Risk management is about more than avoiding bad things

Effective risk management is more important now than ever. It is more than a tick box and needs to continually evolve.

Risk has moved more sharply into focus in the organisational psyche. Objective risk analysis and management has changed through the efforts of many professionals, including accountants, and has influenced how we perceive, frame and oversee risk in the boardroom.

Building a risk management culture

Risk management is a matter of culture, rather than rules and regulations. It requires leadership and needs to be approached with a mindset of “achieving business objectives”, rather than “avoiding bad things”. Strong risk cultures share certain traits: they acknowledge risk (as threats and opportunities), discuss risk internally, and encourage transparency. The best cultures actively seek information and insights. A healthy culture – along with strong governance and effective management – creates true safeguards as many risks result from human behaviour.

Financial crises and scandals have underlined how easily weak controls can lead to misconduct, corruption and criminal practices. Risk management failure is widely regarded as one of the major contributors to the 2008 global financial crisis. Failures like these wreak financial and reputational damage on organisations and the wider community.

The good news is that the current environment of uncertainty caused by the global pandemic has led many leaders to rethink organisational priorities. Risk is now front-of-mind for boards. Those charged with governance must make time to reflect on risk management practices to ensure they are fit for purpose. Lessons should be used to reshape risk management as a tool to help organisations “thrive” rather than simply “survive”. Boards aiming to achieve more than their standard oversight obligations must dig deeper. They must assess the quality of their risk management as the cornerstone of their value-add as directors.

It all starts with the board’s risk appetite. Culture, processes and structures must take advantage of potential opportunities while managing potential threats. Boards must set the risk appetite of the organisation and then ensure an adequate framework is in place to identify, manage and monitor risks. Defining and documenting risk appetite supports the development of a good risk culture. It must be aligned to and support the purpose of the organisation.

Designing an effective framework


Boards should consider if the organisation needs to invest in technology-based tools to oversee and report on risks. Larger organisations might also establish a risk management committee. This can be an effective way to deliver the transparency, focus and independent judgement needed to oversee the organisation’s risk management framework. If a committee isn’t already in place, boards should assess the potential benefits of one.

Establishing an internal audit function is also an important consideration in an effective risk management framework. Internal audit can provide valuable assurance that key risk mitigation strategies, including internal controls, are operating effectively. A forward-looking internal audit can also provide insights into how to improve the effectiveness of the organisation’s risk management framework and improve overall performance.

Organisations with a clear line of sight over emerging issues – from board level down – have fared better during the early stages of the pandemic. While many risks are external to an organisation and often out of its control, there are important decisions to be made on exactly how risk is managed and how responses are communicated. A cohesive, integrated approach is crucial to ensure responsibilities and accountabilities are clearly defined and understood.

Well-designed risk management frameworks and governance can reduce operational losses, build stakeholder confidence, and help organisations to achieve long-term strategic and financial goals. The effective design and implementation of a fit-for-purpose framework and appropriate governance structure can be harder than it sounds but engaging independent expertise can assist. Contact a Synectic adviser to discuss how we can support you.

Need some help?

Claire Smith - Senior Consultant Tasmania
Claire Smith FCPA
Senior Consultant


Claire Smith is a senior executive and accountant with almost 20 years’ experience across the private and public sectors, including an extensive background in risk management. She is also an independent member of the Department of Treasury and Finance Audit & Risk Management Committee.

Contact Claire or any of our Synectic advisers to discuss how we can support you.

Contact us


Director identification numbers

The director identification number (DIN or director ID) system commenced on 1 November 2021. All directors need to apply for a DIN and existing directors should start preparing their applications now.

DIN is the first service to be delivered by the new Australia Business Registry Services (ABRS). ABRS is a new platform which (between now and 2024) will bring together multiple registers from Australian Securities and Investments Commission (ASIC), Business Names Register, the ATO and Australian Business Register (ABR). ABRS and your DIN will streamline all these registers, by allowing you to manage your details in one place, with a single identification number. The aim is to improve consistency and efficiency, cutting back administration time and ensuring all your records are updated within required time frames.

Read more

Keeping a vehicle log book

When claiming work-related car expenses, many people miss maximising their claim due to poor record keeping. Inadequate records can also cost dearly if you are audited by the Australian Tax Office (ATO).

Read more

5 tips to avoid FBT on your staff Christmas gifts and work party

Christmas will be here in a moment and many employers will be thinking about recognising their team’s efforts throughout the year. You may already have plans in place, but have you thought about how to manage tax and Christmas gift giving?

Feel free to celebrate, but make sure you don’t get stung with unexpected taxes. Fringe benefit tax (FBT) and associated income tax and GST pitfalls are the big ones to watch out for.

Read more

3 bookkeeping basics for small business owners

How much time do you spend bookkeeping each week? Recording, organising, and processing financial transactions – everything from accounts receivable and payable, to employee payments, expense receipts and supplier invoices. 10 hours? More?

Effective bookkeeping is at the heart of a healthy business. But, done poorly, bookkeeping can be time-consuming and tedious.

Read more

Fringe benefits tax (FBT) changes for the 2019 FBT year

Fringe benefits tax (FBT) is a tax paid by employers on specific benefits provided to employees (and their families). Benefits commonly provided to employees include company vehicles, car parking, low interest loans, and living-away-from-home allowances. FBT places the tax burden on the employer rather than the employee, which can be an attractive arrangement for many workers.

Read more

Claiming GST credits for employee reimbursements

Did you know that employers registered for GST can claim GST credits for reimbursements made to employees?

Here’s a quick run-down on what qualifies, what doesn’t, and how to claim.

Read more

STP reporting compulsory for all Australian employers

The extension of Single Touch Payroll (STP) requirements to employers with 19 or less employees has finally passed both houses of Parliament. From 1 July 2019, STP reporting will become compulsory for all Australian employers.

Read more

8 smart ways to manage your debtors for business success

Managing your debtors so you get paid on time is critical to your business’ survival. Paying suppliers and salaries, investing in infrastructure and growth – if you don’t have the cash, your business is in trouble.

So, wouldn’t it be wonderful if customers paid on time, every time?

Read more

Compulsory Single Touch Payroll (STP) reporting rolls out to small employers

Months of uncertainty for small businesses ended yesterday with the Senate passing the Bill to now extend compulsory Single Touch Payroll (STP) reporting to employers with 19 or less employees. Effective from 1 July 2019, it comes on the back of STP rolling out to larger employers from 1 July 2018.

Read more