What is the mean of Risk Management Standard to your organization?
In the rising concern of Risk Management today, we have numbers of Risk Management implementation frameworks established by various nationwide bodies. Without one worldwide consensus on standard of Risk Management Implementation, the situation may lead us to various challenging and debating perspectives in deciding the most proper Risk Management implementation standard for our organization. Besides that, International Standard can also help an organization to comply with legal and regulatory requirements and international norms as well. Risk Management standard indeed contribute to the bottom line of organization but Risk Management standard provide only general description of the elements, processes, and activities required for risk management.
ISO 31000 provides a high level concept of Risk Management implementation that should not be in conflict with the existing and specific frameworks or methods of Risk Management implementation. Existing frameworks or methods may be different particularly in that they may not have as broad a perspective as ISO 31000. The most important thing highlighted in ISO 31000 is corporate culture since risk management cannot be implemented as a template; it goes along with the company’s specific needs and circumstances among others: the industry where they do business, complexity, size, strategy, and governance of the company.
In that ISO 31000 Seminar held by APB Group-Indonesia on August 6th, all of us were encouraged to have a new horizon in managing risks, means that Standard is a good guidance in implementing risk management and standard contribute in increasing visibility of the balance between opportunities and risk but standard itself is not a one-size-fits-all solution.