Embedding risk management

Embedding risk management

Embedding risk management is a much talked about practice. The business owns the risks and controls. Risk management helps them do so. But, how well do risk managers facilitate that process? Does the risk department have a strategy for helping business managers embed risk? And, if not, how can they do so. Steve Barlow, a…

Embedding risk management is a much talked about practice. The business owns the risks and controls. Risk management helps them do so.

But, how well do risk managers facilitate that process? Does the risk department have a strategy for helping business managers embed risk? And, if not, how can they do so.

Steve Barlow, a chief risk officer recently at work in the United Arab Emirates, suggests eight critical steps to get the process going.

In his article, written specially for Enterprise Risk online, he says:

“Embedding risk should be driven top down – based on the key principle that “what gets measured gets done” – by integrating the way objectives, risks and performance are measured/monitored.”

To find out what those critical steps are, read the full feature here.





← Previous

Gaining value from internal risk models?
Gaining value from internal risk models? IRM’s Internal Model Industry Forum (IMIF) is  publishing its…






Next →

Toned down at the top
Most corporate governance experts say setting the right tone at the top is crucial. It…

7 OCTOBER 2026

Key elements of a mature programme risk capability

Hosted by Vinay Shrivastava. Vinay's presentation will cover lessons he has learned over the course of his career. These insights will be shared using the principles of ISO31000 risk management.

Find out more

8 OCTOBER 2026

Pre-deployment agentic risk management

Delivered by Adam Grainger, the outcome of this session is to be able to support an agentic implementation with effective pre-deployment risk identification and mitigation.

Find out more

14 OCTOBER 2026

AI Transforming Enterprise Risk Management Activities

Risk management has changed considerably over the years, with new frameworks, standards and expectations shaping the way organisations manage risk. However, many of the day-to-day activities within Enterprise Risk Management (ERM) functions have remained much the same.

Find out more

Advertisement