If you are driving down the highway at 65mph (104.6kph), a broken-down truck in the middle of the road ahead is a serious source of risk.
You might consider it the #1 entry in your list of top risks (if you were to put such a list together as you were driving).
But what if you can’t see it?
What if you are blind to its existence or the threat it represents to your safety, let alone your ability to reach your destination?
Maybe you are not totally blind, but your poor eyesight doesn’t let you see until it’s too late that the truck is blocking all lanes.
Maybe the information is available, but you are not using it effectively? (For example, your systems have been breached and your cybersecurity provider has sent you a message to that effect, but you are not looking at it – something that happened to a major organization last year.)
This is where risk management comes in.
It helps the driver of the vehicle not only to see the truck but also to understand the consequences of hitting it – so they stop the car.
IMHO most organizations have poor eyesight; many are essentially blind.
While they may have put together a list of top risks that they review periodically (slower than the speed of the vehicle or the business), they don’t have processes that provide reasonable…
