Three Things You Must Do When Assessing Risk

December 31, 2018

Three Things You Must Do When Assessing Risk

Wouldn’t it be nice if there really were just three things you needed to do when assessing risk? Blog titles like this hint at giving away the secret sauce to successful enterprise risk management.

Spoiler Alert: I won’t be listing three things I think you should do when assessing risk.

But we are going to turn this blog entry around and make it an introspective exploration of the psychology of risk management. What made you click on this post?

Most likely, you want to know if you’re doing the three things that an expert thinks must be done. Risk managers are characteristically risk averse, and you probably want to verify your process. Maybe you’re worried you’ll read something on the list of three things that you’re not doing. If that’s the case, then you’ll probably…

Assess whether you agree with what’s said and determine whether it fits your paradigm of risk management.
If it doesn’t, you’ll dismiss it.
If it does, and if you agree it is valid, you’ll come up with a way to do it that fits your approach.
You may modify it a bit to fit your rules and methods.

So, why are articles that profess to give you the “top three things...” or the “five most common…” or the “six success factors…” so compelling? It is because as risk managers we deal in a very complex environment. There are thousands of things we must do, or at least consider, when assessing risk, and we crave clarity, simplicity and ease of understanding. In short, it’s because we want things to be EASIER. That’s why you’re here.

That’s also why, as the CEO of Procipient®, I’m talking to you. Every painfully long implementation of risk management software in the past (and that includes most implementations!) can be traced back to the fact that the software wasn’t designed to be easy. We’ve changed that game.

Last year, I challenged our development and risk solutions business group to design a comprehensive piece of enterprise risk software that could be implemented easily in 90 days by any customer. Our success in developing and deploying VendorInsight® to some of the largest financial institutions in North America convinced me that we could tackle a larger solution, a true enterprise solution. After careful study, we built and introduced Procipient® to the marketplace in late 2017.

Earlier this year, we proved that we could accomplish what we set out to do: offer an easy-to-use, flexible, scalable, and extraordinarily powerful software solution to the industry that could be deployed by a customer in less than 90 days. Procipient® proved that in that aggressive timeframe, it can meet the scrutiny of federal examiners, and make heroes of the management and Board of our customer.

So, if you agree that our world of risk Grant Karnes, CEO

management is complex and you believe risk management can be less complicated, more effective and more efficiently managed, I invite you to take a look at Procipient®. A 15-minute preview is all it will take to convince you. Easier. Faster. Stronger. Better. That’s why we built Procipient® for you.

Grant Karnes, CEO
Procipient®

ERM Frameworks Help Achieve Successful Mergers and Acquisitions

Using NIST's Privacy and Cybersecurity Frameworks as ERM Tools

How to Prepare for the Next Pandemic? Document Everything

Working Remotely During the Coronavirus Crisis? Flatten the Cybersecurity Curve with ERM

Integrated Risk Management - Should It Replace GRC?

Preparing for the Next Recession with Enterprise Risk Management

Ways to Improve Your First Line of Defense in a 3LoD Model

The Three Keys to a Successful Enterprise Risk Management Program

Proactive Customer Data Protection with Enterprise Risk Management

Improve Compliance and Customer Service by Managing Complaints with Enterprise Risk Management

Three Things You Must Do When Assessing Risk