I have known Michael Rasmussen for a long time, ever since we were two of the first three to be honored for our thought leadership as Fellows by OCEG.
He has been much more focused on “GRC” than me, styling himself the GRC Pundit and naming his firm GRC 20/20. I recommend following him and his blog.
Strategic Risk covered a recent presentation by Michael entitled “Risk is our business”. The article starts with this:
Governance, risk and compliance is no longer about avoiding trouble – it’s about enabling decision-making.
I love the focus on decision-making.
Good decisions are necessary for success, while bad ones can doom the organization.
Decisions need to be informed (about where we are, where we want to go, and what lies in between: risks and opportunities) and intelligent. They need to be made by the right people, at the right time, in consultation with others as necessary. They need to be made with the right objectives in mind.
They quoted words of wisdom from the guru such as:
The business not taking risk is the business that’s out of business. But are you taking the right risks? Are you aligning risk with decision making of your organisation?
I wouldn’t use the word “aligning”. I’m not sure that conveys the necessary message that wise decisions need reliable information about what…























