Mastering Risk Management Podcast

In this episode Brett & I speak to Simon Levy, CEO of the RMIA about his personal journey in Risk Management, his ambitions for the RMIA and the upcoming conference to be held in Sydney in May 2024.
This is a refreshing discussion - Simon has been a risk practitioner for many years and brings that experience to his role as the CEO of the RMIA in promoting and improving the profession.
He generously shares stories of the things that have influenced his career and helped shaped his now enormous passion for the profession.
This is definitely worth a listen for risk professionals and those who want a better understanding of why Risk Management isn't just a 'nice to have' but a 'must have' for all organisations.

Get in touch with the RMIA via admin@rmia.org.au or through LinkedIn

Contact ABM Risk Partnership to optimise your risk management approach:

• email us: info@abmrisk.com.au
• Tweet us at @4RiskCme
• Visit our LinkedIn page https://www.linkedin.com/company/18394064/admin/

Thanks for listening to the show and please keep your guest suggestions coming!

Welcome back to the first podcast interview for 2024!

In this podcast, I chat with Alex Bovee, CEO of ConductorOne, a firm dedicated to modernising how organisations manage access to their vital systems and data.

In my experience, most organisations struggle with getting their access controls right - trying to navigate the fine line between being too restrictive and impacting business efficiency and too open and putting systems and data at risk.

Alex shares his insights into the problem and how Conductor One have developed a platform that addresses this problem that has been around since the first computer password!

Hope you enjoy the discussion - to find out more about ConductorOne, visit their website: ConductorOne - Identity security & access control

Contact ABM Risk Partnership to optimise your risk management approach:

• email us: info@abmrisk.com.au
• Tweet us at @4RiskCme
• Visit our LinkedIn page https://www.linkedin.com/company/18394064/admin/

Thanks for listening to the show and please keep your guest suggestions coming!

In this final episode for 2023, I take a look back at the guests that have appeared on the show this year as well as recapping the Podcast Chats which were launched in January.

Also, I share the shows statistics for 2023 - and am most grateful for you the listener getting us into the top 25% of podcasts on Buzzsprout!

I trust you and yours have had a wonderful festive season thus far and, like I, are looking forward to a wonderful 2024!

We'll return with our first interview for 2024 in the last week in January.

Cheers, Anthony

Contact ABM Risk Partnership to optimise your risk management approach:

• email us: info@abmrisk.com.au
• Tweet us at @4RiskCme
• Visit our LinkedIn page https://www.linkedin.com/company/18394064/admin/

Thanks for listening to the show and please keep your guest suggestions coming!

My discussion this episode is with Brittany Allen, Trust & Safety Architect at Sift and delves into the challenges of protecting us all as we live our online lives.

Brittany is incredibly experienced in battling e-commerce fraud and is often consulted as a key source by major publications such as Fortune, Fast Company, Bloomberg, The Hill and Forbes.

Her current role entails developing industry best practices and strategies and educating individuals and companies like on trust and safety in an increasingly online world.

So, if you worry about online fraud, credit card fraud, spam and scam activities or even worse, have uttered the phrase 'I've been hacked', then this episode is a must listen.

You can connect with Brittany at https://www.linkedin.com/in/brittanylorenallen/

As always, thanks for listening and keep the feedback coming.

Contact ABM Risk Partnership to optimise your risk management approach:

• email us: info@abmrisk.com.au
• Tweet us at @4RiskCme
• Visit our LinkedIn page https://www.linkedin.com/company/18394064/admin/

Thanks for listening to the show and please keep your guest suggestions coming!

In this discussion, Anthony Wilson and Brett Palmer discuss what good reporting looks like for Executives and Directors of organisations.

Clearly there are regulatory requirements that Senior Management and Boards must meet and that must be supported by robust Risk Management reporting. The trick is always getting the balance right - too much detail is just as bad as too little.

When reporting to these groups, materiality is key - the Board and the Executive need to be hearing about the Material risks, the effectiveness of the controls and progress on any actions.

