The idea of including risk management in basic management training courses is fast catching on. The most essential thing is to introduce it at all levels of the company with clear explanations as to what is required. There is no point in just producing onerous forms which treat everyday occurrences as risks and require detailed explanations as to what is being done to minimise those risks and what will be done if that risk turns into an actual event.

There are some daft examples of poor risk management practice. Let’s take the following real example. There is a risk that somebody could be off work sick and as a result certain work would not get done. However, how useful is it to fill out paperwork explaining that the risk of that person being off sick has been minimised by the employer arranging a free flu shot and encouraging the employee to attend stress management courses and to create a life/work balance? Equally, the listing of the various staff who could cover their jobs and what happens if they are also absent is of limited use.

As always, there is a balance to be struck between reporting requirements and actual serious consideration of risks.