Accendo Reliability

Your Reliability Engineering Professional Development Site

CERM® Risk Insights

by Leave a Comment

Public Apathy in the Path of Preparedness

Public Apathy in the Path of Preparedness

Guest Post by Geary Sikich (first posted on CERM ® RISK INSIGHTS – reposted here with permission)

Introduction

I was supposed to be in Boston presenting at “The Disaster Conferences” on 28 January 2015. Well, the weather just put us out to 19 March 2015 for the now rescheduled Boston conference.

I guess that they are still feeling the effects of this week’s blizzard, now named “Juno”; that left Boston with over 24 inches of snow.

According to the Weather Channel Winter Storm Juno pounded locations from Long Island to New England with heavy snow, high winds, and coastal flooding late Monday into Tuesday. The storm is now winding down.

The National Weather Service has dropped all winter storm and blizzard warnings for Juno. [Read more…]

by Leave a Comment

Unsafe at Any Speed

Unsafe at Any Speed

Guest Post by Ed Perkins (first posted on CERM ® RISK INSIGHTS – reposted here with permission)

In the 1960’s Ralph Nader became famous by writing an expose’ of the Corvair, a rear-engined Chevy built by General Motors.

He called it “Unsafe at Any Speed: The Designed-In Dangers of the American Automobile “[1][2].  He accused car makers of ignoring safety, resisting providing seat belts and other design issues that contributed to injuries in accidents.

In 1966 the U.S. Congress passed the Highway Safety Act (aka National Traffic and Motor Vehicle Safety Act), which created mandatory federal safety standards for motor vehicles and established what is now the National Highway Traffic Safety Administration. [Read more…]

by Leave a Comment

Basics: Project Risk Management

Basics: Project Risk Management

Guest Post by Rod Farrar (first posted on CERM ® RISK INSIGHTS – reposted here with permission)

The project management body of knowledge generally focuses on scope management, time management, and cost management. Risk management generally comes in at about 8th place out of the ten.

However, risk management is potentially the biggest part of the project management planning process. [Read more…]

by Leave a Comment

Some Thoughts on Exposure Reduction and Mitigation

Some Thoughts on Exposure Reduction and Mitigation

Guest Post by Geary Sikich (first posted on CERM ® RISK INSIGHTS – reposted here with permission)

Exposure to threats, hazards, and risks leads to vulnerabilities that an organization must deal with.

Commonly these are addressed via a mitigation process. Once mitigation is accomplished, often times the organization feels that the risk, threat, hazard does not need to be revisited. However, as a result of the mitigation efforts on the part of the organization, the risks, threats, hazards reconfigure and re-emerge in a different form.

In order for mitigation to be successful, it has to be a constant and ongoing process that produces a resilience to the negative effects of risks, threats, and hazards that are realized. [Read more…]

by Leave a Comment

Usability and Its Impact on Risks

Usability and Its Impact on Risks

Guest Post by Howard M. Wiener (first posted on CERM ® RISK INSIGHTS – reposted here with permission)

How we design and implement systems and processes can play a large role in determining their usability.

Poor usability can contribute to avoidable risks.  This post addresses the need to employ risk identification and mitigation techniques in the course of designing things in order to minimize the probability of negative outcomes. [Read more…]

by Leave a Comment

Unconscious Risk Management

Unconscious Risk Management

Guest Post by Ed Perkins (first posted on CERM ® RISK INSIGHTS – reposted here with permission)

While we look at risk-based decisions and making decisions under uncertainty, these approaches all have one basic assumption – that the participants in these processes are doing so consciously, with eyes open and with an appreciation of the risks and consequences involved. [Read more…]

by Leave a Comment

World Has Limited Resources..Is Intelligence One of Them?

World Has Limited Resources..Is Intelligence One of Them?

Guest Post by Malcolm Peart (first posted on CERM ® RISK INSIGHTS – reposted here with permission)

It has been suggested that Stone Age man had a higher IQ than today’s modern homo sapiens.

