SlideShare a Scribd company logo
1 of 18
Risk or Opportunity – There are 2
Sides to Every Coin
Mike Gray
Director/CEO Pirii Australia Pty Ltd
Mike is a highly qualified vocational education trainer and assessor and a certified trainer for PECB
delivering training in ISO9001 Quality Management, ISO14001 Environment, OHSAS18001 Health and
Safety, ISO22000 Food Safety, ISO27001 Information Security, ISO28000 Supply Chain Security and
ISO31000 Risk.
+61 (0)419 090 186
mike.gray@mgtdpirii.edu.au
www.mgtdpirii.edu.au
linkedin.com/mike.gray
twitter.com/@mgtdpirii
www.facebook.com/pirii.com.au/
Where we are!
• Perth, Western Australia
• Most isolated continental
capital in the world
• Closer to Indonesia (Jakarta)
than Sydney!
• Nearly 4,000 Kms from
Australian Capital (Canberra)
• Population of approx. 2.02 M
• Metro Area of 6,417.9 km2
A quick introduction
Pirii Australia Pty Ltd is an Australian training organisation (RTO 88194)
trading as MGTD Pirii and Compass Assurance Training.
We deliver vocational qualifications in all areas of Management and
Business including Audit and Risk Management, Project Management,
Work Health and Safety and many more.
Pirii is a training partner with PECB delivering courses in ISO9001
Quality Management, ISO14001 Environment, OHSAS18001 Health and
Safety, ISO22000 Food Safety, ISO27001 Information Security,
ISO28000 Supply Chain Security and ISO31000 Risk.
What we will discuss
• ISO31000 defines risk as “effect of uncertainty on objectives” and an
effect as “a deviation from the expected – positive and/or negative”.
And yet the majority of organisations have an overwhelming focus on
the negative. Why is this?
• Do organisations really understand the need to balance positive and
negative?
• What do the new standards say about risk? How can organisations
maximise their opportunities (upside) while still mitigating or
controlling their risks (downside)?
The risk and opportunity context
• It is now widely accepted among risk professionals that risk and
opportunity are not complete opposites.
• Risk can be a source of opportunity as well as a source of loss.
• Maximising opportunity may lead to a positive outcome but there is
also the possibility of a negative outcome if conditions change.
• So risk management should always be as much about maximising the
positive consequences as about minimising or mitigating the negative
consequences.
Understanding the upside and downside
If we look at risk and opportunity in the terms of upside and downside
then perhaps we can develop greater clarity.
•A major incident in the workplace, such as a fire, major injury or
massive equipment failure is unlikely to have any immediate upside,
certainly over the short term.
•If, on the other hand, we invest in a major facility and equipment
upgrade, based on a predicted upturn in customer base and product
sales, then there may be a positive or negative outcome. The question
is this: if we achieve the exact forecast, is this a positive or a negative?
Upside and downside (cont.…)
• If we actually achieved exactly the predicted increase and
improvements that were projected is this really an upside?
• Surely there is only an upside if we actually achieve a greater than
expected improvement in our business and exceed our targets.
• If we achieved our production targets but our costs increased
unexpectedly, then this would be considered a downside.
• An increase in incidents and accidents, as a result of unfamiliarity
with the new facility and equipment, is also a downside.
• However, if we find, as result of the increased production we have a
greater purchasing power, with reduced costs, then this is an upside.
Some typical downside scenarios…
• Damage to reputation
• Negative feedback from stakeholders
• Increased investigations as a result of accidents and incidents
• Increased complaints (as a result of product failure, delays etc.)
• Increase in workplace injuries
• Escalation in insurance/claims(as a result of incidents, failures etc.)
• Additional management burden
• Increased environmental exposures
• Failure to retain staff
But are they really a downside…
Let’s look at some examples:
Damage to reputation and negative feedback from stakeholders are
often accompanied by processes that are reactive. They focus on
limiting the damage or turning the feedback around.
Surely, if the organisation has already identified the risk then it would
be smarter to focus on ensuring that they prevent the situations
occurring in the first place.
So is this really risk, or is it actually an opportunity?
But are they really a downside…
Another example:
Increase in workplace injuries is often accompanied by additional
scenarios such as increased investigations as a result of accidents and
incidents, escalation in insurance/claims and additional management
burden.
Is this sort of organisation focusing on the upside or the downside?
Where is the language of the risk scenario leading to – a reactive focus
on control and mitigation or a proactive opportunity for prevention
and improvement?
Can there be a change of focus?
If we consider other scenarios related to accident and incident the
major focus almost always seem to be on increased failures or
accidents and incidents that result in increased cost to business.
In fact, in my experience, the language used in the formulation of risk
scenarios, and thus the focus of assessment and management, is
almost always on the negative and therefore reactive.
With a greater focus on Risk and Opportunity in the latest standards
perhaps now is the time to reconsider our approach.
What can be done?
• Encourage the organisation to see the opportunity for improvement
in any situation where risk can be identified and defined
• Encourage the thorough examination, identification and definition of
risk in light of the opportunity to improve
• Ensure that not only is an incident prevented, but measures are put in
place to ensure that the risk does not develop again in a repetitive
cycle
• Encourage the organisation to look upon risk in a more professional
and complete way, seeking out the opportunity for real improvement
What can be done?
• Perhaps, with the introduction of the new standards, now is the
opportunity to refocus on a holistic view of risk.
• Avoid the trap inherent in developing “the balancing act” risk
scenarios: The significant risk of accident or incident with serious
consequences is often balanced against an opportunity not to have
the incident or accident!
• Avoid describing scenarios in purely negative terminology, rather
consider terms such as “variation in” or “change to”
• By changing the language we can encourage people to think about
maximising opportunity rather than just focusing on avoiding the
downside
A conclusion…
• The concept of risk and opportunity is not new, but perhaps we have
allowed Risk to overshadow Opportunity
• This does not mean that we should ignore the downside – far from it,
we should welcome its identification as an opportunity to build more
robust management systems
• By the same token we should not focus only on the upside – we need
to take a balanced view and strive to fully understand the real context
of our risks and opportunities.
A great man once said…
The greater danger for most of us lies not in setting our
aim too high and falling short; but in setting our aim too
low, and achieving our mark.
I saw the angel in the marble and carved until I set him
free.
Michelangelo
CONTACT DETAILS:
MIKE GRAY
Pirii Australia Pty Ltd
PO Box 8
Ballajura WA 6066
Email:
mike.gray@mgtdpirii.edu.au
+61 (0) 419 090 186
Thankyou for attending this webinar
??
QUESTIONS
+61 (0)419 090 186
mike.gray@mgtdpirii.edu.au
www.mgtdpirii.edu.au
linkedin.com/mike.gray
twitter.com/@mgtdpirii
www.facebook.com/pirii.com.au/
THANK YOU

