Video

Why does it matter that the high risk squares are only 36% off the area? If something has a high probability of a high impact, then that’s a risk which needs to be addressed. The actual problem, as far as I can see it, is that the scales are vague - one person’s “high probability” is interpreted by another person as “medium”. Another issue is that companies I’ve worked with have tended to treat the scales as linear or multiples of two. This is just completely inconsistent with other methods for calculating and assessing risk (eg LoPA studies for SIL assessment or lightning risk calcs to IEC 62305) which all work with exponential scales and factors of ten. However, it is possible to set descriptions for likelihood and impact (like you recommended in one of your other videos) which make people think in terms of order of magnitude, so they can then do a rough assessment with a risk matrix which will be consistent with later, more detailed, quantified assessments. I’ve developed such risk matrices with a few clients in the sectors I work in.

Ah yes. Professional trainers. How to make a simple thing sound difficult. I gave up on learning anything after 6 minutes.

Great detail.

Oi that's my name

Thank you for your series. Where can I get a copy of your Crisis Management Pyramid?

Huh?

nice one

The site is down. It gets redirected to: www.tony-ridley.com/cgi-sys/suspendedpage.cgi - the page title is "contact support"

This is exactly how idiots use bullshit and fast words con people into thinking they are experts in their field.

Hello everyone! I wrote a blog post about the coso heatmap and provided a free-for-use dashboard! In my post a link to my dropbox account is provided where you can download the file. excelworksheet.wordpress.com/2016/12/14/excel-coso-heatmap/

The approach is very important, but not explain of the mode correct. Sorry!

Rubbish. so the type of Risk Matrix you are using.

So you're saying that prioritizing the high risk, high probability situations is a hit to assets and funds? So instead prioritize what? High risk, low probability? Low risk, high probability? Yeah right, that makes sense.

Lovely Video! Excuse me for the intrusion, I would appreciate your thoughts. Have you considered - Mahorrla Protect Ownlife Method (just google it)? It is an awesome one of a kind guide for protecting your family from danger without the normal expense. Ive heard some interesting things about it and my friend at very last got astronomical results with it.

Great Video clip! Excuse me for the intrusion, I am interested in your thoughts. Have you heard about - Mahorrla Protect Ownlife Method (erm, check it on google should be there)? It is a smashing one of a kind guide for protecting your family from danger minus the headache. Ive heard some decent things about it and my friend Sam finally got excellent success with it.

Excellent video content! Excuse me for chiming in, I would appreciate your thoughts. Have you researched - Mahorrla Protect Ownlife Method (just google it)? It is a smashing one off product for protecting your family from danger minus the hard work. Ive heard some amazing things about it and my mate got astronomical results with it.

Lovely Video! Sorry for butting in, I would love your initial thoughts. Have you thought about - Mahorrla Protect Ownlife Method (do a google search)? It is an awesome one of a kind product for protecting your family from danger without the normal expense. Ive heard some decent things about it and my m8 finally got great results with it.

Nice video content! Sorry for chiming in, I would love your thoughts. Have you researched - Mahorrla Protect Ownlife Method (just google it)? It is a good one off guide for protecting your family from danger minus the hard work. Ive heard some pretty good things about it and my work buddy at last got excellent results with it.

argh methodology - the worst sounding word in the English language. and you talk too much

i've never heard such rubbish !! slow down, explain your maths again. because your argument makes absolutely no sense

Holla! Have you ever tried - Zammu Amazing Cash Crop (should be on google have a look)? Ive heard some interesting things about it and my friend got cool results with it.

Nice succinct presentation. Thanks fro sharing this information.

Well worth studying...especially for first time visitors.

Hello Mr. Ridley. Do you have a web page where we can access any template for the threat assessment?

Tom Ridley's presentation is to the point and practical. A crisis has movement and it makes perfect sense to have a crisis management plan that is mobile as well. I like the modular, component design that can be lifted for use. The idea of accessing the plan readily from mobile devices makes use of the plan fluent during actual implementation. Thanks

good vid tony however just a comment apply the KISS principle and more visual risk assessment demonstrations

Thank you!

I have only been in security for 7 years, but can call bullsh*t on your argument. Just because the High Impact squares are more in number does not mean that you will end up putting more risk rating in those categories. You assess the impact and likelihood of each vulnerability being exploited and you come up with a rating, that is it. This way, they are all relative to each other. Ideally you will want to do this with multiple people and representatives from the groups that manage the associated assets. If you want more granularity, just increase the scale to a 7X7 or 10X10.

Very good lecture! I'm gonna share with my students in Brazil. Thank you for sharing this.

If everything that's out there is wrong, then what is 'right' in your view. Is there a methodology at all. what pros and cons does the spiderman model have ?

lol he was gonna say Dildo on 3:31

Video definition is bad. Can't read slides.

What would be the point of having numbers at all? Just use qualitaive based risk assessment.

your argument is confusing.... Just take out the numbers. Ask the question whats the likelihood of risk occuring (1-5) and whats the impact (1-5). Provide a 1-5 scale that provides a guidance for them to understand the impacts and probability. You dont even need to show them the matrix. Once all have been scored (based on a group consensus) you can show them the result... The matrix then shows you an often accurate picture of the organisations/departments risk.... and then you have prioritised the risks in order of which ones you need to analyse in further detail based on things such as Risk velocity, manageability etc. Alternatively you can set up the red, amber and green zones up front based on the organizations risk appetite. Therefore the numbers become meaningless. RED = MUST ANALYZE NOW AND MANAGE - Amber = Analyse and manage where possible - Green = monitor. Risk Management NEEDS to be simple or it doesnt work. the risk matrix is an amazing qualitative tool for prioritizing your risks. You can even add an opportunity matrix to it so that you get the group thinking about opportunity too.

why too much talking sadik?

Well tony I have been working in Health Safety and Environmental for 25 Years and you have basically not offered a solution to the problem. Try and explain to people a matrix is hard enough let alone looking for solutions. You have presented a crap argument which doesnt weigh up . Did you ever do your real job instead of working with squares and circles and numbers. The main fault with these tables is that people dont look at the most probable outcome not what could happen as an outcome .

I'm the author of this book. Such a weird review, he rather missed who the intended audience is. Take a look on Amazon, etc. if you want to read something sensible.

excellent video! thanks a lot on my personal side of things, i am using "risks" iPhone app to manage my risks

Hi, do you have any files related to oil and gas project JRA?

Thanks Tony for sharing this ammount of knowledge

Well, nice presentation! Yes agree, assigning value of each matrix could be wrong. But the purpose of risk matrix is simply just mapping your whole risk of your total assets, not for making decision. I like there you said MOST, because not all risk assessment doing it, especially quantitative risk assessment. Decision making should be based on quantitative risk value, not by simple risk matrix. Again, risk matrix just the way to present distribution of your risk value.

There has been an explosion in this niche with everyone now apparently offering tracking, monitoring and GPS solutions

Wow, I can see how we could get all the benefits with significantly less cost now.

Simple enough but way too many people seem to what to over complicate the processes.

A nice and simple yet effective briefing for our clients and staff. Thanks

So am I right in saying that not only should you prioritise but you should also understand the variables relative to one another? For example, 2 risks, both of equal impact, 1 is twice as likley to occur but costs 3 times as much to mitigate, therefore the other takes priority.

Just because this incorrect approach meets the criteria as a "way" should by no means be grounds for inclusion. Drawing funny cartoons on the back of a napkin is a way, but both have the same net benefit. Mitigation is the next step, I have only spoken about the assessment. But as you have demonstrated, far too many processes jump prematurely to the mitigation and resources which will result in under and over expenditure without any real risk mitigation.

More videos and training have been updated recently on crisis management and leadership. What is the best way to contact you?

Hope I can hear from you about this topic and able to provide some tips about crisis management and leadership.

I understand what you've done, but not why you've done it. OK, it's disproportionate. But it still provides a way to prioritise risk, where the cut off point is in terms of mitigation is usually down to resource available isnt it?