Evaluation of organizational approaches to risk

Organizational or Enterprise Risk Management (ERM) is the formal and systematic effort to control uncertainty and variability to an organization's strategic objectives by managing risks at all organizational levels (enterprise, program, project, and activity). Enterprise risk management is an approach to address risks at all levels of the organization. It should not be limited to the application of risk management at the enterprise level. Since organizational success depends on achieving goals at all levels of the organization, enterprise risk management should also be applied at the program, project, and activity levels. Therefore, risk management can be utilized to address risks to not only achieving organizational strategic objectives but also to those related to core and other program level objectives (i.e. financial planning and integrity, transportation system performance, asset management, infrastructure safety and security, social and environmental justice, climate change, information technology security, acquisition, workforce capacity and modernization, program and project delivery, and innovations). This document provides an overview of organizational risk management in transportation organizations based mostly on the AASHTO Guide for Enterprise Risk Management (aka The AASHTO ERM Guide) published in 2016. The AASHTO ERM Guide is the result of an international scan, thorough literature review, and subsequent research to develop a document for use by transportation organizations. This report will also provide examples of organizational risk management from other organizations that can be helpful for agencies that are working to increase their organizational risk management maturity. Free registration may be required to download the report at https://www.piarc.org/en/order-library/30958-en-Evaluation%20of%20organizational%20approaches%20to%20risk.htm