the two-headed monster of risk: what higher ed traditional risk managers and enterprise risk...

37
The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

Upload: quentin-mclaughlin

Post on 23-Dec-2015

212 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

The Two-Headed Monster of Risk:

What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

Page 2: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

Hans Gude, ARM-E, Enterprise Risk Director, UC Berkeley

Andy Goldblatt, RISK MANAGER, UC BERKELEY

STARRING!

Page 3: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other
Page 4: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

Today’s Agenda

1. Define traditional and enterprise risk management

2. List useful skills for each

3. Describe how enterprise risk helps the traditional risk manager

4. Describe how traditional risk helps the enterprise risk manager

5. Explore three risks and whether they are traditional, enterprise, or both

Page 5: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

What is Traditional Risk Management?

Focused principally on operations and insurable risks.

Loss prevention

Claim and lawsuit handling

Page 6: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

Traditional Risk Manager’s Skill Set

1. Knowledge of:– Insurance– Law– Loss prevention

2. Appetite for action

3. Crisis management

4. Comfort in gray areas

5. Ability to communicate to a broad audience

6. Ability to negotiate

Page 7: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

What is Enterprise Risk Management?

Page 8: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

ERM ERM ERMERM

ERMERM

Page 9: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

? ? ? ??

?

Page 10: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other
Page 11: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

FORGET ABOUT ‘ERM’ !We’ll remember it back in a minute....

Page 12: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

The ‘Business’Problem!

Page 13: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

The business problem:

What are our opportunities?

Where are our greatest threats?

Where should we focus our finite resources to mitigate threats and maximize opportunities?

Given my organization’s strategic objectives...

Page 14: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

“ERM” refers to two things:

Page 15: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

“ERM” refers to two things:

First, a perspective on how to think about risk in your organization...

Page 16: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

What is that perspective?

Insurable Risk

>Financial

>Reputation>Operational

STRATEGIC OBJECTIVES

>Strategic>Health-Safety

Page 17: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

“ERM” refers to two things:

Second, a toolbox for how to solve“the business problem”...

• COSO• ISO 31000• Et al.

“Frameworks”

Page 18: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

How do you DO that?

Page 19: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

Enterprise Risk Manager’s Skill Set

3. Networking & sales

4. Willing to roll up your sleeves and help with the work

5. Communicate with leadership

6. Comfort in gray areas

1. Creative thinking: Figuring out how to take concepts and make them operational

2. Consulting, including organizational change and process improvement

7. Patience to accept slow, incremental change

Page 20: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

How Enterprise Risk Helps the Traditional Risk Manager

Page 21: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

How Enterprise Risk Helps the Traditional Risk Manager

Broadens perspective.

Page 22: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

How Enterprise Risk Helps the Traditional Risk Manager

Provides basis for prioritizing tasks based on mission.

Page 23: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

How Enterprise Risk Helps the Traditional Risk Manager

Provides a governance structure for bringing risk trends to senior management.

Page 24: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

How Traditional Risk Helps the Enterprise Risk Manager

Page 25: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

What are you nuts!

Page 26: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

We don’t say ‘No.’ We say ‘How.’

Page 27: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

Financial risk

Operational risk

Reputational risk

Health–safety risk

Strategic risk

Page 28: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

How Traditional Risk Helps the Enterprise Risk Manager

Makes ERM pragmatic: It has to make a difference ‘on the ground.’

Page 29: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

How Traditional Risk Helps the Enterprise Risk Manager

Clarifies that activities are the point of entry for assessing ‘enterprise’ risks, because that’s where the risks “live.”

UC Berkeley tabletop fault model

Page 30: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

How Traditional Risk Helps the Enterprise Risk Manager

Clarifies the day-to-day risks that impact the campus.

Page 31: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

Traditional or Enterprise Risk?

Student Alcohol Abuse

Page 32: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

Traditional or Enterprise Risk?

Reliable Source of Campus Energy

Page 33: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

Traditional or Enterprise Risk?

The Demand for “Safe Space”

Page 34: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

In conclusion...

1. Allies, not rivals.

2. Traditional risk manager becomes more strategically savvy.

3. Enterprise risk manager becomes more operationally savvy.

4. Increased individual effectiveness.

5. More effective at reducing the campus’s overall risk.

Page 35: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other
Page 36: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other

Enterprise Risk Services, UC Berkeley

36

Page 37: The Two-Headed Monster of Risk: What Higher Ed Traditional Risk Managers and Enterprise Risk Managers Can Learn from Each Other