More Related Content

What's hot

127017438_RMA_OperationalRiskAppetite_v1.0
127017438_RMA_OperationalRiskAppetite_v1.0127017438_RMA_OperationalRiskAppetite_v1.0
127017438_RMA_OperationalRiskAppetite_v1.0
Rachael Phelan
 
Corruption and Fraud Risk Management using ISO 31000
Corruption and Fraud Risk Management using ISO 31000Corruption and Fraud Risk Management using ISO 31000
Corruption and Fraud Risk Management using ISO 31000
PECB
 

What's hot (20)

Risk Culture
Risk CultureRisk Culture
Risk Culture
 
Practical approach to Risk Based Internal Audit
Practical approach to Risk Based Internal AuditPractical approach to Risk Based Internal Audit
Practical approach to Risk Based Internal Audit
 
Implementing Enterprise Risk Management with ISO 31000:2009
Implementing Enterprise Risk Management with ISO 31000:2009Implementing Enterprise Risk Management with ISO 31000:2009
Implementing Enterprise Risk Management with ISO 31000:2009
 
2022 Webinar - ISO 27001 Certification.pdf
2022 Webinar - ISO 27001 Certification.pdf2022 Webinar - ISO 27001 Certification.pdf
2022 Webinar - ISO 27001 Certification.pdf
 
Risk Culture, Risk What?
Risk Culture, Risk What?Risk Culture, Risk What?
Risk Culture, Risk What?
 
COSO ERM Framework
COSO ERM FrameworkCOSO ERM Framework
COSO ERM Framework
 
How to Build an Enterprise Risk Management Framework
How to Build an Enterprise Risk Management FrameworkHow to Build an Enterprise Risk Management Framework
How to Build an Enterprise Risk Management Framework
 
Discover Risk Culture with Mohammad Fheili
Discover Risk Culture with Mohammad FheiliDiscover Risk Culture with Mohammad Fheili
Discover Risk Culture with Mohammad Fheili
 
ISO 27005 Risk Assessment
ISO 27005 Risk AssessmentISO 27005 Risk Assessment
ISO 27005 Risk Assessment
 
Enterprise Risk Management
Enterprise Risk ManagementEnterprise Risk Management
Enterprise Risk Management
 
Risk based internal auditing
 Risk based internal auditing Risk based internal auditing
Risk based internal auditing
 
Enterprise Risk Management - Aligning Risk with Strategy and Performance
Enterprise Risk Management - Aligning Risk with Strategy and PerformanceEnterprise Risk Management - Aligning Risk with Strategy and Performance
Enterprise Risk Management - Aligning Risk with Strategy and Performance
 
Enterprise Risk Management
Enterprise Risk ManagementEnterprise Risk Management
Enterprise Risk Management
 
127017438_RMA_OperationalRiskAppetite_v1.0
127017438_RMA_OperationalRiskAppetite_v1.0127017438_RMA_OperationalRiskAppetite_v1.0
127017438_RMA_OperationalRiskAppetite_v1.0
 
Iso iec 27032 foundation - cybersecurity training course
Iso iec 27032 foundation - cybersecurity training courseIso iec 27032 foundation - cybersecurity training course
Iso iec 27032 foundation - cybersecurity training course
 
Strategic Risk Management as a CFO: Getting Risk Management Right
Strategic Risk Management as a CFO: Getting Risk Management RightStrategic Risk Management as a CFO: Getting Risk Management Right
Strategic Risk Management as a CFO: Getting Risk Management Right
 
