Category: risk management

The first board pack I read in earnest weighed in at just under three hundred pages. Advice I had been given on how to read board packs was sensible and useful – read the agenda first, identify the decisions, focus on the exceptions, write your questions down before the meeting. None of it answered the…

A few months ago, working through a risk register entry for a risk I’ll leave unnamed, I found myself counting the layers and arriving at the usual three – first-line operational control, second-line risk function review, third-line internal audit assurance – and then noticing (with a small chill) that all three layers were ultimately staffed…