Risk Managing Important of Effective (or both)風險管理:重要或有效(或二者皆是)(下)

If an organisation believes that risk management is important but is not finding it to be effective in practice (Combination 2), then they should consider launching an improvement initiative to benchmark and develop their risk management capability. Tackling the Critical Success Factors (CSFs) for effective risk management will lead to enhanced capability and maturity, allowing the organisation to reap the expected benefits. Key CSFs include a risk-aware culture, efficient processes, experienced and skilled staff, and consistent application, among others.
若組織相信風險管理是重要的但在實務上並未發現其成效(組合2)時,那麼他們應該考慮採取一個改善的方針,用以做為基準並發展其風險管理能力。尋求有效風險管理的關鍵成功因素將可增進其能力與成熟度、讓組織獲致其期待的效益,主要的關鍵成功因素包括具有風險意識的文化、有效率的流程、具經驗及技巧的人員、以及一致的應用。

It is not surprising that risk management is ineffective in organisations which believe that it is unimportant (Combination 3), as it is not possible to manage risk effectively without some degree of commitment and buy-in. These risk-immature organisations should be persuaded and educated about the benefits of risk management to the business - a task best performed by convinced insiders who can show how proactive management of risk could be applied to meet the specific challenges of the organisation.
在相信風險管理不重要時,組織風險管理沒有效果就一點兒也不令人訝異了(組合3),因為若沒有某種程度的承諾與投資,是不可能有效管理風險的。這些風險不成熟的組織應該要被說服及教育其有關風險管理對企業的效益—一項最好由能夠顯示風險的預防性管理可應用於應付組織某些挑戰且堅定相信的內部人員來執行的任務。

It is a good idea for every organisation to review its position on risk management against the two dimensions of importance and effectiveness, and to take appropriate action to move up the scale of risk management maturity. Risk management offers genuine and significant benefits to organisations, their projects and their stakeholders, but these will never be achieved without recognition of the importance of managing risk at all levels in the business, matched with operational effectiveness in executing risk management in practice.
每個組織最好能夠根據重要性及有效性等兩個向度來檢視其在風險管理上的位置,並採取適切的行動以提高風險管理的成熟度,風險管理可提供組織、組織中的專案、以及其利益關係人真實且重要的效益,然而,若未能認知到在企業各階層管理風險是重要的,且在實務上配合執行風險管理的作業有效性,則這些效益皆無法達成。