【正文】 can explain the results to everybody HKK 1/30/2023 40 Nokia Mikko Routti Controlling Actions vs. Reactions ? Risk controlling actions are actions taken before the risk has occurred, ., it is proactive risk management ? Reactions are actions that are performed after the risk has occurred ? Risk management is primarily concerned with risk controlling actions HKK 1/30/2023 41 Nokia Mikko Routti Defining Risk Controlling Actions ? Brainstorming ? Open or focused ? Strategies ? Checklists ? Risk element review ? analyze risk elements to identify what actions could be taken ? Experience ? Personal experience and insights Acceptance Avoidance Protection Reduction Research Reserves Transfer HKK 1/30/2023 42 Nokia Mikko Routti Risk Control alternatives ? No risk reducing action ? No immediate action is taken, but some may be taken at a later time ? Contingency planning ? Recovery plans are made, but no further action taken ? Reduce loss ? Refers to risk controlling actions that are used to mitigate the damage caused by risk ? Risk avoidance ? Refers to actions that are aimed at avoiding risks occurring ? Reduce event probability ? Influencing risk factors and observing risk monitoring metrics to reduce the event probability HKK 1/30/2023 43 Nokia Mikko Routti Selecting Risk Controlling Actions ? Control highrisk scenarios ? Effectiveness of risk controlling action ? Project constraints ? Stakeholder priority ? Urgency of risk controlling action t im ePr es e ntRis k ev e ntocc ur en c er i sk co nt r ol li ng a cti o ni m pa c t d el ayRis k c on t ro l ling act i o nimplementat ion marg in(= urg en c y )ris k r edu cti o n leverag e = E x p ec te d u ti li ty l o s s E x p ec te d u ti li ty l o s sCo st o f ri sk c o n tr o l li n g a ct io nb efo re a fter?HKK 1/30/2023 44 Nokia Mikko Routti Risk Monitoring in Practice ? Define and collect risk metrics when applicable ? Monitor additionally ? changes in the situation ? impact of risk controlling actions ? potential new threats ? changes in risk analysis input data ? Initiate risk identification, risk analysis or risk control planning when necessary HKK 1/30/2023 45 Nokia Mikko Routti Building up a Risk Management System People and petencies Process Methods Tools ? People and petencies form the foundation of risk management ? Process helps ensure their skills are applied consistently ? Methods assure that risk management is done well ? Tools increase productivity … and can sometimes direct people and processes HKK 1/30/2023 46 Nokia Mikko Routti People and Competence ? Motivation ? Explain why risk management pays off ? Authorization ? Give people power to perform risk management ? Skills + knowledge + practice = petence ? Support inhouse learning HKK 1/30/2023 47 Nokia Mikko Routti Process ? Make sure that the product development process has explicit points where risk management is addressed ? Provide templates for reports ? Define the risk management process and its outputs ? identify ? analyze ? control ? Clarify responsibilities HKK 1/30/2023 48 Nokia Mikko Routti Methods ? Select a portfolio of sound and easytouse methods ? Start simple and improve as you bee more experienced ? Beware of the biases and problems with the methods you are using ? Use mon sense a method cannot replicate it HKK 1/30/2023 50 Nokia Mikko Routti Tools ? Tools can be best leveraged when the anization truly understands risks and is fluent in risk management ? Tool cannot pensate for lack of analysis or understanding ? They may hide the real issues ? They may create false confidence ? Introduce tools gradually ? Key issues: ? Usability ? Teamwork HKK 1/30/2023 51 Nokia Mikko Routti Conclusions on Risk Management Infrastructure ? Deploy a portfolio of techniques ? Be aware of assumptions and problems with various techniques ? The process itself is as important as the outputs ? Start simple and scale up and refine information as required HKK 1/30/2023 52 Nokia Mikko Routti Risk Management ”Must do’s” ? It must be based on individual motivation and proactive attitude ? It must be systematic and consistent ? It must be integrated to everyday operations ? It must have a low overhead ? Motivation and awareness training ? Risk mgmt culture ? Common basis ? Required ? Supported ? Process integration ? Wide deployment ? Sound, simple approaches ? Tool support HKK 1/30/2023 53 Nokia Mikko Routti Main Themes of Presentation... were ? scope of presentation: business risk ? our philosophy about risk management ? where we are today on the journey of ERM ? how to do this in our anisation ? balance between practical, valuebased and analytical, factbased thinking ? what kind of methods and tools we use () ? how do we and other municate about this HKK 1/30/2023 54 Nokia Mikko Routti Questions? Proposed reading: ? Against the Gods Peter L Bernstein ? Enterprisewide Risk Management James W. Deloach ? Software Engineering Risk Management Jyrki Kontio ? also: Nokia 20F 2023, Annual Report 2023 HKK 1/30/2023 55 Nokia Mikko Routti 演講完畢，謝謝觀看！