Fundamentals of Risk Management

316

---

Risk training and communication
317
The need for a consistent response to risk is vitally important in a crisis. When a 
disaster recovery plan has been produced by an organization, training for directors, 
managers and staff is essential. Also, the requirements of the business continuity
plan will need to be communicated to all persons who may be affected if the plan
is implemented. Again, the importance of training in order to ensure a consistent 
response to adverse circumstances is essential.
Risk training and risk culture
As set out in Table 24.3, the risk culture of the organization can be defined by leader-
ship, involvement, learning, accountability and communication (LILAC). The LILAC 
headings also provide an indication of the components of a successful initiative to 
embed risk management in the organization. The involvement, learning, account-
ability and communication components of a risk-aware culture are all highly relevant 
to risk training and risk communication.
Appropriate risk management documentation will provide managers and staff 
with information on the involvement that is required and the level of accountability 
that the organization expects. A good level of learning and communication can be 
established by adequate risk training and this will enhance the risk-aware culture of 
the organization.
Consider the example of a publisher facing libel and slander risks. The company 
should prepare risk guidelines, protocols and procedures including reference to 
awareness training for all staff. Comprehensive procedures for managing libel and 
slander risks should reflect the level of risk exposure. The level of attention paid to 
such risks will depend on each magazine title and the following framework may be 
appropriate:
●
●
all journalists to be given basic libel and slander training;
●
●
specific review procedures introduced for political titles;
●
●
legal evaluation of every issue of a satirical magazine.
Training needs to be provided for staff in the revised procedures, and information 
should be included on the company intranet site. Managers and staff need to be
encouraged to comment on the new procedures, so that they may be improved further 
as part of the learning culture within the company.
Risk training is a key part of learning and communication and it is essential for
manager, staff and other stakeholder engagement. It should cover a wide range of 
topics and achieve a greater understanding of all the risk-related issues, as well as 
providing information on the control measures that are in place and the vital role 
played by staff in the successful implementation of these controls. Risk management 
training is required on a continuing basis, but Table 26.1 provides some examples of 
when risk management training might be particularly relevant and/or necessary.

---