'R' is for Risk: Spotting the Potholes

The Eyes on the Road

Welcome to the driver's seat! If Governance is our steering wheel and Compliance is the law, then Risk Management is our brakes and our ability to spot potholes before we hit them. It’s not about being afraid of the road; it’s about being prepared for what’s on it.

Calculating the Risk

In business, risk isn't just a 'bad feeling.' It's a calculation. We look at Probability—how likely is the event—and Impact—how much damage it causes. Think of rain: a 10% chance of drizzle is low risk, but a 90% chance of a thunderstorm is a major pothole.

The Risk Matrix

Let's practice. Drag these scenarios onto the grid based on how risky they are. Where would you place 'A meteor hitting the office' versus 'A common software bug'? Exactly. You've identified that high impact but low probability events are handled differently than frequent, minor issues.

Calculated vs. Reckless

There is a big difference between being a bold driver and a reckless one. A calculated risk is like driving 65 on a clear highway—you're moving fast, but you're in control. Recklessness is driving 100 in a school zone with no brakes. One is growth; the other is a crash waiting to happen.

Recap: The Nature of Risk

Before we move to planning, let's lock in the basics. Risk is inevitable if you want to reach your destination. The goal isn't to stay in the garage; it's to ensure your brakes work before you leave.

The 'What If?' Framework

How do you actually spot potholes? Use the 'What If?' framework. First, Identify every potential problem. Second, Assess them using our Probability and Impact tools. Finally, Plan your response—these are your brakes.

Planning Your Response

When you find a risk, you have three main moves. You can Avoid it entirely, like moving an outdoor concert indoors. You can Reduce it, like buying waterproof covers for gear. Or you can Accept it, if the risk is tiny and the cost of fixing it is too high.

Common Pitfalls

Even smart people fall into traps. The most dangerous is the 'It won't happen to me' bias. Don't assume you're the exception. But also, don't get stuck in 'Paralysis by Analysis'— you can't plan for a meteor hitting the stage. Focus on the likely potholes.

Recap: Managing the Potholes

You're almost ready to plan your own event. Remember: Risk management is about acting *before* the rain starts. A risk is a cloud; a problem is a downpour.

Scenario: The Concert Planner

Meet Alex, your business partner. Alex wants to spend the entire budget on a famous DJ and ignore the 40% chance of rain. Talk to Alex and find a way to manage the risk without ruining the party.