Gaming the Risk Management System

Management is responsible for correcting and changing procedure as well as preventing problems (called preventive action). If you accept the mantle of manager the Processes are under your function and control – your responsibility = your authority over the functions.

this was enhanced by ISO 9001 as Risk Management became more of the emphasis because there is a tendency that organization will report only Low Risks and not raise real problems or struggle with Indecision with RISKS.

This basically violates that Monitoring, Performance, and Documentation clauses in Iso – because no Department is Perfect and they do have Serious Problems (thus high Risk Ratings; and a department that is so low risk they may not handle something important their value is questioned).

  • If they perfect why are we not building our structure around this strength? 
  • If they are low Risk and really nothing Essential and thus Important with this department, then why is it there? Why does the department or group Exist? 

Risk Management Discussion

This is what what mature companies talk about when they’ve masted TAKING ACTION. Before you master taking ACTION, you must master PLANNING and the PDCA cycle. When you’ve closed that loop, the LAST LOOP’s Problems becomes the FOCUS of Planning Discussions. 
But companies and management doesn’t want to decide, and delay the decisions and increase the chance of Failure by their NON-Action. Leaders and Managers are BOTTLENECKS, an organization cannot be faster or better than its Manager. 

So when the Managers Do Not Act, all those who do not have the Authority Monitor and Coordinate, and the cycle repeats itself.

Responsibility without Authority

There are people who have a lot of Responsibility but no authority. Anyone at supervisor level have very narrow areas of control (if any were even defined). Responsibility with No Authority is Documenting Intensively and Communicating these Problems, Risks, and Issues to those with Authority.

When you have no authority all you can do is document and monitor, and enhance that system. I’m happy to say our tutorials, offered training, desktop recordings, gdrive files are there for those who have no authority but have a lot of responsibility.

Leave a Reply

More Articles & Posts