One of the biggest drivers for being effective with your reporting is to assist in key decision making. Armed with an effective and thorough risk assessment, decisions can be made about which opportunities to pursue, which projects to activate and which threats to treat.

This is a great listen for those that find it a challenge to get their Risk Management reporting right or for those that want to benchmark their current reporting regime.

Enjoy the discussion!

Contact ABM Risk Partnership to optimise your risk management approach:

• email us: info@abmrisk.com.au
• Tweet us at @4RiskCme
• Visit our LinkedIn page https://www.linkedin.com/company/18394064/admin/

Thanks for listening to the show and please keep your guest suggestions coming!

In this podcast chat, Anthony Wilson and Brett Palmer talk about the critical link between Risk Management and Corporate Governance.

In short, to be an effective and sustainable organisation, one can't exist without the other. And this applies whether it's a Private, Public, Not-For-Profit or Government entity.

Firstly, Risk Management needs the imprimatur and indeed mandate of the Board - clearly articulating to Management and the organisation as a whole, its expectations in this regard.

Secondly, those charged with the governance of the organisation, the Board of Directors, need a robust and recognised process for evaluating opportunities and initiatives as well as threats to the achievement of objectives (collectively, the risks).

When working well, with clear and regular communication, governance activities are much improved, and Risk Management is even more effective!

Hope you enjoy this episode - look forward to your thoughts / feedback. 

Contact ABM Risk Partnership to optimise your risk management approach:

• email us: info@abmrisk.com.au
• Tweet us at @4RiskCme
• Visit our LinkedIn page https://www.linkedin.com/company/18394064/admin/

Thanks for listening to the show and please keep your guest suggestions coming!

A must listen episode for all Senior Executives and Directors!

In this discussion, Tim Weiss describes the challenges (and solutions) that organisations are facing in respect to Environmental, Social & Governance (ESG) requirements that are becoming even more 'front and centre' in the list of priorities.

ESG represents a classic risk - with both threats and opportunities for organisations that take the time to do a thorough and appropriate risk assessment.

One of the big challenges for organisations is understanding their carbon emissions - not just those directly incurred in conducting its business (Scope 1) but also those generated by its consumption of energy (Scope 2) and the emissions generated up and down the value chain (Scope 3). This is where Optera can assist.

Find out more by listening to this fascinating discussion!

You can contact Tim and the Optera team at: Optera | Enterprise Emissions Management Software (opteraclimate.com)

You can also access Optera's recent 'Trends in Corporate Emissions' Report mentioned in our discussion here.

Contact ABM Risk Partnership to optimise your risk management approach:

• email us: info@abmrisk.com.au
• Tweet us at @4RiskCme
• Visit our LinkedIn page https://www.linkedin.com/company/18394064/admin/

Thanks for listening to the show and please keep your guest suggestions coming!

In this episode, Brett and I discuss the Risk Management Gap Analysis - what it is, how you go about it, what are the key focus areas and why all organisations need to do it periodically.

The key takeaway is that this is not putting a specific risk under the microscope but actually reviewing the Risk Management Program itself and comparing how its performing compared to the ambitions you set for the program.

If you aren't achieving all you were hoping to out of your Risk Management Program, this is the episode for you!

As always, we welcome your feedback on the episode, the podcast generally or on broader risk topics that you'd like us to discuss in the program.

Thanks for listening - enjoy the episode!

Contact ABM Risk Partnership to optimise your risk management approach:

• email us: info@abmrisk.com.au
• Tweet us at @4RiskCme
• Visit our LinkedIn page https://www.linkedin.com/company/18394064/admin/

Thanks for listening to the show and please keep your guest suggestions coming!

This episode features a fascinating chat with Darren Gallop, CEO and co-founder of Carbide. The Carbide team believe that making security and privacy foundational to your business can accelerate your company’s growth trajectory.

