The ALS Group Risk Management Articles

We manage more than a quarter billion dollars of premiums for a diverse range of clients around the globe. 

Data Breach – A Complicated Issue Where No Two Attacks Are The Same

When looking at a company’s risk, one of the most overlooked aspects is how it manages its informational security. In their most recent Data Breach Investigations Report, Verizon was able to classify 92% of the millions of breaches over the past few years into nine basic patterns. It would be a reasonable assumption that these nine patterns of attack would be the same across the business landscape. Unfortunately this is not the case as the sophistication of the attacks change depending on a company’s industry. As an example representing both the Financial and the Energy/Utilities Sectors, the highest type of breach was web app attacks. This occurred as the retail

Read More »

How to have a successful ERM process

A few weeks ago I attended the Enterprise Risk Management (ERM) Roundtable Summit held by NC State University. Although there were many speakers from a number of different industries, the same theme resonated throughout the day. The theme was, in order for any organization to have a successful ERM process it must foster thoughtful discussions between those who are tasked with ERM. As we have mentioned previously, it is easy for ERM to become just another “compliance check-box.” However, encouraging a challenging dialogue among team members can certainly help your organization move past the “check-box” mentality.

Read More »

Taking ERM to the Next Level

One of the most effective ways to implement a company-wide Enterprise Risk Management (ERM) Program is to make it interactive and involve participants from all levels of the organization. This will create a sense of teamwork and foster an environment of understanding. Risks are inherent at all levels of an organization, hence the need for interaction and input from various team members throughout the business.

Read More »

What is Total Cost of Risk?

What is Total Cost of Risk and why should I care? “What gets measured…gets managed!” This statement is the fundamental principle behind the concept of “Total Cost of Risk” (TCoR), and I’ve been saying this for years. The question that I am asked all the time is, “what is total cost of risk (TCoR) and why do I care about it?”

Read More »

Don’t Lose It Over a Data Breach

Many of the cyber risks discussed today revolve around outside intrusions such as data breaches, viruses, or reputational risks brought on by improper social media use. Another significant risk that must be considered is a major data loss event, whether caused by a technical malfunction or a non-technical property loss such as fire or water damage. While you cannot guarantee a data loss will not happen, there are ways to indemnify and protect yourself if you experience such a data loss.

Read More »

Enterprise Risk Management – Keep it Simple

Last week, I attended the Enterprise Risk Management (ERM) Workshop in North Carolina, held by North Carolina State University (NCSU). This was the second such meeting that was hosted by NCSU. While many topics were discussed, the recurring theme resonating through the workshop was how can a company effectively report an ERM program to the board and explain how such program adds value.

Read More »

ERM: Where do we start?

With the multitude of information available, it is no surprise that the process of implementing an ERM Program seems daunting. As highlighted in our prior blog, Strategic Risks: More Important Now Than Ever, one of the very first steps in this process is to form an Executive Risk Committee (ERC).

Read More »

Strategic Risks: More Important Now than Ever

Strategic Risks are risks that affect or are created by an organization’s business strategy and strategic objectives. For companies that are committed to thoughtfully managing risk, strategic risk is not a new concept. However, with social media and the speed in which everything happens these days, strategic risks are becoming a high priority for senior leaders. In a recent study released by Deloitte, 81% of companies surveyed now explicitly manage strategic risks, rather than simply focusing on more traditional risk areas, such as operational, compliance and financial risks.

Read More »

HACKED

With the continued news reports of  data breaches of high profile businesses, most recently Target, Adobe, Lexis Nexis, and Apple, I thought I would provide you a few thoughts to add to your risk management “New Year’s resolutions” (I know you have them…). Since most of you know I travel quite frequently, both domestically and internationally, I use the wait time at airports, hotels, etc. to work.  I thought the article in the last issue of Executive Travel magazine is a good reminder to all of us on electronic “travel security” and how not to be duped by the growing sophistication of the hackers who prey on the weary business

Read More »
Logo of als all heals group featuring a blue palette with a stylized "a" and a starburst design.

Subscribe to our Articles

Newsletter Form