Organization of risk management and treatment

This article concludes a series of four publications devoted to risk management. Let's face it, we began the series with the phrase "this article is the first in a series of three"! Too bad. Jérôme K. Jérôme's famous novel, Trois hommes dans un bateau, does indeed begin: "On a more serious note, we felt that it would be inappropriate not to address the issue of risk management and the organization required to ensure sustainable risk control in this series of articles. This is something we haven't done, or only partially, until now.

It's worth noting that EN NF ISO 31000, published in early 2010 and entitled "Principles and guidelines for risk management" - the standard we've used as a guideline throughout these lines - includes a chapter on the "organizational framework for risk management", and also identifies a "risk treatment" activity within its management process. For the sake of completeness (although we have no pretension of being exhaustive in these four articles, the subject is so vast!), these organizational and treatment themes had to be addressed.

As this new article is a continuation of the previous ones, we'd like to refer our readers to its predecessors, for more information on the themes raised but not developed here. However, as in any good series, let's take a look back at the previous episodes... In article [G 9 000] , we began by taking a closer look at the concept of risk – its components (hazard, target, threat...), its measurement, its inseparability from the notion of objective, its financial implications, etc. – and analyzed the requirements of ISO 31000. In our article [G 9 010] , we went on to stress the need to draw up a risk management reference framework, so that all those involved in an organization share a common, objective (if not objective) vision of the risks to be controlled. We then went on to explain how to assess – identify, analyze and evaluate – risks, in order to draw up an exhaustive, if possible, global map of all the risks to which an organization is exposed. Our article