Integrating Risk Appetite With Strategy Feb 14 2011
Integrating Risk Appetite With Strategy   Feb 14 2011Integrating Risk Appetite With Strategy   Feb 14 2011
Integrating Risk Appetite With Strategy Feb 14 2011
 
Corruption and Fraud Risk Management using ISO 31000
Corruption and Fraud Risk Management using ISO 31000Corruption and Fraud Risk Management using ISO 31000
Corruption and Fraud Risk Management using ISO 31000
 
Teknik Penerapan, Perencanaan dan Implementasi Kebijakan BCM _ Materi Trainin...
Teknik Penerapan, Perencanaan dan Implementasi Kebijakan BCM _ Materi Trainin...Teknik Penerapan, Perencanaan dan Implementasi Kebijakan BCM _ Materi Trainin...
Teknik Penerapan, Perencanaan dan Implementasi Kebijakan BCM _ Materi Trainin...
 
COSO ERM
COSO ERMCOSO ERM
COSO ERM
 

Similar to Risk or Opportunity – There are 2 Sides to Every Coin

Leading risk culture change webinar
Leading risk culture change webinarLeading risk culture change webinar
Leading risk culture change webinar
FERMA
 
Two pager Enterprise Resilience
Two pager Enterprise ResilienceTwo pager Enterprise Resilience
Two pager Enterprise Resilience
Friederike Völker
 
Horton-Healthcare-Brochure-web
Horton-Healthcare-Brochure-webHorton-Healthcare-Brochure-web
Horton-Healthcare-Brochure-web
Mike Madey
 
CFO Risk Intelligence - Harvey Christophers
CFO Risk Intelligence - Harvey ChristophersCFO Risk Intelligence - Harvey Christophers
CFO Risk Intelligence - Harvey Christophers
Azure Group
 
Plexi\'s Safety a
Plexi\'s Safety aPlexi\'s Safety a
Plexi\'s Safety a
vendulka1
 

Similar to Risk or Opportunity – There are 2 Sides to Every Coin (20)

سيمينار إدارة المخاطر (1).pptx
سيمينار إدارة المخاطر (1).pptxسيمينار إدارة المخاطر (1).pptx
سيمينار إدارة المخاطر (1).pptx
 
Trusted advisor white paper (final)
Trusted advisor white paper (final)Trusted advisor white paper (final)
Trusted advisor white paper (final)
 
Geoff hoad
Geoff hoadGeoff hoad
Geoff hoad
 
Risk Analysis & Risk Management
Risk Analysis & Risk ManagementRisk Analysis & Risk Management
Risk Analysis & Risk Management
 
Leading risk culture change webinar
Leading risk culture change webinarLeading risk culture change webinar
Leading risk culture change webinar
 
How to optimize risk in entrepreneurship
How to optimize risk in entrepreneurshipHow to optimize risk in entrepreneurship
How to optimize risk in entrepreneurship
 
The Litigation Risk Management Approach to Strategic Litigation and Settlement
The Litigation Risk Management Approach to Strategic Litigation and SettlementThe Litigation Risk Management Approach to Strategic Litigation and Settlement
The Litigation Risk Management Approach to Strategic Litigation and Settlement
 
Two pager Enterprise Resilience
Two pager Enterprise ResilienceTwo pager Enterprise Resilience
Two pager Enterprise Resilience
 
Bending the bank: Next steps when stress testing calls for change
Bending the bank: Next steps when stress testing calls for changeBending the bank: Next steps when stress testing calls for change
Bending the bank: Next steps when stress testing calls for change
 
Horton-Healthcare-Brochure-web
Horton-Healthcare-Brochure-webHorton-Healthcare-Brochure-web
Horton-Healthcare-Brochure-web
 
Financial Planning for MasterofComm.pptx
Financial Planning for MasterofComm.pptxFinancial Planning for MasterofComm.pptx
Financial Planning for MasterofComm.pptx
 
CFO Risk Intelligence - Harvey Christophers
CFO Risk Intelligence - Harvey ChristophersCFO Risk Intelligence - Harvey Christophers
CFO Risk Intelligence - Harvey Christophers
 
Plexi\'s Safety a
Plexi\'s Safety aPlexi\'s Safety a
Plexi\'s Safety a
 
Risk management models - Core Consulting
Risk management models - Core ConsultingRisk management models - Core Consulting
Risk management models - Core Consulting
 
Managing risk in real life 2016
Managing risk in real life   2016Managing risk in real life   2016
Managing risk in real life 2016
 
Hello ERM - It's Time to Go
Hello ERM - It's Time to GoHello ERM - It's Time to Go
Hello ERM - It's Time to Go
 
Argo Group: operationalizing emerging risk 2020
Argo Group: operationalizing emerging risk 2020Argo Group: operationalizing emerging risk 2020
Argo Group: operationalizing emerging risk 2020
 
Level 3 award in security management unit 1
Level 3 award in security management unit 1Level 3 award in security management unit 1
Level 3 award in security management unit 1
 
