CHAPTER 6

The Problem of Quantification

If I ask you what level of fraud could occur in your business, how would you answer? What value would you give me? Have you ever had to deal with a fraud? If you have, is that the value that you would provide? But this is just one occurrence. How would you know what the value of another fraud might be? How could you know how often frauds might take place? You only have a sample of one.

Where risk management often makes a mistake is in asking people questions that they cannot realistically be expected to be able to answer. They have little or no information, limited experience and inadequate training. Of course, all the staff will need to receive some training in risk management. That is a given. However, ...

Get Enterprise Risk Management in a Nutshell now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.