Risk management

Risk management is the coordinated process of understanding uncertainty and choosing how to respond so an organisation can pursue its objectives responsibly. Risk may create threats or opportunities; the goal is not to remove all uncertainty, but to keep exposure within explicit appetite while protecting people, assets, obligations and value.

When to use it

Use risk management whenever uncertain events or conditions could materially affect objectives. The depth should match the stakes, reversibility and velocity of the decision.

In banking, insurance, pharmaceuticals, petrochemicals and other high-consequence sectors, formal risk functions and regulation are central. Examples include Solvency II, Basel III and ISO 31000. OHSAS 18001 is a historical occupational-health-and-safety specification that has been withdrawn and replaced by a successor international standard; always verify which current law and standard applies in the relevant jurisdiction.

Origins

Risk management has roots in trade, insurance, probability, engineering safety and financial control. During the twentieth century, actuarial methods, operations research, project management and corporate governance helped turn separate hazard practices into coordinated organisational frameworks. Contemporary enterprise risk management integrates strategy, performance, compliance, resilience and culture rather than assigning all risk to a specialist department.

What it is

A complete framework establishes context, identifies uncertainty, analyses likelihood and consequence, evaluates exposure against criteria, selects responses, assigns ownership and monitors change. It also communicates assumptions and escalates risks that cross authority or appetite.