Allianz Risk Barometer – Major Business Risks 2024
The top risks in this year’s Allianz Risk Barometer reflect the big issues
facing companies right now – digitalization, climate change and an uncertain geopolitical environment.
Guide: Risk and Managing Risk Explained
Risk-taking is fundamental to the success of any organisation. The leaders of an organisation must decide the extent to which risk needs to be sought, accepted, addressed or avoided, and their approach to this will determine how risks are managed across their organisation.
Organisational Resilience Building in Small and Micro Enterprises under the VUCA Environment
Small and micro enterprises (SMEs) encounter big blows while operating in VUCA (Volatility, Uncertainty, Complexity, Ambiguity) environment as a result of their resource constrains and external dependencies. This study build a conceptual model that links organized performance to the elements of external environmental factors, internal resources, resilience capabilities, and the contribution of resilience building to SMEs. From systematically reviewing literature on VUCA and organisational resilience theories, the model specifies the pathways of how SMEs adapt and thrive in continuously changing (VUCA) conditions.
Guidelines for Sound Management of Risks related to Money Laundering and Financing of Terrorism (BCBS)
Being aware of the risks incurred by banks of being used, intentionally or unintentionally, for criminal activities, the Basel Committee on Banking Supervision is issuing these guidelines to describe how banks should include money laundering (ML) and financing of terrorism (FT) risks within their overall risk management.
The NIST Cybersecurity Framework (CSF) 2.0
The NIST Cybersecurity Framework (CSF) 2.0 provides guidance to industry, government agencies, and other organizations to manage cybersecurity risks. It offers a taxonomy of high-level cybersecurity outcomes that can be used by any organization — regardless of its size, sector, or maturity — to better understand, assess, prioritize, and communicate its cybersecurity efforts. The CSF does not prescribe how outcomes should be achieved. Rather, it links to online resources that provide additional guidance on practices and controls that could be used to achieve those outcomes. This document describes CSF 2.0, its components, and some of the many ways that it can be used.
KING V CODE ON CORPORATE GOVERNANCE FOR SOUTH AFRICA (Draft)
The King V Code on Corporate Governance for South Africa establishes a comprehensive framework for ethical and effective leadership, emphasising integrated thinking and sustainable value creation within economic, social, and environmental contexts. It defines corporate governance as the pursuit of four main outcomes—ethical culture, performance, conformance, and legitimacy—through the actions of the governing body. Critical principles include ethical leadership, balanced governing body composition, clear delegation, and robust risk and compliance management. The Code advocates stakeholder inclusivity and responsible corporate citizenship grounded in Ubuntu philosophy, guiding organisations to create value for both themselves and broader society. Governance practices are structured around steering the organisation, approving policies, overseeing management, and ensuring accountability. The Code mandates an outcomes-based, “apply and explain” disclosure approach, allowing for proportional adaptation based on an organisation’s size and complexity. It addresses essential domains: ethics, strategy, reporting, risk, compliance, stakeholder management, information governance (including emerging technologies like AI), assurance, and remuneration. Organisations are encouraged to implement leading practices, foster diversity and competence, and ensure independent oversight of committees, with transparency and continuous evaluation central to its application.
The Leader’s Guide to Owning Risks and Driving Risk Based Decision Making
This guide positions risk ownership as a core leadership behaviour, not a technical or compliance task. It urges executives to shift risk from governance ritual to delivery confidence: asking forward‑looking questions, surfacing uncertainties early, and using risk appetite to shape real trade‑offs. Leaders must send consistent signals that early escalation is valued, stop penalising bad news, and turn business reviews into tests of confidence rather than comfort. Success is evident when risks are raised before issues, appetite drives decisions, and risk‑based decision making becomes a leadership habit.
A (Re)view of the Philosophical Foundations of Strategic Management
This paper aims to review how different approaches to social inquiry (e.g. postivist, postpositivist, interpretive, postmodernist and critical theory) have been used in strategy research and how these main paradigms engage with strategy.
Evaluating and Establishing Baseline Security Requirements in Cloud Computing: An Enterprise Risk Management Approach
In today's digital age, businesses use cloud services to boost their operations exponentially. While this trend presents excellent potential, it is marred by significant concerns over the safety of data stored in the cloud. As the demand for cloud computing increases, businesses face issues ranging from data breaches and provider security to service availability and regulatory compliance.
FERMA European Risk Manager Survey Report
We are pleased to present the results of the 2022 European Risk Manager Survey. The survey has now taken place
every other year for 20 years. It represents the most comprehensive picture of views of professional risk managers
across Europe.