Developing a Resilient Organization Through Risk Management

by Gary L. Richardson

Most organizations can be classified as risk-agnostic; they perform insufficient analysis of potential events that impact their viability. But given the current threat environment, enterprises must become more mature in their ability to mitigate these threats. A resilient organization takes proactive positions and requires a formal enterprise-wide risk management process. This Executive Report by Gary L. Richardson provides a risk event decision framework and outlines a theoretical risk management model. From this theory base, the report then describes a four-step organizational maturation process that can move an enterprise toward a more effective risk culture.