Risk management in Human Capital
Risk management in Human CapitalRisk management in Human Capital
Risk management in Human Capital
 
SME Consulting - Risk Management Planning
SME Consulting - Risk Management PlanningSME Consulting - Risk Management Planning
SME Consulting - Risk Management Planning
 

More from PECB

Beyond the EU: DORA and NIS 2 Directive's Global Impact
Beyond the EU: DORA and NIS 2 Directive's Global ImpactBeyond the EU: DORA and NIS 2 Directive's Global Impact
Beyond the EU: DORA and NIS 2 Directive's Global Impact
PECB
 
DORA, ISO/IEC 27005, and the Rise of AI: Securing the Future of Cybersecurity
DORA, ISO/IEC 27005, and the Rise of AI: Securing the Future of CybersecurityDORA, ISO/IEC 27005, and the Rise of AI: Securing the Future of Cybersecurity
DORA, ISO/IEC 27005, and the Rise of AI: Securing the Future of Cybersecurity
PECB
 
Securing the Future: ISO/IEC 27001, ISO/IEC 42001, and AI Governance
Securing the Future: ISO/IEC 27001, ISO/IEC 42001, and AI GovernanceSecuring the Future: ISO/IEC 27001, ISO/IEC 42001, and AI Governance
Securing the Future: ISO/IEC 27001, ISO/IEC 42001, and AI Governance
PECB
 
ISO/IEC 27032, ISO/IEC 27002, and CMMC Frameworks - Achieving Cybersecurity M...
ISO/IEC 27032, ISO/IEC 27002, and CMMC Frameworks - Achieving Cybersecurity M...ISO/IEC 27032, ISO/IEC 27002, and CMMC Frameworks - Achieving Cybersecurity M...
ISO/IEC 27032, ISO/IEC 27002, and CMMC Frameworks - Achieving Cybersecurity M...
PECB
 
ISO/IEC 27001 and ISO/IEC 27035: Building a Resilient Cybersecurity Strategy ...
ISO/IEC 27001 and ISO/IEC 27035: Building a Resilient Cybersecurity Strategy ...ISO/IEC 27001 and ISO/IEC 27035: Building a Resilient Cybersecurity Strategy ...
ISO/IEC 27001 and ISO/IEC 27035: Building a Resilient Cybersecurity Strategy ...
PECB
 
ISO/IEC 27001 and ISO/IEC 27005: Managing AI Risks Effectively
ISO/IEC 27001 and ISO/IEC 27005: Managing AI Risks EffectivelyISO/IEC 27001 and ISO/IEC 27005: Managing AI Risks Effectively
ISO/IEC 27001 and ISO/IEC 27005: Managing AI Risks Effectively
PECB
 
Aligning ISO/IEC 27032:2023 and ISO/IEC 27701: Strengthening Cybersecurity Re...
Aligning ISO/IEC 27032:2023 and ISO/IEC 27701: Strengthening Cybersecurity Re...Aligning ISO/IEC 27032:2023 and ISO/IEC 27701: Strengthening Cybersecurity Re...
Aligning ISO/IEC 27032:2023 and ISO/IEC 27701: Strengthening Cybersecurity Re...
PECB
 
ISO/IEC 27001 and ISO/IEC 27032:2023 - Safeguarding Your Digital Transformation
ISO/IEC 27001 and ISO/IEC 27032:2023 - Safeguarding Your Digital TransformationISO/IEC 27001 and ISO/IEC 27032:2023 - Safeguarding Your Digital Transformation
ISO/IEC 27001 and ISO/IEC 27032:2023 - Safeguarding Your Digital Transformation
PECB
 
Managing ISO 31000 Framework in AI Systems - The EU ACT and other regulations
Managing ISO 31000 Framework in AI Systems - The EU ACT and other regulationsManaging ISO 31000 Framework in AI Systems - The EU ACT and other regulations
Managing ISO 31000 Framework in AI Systems - The EU ACT and other regulations
PECB
 
Impact of Generative AI in Cybersecurity - How can ISO/IEC 27032 help?
Impact of Generative AI in Cybersecurity - How can ISO/IEC 27032 help?Impact of Generative AI in Cybersecurity - How can ISO/IEC 27032 help?
Impact of Generative AI in Cybersecurity - How can ISO/IEC 27032 help?
PECB
 
GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...
GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...
GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...
PECB
 
How Can ISO/IEC 27001 Help Organizations Align With the EU Cybersecurity Regu...
How Can ISO/IEC 27001 Help Organizations Align With the EU Cybersecurity Regu...How Can ISO/IEC 27001 Help Organizations Align With the EU Cybersecurity Regu...
How Can ISO/IEC 27001 Help Organizations Align With the EU Cybersecurity Regu...
PECB
 
ISO/IEC 27001 and ISO 22301 - How to ensure business survival against cyber a...
ISO/IEC 27001 and ISO 22301 - How to ensure business survival against cyber a...ISO/IEC 27001 and ISO 22301 - How to ensure business survival against cyber a...
ISO/IEC 27001 and ISO 22301 - How to ensure business survival against cyber a...
PECB
 
