happens if Greece leaves Euroland? Part 1 16 May, 2012
  • Dan Bates: Capitalisation directions are not the only tool for rebuilding finances 16 Feb, 2021
  • Economic and market briefing – first reflections on the ECB Economic and market briefing – first reflections on the ECB 7 Sep, 2012

Leave a Reply Cancel reply

You must be logged in to post a comment.

  • Register to become a Room151 user

  • Latest tweets

    Room151 37 mins ago

    Helen Randall: Spelthorne report places spotlight on ‘controls’: Fresh criticism of Spelthorne Council raises the question of what “good” controls look like when negotiating a property deal. Spelthorne Council’s continuing debacle over property… dlvr.it/RtSPhy pic.twitter.com/9uCOJgBcH6

    Room151 37 mins ago

    Step-out strategies: Hitting the sweet spot between liquidity and ultra-short duration: Sponsored article: Jemma Clee describes how an ultra-short duration strategy can help local authorities enhance returns. Despite the expectation of a low, and… dlvr.it/RtSPZb pic.twitter.com/pdXPpv5lcN

    Room151 1 day ago

    What role will climate change have on the pricing of government bonds?: Sponsored article: Kerry Duffain finds that “vulnerability and resilience to climate change” have a significant impact on the cost of government borrowing. Ardea Investment… dlvr.it/RtNKv7 pic.twitter.com/wDjT31x4Yt

    Room151 2 days ago

    ESGenius: Slashing emissions will fuel green growth for decades: Sponsored article: Velislava Dimitrova argues that a big enough investment could mean transition to a low, or no, carbon economy can become a reality. The world needs to slash carbon[...] dlvr.it/RtKZJp pic.twitter.com/cd8S3ijERl

    Room151 2 days ago

    Prudential code: “Not perfect, but its heart is in the right place”: The new Prudential Code offers revised rules for borrowing. Nikki Bishop is sceptical it will work while Gary Fielding offers his support. Nikki Bishop I have been asked to give[...] dlvr.it/RtKZFh pic.twitter.com/OriN28lXcb

    Room151 3 days ago

    Tremendous report from @MarkSandford3 citing @room_151 no fewer than six times (despite what the @lgcplus fact checking/counting dept might tell you) #localgov commonslibrary.parliament.uk/research-brief… 1/5

    Room151 1 week ago

    Dan Bates: Capitalisation directions are not the only tool for rebuilding finances: Dan Bates argues deep seated problems are contributing to a rush for capitalisation directions. For some time now we have been reading that a number of councils are in… dlvr.it/RspKff pic.twitter.com/xRRsgVim9u

    Room151 2 weeks ago

    Is local government funding “broken”?: Andrew Hardingham looks at the underlying issues that caused more than a third of respondents in the Room151/CCLA treasury survey to say that the funding system for local govenrment is[...] dlvr.it/RsYhsg pic.twitter.com/plNp7Ayys6

  • Categories

    • 151 News
    • Agent 151
    • Blogs
    • Chris Buss
    • Cllr John Clancy
    • Dan Bates
    • David Crum
    • David Green
    • Development
    • Forum
    • Funding
    • Graham Liddell
    • Ian O'Donnell
    • Interviews
    • Jackie Shute
    • James Bevan
    • Jobs
    • LGPSi
    • Mark Finnegan
    • Recent Posts
    • Resources
    • Richard Harbord
    • Stephen Fitzgerald
    • Stephen Sheen
    • Steve Bishop
    • Technical
    • Treasury
    • Uncategorized
  • Archives

    • 2021
    • 2020
    • 2019
    • 2018
    • 2017
    • 2016
    • 2015
    • 2014
    • 2013
    • 2012
    • 2011
  • Previous story Watchdog says government lacks proof business rates retention will boost economic growth
  • Next story Essex awards £150m infrastructure mandate

© Copyright 2021 Room 151. Typegrid Theme by WPBandit.