The OnRisk Approach

The OnRisk approach is grounded in an innovative methodology that uniquely brings together the perspectives of the major stakeholders in organizational governance — the board, executive management, and chief audit executives. Alignment of these stakeholders’ views on personal knowledge, organizational capability, and risk relevance is a significant step toward achieving strong risk management in support of effective governance.

The methodology employs qualitative interviews of 30 board members, 30 C-suite executives, and 30 CAEs from 90 different organizations. The research provides a robust look at risks facing organizations and allows for both objective data analysis and subjective insights based on responses from risk management leaders.

Collective ratings for each group are assigned a value based on the percentage of respondents who rate particular aspects of each risk at a 6 or 7 on a 7-point scale. For example, if 7 in 10 board members rated their organizations’ risk management capability on data privacy at a 6 or 7, the score would be 70%.

Further details regarding the OnRisk methodology, how to use and leverage this report, and explanations of the Stages of Risk developed in conjunction with the OnRisk approach can be found later in this report.