In 2003 when I first started to push for improvements to thinking about risk management I felt it was an almost hopeless task. The most influential guides to risk management preached methods that were illogical and impractical (and they still do) and I thought the huge dominance of their methods in big organizations was a sign of narrow mindedness and widespread ignorance.

I was wrong. I have found that when faced with clear questions that test the logic of existing methods people almost always choose the logical, rational, practical answer. True, there is still inertia to overcome, but I find people to be more willing to try new things, and more eager to, than I had expected.

I've been a very active member of the risk management committee at the British Standards Institute, contributing to another 'standard' in the field. It's not going to be perfect, but if we're lucky it will have some big improvements in it.

Problem areas for current risk management standards (speech at BSI)
A first step towards successful risk management standards
Requirements of Risk Management processes
The crisis in management control and corporate governance (questionnaire)
What's on your risk registers?
Uncertainty quantification

Let me know what you think

Either write to me or try the article "Requirements of Risk Management processes", in the list above, which is in fact a survey.