Darren started his career as a professional musician touring with his band(s) throughout Canada. That experience fueled an interest in the music’s business side, leading him to found his own record label, and eventually Marcato, a successful startup whose innovative technology platform was used to manage music and cultural events around the world prior to its acquisition. 

While at Marcato, Darren developed a deep interest in security and privacy, prompting him to secure his Certified Information Systems Security Professional (CISSP) designation and to serve as the company’s Chief Information Security Officer – a role he now holds at Carbide today. Darren has since also become a Certified Information Privacy Manager (CIPM). 

This combination of creativity, business acumen, genuine interest in security and privacy, and entrepreneurial spirit underpins Carbide’s culture of innovation.

You'll hear Darren's passion for helping organisations manage this ever-increasing, and complex risk. And even better, Darren has a great promotional offer for listeners of the podcast. Have a listen for details on how you can get first class privacy and security and also a discounted price!

Also visit the Caride website: www.carbidesecure.com to learn more.

Enjoy the episode! 

Contact ABM Risk Partnership to optimise your risk management approach:

• email us: info@abmrisk.com.au
• Tweet us at @4RiskCme
• Visit our LinkedIn page https://www.linkedin.com/company/18394064/admin/

Thanks for listening to the show and please keep your guest suggestions coming!

All the cybersecurity challenges getting you down? Struggling to understand the threat much less what you can do about it?

In this podcast with Patrick and Duane, you'll hear about cybersecurity with a refreshing use of plain-English and a dash of humour thrown in!

That's not to say these guys don't take cybersecurity seriously - they are at the front line everyday helping firms better defend their data and digital assets and increasing the organisational resilience.

And even better, if you want to know more, the guys host the Security This Week podcast where you can keep up to date on topical cybersecurity issues.
Get in touch with Patrick or Duane via the Pulsar Security website here.

Enjoy this discussion!

Contact ABM Risk Partnership to optimise your risk management approach:

• email us: info@abmrisk.com.au
• Tweet us at @4RiskCme
• Visit our LinkedIn page https://www.linkedin.com/company/18394064/admin/

Thanks for listening to the show and please keep your guest suggestions coming!

This episode of the Mastering Risk Management Podcast Chats addresses a common misunderstanding we see when talking to organisations that have reached the stage of making a decision as a result of their risk analysis / evaluation.

Do we accept the risk, treat the risk, transfer the risk or not proceed with the activity that could see the risk eventuate (i.e. reject the risk)?

One of the issues we commonly see if the misconception that for risk management to be deemed successful, every risk has to be reduced to the lowest possible level. This is not only not true, but it is also not feasible.

Have a listen to this episode to discover why and what you need to take into account when making the decision to treat a risk (or not).

Contact ABM Risk Partnership to optimise your risk management approach:

• email us: info@abmrisk.com.au
• Tweet us at @4RiskCme
• Visit our LinkedIn page https://www.linkedin.com/company/18394064/admin/

Thanks for listening to the show and please keep your guest suggestions coming!

In this episode, Anthony and Brett discuss how to manage risk in projects - be they big or small!

Regardless of size, projects or programs have some very similar 'core' risks - making them ideal for using historical project performance to inform the risk identification process of the new project.

We discuss the key elements organisations need to consider when managing project risk, whether the organisation is a frequent executor or projects or whether they only arise periodically.

We hope this episode helps refine your project risk management outcomes!

Contact ABM Risk Partnership to optimise your risk management approach:

• email us: info@abmrisk.com.au
• Tweet us at @4RiskCme
• Visit our LinkedIn page https://www.linkedin.com/company/18394064/admin/

Thanks for listening to the show and please keep your guest suggestions coming!

This would have to be one of the most fascinating conversations to date in the Mastering Risk Management podcast!

Alan usually gives interviews to the likes of CNN, the BBC and Al Jazeera so to get him on the podcast is a real win for our listeners. And the conversation is well worth the listen.

Alan takes us on a journey of what Artificial Intelligence is, how it's being deployed and why we all need to get involved.  AI is a defining moment in our history and to not be a part of it risks being left behind. 