Integrating ISO/IEC 27001 and ISO 31000 for Effective Information Security an...
Integrating ISO/IEC 27001 and ISO 31000 for Effective Information Security an...Integrating ISO/IEC 27001 and ISO 31000 for Effective Information Security an...
Integrating ISO/IEC 27001 and ISO 31000 for Effective Information Security an...
PECB
 
IT Governance and Information Security – How do they map?
IT Governance and Information Security – How do they map?IT Governance and Information Security – How do they map?
IT Governance and Information Security – How do they map?
PECB
 
Student Information Session University Digital Encode.pptx
Student Information Session University Digital Encode.pptxStudent Information Session University Digital Encode.pptx
Student Information Session University Digital Encode.pptx
PECB
 
Cybersecurity trends - What to expect in 2023
Cybersecurity trends - What to expect in 2023Cybersecurity trends - What to expect in 2023
Cybersecurity trends - What to expect in 2023
PECB
 

More from PECB (20)

Beyond the EU: DORA and NIS 2 Directive's Global Impact
Beyond the EU: DORA and NIS 2 Directive's Global ImpactBeyond the EU: DORA and NIS 2 Directive's Global Impact
Beyond the EU: DORA and NIS 2 Directive's Global Impact
 
DORA, ISO/IEC 27005, and the Rise of AI: Securing the Future of Cybersecurity
DORA, ISO/IEC 27005, and the Rise of AI: Securing the Future of CybersecurityDORA, ISO/IEC 27005, and the Rise of AI: Securing the Future of Cybersecurity
DORA, ISO/IEC 27005, and the Rise of AI: Securing the Future of Cybersecurity
 
Securing the Future: ISO/IEC 27001, ISO/IEC 42001, and AI Governance
Securing the Future: ISO/IEC 27001, ISO/IEC 42001, and AI GovernanceSecuring the Future: ISO/IEC 27001, ISO/IEC 42001, and AI Governance
Securing the Future: ISO/IEC 27001, ISO/IEC 42001, and AI Governance
 
ISO/IEC 27032, ISO/IEC 27002, and CMMC Frameworks - Achieving Cybersecurity M...
ISO/IEC 27032, ISO/IEC 27002, and CMMC Frameworks - Achieving Cybersecurity M...ISO/IEC 27032, ISO/IEC 27002, and CMMC Frameworks - Achieving Cybersecurity M...
ISO/IEC 27032, ISO/IEC 27002, and CMMC Frameworks - Achieving Cybersecurity M...
 
ISO/IEC 27001 and ISO/IEC 27035: Building a Resilient Cybersecurity Strategy ...
ISO/IEC 27001 and ISO/IEC 27035: Building a Resilient Cybersecurity Strategy ...ISO/IEC 27001 and ISO/IEC 27035: Building a Resilient Cybersecurity Strategy ...
ISO/IEC 27001 and ISO/IEC 27035: Building a Resilient Cybersecurity Strategy ...
 
ISO/IEC 27001 and ISO/IEC 27005: Managing AI Risks Effectively
ISO/IEC 27001 and ISO/IEC 27005: Managing AI Risks EffectivelyISO/IEC 27001 and ISO/IEC 27005: Managing AI Risks Effectively
ISO/IEC 27001 and ISO/IEC 27005: Managing AI Risks Effectively
 
Aligning ISO/IEC 27032:2023 and ISO/IEC 27701: Strengthening Cybersecurity Re...
Aligning ISO/IEC 27032:2023 and ISO/IEC 27701: Strengthening Cybersecurity Re...Aligning ISO/IEC 27032:2023 and ISO/IEC 27701: Strengthening Cybersecurity Re...
Aligning ISO/IEC 27032:2023 and ISO/IEC 27701: Strengthening Cybersecurity Re...
 
ISO/IEC 27001 and ISO/IEC 27032:2023 - Safeguarding Your Digital Transformation
ISO/IEC 27001 and ISO/IEC 27032:2023 - Safeguarding Your Digital TransformationISO/IEC 27001 and ISO/IEC 27032:2023 - Safeguarding Your Digital Transformation
ISO/IEC 27001 and ISO/IEC 27032:2023 - Safeguarding Your Digital Transformation
 
Managing ISO 31000 Framework in AI Systems - The EU ACT and other regulations
Managing ISO 31000 Framework in AI Systems - The EU ACT and other regulationsManaging ISO 31000 Framework in AI Systems - The EU ACT and other regulations
Managing ISO 31000 Framework in AI Systems - The EU ACT and other regulations
 
Impact of Generative AI in Cybersecurity - How can ISO/IEC 27032 help?
Impact of Generative AI in Cybersecurity - How can ISO/IEC 27032 help?Impact of Generative AI in Cybersecurity - How can ISO/IEC 27032 help?
Impact of Generative AI in Cybersecurity - How can ISO/IEC 27032 help?
 
GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...
GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...
GDPR and Data Protection: Ensure compliance and minimize the risk of penaltie...
 
How Can ISO/IEC 27001 Help Organizations Align With the EU Cybersecurity Regu...
How Can ISO/IEC 27001 Help Organizations Align With the EU Cybersecurity Regu...How Can ISO/IEC 27001 Help Organizations Align With the EU Cybersecurity Regu...
How Can ISO/IEC 27001 Help Organizations Align With the EU Cybersecurity Regu...
 
