3 Low Cost Ways to Enhance Your Risk Management

November - December 2009 Issue

By Diana Del Bel Belluz, M.A.Sc., P.Eng.

This month I had the honour of speaking about Enterprise Risk Management at the Ontario Hospital Association’s HealthAchieve conference. In my talk I shared research findings that demonstrate companies typically only achieve about 63% of their strategies’ potential¹.

To quantify the strategy-to-performance gap, researchers from Marakon Associates and the Economist Intelligence Unit surveyed 197 companies world-wide with sales in excess of $500M. They assessed actual performance versus the financial forecast in the strategic plan. The study revealed that organizations under perform by 37% due to defects and breakdowns in planning and execution processes (Figure 1).


I have shared this research with many audiences and found that the root causes of the strategy-to-performance gap are common across all sectors (corporate, government and nonprofit).

If you plugged the leaks that drain away your performance, how much additional value could your organization generate? Imagine 37% more profit or 37% more services delivered or 37% more of whatever value your organization aims to deliver

After my talk, a delegate asked, “Where are the biggest opportunities to close the 37% performance gap? Where is the ‘low hanging fruit’?”

It was such a great question, I decided to share the answer with all the readers of this E-Zine. First, let’s distinguish between what is meant by enterprise and operational risks.

At the enterprise level, where the focus is the development of corporate strategies, executives set the tone for performance and risk management by:

  • Setting the destination and direction of the organization, i.e., clear corporate goals and strategies
  • Defining standards of behaviour though personal leadership that embodies the organization’s desired culture, policies and risk appetite which together guide choices about which opportunities to pursue and which threats to avoid in the pursuit of enterprise goals
  • Providing governance, oversight, and assurance

At the operational level, where day-to-day business takes place, managers are focused on executing corporate strategies and manage operational risks by:

  • Establishing clarity around objectives, roles, & responsibilities, i.e., operationalizing enterprise goals
  • Aligning resources to deliver excellent performance
  • Developing capabilities to handle unexpected or uncontrollable factors

Here are three places where you can find ‘low hanging fruit’ at the enterprise and operational levels.  

OPPORTUNITY #1: Optimize ERM Resources.

To identify low hanging fruit at the ERM level, ferret out risks that are over-managed. Over-managed risks represent wasted resources. By reallocating resources from over-managed risks to under-managed risks you can significantly reduce your risk exposure and improve the efficiency of your risk management resources.

In the March 2008 issue, I shared a simple tool developed by Risk Wise to assess the effectiveness of risk management strategies. The Risk Management Effectiveness Map enables you to identify both over-and under-managed risks.

A common reason that a risk can be over-managed is that people in different parts of the organization are independently doing something to manage the risk. But due to lack of communication across silos, they end up duplicating efforts or doing things that actually cancel each other out. Using a team approach in the risk assessment process helps to coordinate risk management efforts and streamline resources.

By analyzing the effectiveness of your risk management efforts on a regular basis, you will have the information you need to squeeze a little more out of your existing envelope of resources by rebalancing between over-managed and under-managed risks.

ASK YOURSELF: What evidence does my organization have that risk management resources are being optimally allocated?

OPPORTUNITY #2: Clarify Strategy and Objectives.

The secret to effective performance (and risk) management is the ongoing alignment of strategy developed at the enterprise level with execution at the operational level. Communication is the key tool to achieve alignment between the enterprise and operational levels.

According to my calculations (shown in the box at the bottom of Figure 1), you can improve your total performance by 15.8% simply by doing some targeted talking. Specifically, by communicating effectively about strategy, objectives, roles and responsibilities a management team can eliminate nearly half of the strategy-to-performance gap.

By communication I mean dialogue beyond the initial unveiling of strategic plans. Effective communication requires systematic follow-up to ensure people understand who is accountable for what and what specific actions are required of them. It also means ongoing communication to ensure that your people don’t stray off course from corporate strategy, pulled by the compelling forces of day-to-day problems.

ASK YOURSELF: What evidence does my organization have that managers communicate with a frequency and effectiveness that ensures clarity in the minds of people throughout the organization about our corporate goals and strategies, operational objectives, and individual accountabilities for performance and risk management?

OPPORTUNITY #3: Optimize Operational Processes.

One way to identify operational risks is to systematically examine the value chain of core business processes. In my practice, I have observed that the search for risks in a process invariably also reveals ways to run it more effectively and efficiently. Yet few organizations systematically analyze and optimize their processes.

At the HealthAchieve conference, there was a fantastic session that featured health sector innovation. Many of the innovations involved the application of Lean² techniques to streamline business processes and generate significant performance improvements in their operations, e.g., increasing the volume of procedures and services thereby reducing wait-times. Other than taking staff time to learn and apply Lean, the improvements were generated without any extra cost-burden on the organization.