I ask Alan a question in the chat which I think would be on many people's minds - how do I get started with AI? His response was so simple and to the point - he said 'who trained you on Facebook or LinkedIn? Just get in and have a go!'

I'd strongly encourage you to invest in your future and take the time to listen to this episode - I am sure you will not regret it!

Your thoughts and feedback are always welcome. Enjoy!

Contact ABM Risk Partnership to optimise your risk management approach:

• email us: info@abmrisk.com.au
• Tweet us at @4RiskCme
• Visit our LinkedIn page https://www.linkedin.com/company/18394064/admin/

Thanks for listening to the show and please keep your guest suggestions coming!

In this episode of the podcast chats, Anthony and Brett discuss the link between a risk management and insurance. 

Whilst having a robust risk management program is about more than just saving money (achieving the business objectives anyone?), when it comes to securing the right insurance at the best value, it adds significant value.

Listen to the episode to hear how!

As always, we appreciate your feedback and suggestions for guests to interview or subjects to discuss in the podcast chats. 

Contact ABM Risk Partnership to optimise your risk management approach:

• email us: info@abmrisk.com.au
• Tweet us at @4RiskCme
• Visit our LinkedIn page https://www.linkedin.com/company/18394064/admin/

Thanks for listening to the show and please keep your guest suggestions coming!

This episode is another must listen for those wanting to ensure they are putting in place the right controls to secure both business and personal data. My guest is Garret Grajek, President and CEO of YouAttest, a cloud-based access review engine that provides identity and security compliance for all resources. 

We discuss how failing to manage systems access is one of the fundamental mistakes organisations can make yet is one of the easiest to fix.

Garret challenges us to reflect on our organisations Identity Governance by asking ourselves the following questions:

1. Who has access to our systems?
2. Do they have the right level of access?
3. Can you certify / attest that this access information is current and accurate?

If you can't answer these questions, or you are unsure about any of them, have a listen to this episode - you'll get some great insight in how to manage this fundamental cybersecurity requirement.

As always, enjoy the episode!

Contact ABM Risk Partnership to optimise your risk management approach:

• email us: info@abmrisk.com.au
• Tweet us at @4RiskCme
• Visit our LinkedIn page https://www.linkedin.com/company/18394064/admin/

Thanks for listening to the show and please keep your guest suggestions coming!

In today's chat, Brett and I discuss the importance of controls in risk management - and specifically, critical controls.

These are the controls that if missing or ineffective, will almost certainly lead to the risk eventuating, or if a mitigating control, the consequences being worse than they needed to be.

Key to having a great control environment is providing assurance that the controls are in place and effective - for some critical controls, such as the Business Resilience arrangements for the organisation,  this is best tested using facilitated exercises / scenarios.

Enjoy this episode and don't forget to keep submitting your ideas for future podcast chats, or guest interviews via the ABM Risk Partnership website.
 

Contact ABM Risk Partnership to optimise your risk management approach:

• email us: info@abmrisk.com.au
• Tweet us at @4RiskCme
• Visit our LinkedIn page https://www.linkedin.com/company/18394064/admin/

Thanks for listening to the show and please keep your guest suggestions coming!

We hear about it happening all the time. An organisation that seems to have a robust approach to protecting its systems and data is compromised by cyber criminals using a third-party vendor as the attack vector.

My guest on this episode is Paul Valente, CEO and co-founder of VISO Trust, an AI powered third party risk platform that aids IT Security teams access risk intelligence on an organisations third party vendors.

Paul is well qualified to speak on the subject - he holds multiple industry designations including Certified Information Systems Security Professional (CISSP), Certified Information Systems Manager (CISM) and ISO27001 Lead Implementer.

He also has over 20 years of experience in technology, financial services, e-commerce and information security innovation. What's particularly great is that Paul speaks plain English when discussing information security! 

I'm sure you'll find this episode extremely valuable, whether you're in the IT space or as a risk professional wanting to know more about protecting your business.

