<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Four Pillars: On the use of social software in risk management</title>
	<atom:link href="http://confusedofcalcutta.com/2006/07/01/four-pillars-on-the-use-of-social-software-in-risk-management/feed/" rel="self" type="application/rss+xml" />
	<link>http://confusedofcalcutta.com/2006/07/01/four-pillars-on-the-use-of-social-software-in-risk-management/</link>
	<description>a blog about information</description>
	<lastBuildDate>Wed, 10 Mar 2010 20:38:42 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: BK</title>
		<link>http://confusedofcalcutta.com/2006/07/01/four-pillars-on-the-use-of-social-software-in-risk-management/comment-page-1/#comment-172306</link>
		<dc:creator>BK</dc:creator>
		<pubDate>Thu, 09 Aug 2007 20:56:23 +0000</pubDate>
		<guid isPermaLink="false">http://confusedofcalcutta.com/2006/07/01/four-pillars-on-the-use-of-social-software-in-risk-management/#comment-172306</guid>
		<description>So much is written about risk without a useful definition being proposed and the ensuing conversation intensely CONFUSING. I hear people talk of risk in positive and negative terms. It is clear to me that a specific capability is a mitigation to a specific threat and with a specific attitude can become  an opportunity, but only when compared with a competing capability. To me the essence here is in perspective and recognition of risk. Management of risk becomes about attitudes and the building of knowledge resources to increase capability. Like Chaos theory the trick to understanding risk is not in isolated analysis but in the recognition of its patterns and always taking a lateral approach to understanding it from a stakeholder and an external perspective.

If we are to understand risk, impacts, etc and how to manage it, the imperative is to be aware of consequences and recognise that there will always be unknown consequences because we stop looking for them and cannot know them all. Consequences do not stop they change or we ignore them.  Risks are the unknown. Although we should not stop trying to define them lets stop pretending we know what they are when it is not possible.   It is extremely dangerous sometimes to define a risk. The consequences can be blame ridden cultures where responsibility is attached totally inappropriately. The key to the danger is in trying to define  &#039;a&#039; something. There cannot be &#039;a&#039; risk. The unknown is not definable.</description>
		<content:encoded><![CDATA[<p>So much is written about risk without a useful definition being proposed and the ensuing conversation intensely CONFUSING. I hear people talk of risk in positive and negative terms. It is clear to me that a specific capability is a mitigation to a specific threat and with a specific attitude can become  an opportunity, but only when compared with a competing capability. To me the essence here is in perspective and recognition of risk. Management of risk becomes about attitudes and the building of knowledge resources to increase capability. Like Chaos theory the trick to understanding risk is not in isolated analysis but in the recognition of its patterns and always taking a lateral approach to understanding it from a stakeholder and an external perspective.</p>
<p>If we are to understand risk, impacts, etc and how to manage it, the imperative is to be aware of consequences and recognise that there will always be unknown consequences because we stop looking for them and cannot know them all. Consequences do not stop they change or we ignore them.  Risks are the unknown. Although we should not stop trying to define them lets stop pretending we know what they are when it is not possible.   It is extremely dangerous sometimes to define a risk. The consequences can be blame ridden cultures where responsibility is attached totally inappropriately. The key to the danger is in trying to define  &#8216;a&#8217; something. There cannot be &#8216;a&#8217; risk. The unknown is not definable.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: JP</title>
		<link>http://confusedofcalcutta.com/2006/07/01/four-pillars-on-the-use-of-social-software-in-risk-management/comment-page-1/#comment-2135</link>
		<dc:creator>JP</dc:creator>
		<pubDate>Mon, 03 Jul 2006 22:16:36 +0000</pubDate>
		<guid isPermaLink="false">http://confusedofcalcutta.com/2006/07/01/four-pillars-on-the-use-of-social-software-in-risk-management/#comment-2135</guid>
		<description>This focus on second-order and reputational risk has some other awful consequences. An entrenching of blame cultures and shoot-the-messenger responses. Whistleblower muzzling. Nanny states and governments and firms and departments.
Sadly it is primarily amongst &quot;professionals&quot;.</description>
		<content:encoded><![CDATA[<p>This focus on second-order and reputational risk has some other awful consequences. An entrenching of blame cultures and shoot-the-messenger responses. Whistleblower muzzling. Nanny states and governments and firms and departments.<br />
Sadly it is primarily amongst &#8220;professionals&#8221;.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: JÃ¼rgen Ahting</title>
		<link>http://confusedofcalcutta.com/2006/07/01/four-pillars-on-the-use-of-social-software-in-risk-management/comment-page-1/#comment-2132</link>
		<dc:creator>JÃ¼rgen Ahting</dc:creator>
		<pubDate>Mon, 03 Jul 2006 21:52:03 +0000</pubDate>
		<guid isPermaLink="false">http://confusedofcalcutta.com/2006/07/01/four-pillars-on-the-use-of-social-software-in-risk-management/#comment-2132</guid>
		<description>@ &quot;professional bodies are increasingly taking defensive steps to protect their own name, rather than managing risks on behalf of the public&quot;:
This fits well with my suspicion/experience that the primary purpose of QA/QS-departments at ISVs is to improve external quality to cover up the hideous internal quality - the primary source of follow-on costs.

@ Harnessing Hindsight:
This sounds much like the processing of a neural network where the nodes are human individuals - recognizing patterns and violations of them.</description>
		<content:encoded><![CDATA[<p>@ &#8220;professional bodies are increasingly taking defensive steps to protect their own name, rather than managing risks on behalf of the public&#8221;:<br />
This fits well with my suspicion/experience that the primary purpose of QA/QS-departments at ISVs is to improve external quality to cover up the hideous internal quality &#8211; the primary source of follow-on costs.</p>
<p>@ Harnessing Hindsight:<br />
This sounds much like the processing of a neural network where the nodes are human individuals &#8211; recognizing patterns and violations of them.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: [Mauvaises pensÃ©es d&#8217;un consultant] :: Risk management [en] :: July :: 2006</title>
		<link>http://confusedofcalcutta.com/2006/07/01/four-pillars-on-the-use-of-social-software-in-risk-management/comment-page-1/#comment-2070</link>
		<dc:creator>[Mauvaises pensÃ©es d&#8217;un consultant] :: Risk management [en] :: July :: 2006</dc:creator>
		<pubDate>Sun, 02 Jul 2006 15:50:15 +0000</pubDate>
		<guid isPermaLink="false">http://confusedofcalcutta.com/2006/07/01/four-pillars-on-the-use-of-social-software-in-risk-management/#comment-2070</guid>
		<description>[...] Un papier passionnant &#8211;citÃ© par &#8216;Confused in Calcutta&#8217;&#8211; sur un renversement complet de perspective dans l&#8217;analyse des risques : en gros; un &quot;near-miss&quot; (presqu&#8217;accident) est une parfaite occasion d&#8217;analyser le fonctionnement rÃ©el du syst&#232;me&#8230; [...]</description>
		<content:encoded><![CDATA[<p>[...] Un papier passionnant &#8211;citÃ© par &#8216;Confused in Calcutta&#8217;&#8211; sur un renversement complet de perspective dans l&#8217;analyse des risques : en gros; un &quot;near-miss&quot; (presqu&#8217;accident) est une parfaite occasion d&#8217;analyser le fonctionnement rÃ©el du syst&egrave;me&#8230; [...]</p>
]]></content:encoded>
	</item>
</channel>
</rss>
