Embedding risk management

Embedding risk management

Embedding risk management is a much talked about practice. The business owns the risks and controls. Risk management helps them do so. But, how well do risk managers facilitate that process? Does the risk department have a strategy for helping business managers embed risk? And, if not, how can they do so. Steve Barlow, a…

Embedding risk management is a much talked about practice. The business owns the risks and controls. Risk management helps them do so.

But, how well do risk managers facilitate that process? Does the risk department have a strategy for helping business managers embed risk? And, if not, how can they do so.

Steve Barlow, a chief risk officer recently at work in the United Arab Emirates, suggests eight critical steps to get the process going.

In his article, written specially for Enterprise Risk online, he says:

“Embedding risk should be driven top down – based on the key principle that “what gets measured gets done” – by integrating the way objectives, risks and performance are measured/monitored.”

To find out what those critical steps are, read the full feature here.





← Previous

Gaining value from internal risk models?
Gaining value from internal risk models? IRM’s Internal Model Industry Forum (IMIF) is  publishing its…






Next →

Toned down at the top
Most corporate governance experts say setting the right tone at the top is crucial. It…

9 SEPTEMBER 2026

Owning your space: confidence, visibility & voice

This event marks the formal public launch of the IRM Women in Risk Special Interest Group. The session is themed around the most pressing personal and professional challenges identified by women in the risk profession today.

Find out more

10 SEPTEMBER 2026

Beyond compliance

Managing equity compensation risk through automation, governance and the unified equity compensation risk & automation framework (UECRAF).

Find out more

17 SEPTEMBER 2026

Building an effective risk culture in your organisation

The proactive cultivation of an effective risk culture can serve as a strategic differentiator, enhancing the organisation’s resilience, agility, and reputation in the eyes of customers, investors, and regulators alike.

Find out more

Advertisement