Student Information Session University KTMC
Student Information Session University KTMC Student Information Session University KTMC
Student Information Session University KTMC
 
ISO/IEC 27001 and ISO 22301 - How to ensure business survival against cyber a...
ISO/IEC 27001 and ISO 22301 - How to ensure business survival against cyber a...ISO/IEC 27001 and ISO 22301 - How to ensure business survival against cyber a...
ISO/IEC 27001 and ISO 22301 - How to ensure business survival against cyber a...
 
Integrating ISO/IEC 27001 and ISO 31000 for Effective Information Security an...
Integrating ISO/IEC 27001 and ISO 31000 for Effective Information Security an...Integrating ISO/IEC 27001 and ISO 31000 for Effective Information Security an...
Integrating ISO/IEC 27001 and ISO 31000 for Effective Information Security an...
 
Student Information Session University CREST ADVISORY AFRICA
Student Information Session University CREST ADVISORY AFRICA Student Information Session University CREST ADVISORY AFRICA
Student Information Session University CREST ADVISORY AFRICA
 
IT Governance and Information Security – How do they map?
IT Governance and Information Security – How do they map?IT Governance and Information Security – How do they map?
IT Governance and Information Security – How do they map?
 
Information Session University Egybyte.pptx
Information Session University Egybyte.pptxInformation Session University Egybyte.pptx
Information Session University Egybyte.pptx
 
Student Information Session University Digital Encode.pptx
Student Information Session University Digital Encode.pptxStudent Information Session University Digital Encode.pptx
Student Information Session University Digital Encode.pptx
 
Cybersecurity trends - What to expect in 2023
Cybersecurity trends - What to expect in 2023Cybersecurity trends - What to expect in 2023
Cybersecurity trends - What to expect in 2023
 

Recently uploaded

Jual Obat Aborsi Hongkong ( Asli No.1 ) 085657271886 Obat Penggugur Kandungan...
Jual Obat Aborsi Hongkong ( Asli No.1 ) 085657271886 Obat Penggugur Kandungan...Jual Obat Aborsi Hongkong ( Asli No.1 ) 085657271886 Obat Penggugur Kandungan...
Jual Obat Aborsi Hongkong ( Asli No.1 ) 085657271886 Obat Penggugur Kandungan...
ZurliaSoop
 
Salient Features of India constitution especially power and functions
Salient Features of India constitution especially power and functionsSalient Features of India constitution especially power and functions
Salient Features of India constitution especially power and functions
KarakKing
 

Recently uploaded (20)

Holdier Curriculum Vitae (April 2024).pdf
Holdier Curriculum Vitae (April 2024).pdfHoldier Curriculum Vitae (April 2024).pdf
Holdier Curriculum Vitae (April 2024).pdf
 
ICT Role in 21st Century Education & its Challenges.pptx
ICT Role in 21st Century Education & its Challenges.pptxICT Role in 21st Century Education & its Challenges.pptx
ICT Role in 21st Century Education & its Challenges.pptx
 
2024-NATIONAL-LEARNING-CAMP-AND-OTHER.pptx
2024-NATIONAL-LEARNING-CAMP-AND-OTHER.pptx2024-NATIONAL-LEARNING-CAMP-AND-OTHER.pptx
2024-NATIONAL-LEARNING-CAMP-AND-OTHER.pptx
 
Unit 3 Emotional Intelligence and Spiritual Intelligence.pdf
Unit 3 Emotional Intelligence and Spiritual Intelligence.pdfUnit 3 Emotional Intelligence and Spiritual Intelligence.pdf
Unit 3 Emotional Intelligence and Spiritual Intelligence.pdf
 
UGC NET Paper 1 Mathematical Reasoning & Aptitude.pdf
UGC NET Paper 1 Mathematical Reasoning & Aptitude.pdfUGC NET Paper 1 Mathematical Reasoning & Aptitude.pdf
UGC NET Paper 1 Mathematical Reasoning & Aptitude.pdf
 
Interdisciplinary_Insights_Data_Collection_Methods.pptx
Interdisciplinary_Insights_Data_Collection_Methods.pptxInterdisciplinary_Insights_Data_Collection_Methods.pptx
Interdisciplinary_Insights_Data_Collection_Methods.pptx
 
Introduction to Nonprofit Accounting: The Basics
Introduction to Nonprofit Accounting: The BasicsIntroduction to Nonprofit Accounting: The Basics
Introduction to Nonprofit Accounting: The Basics
 
Jual Obat Aborsi Hongkong ( Asli No.1 ) 085657271886 Obat Penggugur Kandungan...
Jual Obat Aborsi Hongkong ( Asli No.1 ) 085657271886 Obat Penggugur Kandungan...Jual Obat Aborsi Hongkong ( Asli No.1 ) 085657271886 Obat Penggugur Kandungan...
Jual Obat Aborsi Hongkong ( Asli No.1 ) 085657271886 Obat Penggugur Kandungan...
 
