1
00:00:00,210 --> 00:00:01,043
In this lesson,

2
00:00:01,043 --> 00:00:04,320
we will cover risk monitoring and reporting.

3
00:00:04,320 --> 00:00:06,720
Among the various components of risk management,

4
00:00:06,720 --> 00:00:09,390
risk monitoring and reporting play a crucial role.

5
00:00:09,390 --> 00:00:11,430
The final step of risk management process

6
00:00:11,430 --> 00:00:13,890
is risk monitoring and risk reporting.

7
00:00:13,890 --> 00:00:15,570
So what is risk monitoring?

8
00:00:15,570 --> 00:00:17,370
Risk monitoring is the process of tracking

9
00:00:17,370 --> 00:00:20,280
and identifying risks, monitoring residual risks,

10
00:00:20,280 --> 00:00:23,970
identifying new risks, executing risk response plans

11
00:00:23,970 --> 00:00:25,530
and evaluating their effectiveness

12
00:00:25,530 --> 00:00:27,270
throughout the project lifecycle.

13
00:00:27,270 --> 00:00:29,940
It involves regular tracking and reviewing of risk

14
00:00:29,940 --> 00:00:32,580
and the effectiveness of risk response actions.

15
00:00:32,580 --> 00:00:34,650
For example, a software developments company

16
00:00:34,650 --> 00:00:37,620
might monitor risk related to a project deadline,

17
00:00:37,620 --> 00:00:40,350
software bugs, or changes in market demand.

18
00:00:40,350 --> 00:00:42,450
The company might use project management software

19
00:00:42,450 --> 00:00:45,090
to track these risks, regularly reviewing the software

20
00:00:45,090 --> 00:00:47,910
to identify any changes in the risk landscape.

21
00:00:47,910 --> 00:00:50,070
Ongoing risk monitoring can also help us

22
00:00:50,070 --> 00:00:52,920
determine residual risk and control risk.

23
00:00:52,920 --> 00:00:54,930
A residual risk is the likelihood

24
00:00:54,930 --> 00:00:58,260
and impact after specific mitigation, transference,

25
00:00:58,260 --> 00:01:00,450
or acceptance measures have been applied

26
00:01:00,450 --> 00:01:01,873
to the inherent risk.

27
00:01:01,873 --> 00:01:03,660
A control risk, on the other hand,

28
00:01:03,660 --> 00:01:05,940
it's a measure of how much less effective

29
00:01:05,940 --> 00:01:09,000
a security control has become over time.

30
00:01:09,000 --> 00:01:11,220
For instance, consider antivirus software

31
00:01:11,220 --> 00:01:13,350
that was initially very good at finding malware

32
00:01:13,350 --> 00:01:16,088
using specific identifiers known as signatures.

33
00:01:16,088 --> 00:01:18,660
However, as hackers begin to hide their code,

34
00:01:18,660 --> 00:01:21,450
the antivirus became less successful over time.

35
00:01:21,450 --> 00:01:23,670
Next, let's discuss risk reporting.

36
00:01:23,670 --> 00:01:26,700
Risk reporting is the process of communicating information

37
00:01:26,700 --> 00:01:28,200
about risk management activities,

38
00:01:28,200 --> 00:01:30,780
including the results of risk identification,

39
00:01:30,780 --> 00:01:33,030
assessment, response, and monitoring

40
00:01:33,030 --> 00:01:35,310
to the stakeholders of the project or business.

41
00:01:35,310 --> 00:01:36,960
This information is often presented

42
00:01:36,960 --> 00:01:39,450
in the form of a risk report.

43
00:01:39,450 --> 00:01:41,490
For instance, a construction company might produce

44
00:01:41,490 --> 00:01:43,650
a monthly risk report that includes information

45
00:01:43,650 --> 00:01:45,390
about potential safety hazards,

46
00:01:45,390 --> 00:01:47,280
the likelihood of project delays,

47
00:01:47,280 --> 00:01:50,220
and the potential financial impact of these risks.

