Premium
The risk maturity model: a new tool for improved risk management and feedback
Author(s) -
AasHaug Brede,
Haskins Cecilia
Publication year - 2021
Publication title -
incose international symposium
Language(s) - English
Resource type - Journals
ISSN - 2334-5837
DOI - 10.1002/j.2334-5837.2021.00858.x
Subject(s) - maturity (psychological) , capability maturity model , audit , norwegian , risk management , process management , risk analysis (engineering) , process (computing) , risk model , operations management , business , computer science , engineering , accounting , psychology , developmental psychology , linguistics , philosophy , software , finance , programming language , operating system
Norwegian governmental institutions use their risk management regulations to acquire and manage projects and assess the institutional practices. After many years documenting a positive trend, the audit authority noticed a stagnation in process improvement across the organization. A literature review of the use of risk management maturity models from other industries suggested a method for achieving continuous improvement. A corresponding maturity model has been developed and tested with positive results. This research developed a risk maturity model based on compliance requirements for the Norwegian defense sector. The intended use of this model is as the foundation for conducting assessments through audits and provide explicit guidance toward given requirements that facilitate extensive improvement in application of the risk management system. Use of the model in performing maturity assessments of organizational elements within the defense sector showed that the model supports the subsequent improvement activities through providing better understanding of the existing situation, and explicit visual feedback on areas that are satisfactory and areas in need of improvement. A maturity model provides a stepwise path showing the next level of improvement on the way to achieve required performance.