Manage Enterprise Risk
The capacity of a system, organization, or society to withstand, recover from, and adapt to shocks while maintaining function—spanning financial stability, system reliability/availability, cyber resilience, and societal resilience. (Embedding culture that sustains value.)
Ordered tasks (16) — this is what a project auto-creates
- #1Risk Identification, Evaluation & PrioritizationHighTo Do
This section shows you how to move from a scattered list of worries to a ranked exposure map that actually directs where money and attention go. You get the discipline of framing, measuring, and ordering risks before you spend a dollar treating any of them.
Assignee: Unassigned · due 0 days after project start · takes 14 days
- #2External Threat & Environmental ContextHighTo Do
This section frames the outside conditions—systemic threats, an expanding digital attack surface, societal and environmental shifts—that set the risk environment you operate within. You learn to treat context as a variable that reshapes both your exposures and the effectiveness of your controls.
Assignee: Unassigned · due 14 days after project start · takes 14 days
- #3Stakeholder PerspectiveLowTo Do
This section makes explicit whose risk-return you are optimizing, because stockholders, bondholders, employees, and customers evaluate the same decision through incompatible lenses. You learn to name the perspective before you declare a risk acceptable.
Assignee: Unassigned · due 28 days after project start · takes 3 days
- #4Realized Risk & Loss EventsMediumTo Do
This section deals with the outcomes—misconduct, operational failures, loss events, return variability—that tell you whether the whole risk system is working. You learn to read event data as feedback rather than as isolated bad luck.
Assignee: Unassigned · due 31 days after project start · takes 7 days
- #5Risk Treatment & Control DesignHighTo Do
This section covers your options once a risk is prioritized: reduce it, keep it, move it, or redesign the process that creates it. You learn to match the treatment to the risk's economics rather than reflexively adding controls.
Assignee: Unassigned · due 38 days after project start · takes 14 days
- #6Measurement & Data QualityMediumTo Do
This section explains why your risk analysis is only as good as the failure and operational data feeding it, and how to validate what you measure. You get practical tests for whether a metric is decision-relevant and trustworthy.
Assignee: Unassigned · due 52 days after project start · takes 7 days
- #7Human & Circadian Risk FactorsLowTo Do
This section examines how fatigue, circadian lows, and latent procedural weaknesses turn ordinary humans into the proximate cause of failures. You learn to treat these as designable system conditions rather than as individual carelessness.
Assignee: Unassigned · due 59 days after project start · takes 3 days
- #8Regulatory Compliance & Reduced SanctionsMediumTo Do
This section covers how to satisfy regulatory obligations and reduce sanctions exposure by demonstrating defensible due diligence rather than paper conformance.
Assignee: Unassigned · due 62 days after project start · takes 7 days
- #9Leadership & Management CommitmentMediumTo Do
This section clarifies what genuine management commitment to risk looks like beyond a signature on the policy: resources, authority, and personal attention. You learn to distinguish sponsorship from lip service.
Assignee: Unassigned · due 69 days after project start · takes 7 days
- #10Psychological Safety & Internal ReportingMediumTo Do
This section covers whether people believe they can surface bad news through internal channels—and actually do. You learn to diagnose reporting silence and unclog the channels before a whistleblower goes external.
Assignee: Unassigned · due 76 days after project start · takes 7 days
- #11Risk-Taking & Behavioral ResponseMediumTo Do
This section is about what people and teams actually do under uncertainty: which projects they accept, when they escalate, and how they mobilize against a threat. You learn to close the gap between the risk analysis and the action it should trigger.
Assignee: Unassigned · due 83 days after project start · takes 7 days
- #12Adaptive Decision Process QualityLowTo Do
This section addresses how the structure of your strategic decision process—whether it surfaces and challenges assumptions—governs the quality of the risks you take. You learn to build in disconfirmation before you commit resources.
Assignee: Unassigned · due 90 days after project start · takes 3 days
- #13Risk-Aware & Ethical CultureHighTo Do
This section addresses the shared norms that determine whether people flag or bury risks between the formal control checkpoints. You learn how culture amplifies or silently defeats every other risk mechanism.
Assignee: Unassigned · due 93 days after project start · takes 14 days
- #14Resilience, Reliability & StabilityHighTo Do
This section shows you how to build capacity to absorb shocks and keep functioning—across financial, operational, cyber, and societal dimensions—rather than merely preventing individual failures.
Assignee: Unassigned · due 107 days after project start · takes 14 days
- #15Reputation & Stakeholder TrustMediumTo Do
This section explains how risk management builds—or destroys—the stakeholder confidence that underwrites your license to operate, and how to manage trust as a leading indicator.
Assignee: Unassigned · due 121 days after project start · takes 7 days
- #16Business Performance & ValueMediumTo Do
This section connects risk management to measurable value—showing how good risk practice shows up in risk-adjusted returns and survival, and why the link depends on whose perspective you take.
Assignee: Unassigned · due 128 days after project start · takes 7 days