How to Give a Domain for a Field in Odoo 17
How to Give a Domain for a Field in Odoo 17How to Give a Domain for a Field in Odoo 17
How to Give a Domain for a Field in Odoo 17
 
REMIFENTANIL: An Ultra short acting opioid.pptx
REMIFENTANIL: An Ultra short acting opioid.pptxREMIFENTANIL: An Ultra short acting opioid.pptx
REMIFENTANIL: An Ultra short acting opioid.pptx
 
Making communications land - Are they received and understood as intended? we...
Making communications land - Are they received and understood as intended? we...Making communications land - Are they received and understood as intended? we...
Making communications land - Are they received and understood as intended? we...
 
Wellbeing inclusion and digital dystopias.pptx
Wellbeing inclusion and digital dystopias.pptxWellbeing inclusion and digital dystopias.pptx
Wellbeing inclusion and digital dystopias.pptx
 
Kodo Millet PPT made by Ghanshyam bairwa college of Agriculture kumher bhara...
Kodo Millet  PPT made by Ghanshyam bairwa college of Agriculture kumher bhara...Kodo Millet  PPT made by Ghanshyam bairwa college of Agriculture kumher bhara...
Kodo Millet PPT made by Ghanshyam bairwa college of Agriculture kumher bhara...
 
TỔNG ÔN TẬP THI VÀO LỚP 10 MÔN TIẾNG ANH NĂM HỌC 2023 - 2024 CÓ ĐÁP ÁN (NGỮ Â...
TỔNG ÔN TẬP THI VÀO LỚP 10 MÔN TIẾNG ANH NĂM HỌC 2023 - 2024 CÓ ĐÁP ÁN (NGỮ Â...TỔNG ÔN TẬP THI VÀO LỚP 10 MÔN TIẾNG ANH NĂM HỌC 2023 - 2024 CÓ ĐÁP ÁN (NGỮ Â...
TỔNG ÔN TẬP THI VÀO LỚP 10 MÔN TIẾNG ANH NĂM HỌC 2023 - 2024 CÓ ĐÁP ÁN (NGỮ Â...
 
On National Teacher Day, meet the 2024-25 Kenan Fellows
On National Teacher Day, meet the 2024-25 Kenan FellowsOn National Teacher Day, meet the 2024-25 Kenan Fellows
On National Teacher Day, meet the 2024-25 Kenan Fellows
 
Salient Features of India constitution especially power and functions
Salient Features of India constitution especially power and functionsSalient Features of India constitution especially power and functions
Salient Features of India constitution especially power and functions
 
This PowerPoint helps students to consider the concept of infinity.
This PowerPoint helps students to consider the concept of infinity.This PowerPoint helps students to consider the concept of infinity.
This PowerPoint helps students to consider the concept of infinity.
 
FSB Advising Checklist - Orientation 2024
FSB Advising Checklist - Orientation 2024FSB Advising Checklist - Orientation 2024
FSB Advising Checklist - Orientation 2024
 
Graduate Outcomes Presentation Slides - English
Graduate Outcomes Presentation Slides - EnglishGraduate Outcomes Presentation Slides - English
Graduate Outcomes Presentation Slides - English
 
SKILL OF INTRODUCING THE LESSON MICRO SKILLS.pptx
SKILL OF INTRODUCING THE LESSON MICRO SKILLS.pptxSKILL OF INTRODUCING THE LESSON MICRO SKILLS.pptx
SKILL OF INTRODUCING THE LESSON MICRO SKILLS.pptx
 

