RIMS and LogicManager have published the first in-depth study on ERM practices—RIMS State of ERM Report 2008. The report substantiates the value of ERM for organizations of all types and indicates that companies that have greater risk management and ERM maturity levels enjoy higher credit ratings. In addition to key findings, RIMS State of ERM Report 2008 uniquely outlines priorities for best practice criteria that organizations may use to improve ERM competency.
Conducted from December 2006 to January 2008, corporate risk practitioners from 564 organizations assessed their risk management strategy with RIMS Risk Maturity Model for ERM© (RMM).
Report Key Findings include:
- Organizations that have embraced ERM have realized a concrete advantage in their risk management competency. The study found that 93% of organizations with formalized ERM programs in place make better risk-informed decisions—a recognized competitive advantage over those that do not have an ERM program.
- Organizations that report they have an ERM program in place still fall significantly short of achieving managed or better risk maturity. The study demonstrates that, based on the ERM guidelines presented in RIMS Risk Maturity Model for ERM, only 4% of these companies have achieved a managed or better level of risk management competency in all risk competencies. This suggests that organizations may have a false sense about all that is required for an effective risk management program.
- Data from the study verifies that formalized infrastructures in well-managed ERM programs embody the 68 best practice guidelines for efficient and effective risk management programs as presented in RIMS Risk Maturity Model for ERM.
- The study links ERM to better business performance. There is a distinct correlation between companies that score higher on RIMS Risk Maturity assessment and companies that possess higher credit ratings. The same is true of low scoring companies that, typically, possess lower credit ratings. Hence, better managed companies in terms of ERM practices benefit from better business performance.
"In order for organizations to capitalize on the strategic and tactical value creation enabled by ERM, management--from the board room to the front line--must play an active role in the risk management process," says Carol A. Fox, ARM, senior director of risk management at Convergys Corporation and chair of RIMS ERM Development Committee whose members, risk practitioners, contributed to the report. "This report identifies fundamental requirements for management to build and maintain a resilient and sustainable organization."
For organizations that want to further develop their current ERM program, or learn how to implement one, RIMS recommends that an important first step is to understand where they stand. RIMS Risk Maturity Model for ERM and the free online Risk Maturity Assessment allows companies to assess their current practices against validated risk competencies and develop an action plan to take your risk management program to the next level. RIMS State of ERM Report 2008 is available for free to risk practitioners who complete an online Risk Maturity Assessment at: http://www.RIMS.org/RMM. Others may purchase the report online.