Risk Insider: Elizabeth Carmichael

Putting Your Organizational Values Where Your Risks Are

By: | July 8, 2016 • 3 min read
Elizabeth Carmichael is president of Carmichael Associates LLC. She formerly was director of compliance and risk management for Five Colleges Inc. She can be reached at [email protected]

I think that many risk managers (myself included) struggle with guiding their organizations to choose what risks to prioritize for management.

Even when we work for an organization that has a highly functional ERM process, and senior leaders are actively engaged in the identification, management and mitigation of risks, can and/or should compliance and risk officers be leaders in helping them set their priorities?

If the answer to that question is “yes,” how can we be better leaders? We can do it by identifying and aligning risk management as a cornerstone of institutional values.

One of the things that has always bothered me about “reputational risk” is that it measures how the outside world will view the institution (by measuring lost revenue, increased costs, or reduced shareholder value) if it fails to address a particular issue.

This has become a shorthand of sorts for measuring the ethical aspects of failure to address some kinds of risks. The problem is, it doesn’t address the actual values of the organization. Reports have been published on the atmosphere at Penn State where alumni and other donations actually increased in support of the university after the news of the Sandusky sex scandal broke.

Other schools, like Dartmouth University, may have seen a drop in applications from women because of sexual assaults and harassment, but given the strength of the school, it probably hasn’t impacted the bottom line. The outcomes of bad press are impossible to predict.

Advertisement




There is no discussion, no scoring, in the enterprise risk management process of “How antithetical to our institution and our values would it be if something happened because we failed to address this risk?”

Or, “What are our institutional values and how does this risk conflict with our values?”

We should ask ourselves how risks might be scored if these questions replaced, “What is the reputational risk?”

Assuming — and admittedly it may be a big assumption — that organizations want to align their operations with their stated and implied values, the ERM process can and should be used to support this objective.

Even when we work for an organization that has a highly functional ERM process, and senior leaders are actively engaged in the identification, management and mitigation of risks, can and/or should compliance and risk officers be leaders in helping them set their priorities?

Now, if your company’s sole value and objective is to sell products more cheaply than any other company, ethics and values will not be likely to have any traction with company leadership on risk matters.

But if your company or organization has a mission, vision and/or values statement, you will have a place to start.

Reputation, on its most basic level, is a measure of trust — how well does the organization deliver the products and services, the values, which it promises?

This applies to both the organization’s customers and employees.

Do employees know what the organization’s values are? Are policies, procedures and risk mitigation efforts aligned with its values?

Compliance officers and risk managers may find that, when faced with opposition on a risk mitigation effort or prioritization, that helping mangers understand how the mitigation helps the organization’s actions align with its values will break down the resistance.

I’ve seen it work; try it!

More from Risk & Insurance

More from Risk & Insurance

Risk Management

The Profession

Verizon’s risk manager David Cammarata loves when his team can make a real impact on the bottom line.
By: | May 2, 2017 • 4 min read

R&I: What was your first job?

I was a financial analyst with the N.J. Casino Control Commission.

R&I: How did you come to work in risk management?

I was told at a Christmas luncheon in 2003 that I was being promoted into a new job.

R&I: What is the risk management community doing right?

Advertisement




I think the risk management community is getting a lot better at utilizing big data and analytics to manage risk. Significant improvements have been made, but there is still much more room for improvement.

R&I: What could the risk management community be doing a better job of?

I think that the insurance and brokerage communities need to really start thinking about what this industry is going to look like in 10 years. They need to start addressing how they are going to remain relevant. I think that major disruptions to existing business models will occur and that these disruptions combined with innovation and technological advances may catch many of today’s industry leaders by surprise.

David Cammarata, assistant treasurer, risk management and insurance, Verizon Communications Inc.

R&I: What was the best location and year for the RIMS conference and why?

San Diego, any year.

R&I: What’s been the biggest change in the risk management and insurance industry since you’ve been in it?

I think the advent of cyber risk and cyber insurance. For several years it has been, and it continues to be, the main topic of discussion at industry meetings.

R&I: What emerging commercial risk most concerns you?

Advertisement




Advertisement




I think the most scary scenarios include a nuclear, biological, chemical or radiological event, a widespread global health epidemic and/or a widespread state sponsored cyber shutdown.

R&I: How much business do you do direct versus going through a broker?

We do almost all of our business through a broker.

R&I: Is the contingent commission controversy overblown?

No. It’s a conflict.

R&I: Are you optimistic about the U.S. economy or pessimistic and why?

Optimistic because hopefully President Trump’s policies (lower taxes and less regulation) will be pro-business and good for the economy.

R&I: Who is your mentor and why?

My dad, who passed away many years ago. He was very influential during the formative years of my career. He taught me how important integrity and reputation were to your brand and he had a very strong work ethic.

R&I: What have you accomplished that you are proudest of?

I would have to say raising two awesome kids. My daughter is graduating from James Madison University this year as co-valedictorian. My son is finishing his sophomore year at Rutgers and has near perfect grades. But more importantly, both of my kids have turned out to be really good people.

R&I: How many emails do you get in a day?

A lot.

“I love it when the risk management organization is able to contribute in a way that makes a real impact to the corporation’s overall objectives. On several occasions we have been able to make real contributions to the bottom line.”

R&I: What is your favorite book or movie?

“My Cousin Vinny.” That movie makes me laugh no matter how many times I watch it.

R&I: What’s the best restaurant you’ve ever eaten at?

Advertisement




Advertisement




My dad used to take me to a place called Chick & Nello’s. It was an Italian place that did not have a menu. They came to your table and told you the two or three items they were making that day. The food was out of this world.

R&I: What is your favorite drink?

Iced tea. The non-alcoholic kind.

R&I: What is the most unusual/interesting place you have ever visited?

I can think of several places but for me it would be a tie between India and Italy. India just has such a different culture and way of life and Rome has breathtaking historical sites.

R&I: What is the riskiest activity you ever engaged in?

Well, one of the best thrill rides I’ve been on was Kingda Ka at Great Adventure. It feels risky but probably isn’t all that risky. I flew in a prop plane with my brother-in-law one time … that felt kind of risky. I have also parasailed, does that count? I think it definitely has to be driving on the N.J. Turnpike day in and day out.

R&I: If the world has a modern hero, who is it and why?

Advertisement




What about the Fukushima 50? I don’t think I could have done what they did.

R&I: What about this work do you find the most fulfilling or rewarding?

I love it when the risk management organization is able to contribute in a way that makes a real impact to the corporation’s overall objectives. On several occasions we have been able to make real contributions to the bottom line.

R&I: What do your friends and family think you do?

I don’t think they really know. My children see me as dad; others just see me as an executive with Verizon.




Katie Siegel is a staff writer at Risk & Insurance®. She can be reached at [email protected]