Like most organizations, they discovered that their processes are not designed. Instead, they evolve in response to circumstances that exist when the process is first implemented with the occasional work around to respond to new requirements that arise. Over time, many of those circumstances and requirements disappear but the process is not updated.

Consequently, the process continues to include steps that no longer serve a useful purpose or that occur in a clumsy and inefficient sequence. As a result, most organizations have lots of waste in their processes.

Toyota is well known for pioneering Lean techniques to continuously align their processes to customer value. At HealthAchieve, a team from St. Joseph’s Healthcare in Hamilton shared how they are working with Toyota Canada to successfully apply Lean thinking in a healthcare setting.  Kudos to the folks at St. Joe’s for recognizing they can learn from another sector!

Taking the time to learn and apply a process improvement discipline to your core business processes will help you uncover hidden risks and eliminate waste. If you don’t analyze your processes, you run the risk of letting inefficiencies build up and become a massive drain on your performance and your ability to achieve operational and strategic objectives.

ASK YOURSELF: Are our key business processes aligned with strategic objectives and our current business environment?


The Risk Wise bottom line… Strong risk management addresses many of the root causes of performance loss. Are you taking advantage of these simple, low-cost analysis and communication techniques to boost your organization’s performance?


To explore how you can enhance your risk management performance without blowing your budget, contact Diana Del Bel Belluz at Risk Wise: (416) 214.7598 Diana.Belluz @ riskwise.ca


Follow the links to:

  • Read this month's Bonus Resource - ISO 31000 Risk Managment Principles and Guidelines.
  • Download a printable version of the entire November - December 2009 issue of the Risk Management Made Simple Advisory.
  • View the Article Index to access back issues of the Risk Management Made Simple Advisory.


1. “Turning Great Strategy into Great Performance,” Michael C. Mankins and Richard Steele, Harvard Business Review, July–August, 2005.

2. The core idea of Lean is to maximize customer value while minimizing waste. A Lean organization focuses its key processes to continuously create more value for customers with less resources.

Current Special Offers for Subscribers

Current Special Offers for Subscribers

The codes to access the following special offers have been emailed to The Mobilize for Growth™ Advisory subscribers:

  • SPECIAL INTRODUCTORY OFFER:  Free registration ($145 value) for Virtual Learning Bites in April.  There is a maximum of 10 spots per course, available free of charge on a first come, first served basis (April 1 - 30, 2019).  Two risk quantification Virtual Learning Bites from NavIncerta on the Italian Flag technique and on the Range Assessment technique.  (Subscribers have been sent the instructions on how to access this offer).  Not yet a subscriber?  Don't miss out, click here to sign-up for your complimentary Advisory subscription.
  • SPECIAL OFFER: $200 off the full fee for The Mobilize for Growth™ Advisory subscribers on NavIncerta's Virtual Learning Lab on Risk Management and Quantification (April 1 - June 28, 2019).  (Subscribers have been sent the instructions on how to access this offer).  Not yet a subscriber?  Don't miss out, click here to sign-up for your complimentary Advisory subscription.

  • SPECIAL OFFER: $500 off the full fee for The Mobilize for Growth™ Advisory subscribers on Module 1 of the Masters Certificate in Risk Management and Business Performance Leadership presented by the Schulich School of Business Executive Education Centre (April 29 - May 3, 2019).  Subscribers have been sent the instructions on how to access this offer).  Not yet a subscriber?  Don't miss out, click here to sign-up for your complimentary Advisory subscription.

Not yet a subscriber, but want to access these special offers?

When you subscribe to the Advisory, we'll send you the code for all current special offers along with a link to your New Subscriber Bonus, a copy of Moving Beyond the Risk Map to Operational Vigilance.

FIND OUT FOR YOURSELF why risk management leaders subscribe, click to access the ARTICLE INDEX of all past issues of the Risk Management Made Simple Advisory.

"I save and study each issue of the Advisory. I appreciate how Diana gives very practical advice and links it to fundamental theories and best practices." 

Sherrie Hyde, Risk Manager, Lutherwood


Moving Beyond the Risk Map to Operational Vigilance

Read more about the Risk Management Made Simple Advisory.

"It is so refreshing to read a newsletter that offers real solutions for risk management challenges."
Cathy Taylor
Director, Risk
Kinross Gold Corporation

Diana's Pick

The Neuroscience of Enterprise Risk Management (written by Diana Del Bel Belluz of Risk Wise) expores findings from the field of neuroscience and shares practical tips on how to apply them to enhance individuals' risk management thinking and implement brain-friendly ERM practices in organizations.

The article was published by The Conference Board of Canada in the Autumn 2017 issue of the journal Risk Watch.