Feeds:
Posts
Comments

Posts Tagged ‘4360’

Chris McClean, who blogs for Forrester reminds us that ISO 31000 will not be a game-changer nor start a revolution in the immediate future. He agrees with many that organizations will benefit from a “commonly accepted risk vocabulary and a clearly defined process framework for risk management” however the biggest hurdles in risk management do [...]

Read Full Post »

I have to give my props to Harry Cendrowski and William C. Mair of Cendrowski Corporate Advisors for writing a book about enterprise risk management, but writing one titled “Enterprise Risk Management and COSO: A Guide for Directors, Executives, and Practitioners,” with the word “COSO” right there in the title is troubling to me. The [...]

Read Full Post »

Keeping with today’s theme “internal auditors are not risk managers”, here’s something I quite enjoyed courtesy of a report from Marsh in New Zealand called The 2008 State Sector Risk Management Practices Report. Page 17 it reads: Internal Auditors play an important role in evaluating the risk management processes of an organisation and advocating their [...]

Read Full Post »

It looks like the long-awaited new International Standard, ISO 31000:2009, Risk management – Principles and guidelines is finally out and can be yours for only CHF 112, or about USD 110 or CAD 116. Here’s the link to the press release http://www.iso.org/iso/pressrelease.htm?refid=Ref1266 I am fresh out of Swissees these days. If anyone has a copy [...]

Read Full Post »

I came across a great post by Antony Marcano who rants about the misuse of the word “mitigate”. (For your information, this post is considered great because I agree with it.) You can read his entire post here: http://www.testingreflections.com/node/view/8138 Mr. Marcano, a “lover of language”, dislikes it that mitigate is over used as a risk [...]

Read Full Post »

A consultant from New Zealand named Chris Peace, traces the history of the AS/NZS 4360 standard and the new ISO 31000, due out just in time for Christmas, in this copy of Safety and Health Practitioner dated October 16, 2009. Although the original 1995 edition of the AS/NZS 4360 standard was developed from earlier risk-management [...]

Read Full Post »

It’s nice to see that an agency of the United Nations, The International Fund for Agricultural Development (www.IFAD.org), has an enterprise risk management policy. This one is pretty straightforward with a good format and definitions. IFAD ERM policy (Riskczar).pdf They claim to be in bed with COSO ERM on this one but I saw traces [...]

Read Full Post »

Here’s a 2003 article written by Mr. Kloman where he reviews a draft version (at the time) of 4360 and one of COSO ERM authored by PwC. Although he is not reviewing the final versions, one can still draw similar conclusion. The terms “winner” or “draw” were added by me. Mr Kloman noted: 4360: Model [...]

Read Full Post »

There are plenty of frameworks out there on the Internet that you can read or download for free so why not just read one of those? Well, first of all, frameworks are boring; people who write policies for a living even think frameworks are boring. The Riskczar suggest you try to read he two most [...]

Read Full Post »

Follow

Get every new post delivered to your Inbox.

Join 1,169 other followers