48
00:01:50,220 --> 00:01:52,830
This report would be shared with project managers,

49
00:01:52,830 --> 00:01:55,470
company executives, and potentially the client

50
00:01:55,470 --> 00:01:57,630
to keep them informed about the risk landscape

51
00:01:57,630 --> 00:02:00,840
and the actions being taken to manage these risks.

52
00:02:00,840 --> 00:02:03,210
Risk monitoring and reporting are essential

53
00:02:03,210 --> 00:02:06,360
for several reasons, including informed decision making,

54
00:02:06,360 --> 00:02:09,090
risk mitigation, stakeholder communication,

55
00:02:09,090 --> 00:02:11,070
and regulatory compliance.

56
00:02:11,070 --> 00:02:13,560
First, we have informed decision making.

57
00:02:13,560 --> 00:02:15,930
Regular risk monitoring and reporting

58
00:02:15,930 --> 00:02:18,360
provide valuable information that can be used

59
00:02:18,360 --> 00:02:21,090
to make informed decisions about resource allocation,

60
00:02:21,090 --> 00:02:23,730
project timelines, and strategic direction.

61
00:02:23,730 --> 00:02:25,680
Second, we have risk mitigation.

62
00:02:25,680 --> 00:02:27,750
By continuously monitoring risk,

63
00:02:27,750 --> 00:02:31,200
businesses can identify when a risk is becoming more likely

64
00:02:31,200 --> 00:02:33,780
or when potential impact is increasing.

65
00:02:33,780 --> 00:02:36,420
This allows them to take action to mitigate the risk

66
00:02:36,420 --> 00:02:38,520
before it becomes a problem.

67
00:02:38,520 --> 00:02:41,430
Third, we have the stakeholder communication piece.

68
00:02:41,430 --> 00:02:43,290
Risk reporting is a critical tool

69
00:02:43,290 --> 00:02:45,240
for communicating with stakeholders.

70
00:02:45,240 --> 00:02:47,040
It helps to manage expectations

71
00:02:47,040 --> 00:02:50,460
and to demonstrate that risk are being effectively managed.

72
00:02:50,460 --> 00:02:52,770
Fourth, we have regulatory compliance.

73
00:02:52,770 --> 00:02:53,970
In many industries,

74
00:02:53,970 --> 00:02:56,280
risk reporting is a regulatory requirement.

75
00:02:56,280 --> 00:02:58,650
Regular risk reports help to demonstrate compliance

76
00:02:58,650 --> 00:02:59,820
with these regulations.

77
00:02:59,820 --> 00:03:03,570
So remember, risk monitoring is an ongoing process

78
00:03:03,570 --> 00:03:06,300
of tracking and reviewing identified risks,

79
00:03:06,300 --> 00:03:08,700
as well as the effectiveness of measures taken

80
00:03:08,700 --> 00:03:09,990
to mitigate them.

81
00:03:09,990 --> 00:03:12,090
It helps in detecting any changes

82
00:03:12,090 --> 00:03:13,800
in the risk landscape over time,

83
00:03:13,800 --> 00:03:15,270
while risk reporting refers

84
00:03:15,270 --> 00:03:16,740
to the communication of information

85
00:03:16,740 --> 00:03:19,620
about risk management activities to stakeholders.

86
00:03:19,620 --> 00:03:22,920
It typically involves presenting data on identified risks,

87
00:03:22,920 --> 00:03:24,060
their potential impact,

88
00:03:24,060 --> 00:03:26,430
and the action taken to manage them,

89
00:03:26,430 --> 00:03:28,500
often in the form of a risk report.

90
00:03:28,500 --> 00:03:30,120
Whether you're running a small business

91
00:03:30,120 --> 00:03:31,770
or managing a large project,

92
00:03:31,770 --> 00:03:34,890
effective risk monitoring and reporting should be a key part

93
00:03:34,890 --> 00:03:36,540
of your risk management strategy.