How can you become a successful risk communicator?

This is a key point, and one I'll admit to have fallen foul of at times. Whe it comes to written comms, executives often prefer punchy, short messages rather than full explanations. This can be challenging in the context of risk assessment, where there is inherently a degree of judgment which needs to be communicated sufficiently well to promote both debate (in order to come to a common ground) or, otherwise, understanding of (and, consequently, learning based on) a risk decision.

A successful Risk Communicator means : a) The need to get the best possible understanding and specificities of the identified Risk to communicate. b) Identification of the type of Risk with an analysis in depth (E2E) is needed, to seize the successful range of the impacts and produce the assumptions for the mitigations. c) Containment: level of the details and adequate Templates and wording for the communication, depending on the audience (Int users, upperMgt, local Authorities). d) Timing to communicate, according to the requirements of the directives of the local Authorities. e) Compliance with EU-wide reglementations (NIS2 / DORA) is aimed by the Risk communicator, because it's not anymore an option but a strict obligation.

I think there is one thing missing here. Its not purely the risk managers role to communicate risk, but the need for every business leader to do this well and in a language that computes with their team. All leaders are business savvy and think in opportunities and threats and interpreting that into a formal heading of risk management isn't always necessary. It doesn't even need to be technical. The more engaging and practical that business reporting is, risk will be clearly communicated well.

My advice would be to keep it simple and focus on the so-what for the audience. This requires to be selective on what is being communicated - for example, no need to have pages and pages of methodological concepts for a board - and avoid risk jargon.

?? agree! It’s easy to get complacent and just put your message on autopilot, but to be truly successful you need to understand your audience. What makes them tick? What are their priorities and roadblocks? How do THEY best receive information?

i was experienced how risk rate become Very high from Law ,then i taught to the procurement manager and explained all my team,about an effective risk communication

Agree and this impact what to communicate and how. I would also recommend to bear in mind participation from the audience. Get them to speak and ensure they are aligned to your objective.

Specify Your Goal: Clearly identify whether you aim to inform, educate, persuade, or consult your audience. Determine Desired Outcomes: Decide what action or change you want to see as a result of your communication (e.g., awareness, behavior change). Choose Appropriate Content: Tailor your message content to align with your objectives, ensuring it's relevant and compelling. Select Effective Channels: Pick the most suitable communication channels (e.g., email, presentations, social media) to reach your audience effectively based on your goals.

Trust is the currency in any risk-related dialogue, as it directly impacts how well the communicated risks are understood, accepted, and acted upon. Being transparent about the sources, methods, and limitations of your risk assessments helps to establish this trust. If stakeholders feel that you're hiding, exaggerating, or downplaying risks, they're likely to discount the information you provide and may even become sceptical of future communications. Full disclosure fosters credibility, enhances your authority on the subject, and most importantly, makes your risk communication far more effective and actionable.

Agreed and I also have in mind that risk management can be very technical; lack of transparency can exacerbate the "black box" perception which impedes communication.

Honesty and transparency are the pillarstones of a healthy risk (and certainly of the company's as a whole) culture. I strongly believe in sharing knowledge as a way to communicate risk issues and in order to do that you have to also take into account any counter arguments. That process takes more time but it is definitely more rewarding for all the involved parties.

I whole heartedly agree with this. Risks need to be identified and disclosed in a factual manner along with the plan to mitigate the situation. As soon as the entire team (bottom-up) is made aware of expected and anticipated twists, the entire project gets delivered in a smooth and timely manner. This step often improves the camaraderie amongst the team members & stakeholders

Disclose All Relevant Information: Share the sources, methods, and assumptions behind your risk assessment openly. Acknowledge Uncertainties: Be upfront about any uncertainties or gaps in your knowledge regarding the risks. Avoid Exaggeration: Present risks without overstating or understating their potential impact. Build Credibility: Use transparency and honesty to foster trust and establish your credibility as a reliable source of information.

This is the hardest part of the communication process. Choosing proper words depending on the audience to whom the issue is adressed and keeping the proposal short and concise takes a certain ability. The good news is that this ability can be learned especially if you have done the homework of knowing your audience ie customer.

Another effective approach is to use analogies. Those that know me well know that I love using food-related analogies to describe risk concepts (“the all you can eat buffet!”).

Avoid Jargon: Steer clear of industry-specific terms and acronyms that might not be familiar to your audience. Explain Concepts Clearly: Break down complex risk concepts into understandable and relatable explanations. Use Plain Language: Opt for straightforward, concise sentences and an active voice to make your message more accessible. Ensure Accuracy: Double-check your communication for correct grammar, spelling, and punctuation to maintain clarity and professionalism.

In my previous role with a major player in the property insurance space, it was my job to identify and communicate hazards to both the underwriter and the insured. My objective was to get the insured to take action, with the intent of improving the risk for both parties. In this role, you quickly learned that if you want someone to take action, particularly if that action was going to mean spending significant dollars, you had to get them to care. In business, nobody takes action just because you “say so” - no matter how much trust you’ve developed. They need the context, relevance, and a clear understand of WHY.

Explain Why It Matters: Clearly articulate the significance of the risks and their direct impact on your audience's lives or work. Offer Actionable Advice: Provide specific, actionable steps that your audience can take to mitigate or manage the risks. Relate to Known Risks: Compare the new risks with familiar ones to help your audience understand the scale and scope. Appeal to Values and Emotions: Connect the risk communication to your audience’s values and emotions to foster engagement and prompt action.

The type of formats might also be dictated by the culture of the organisation. I worked for organisations that would only use very detailed slides and other organisations that would only go for lengthy Word docs.

I always remind myself that whatever I am planning to communicate is not for me, but for my audience. So my last piece of advice would be to prepare additional speaker notes, or similar, to help you communicate effectively.