You can contact Paul at paul@visotrust.com or alternatively, visit the Viso Trust website at www.visotrust.com - they can even organise a demo!

Enjoy the episode!
 

Contact ABM Risk Partnership to optimise your risk management approach:

• email us: info@abmrisk.com.au
• Tweet us at @4RiskCme
• Visit our LinkedIn page https://www.linkedin.com/company/18394064/admin/

Thanks for listening to the show and please keep your guest suggestions coming!

In this chat, Brett and Anthony discuss the sometimes-confusing topic of Risk Management Frameworks. They have seen organisations where the RMF is a single document of hundreds of pages - so big in fact that it is practically useless to employees looking for guidance.

The ABM Risk approach to RMF's is different - pragmatic, practical and importantly, bespoke to the needs of the organisation.

You also hear, if you didn't already know, that paper and PDF based RMF's are history.

Enjoy the chat!

Contact ABM Risk Partnership to optimise your risk management approach:

• email us: info@abmrisk.com.au
• Tweet us at @4RiskCme
• Visit our LinkedIn page https://www.linkedin.com/company/18394064/admin/

Thanks for listening to the show and please keep your guest suggestions coming!

There has been a lot of talk lately on the best approach to mitigating the risk of cyber-attack - including on this podcast. My guest in this episode has a very different take on how best to defend an organisation from this incessant risk.

Having recently published his first monograph, Dr Patrick Scolyer-Gray’s career has been devoted primarily to the design, development and implementation of Human-Centric Cybersecurity (HCCS), a methodological framework that extends and improves upon the conventional techno-centric ‘layered’ approach to cybersecurity.

In his current role, Patrick leads the Human-Centric Cybersecurity (HCCS) consulting practice at the Expert Management Agency (EMA) 460degrees. Throughout his career, Patrick has maintained that the key to achieving a stronger security posture lies not in technology, but instead in social and cognitive elements, such as culture, decision-making and behaviour.

This is a fascinating discussion and a must listen for those that want to understand another critical element to cyber defense.

Patrick's Contact details:

LI: linkedin.com/in/dr-patrick-scolyer-gray

E: patrick.scolyer-gray@460degrees.com

W: https://www.460degrees.com/expert/dr-patrick-scolyer-gray/

Offers:

Human-Centric Cybersecurity (HCCS): A Framework: https://lnkd.in/g3UnJgu9 (this is a whitepaper with the full HCCS methodology)

Artistic Works of Fiction and Falsehood: An Analysis of the Production and Consumption of Knowledge on 4chan: https://www.amazon.com.au/dp/B0BF9MDSV4 (Kindle version. Also available as a paperback and a hardback edition).

Contact ABM Risk Partnership to optimise your risk management approach:

• email us: info@abmrisk.com.au
• Tweet us at @4RiskCme
• Visit our LinkedIn page https://www.linkedin.com/company/18394064/admin/

Thanks for listening to the show and please keep your guest suggestions coming!

This discussion will be of interest to all leaders, not just those in risk management. As recent events around the world have shown, the spectre of cyber security incidents haunts almost every organisation and manifests itself in way too many others.

My guest for this chat is Nigel Phair - technologist, advisor, academic and company director. Nigel's deep expertise in cyber security has seen him in high demand by boards and executives looking to take decisive action to protect themselves from attack.

Nigel is also a regular presence in the media, helping people understand how they can take steps to protect themselves and their data from these attacks. He is the author of three books on the international impact of cybercrime - well informed by his over 20 years of service in the Australian Federal Police rising to the rank of Detective Superintendent in the Australian High Tech Crime Centre.

This is a must listen episode for individuals and organisations wishing to shore up their defenses against this ever-present threat.

Enjoy the episode!

Contact ABM Risk Partnership to optimise your risk management approach:

• email us: info@abmrisk.com.au
• Tweet us at @4RiskCme
• Visit our LinkedIn page https://www.linkedin.com/company/18394064/admin/

Thanks for listening to the show and please keep your guest suggestions coming!