“That cannot be,” says the modern man, but if one thinks about such an assault on our modern-day ego and self-confessed superiority, the alleged ‘primitive’ man was able to survive in extreme conditions, traveled the planet and set the foundations for today’s societies. [Read more…]

by Leave a Comment

How to Correct a Failing Lean Six Sigma Program

How to Correct a Failing Lean Six Sigma Program

Guest Post by David Patrishkoff (first posted on CERM ® RISK INSIGHTS – reposted here with permission)

We are living in a time of great disruption and uncertainty.

Every organization is facing great risks. Some of these risks are visible and many others are hidden.

So, it’s crucial that every company develops and implements tools to identify, mitigate and transform risks into dramatic improvements and even disruptive innovations. [Read more…]

by Leave a Comment

The Unpredictability of Uncertainty

The Unpredictability of Uncertainty

Guest Post by Geary Sikich (first posted on CERM ® RISK INSIGHTS – reposted here with permission)

Introduction 

Recently I wrote an article titled “Can You Calculate the Probability of Uncertainty?” The article posited that the heavy dependence on mathematics to determine the probability of risk realization may actually create “false positives” regarding the basis for the determination of probability.

My point was that there is too much uncertainty, things that we just do not know, to be able to calculate the probability of uncertainty with any degree of confidence. I received several comments from readers telling me that I was confusing the issue and that determining the probability of risk is all about “uncertainty”.

I have to say that this gave me pause to think. And, my conclusion is that risk is all about the probability of identified certainties that carry an uncertain realization. [Read more…]

by Leave a Comment

Future Proofing the Process of Active Analysis

Future Proofing the Process of Active Analysis

Guest Post by Geary Sikich (first posted on CERM ® RISK INSIGHTS – reposted here with permission)

Overview 

The ability to effectively respond to and manage the consequences of an event in a timely manner is essential to ensure an organization’s survivability in today’s fast paced business environment. With the emergence of new threats, such as cyber-terrorism and bio-terrorism; and the increasing exposure of companies to traditional threats such as, fraud, systems failure, fire, explosions, spills, natural disasters, etc. an “integrated” approach to Business Continuity Planning is essential. [Read more…]

by Leave a Comment

Beware the Walls May Be Listening and the Appliances Are Loose

Beware the Walls May Be Listening and the Appliances Are Loose

Guest Post by Ed Perkins (first posted on CERM ® RISK INSIGHTS – reposted here with permission)

Unsuspecting consumers, thinking they have found a bargain, or that they have joined the latest gadget trend, or both, can be unpleasantly surprised, according to recent revelations on how mobile and IoT (Internet of Things) devices can have built-in security issues. [Read more…]

by Leave a Comment

Cover Your Assets and Plausible Deniability

Cover Your Assets and Plausible Deniability

Guest Post by Ed Perkins (first posted on CERM ® RISK INSIGHTS – reposted here with permission)

In an earlier post [1] we looked whether ‘plausible deniability’ was now a dead strategy in the face of enterprise risk management (ERM) and the likely impact of the US SEC (Securities and Exchange Commission) guidance [2] regarding disclosure obligations relating to operational and cybersecurity risks and cyber incidents. The SEC noted that “a number of disclosure requirements may impose an obligation on registrants to disclose such risks and incidents. [Read more…]

by Leave a Comment

Fixing Audit Findings

Fixing Audit Findings

Guest Post by John Mason (first posted on CERM ® RISK INSIGHTS – reposted here with permission)

The audit is finished, the exit meeting conducted and the audit report has hit your desk. As discussed, there should be no surprises, there should be correctly categorized findings, and specific examples.

Now you have 3, 6, 9 or 12 months in which to fix them.

If you have findings that have to be addressed within 3 months, then you have got a nonconformity or a major corrective action (of course the names are different for every certification service provider). [Read more…]

by Leave a Comment

Requirements Development and Risk Management

Requirements Development and Risk Management

Guest Post by Paul Kostek (first posted on CERM ® RISK INSIGHTS – reposted here with permission)

One of the keys to a successful project is having a set of requirements that are well defined and stable. We’ve all worked on projects where a lack of defined and controlled requirements has led to scope creep which result in schedule delays.  

The requirements development process must also include mitigations for the risks identified in the Risk Management Plan. To accomplish this the initial risk assessment must be completed before the requirements development process begins. [Read more…]