Estimated Reading Time: 5 minutes
Executive Director
This week I’ve been reading Rick Nason and Leslie Fleming’s book, Essentials of Enterprise Risk Management. Nason and Fleming take the reader on an enjoyable and insightful tour of basic ERM concepts using a pull-no-punches style that is refreshing for a book on this topic. I especially like the sections of the book that led me to pause, re-read the passage and scribble notes and questions in the book’s margins.
One of those memorable pauses happened when I reached “Chapter 6 – Measuring Risk.” The authors write:
“The first reason for having a complete identification of risk is what we call the first law of risk management: the mere fact that you acknowledge that a risk exists automatically increases the probability and magnitude of it occurring if it is a good risk, or automatically decreases the probability and severity of it occurring if it is a bad risk. Basically by doing nothing more than identifying a risk you automatically improve outcomes.”
I found this narrative interesting for two specific reasons. First, I question the idea that any risk champion or team can achieve a “complete identification of risk.” Many nonprofit teams have certainly tried to do so, sometimes with lots of unintended negative consequences. In my experience, part of the reason risk management skills and identification of risk are becoming increasingly valued is that despite access to incalculable volumes of knowable information, events do not occur in the exact way we hoped or feared they would. It is impossible to identify or forecast all future risks.
The second thing that stopped me in my tracks (on the first page of Chapter 6) was a reminder to me of the tendency to be superstitious about risk. On more than a dozen occasions workshop attendees have asked me whether talking about a potential downside risk increases the likelihood that it will occur. I wrote about this tendency in a piece titled “Don’t be Superstitious about Risk.” Now Nason and Fleming have me rethinking my standard answer: “No, of course not!”
The authors’ reference to the “first law of risk management” reminds me of a memorable line from another book: Surviving and Thriving in Uncertainty: Creating the Risk Intelligent Enterprise by Frederick Funston and Stephen Wagner. In that book Funston and Wagner write, “the crisis that you prepare for may not be the one you experience, but that preparation will improve your resilience, come what may.” Or in the words of Dwight D. Eisenhower: “. . . I have always found that plans are useless, but planning is indispensable.”
To explain how merely identifying risk “automatically” improves outcomes, Nason and Fleming refer to something I’ve always called “The Red Car Syndrome.” The first car I purchased as a teen was a 1971 Fiat Spider convertible with an 850cc rear engine. My bold plan was to spend the winter months patching the rusted-out sections while my dad worked his magic on the engine block. Our collective labors paid off, although my dad still regrets lifting the engine out of the car and placing it on his workbench! We painted the car Vivid Red and with a few new panels securely attached with rivets and blemishes obscured with the contents of a small bucket of Bondo®, my first ride was roadworthy. As I admired the beautiful enamel finish, my dad explained that although Vivid Red wasn’t an especially popular color and the Fiat 850 Spider wasn’t a common car, now that I owned a Fiat 850 in Vivid Red I would start seeing a lot of other red cars and Fiats. And of course, he was right.
So what does the “The Red Car Syndrome” have to do with the benefit of identifying risk? Nason and Fleming write that after buying a car that you believe is unique or unusual, “it is still a fact that few people own that model of car, but what has changed is your level of awareness and your level of reaction to seeing people in that model of car. It’s is the same with risk: if we are aware of a risk then we are quicker to perceive it if it does become a factor and thus more likely to exploit it if it is a good risk, or mitigate it if it is a negative risk.”
Takeaways from this interesting passage in the book are:
“The Red Car Syndrome” goes by a number of names to describe similar phenomenon, aka: Baader-Meinhof Effect, Confirmation Bias, or consilience (a convergence of evidence). Some may call it serendipity. The important thing to remember is that acknowledgement of risk doesn’t increase or decrease the manifest odds of a risk; however, recognition does lead to discovery and identification, which will improve your foresight.
Melanie Herman is Executive Director of the Nonprofit Risk Management Center. She welcomes your stories about first rides and ah-ha moments in your risk management journey at Melanie@nonprofitrisk.org or 703.777.3504.
“First let me congratulate you on a conference well done. I had a great time at the Nonprofit Employee Benefits Conference and walked away with some valuable tools and questions that we’ll need to be addressing in both the short and long term. Thanks to you and your staff for all you do to provide us with quality resources in support of our missions.”
“BBYO’s engagement of the Center to conduct a risk assessment was one of the most valuable processes undertaken over the past five years. Numerous programmatic and procedural changes were recommended and have since been implemented. Additionally, dozens (literally) of insurance coverage gaps were identified that would never have been without the work of the Center. This assessment led to a broker bidding process that resulted in BBYO’s selection of a new broker that we have been extremely satisfied with. I unconditionally recommend the Center for their consultative services.
“Melanie Herman has provided expert, insightful, timely and well resourced information to our Executive Team and Board of Directors. Our corporation recently experienced massive growth through merger and the Board has been working to better integrate their expanded set of roles and responsibilities. Melanie presented at our Annual Board of Director’s Retreat and captured the interest of our Board members. As a result of her excellent presentation the Board has engaged in focused review which is having immediate effects on governance.”
“The Nonprofit Risk Management Center has been an outstanding partner for us. They are attentive to our needs, and work hard to successfully meet our requests for information. Being an Affiliate member gave us access to so many time- and money-saving resources that it easily paid for itself! Nonprofit Risk Management Center is truly a valued partner of The Community Foundation of Elkhart County and we are continuously able to optimize staff time with the support given by their team.”
“The board and staff of the Prince George’s Child Resource Center are extremely pleased with the results of the risk assessment conducted by the Nonprofit Risk Management Center. A thorough scan revealed that while we are a well run organization, we had risks that we never imagined. We are grateful to know that we have now minimized our organizational risks and we recommend the Center to other nonprofits.”
Great American Insurance Group’s Specialty Human Services is committed to protecting those who improve your communities. The Center team has committed to delivering dynamic risk management solutions tailored to nonprofit organizations. These organizations have many and varied risk issues, hence the need for specialized coverage and expert knowledge for their protection. We’ve had Melanie speak on several occasions to employees and our agents. She is always on point and delivers such great value. Thank you for the terrific partnership and allowing our nonprofits to focus on their mission!