In short – the ones that “mean more”
Metric: % of critical risks with treatments that reduce risk to target
Used in our Universal Framework, this is “necessary but not sufficient”.
Risks, opportunities, and continuity needs are systematically identified, analysed, and updated. This is a fundamental domain in our Consolidated Framework.
Indeed, we only analyse risk in order to manage them.
But again, not sufficient.
Risk‑based objectives, plans, and continuity strategies guide and control material change. This fundamental domain (in our Consolidated Framework) completes the “necessary and sufficient to be adequate” requirement.
For this exemplary client, the “Integrated Risk & Opportunity Management” domain (line 3 in the heat-map below) needed to move from “Defined” to “Operational”. While “Planning, Objectives, Strategies and Change” is fully operational.
John Salter Consulting Services 