Zulhisham added that past incidents could be held up as examples to avoid, and mitigative measures could be based on these accordingly. There should be alignment of organisational objectives, strategy and risk culture, with risk management being involved from the outset with strategic development. But how can risk management actually gain traction, and how can people be encouraged to take it up or align it with strategy, without apprehension? Zulhisham advocated discussion, reiterating that it was not a burden although it could be onerous at times.
“It gets better over time,” he said. “Incorporate risk management tools that are relevant (in the discussion), and be objective-centric.” Nurul urged risk managers to be proactive about raising awareness of the matter. Working from home (WFH), she said, was allowing more time for awareness sessions for staff, and they were becoming more aware of being able to do things. But it was ultimately leaders with ethics who could effectively drive common goals and strengthen risk culture. “Ethical leadership is important,” she concluded.
31 The IERP® Monthly Newsletter December 2021