Risk management is different than other forms of management. Most new risk management practices are developed in response to deficiencies identified after an event. The practice is known as root cause analysis. Learning from mistakes is a good thing, of course, but the practice of risk management is too important to have to wait for mistakes before making improvements; that’s whack-a-mole.
Other management disciplines don’t wait for things to go wrong before improvements are investigated and tested. Rather, management means identifying which practices are most effective, constantly developing and improving those, and testing new ones.
BOKRIM measures sexual abuse and misconduct (SAM) risk and its management to enable its constant improvement.
Measuring risk and its management is a BOKRIM core principle.
