Home > Risk > A conversation about risk with a CEO

A conversation about risk with a CEO

This last week, I was privileged to share a trans-Atlantic flight with the chancellor of one of the top universities in Europe.

The time passed much more quickly than usual, especially when I was able to talk to him about risk management and how (IMHO) it should be practiced – in a way that focuses on achieving success rather than avoiding failure.

I had told him that I was returning from leading a 3-day training course on risk management and other topics. This interested him, but initially more from an academic than a practical perspective.

He asked me about the latest thinking on risk management. Of course, I was only too happy to share with him my view that it should focus on helping people make informed and intelligent decisions, knowing which risks to take, and helping them achieve objectives. I told him that most risk management functions focus on managing lists of risks, which only helps organizations avoid failure rather than achieve success.

That changed his tone and interest from academic to practical.

The chancellor was concerned about a major project, the building of a new hospital on campus. The university’s CFO was responsible for the building. But while he was a fine CFO with a bright future, he had not yet earned the chancellor’s confidence that he could complete a major building project on time, within budget.

The chancellor shifted his position in his seat to give me his full attention.

He explained that he wanted to help the CFO. But he wasn’t an expert on building projects either.

When I said that, in his shoes, I would ask the CFO to talk about what needed to go right for the project to succeed and what he was doing about it, he thought that was excellent. It’s such a better question than ‘what might go wrong’.

Identify what needs to go right, make sure resources and tasks are identified to make it happen, consider potential obstacles, then act and continuously monitor. (We had an interesting few minutes talking about the need to monitor progress and what still lay ahead.)

We got to the heart of the problem when I asked him whether the CFO was the right man to lead the project.

He was uncomfortable answering this. I think it was because he had doubts, didn’t know how to address them, and did not want to infer that the CFO was less than excellent at his day job. But he clearly had doubts and I left him thinking about how he could help (by asking questions rather than stepping) and whether he needed to hire a specialist project manager.

Our conversation lasted more than an hour – and we barely used the “r” word (risk) at all.

We talked about the effective management of the project, considering what might happen (things we want to happen and things we would prefer not to happen), assessing whether that would be acceptable, and what needed to be done to improve the likelihood of success.

When we parted, he said he was very grateful and had a lot to think about before he returned home.

At this point, I am convinced that the way to have a risk discussion with an executive is to leave the “r” word out of the conversation. (I would make an exception where the executive truly understands what risk management is about, but even in financial services most think of risk as something to avoid or mitigate.)

Focus on helping the organization succeed instead of avoiding failure.

This requires a change in attitude and orientation by the risk practitioner, and it has to come from the heart more than the head.

Do you think this would work for you?

After all, risk management is simply effective management. The “r” word is too often a turn off for executives and misunderstood by board members. So let’s try to avoid using it and have a constructive conversation about success.

I would appreciate your thoughts on this short video.

  1. August 27, 2017 at 10:22 AM

    “Identify what needs to go right” I like that. Simulations really do just that, they help to understand what assumptions must happen to achieve objectives and turns the conversation to helping ensure they do in fact happen and also what to do when or if they don’t :)) Everyday I am amazed how some tools were designed to do the right thing from the very beginning, yet risk managers continue to ignore them

  2. Anatolii
    August 27, 2017 at 10:24 AM

    Very interesting article.
    Well, this may work, to avoid word ‘risk’, since CEO doesn’t like the word. But the we inevitably must deal with uncertainty. And this is a risk. To make project management effective and to get more predictability during project lifetime we need to analyze uncertainties. And this is a risk management. Problem is how to motivate CEO to look at risk management seriously from the beginning of any project. In some cases, this is a risk to miss risk management as a real part of project management.

    • Norman Marks
      August 27, 2017 at 3:47 PM

      Anatolii, I am not sure what you are saying. I am saying that you don’t need to use the ‘r’ word to have a productive conversation about what might happen (which are the uncertainties). You can also put together a list of the things that might happen for each of your objectives – and this is more useful than a risk register that only includes the things you don’t want to happen.

  3. Evgeny
    August 28, 2017 at 12:45 AM

    As usual, insightfull and wise article!
    It really works!
    When, approximately three years ago, we started talking with C-executives in a way described in article thay said: “guys, it seems we lost a lot of time in the past talking about risks”.

    • Evgeny
      August 28, 2017 at 1:20 AM

      Anatolii, you can motivate CEO to look at erm seriously by trying to re-tell them the story about risks in meaningfull way.
      Trivial thing, but CEOs are not interested in managing risks, but primarily in achiving objectives. If you can show CEO “HOW” you can help them with achiving project objectives – to take advantages of business conditions, utilyze any opportunities properly and timely, allocate resources more effectively (for exeeding objectives or saving budget) – they will probably show greater interest to “managing risks”.

  4. Richard Leonard
    September 1, 2017 at 8:21 AM

    I found your article most interesting, and it stimulated a discussion I had with a CFO back in past that ultimately was about risk. I met with the young CFO at a major manufacturing company that produced irrigation systems. Our meeting was to be a briefing on an upcoming external audit. He asked me about my background and education, than shared his. I was shocked to learn that he did not have the educational background normally associated with those that are CFO’s. I remember his comment as a life professional experience. He was one of the founders of the company, was not educated in risk management, and said. “I rely on men like you who can honestly advise me on my business risk, but you see, the reason you are sitting here in front of me and not behind this desk is that I take risks. Yes, your article is spot on, look for success first and you will soon recognise those elements that may be a risk to success.

  1. March 15, 2018 at 8:51 AM
  2. March 16, 2018 at 1:00 AM
  3. April 4, 2018 at 9:46 AM

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.

%d bloggers like this: