--- title: "Every Single Day: Make Risk Management Part of Your Company’s Culture" description: In today’s post, we’ll define Operational Risk Management and explain why it’s important to make it part of the culture at your organization. image: https://mha-it.com/hubfs/Imported_Blog_Media/operational-risk-management-1.jpg --- [Skip to content](https://mha-it.com/blog/operational-risk-management#main-content) [![MHA by BCMMetrics - navy](https://46330580.fs1.hubspotusercontent-na1.net/hub/46330580/hubfs/MHA%20by%20BCMMetrics%20-%20navy.png?width=245&height=54&name=MHA%20by%20BCMMetrics%20-%20navy.png "MHA by BCMMetrics - navy")](https://mha-it.com/) - [Our Consulting Services](https://mha-it.com/what-we-do) - [Business Continuity](https://mha-it.com/business-continuity) - [Crisis Management](https://mha-it.com/crisis-management) - [Disaster Recovery](https://mha-it.com/disaster-recovery-consulting-services) - [BCaaS](https://mha-it.com/bcaas) - [Program Augmentation](https://mha-it.com/program-augmentation) - [Training and Awareness](https://mha-it.com/training-awareness) - [Our BC Software](https://bcmmetrics.com/) - Resources - [Blog](https://mha-it.com/blog) - [News](https://mha-it.com/news) - [About Us](https://mha-it.com/who-we-are) - [Our Team](https://mha-it.com/our-team) - [Clients](https://mha-it.com/clients) - [In the Community](https://mha-it.com/in-the-community) [Contact Us](https://mha-it.com/contact) [![mhalogo](https://mha-it.com/hubfs/mhalogo.svg "mhalogo")](https://mha-it.com/) [Contact Us](https://mha-it.com/contact) [![mhalogo](https://mha-it.com/hubfs/mhalogo.svg "mhalogo")](https://mha-it.com/) - [Our Consulting Services](https://mha-it.com/what-we-do) - [Business Continuity](https://mha-it.com/business-continuity) - [Crisis Management](https://mha-it.com/crisis-management) - [Disaster Recovery](https://mha-it.com/disaster-recovery-consulting-services) - [BCaaS](https://mha-it.com/bcaas) - [Program Augmentation](https://mha-it.com/program-augmentation) - [Training and Awareness](https://mha-it.com/training-awareness) - [Our BC Software](https://bcmmetrics.com/) - Resources - [Blog](https://mha-it.com/blog) - [News](https://mha-it.com/news) - [About Us](https://mha-it.com/who-we-are) - [Our Team](https://mha-it.com/our-team) - [Clients](https://mha-it.com/clients) - [In the Community](https://mha-it.com/in-the-community) [Contact Us](https://mha-it.com/contact) [![mhalogo](https://mha-it.com/hubfs/mhalogo.svg "mhalogo")](https://mha-it.com/) [Contact Us](https://mha-it.com/contact) - [Our Consulting Services](https://mha-it.com/what-we-do) - [Business Continuity](https://mha-it.com/business-continuity) - [Crisis Management](https://mha-it.com/crisis-management) - [Disaster Recovery](https://mha-it.com/disaster-recovery-consulting-services) - [BCaaS](https://mha-it.com/bcaas) - [Program Augmentation](https://mha-it.com/program-augmentation) - [Training and Awareness](https://mha-it.com/training-awareness) - [Our BC Software](https://bcmmetrics.com/) - Resources - [Blog](https://mha-it.com/blog) - [News](https://mha-it.com/news) - [About Us](https://mha-it.com/who-we-are) - [Our Team](https://mha-it.com/our-team) - [Clients](https://mha-it.com/clients) - [In the Community](https://mha-it.com/in-the-community) [Contact Us](https://mha-it.com/contact) Risk Management # Every Single Day: Make Risk Management Part of Your Company’s Culture Richard Long Updated on: February 25, 2025 #### Relevant Contents #### Need Tailored Business Continuity Insights? Contact Us Now for Personalized Guidance! [Schedule a Free Consultation](https://mha-it.com/contact) The recent blockage of the Suez Canal was a rare event that pointed up the need for companies to undertake a certain vital activity every single day: risk management. In today’s post, we’ll define Operational Risk Management and explain why it’s important to make it part of the culture at your organization.   ## Lessons from the Suez Canal The blockage for six days last month of the Suez Canal sent a shudder through supply chains around the world. The canal had been closed previously by geopolitical events, but its sudden obstruction by a single grounded ship was unprecedented. Even before the ship was freed, many people sought to draw lessons from the incident in terms of international shipping and the global supply chain. One obvious lesson one might draw is: add the possible closure of the Suez and Panama canals to your threat and risk assessments. That’s not a bad idea for organizations that depend directly or through their vendors on goods that pass through those chokepoints. But to me the canal blockage underscored the importance of making operational risk management an everyday part of life at every company. Trouble can come from just about anywhere at anytime, and in ways ranging way from the predictable to the borderline unimaginable. That’s why it’s so important to manage risk every day. ## What is Operational Risk Management? Operational risk management (ORM) is the term we use to define the process of identifying and mitigating risks to an organization’s functioning, finances, and reputation. It also involves accepting a degree of risk in the case of threats that are beyond the reach of mitigation, for whatever reason. ORM looks at the risk to three aspects of the business: people, processes, and technology. There are [four main strategies for mitigating risk](https://mha-it.com/blog/dont-just-hope-choosing-strategies-to-mitigate-risk): avoiding it, limiting it, transferring it, or accepting it. ORM is not about eliminating risk completely. It’s about managing it consciously and intelligently. The ultimate goal of ORM is to protect the organization and its stakeholders. ## Making Risk Management Part of the Culture The point I want to emphasize today is how important it is to make risk management an everyday activity at your organization. Risk management should be part of your company’s culture. Work happens every day, issues come up every day, and risk management should be going on every day. Risk management is not a one-and-done activity. Nor does it qualify as risk management when a company does an assessment of its risks then puts the assessment in a drawer and forgets about it. Active, intelligent risk management means constantly being on the lookout for risks and constantly taking steps to mitigate them.  If you have responsibilities for managing risk at your company**,** as part of a risk management team or business continuity office, you should be helping and guiding your organization to look at risk every single day. This is true whether that risk comes from workers not wearing hearing protection or the possible blockage of a geopolitically important shipping canal. ## Preparing for the Next Event The recent blockage of the Suez Canal was a reminder that trouble can come at our organizations in many forms, from the predictable to the almost inconceivable. That’s why it’s so important to make operational risk management an everyday part of life at every company. People involved in risk management and business continuity should work to make risk management a part of the culture at their organizations. By doing so, they’ll help ensure their company is prepared to ride out the next negative event it faces, whether that event springs from an incident that makes headlines around the world or is confined to its own facilities. ## Further Reading For more information on operational risk management and other hot topics in BC and IT/disaster recovery, check out these recent posts from MHA Consulting and BCMMETRICS: - [The Risk Management Process: Manage Uncertainty, Then Repeat](https://mha-it.com/blog/risk-management) - [Don’t Just Hope: Choosing Strategies to Mitigate Risk](https://mha-it.com/blog/risk-management) - [Everything You Always Wanted to Know About Managing Risk but Were Afraid to Ask](https://mha-it.com/blog/managing-risk) --- ![](https://mha-it.com/hubfs/Richard%20Long-MHA-Consulting.png) #### Richard Long Richard Long is one of MHA’s practice team leaders for Technology and Disaster Recovery related engagements. He has been responsible for the successful execution of MHA business continuity and disaster recovery engagements in industries such as Energy & Utilities, Government Services, Healthcare, Insurance, Risk Management, Travel & Entertainment, Consumer Products, and Education. Prior to joining MHA, Richard held Senior IT Director positions at PetSmart (NASDAQ: PETM) and Avnet, Inc. (NYSE: AVT) and has been a senior leader across all disciplines of IT. He has successfully led international and domestic disaster recovery, technology assessment, crisis management and risk mitigation engagements. ## Start building a stronger future ##### Navigate uncertainty with an expert - schedule your free consultation with our CEO, Michael Herrera. [Schedule your consultation](https://mha-it.com/contact) ## Other resources you might enjoy ![Know Your Gaps: Manage Residual Risk to Keep Your Company Safe](https://46330580.fs1.hubspotusercontent-na1.net/hub/46330580/hubfs/Imported_Blog_Media/managing-residual-risk.jpg?height=245&name=managing-residual-risk.jpg) #### [Know Your Gaps: Manage Residual Risk to Keep Your Company Safe - MHA Consulting](https://mha-it.com/blog/manage-residual-risk) [Read More](https://mha-it.com/blog/manage-residual-risk) ![risk control matrix](https://mha-it.com/hs-fs/hubfs/Imported_Blog_Media/enter-the-matrix-why-you-should-employ-a-risk-management-matrix--1.jpg?height=245&name=enter-the-matrix-why-you-should-employ-a-risk-management-matrix--1.jpg) #### [Risk Control Matrix: Why You Should Employ a Risk Management Matrix](https://mha-it.com/blog/why-you-should-employ-a-risk-management-matrix) [Read More](https://mha-it.com/blog/why-you-should-employ-a-risk-management-matrix) ![Making the Most of the Hybrid Emergency Operations Center](https://46330580.fs1.hubspotusercontent-na1.net/hub/46330580/hubfs/Imported_Blog_Media/emergency-operations-center.jpg?height=245&name=emergency-operations-center.jpg) #### [Making the Most of the Hybrid Emergency Operations Center](https://mha-it.com/blog/hybrid-emergency-operations-center) [Read More](https://mha-it.com/blog/hybrid-emergency-operations-center) ## Ready to start focusing on higher-level challenges? [![MHA by BCMMetrics - White](https://46330580.fs1.hubspotusercontent-na1.net/hub/46330580/hubfs/MHA%20by%20BCMMetrics%20-%20White.png?width=308&height=68&name=MHA%20by%20BCMMetrics%20-%20White.png "MHA by BCMMetrics - White")](https://mha-it.com/) Business continuity consulting for today’s leading companies. #### Company - [Who We Are](https://mha-it.com/who-we-are) - [Team](https://mha-it.com/our-team) - [Clients](https://mha-it.com/clients) - [News](https://mha-it.com/news) - [Blog](https://mha-it.com/blog) - [Contact](https://mha-it.com/contact) #### Services - [Business Continuity](https://mha-it.com/business-continuity) - [Disaster Recovery](https://mha-it.com/disaster-recovery-consulting-services) - [Crisis Management](https://mha-it.com/crisis-management) - [BCaaS](https://mha-it.com/bcaas) - [Training & Awareness](https://mha-it.com/training-awareness) - [Program Augmentation](https://mha-it.com/program-augmentation) © 2026 MHA Consulting. All rights reserved.  [Privacy Policy](https://mha-it.com/privacy-policy) ```json { "@context" : "", "@type" : "BreadcrumbList", "itemListElement" : [ { "@type" : "ListItem", "item" : "https://mha-it.com", "name" : "Home", "position" : 1 }, { "@type" : "ListItem", "item" : "https://mha-it.com/blog", "name" : "Blog", "position" : 2 }, { "@type" : "ListItem", "name" : "Every Single Day: Make Risk Management Part of Your Company’s Culture", "position" : 3 } ] } ``` ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Richard Long", "url" : "https://mha-it.com/blog/author/richard-long" }, "dateModified" : "2025-02-25T02:09:26.814Z", "datePublished" : "2021-04-07T10:39:02.000Z", "headline" : "Every Single Day: Make Risk Management Part of Your Company’s Culture", "image" : [ "https://mha-it.com/hubfs/Imported_Blog_Media/operational-risk-management-1.jpg" ], "mainEntityOfPage" : { "@id" : "https://mha-it.com/blog/operational-risk-management", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://mha-it.com/hubfs/Frame%2016353%20(1).svg" } } } ```