فصل: Chapter 1: Fundamentals
What is compliance and why does it matter?
Compliance is not a function that obstructs the business, nor a file you pull out when the regulator visits. It is the organisation working…
Treatment, controls and monitoring
We have identified the risk and measured it. The practical question remains: what do we do about it? There are four options and no…
Measurement: the impact and likelihood matrix
What is not measured is not ranked, and what is not ranked gets resources spread evenly across it until they are wasted. Here we…
Identifying risks and the risk register
A risk that has not been surfaced cannot be managed. This lesson is about the tools for surfacing risks, and about the document that…
The risk management cycle
Risk management is not an annual meeting nor a file prepared for the auditor. It is a repeating cycle with known steps, turning for…
Disclosure, transparency and performance evaluation
Governance that cannot be seen is not believed. Disclosure is the window through which the shareholder, the lender and the regulator take comfort, and…
Authority, delegation and policies
What damages organisations most is not bad intent but unclear authority: who approves? Up to what limit? And what happens if someone exceeds it?…
The board and its committees
The board is the beating heart of governance: appointed by the shareholders to set the direction and oversee execution, working through specialised committees that…
Stakeholders and their rights
An organisation does not belong to its owners alone. Around it is a whole circle of people affected by its decisions — and whoever…
Negotiation, contracts and supply terms
Anyone who negotiates on price alone leaves more on the table than they win. Price is one clause out of ten, and it is…