Your risk data knows how your organisation handles risk. Do you?

Every organisation measures its risks and controls. Only few measure their own ability to deal with risks. Yet the same data that tracks your controls and actions quietly shows a lot about how mature your organisation’s risk management is.  

In this 45-minute session, Senior Operational Risk Consultant Jeroen Tacke (ARCOTA Consulting) and Senior Risk Management Consultant Ruben Andeweg (CERRIX) show you how to surface that behaviour and turn it into a conversation, not a verdict. 

Why attend? 

You don't need a new survey or a culture assessment to see how your teams handle risk. The signals are already in your GRC tool: who raised an action, when a due date moved, how often work comes back at review. It's mostly there in the metadata you already collect. 

The trick is knowing which questions to ask:  

• How many improvement actions do people raise themselves, and how many sit there until an auditor points them out?  

• How often does a due date get pushed before an issue is resolved?  

• How many findings are closed "first time right", and how often does the work keep coming back at review?  

None of these are about who is doing a good or bad job. They point to something harder to see: how different parts of your organisation behave around their risks and their responsibilities. And whether that's the behaviour your organisation is aiming for. 

Jeroen and Ruben walk through three signals you can read from your own data: timeliness, proactivity and adequacy. For each one, they show what it looks like in practice and where it comes from in your GRC tool. It's the bridge from the data you already have to the behaviour behind it. The shift from doing risk management because you have to, to a team that wants to improve because it can finally see its own progress. 

What you'll walk away with 

• The three dimensions of risk behaviour you can read from data you already have  

• How to read each signal: what a healthy pattern looks like and what's worth a conversation within your organisation 

• How to use these signals to steer maturity, not to hand out grades 

Your speakers

• Jeroen Tacke (Senior Operational Risk Consultant at ARCOTA Consulting, has worked with multiple financial institutions on a broad range of riskmanagement subjects
• Ruben Andeweg (Senior Risk Management Consultant at CERRIX)

‍