Risk or Opportunity – There are 2 Sides to Every Coin

  • 1. Risk or Opportunity – There are 2 Sides to Every Coin
  • 2. Mike Gray Director/CEO Pirii Australia Pty Ltd Mike is a highly qualified vocational education trainer and assessor and a certified trainer for PECB delivering training in ISO9001 Quality Management, ISO14001 Environment, OHSAS18001 Health and Safety, ISO22000 Food Safety, ISO27001 Information Security, ISO28000 Supply Chain Security and ISO31000 Risk. +61 (0)419 090 186 mike.gray@mgtdpirii.edu.au www.mgtdpirii.edu.au linkedin.com/mike.gray twitter.com/@mgtdpirii www.facebook.com/pirii.com.au/
  • 3. Where we are! • Perth, Western Australia • Most isolated continental capital in the world • Closer to Indonesia (Jakarta) than Sydney! • Nearly 4,000 Kms from Australian Capital (Canberra) • Population of approx. 2.02 M • Metro Area of 6,417.9 km2
  • 4. A quick introduction Pirii Australia Pty Ltd is an Australian training organisation (RTO 88194) trading as MGTD Pirii and Compass Assurance Training. We deliver vocational qualifications in all areas of Management and Business including Audit and Risk Management, Project Management, Work Health and Safety and many more. Pirii is a training partner with PECB delivering courses in ISO9001 Quality Management, ISO14001 Environment, OHSAS18001 Health and Safety, ISO22000 Food Safety, ISO27001 Information Security, ISO28000 Supply Chain Security and ISO31000 Risk.
  • 5. What we will discuss • ISO31000 defines risk as “effect of uncertainty on objectives” and an effect as “a deviation from the expected – positive and/or negative”. And yet the majority of organisations have an overwhelming focus on the negative. Why is this? • Do organisations really understand the need to balance positive and negative? • What do the new standards say about risk? How can organisations maximise their opportunities (upside) while still mitigating or controlling their risks (downside)?
  • 6. The risk and opportunity context • It is now widely accepted among risk professionals that risk and opportunity are not complete opposites. • Risk can be a source of opportunity as well as a source of loss. • Maximising opportunity may lead to a positive outcome but there is also the possibility of a negative outcome if conditions change. • So risk management should always be as much about maximising the positive consequences as about minimising or mitigating the negative consequences.
  • 7. Understanding the upside and downside If we look at risk and opportunity in the terms of upside and downside then perhaps we can develop greater clarity. •A major incident in the workplace, such as a fire, major injury or massive equipment failure is unlikely to have any immediate upside, certainly over the short term. •If, on the other hand, we invest in a major facility and equipment upgrade, based on a predicted upturn in customer base and product sales, then there may be a positive or negative outcome. The question is this: if we achieve the exact forecast, is this a positive or a negative?
  • 8. Upside and downside (cont.…) • If we actually achieved exactly the predicted increase and improvements that were projected is this really an upside? • Surely there is only an upside if we actually achieve a greater than expected improvement in our business and exceed our targets. • If we achieved our production targets but our costs increased unexpectedly, then this would be considered a downside. • An increase in incidents and accidents, as a result of unfamiliarity with the new facility and equipment, is also a downside. • However, if we find, as result of the increased production we have a greater purchasing power, with reduced costs, then this is an upside.
  • 9. Some typical downside scenarios… • Damage to reputation • Negative feedback from stakeholders • Increased investigations as a result of accidents and incidents • Increased complaints (as a result of product failure, delays etc.) • Increase in workplace injuries • Escalation in insurance/claims(as a result of incidents, failures etc.) • Additional management burden • Increased environmental exposures • Failure to retain staff
  • 10. But are they really a downside… Let’s look at some examples: Damage to reputation and negative feedback from stakeholders are often accompanied by processes that are reactive. They focus on limiting the damage or turning the feedback around. Surely, if the organisation has already identified the risk then it would be smarter to focus on ensuring that they prevent the situations occurring in the first place. So is this really risk, or is it actually an opportunity?
  • 11. But are they really a downside… Another example: Increase in workplace injuries is often accompanied by additional scenarios such as increased investigations as a result of accidents and incidents, escalation in insurance/claims and additional management burden. Is this sort of organisation focusing on the upside or the downside? Where is the language of the risk scenario leading to – a reactive focus on control and mitigation or a proactive opportunity for prevention and improvement?
  • 12. Can there be a change of focus? If we consider other scenarios related to accident and incident the major focus almost always seem to be on increased failures or accidents and incidents that result in increased cost to business. In fact, in my experience, the language used in the formulation of risk scenarios, and thus the focus of assessment and management, is almost always on the negative and therefore reactive. With a greater focus on Risk and Opportunity in the latest standards perhaps now is the time to reconsider our approach.
  • 13. What can be done? • Encourage the organisation to see the opportunity for improvement in any situation where risk can be identified and defined • Encourage the thorough examination, identification and definition of risk in light of the opportunity to improve • Ensure that not only is an incident prevented, but measures are put in place to ensure that the risk does not develop again in a repetitive cycle • Encourage the organisation to look upon risk in a more professional and complete way, seeking out the opportunity for real improvement
  • 14. What can be done? • Perhaps, with the introduction of the new standards, now is the opportunity to refocus on a holistic view of risk. • Avoid the trap inherent in developing “the balancing act” risk scenarios: The significant risk of accident or incident with serious consequences is often balanced against an opportunity not to have the incident or accident! • Avoid describing scenarios in purely negative terminology, rather consider terms such as “variation in” or “change to” • By changing the language we can encourage people to think about maximising opportunity rather than just focusing on avoiding the downside
  • 15. A conclusion… • The concept of risk and opportunity is not new, but perhaps we have allowed Risk to overshadow Opportunity • This does not mean that we should ignore the downside – far from it, we should welcome its identification as an opportunity to build more robust management systems • By the same token we should not focus only on the upside – we need to take a balanced view and strive to fully understand the real context of our risks and opportunities.
  • 16. A great man once said… The greater danger for most of us lies not in setting our aim too high and falling short; but in setting our aim too low, and achieving our mark. I saw the angel in the marble and carved until I set him free. Michelangelo
  • 17. CONTACT DETAILS: MIKE GRAY Pirii Australia Pty Ltd PO Box 8 Ballajura WA 6066 Email: mike.gray@mgtdpirii.edu.au +61 (0) 419 090 186 Thankyou for attending this webinar
  • 18. ?? QUESTIONS +61 (0)419 090 186 mike.gray@mgtdpirii.edu.au www.mgtdpirii.edu.au linkedin.com/mike.gray twitter.com/@mgtdpirii www.facebook.com/pirii.com.au/ THANK YOU