Many people learn about risk management from a training course or a lifeless lecture by a lawyer telling you of all the dangers of everything, yet having no practical experience in the field themselves. They might put up an infographic for you to look at with some big red warning signs and after an hour or two you're now qualified in risk management. If you've had this experience, you're probably feeling uncomfortable about the whole process and looking for a much better approach. From the start, let me make something clear. Risk management is a cultural attitude within an organisation, not a check box compliance process. Anyone who thinks otherwise is just plain stupid and dangerous to those around them.
My first job in experiential education was with a private school, working at their outdoor education campus. It was here that risk management was instilled in me as being a natural part of absolutely everything we did. Not paranoid about risk, but very proactive. Before every activity, the team going on that trip would sit down and write out the risk management for it. There was no thought of simply printing out a generic risk management form that nobody bothered to read and everyone blindly signed it. This was an active discussion of the risks and hazards for that specific activity to ensure it was clear in our minds the risks and controls we needed to put in place to ensure a safe well-managed activity was run.
The value of this was immeasurable. On the one hand, you had a current and accountable risk management document for each and every activity, prepared by those who were directly responsible for the safe conduct of the activity. On the other hand, it was building and reinforcing a culture of active risk management. Risk was a regular, open and honest discussion amongst the staff, which kept everyone on the same page and held everyone accountable for the preparation, operation and decision making processes being used. It was never the case of ‘Oh don't worry, I know what I'm doing!’ or ‘It's someone else's job to do that,’ as I’ve found in so many other organisations. It was a continuous proactive and dynamic process.
It's hard for me to understand why anybody wouldn't take this logical approach. Yet, as I said before, this was how I was educated, so I hadn't known it to be any other way, until I moved to another school and the difference was stark and concerning.
As a brief background note on the school I was working for originally, 18 months prior to my starting, there’d been a fatality on one of their overnight hikes. This tragic event sent shockwaves through the school and had dramatically and bluntly shaped much of the focus of the organisation moving forward. The devastating fallout from the fatality lingered for years, yet many important lessons were learnt from this experience.
Fast forwarding 17 years to today, there’s absolutely no reason why it should take a critical incident to change the culture within an organisation, yet sadly it often does because of a lack of real understanding of risk management and its effective usage. With many fatalities, serious injuries and near misses so well documented by the industry and the coroner, working through some of these cases together as a staff can be of great value in starting the process of cultural change towards the goal of proactive risk managers.
When you understand what you're aiming to achieve and how simple oversights can have massive repercussions, then it's much easier to develop the whole team to be working together and thinking along the same lines. The ultimate aim of a proactive risk management culture is to run safe and challenging activities, promote sound decision making and prevent major disruptive events (aka critical incident). There's no future in finding yourself in front of a coroner and your only defence being to say that you at least had all your paperwork in order. At this point, paperwork is quite worthless and purely academic, and you're going to look like a complete idiot and potentially liable, if not culpable.
Creating a culture of risk managers means that your paperwork, which is always required, is actually being put into action and that if anything adverse happens, everyone is equipped to respond swiftly and appropriately. However, you will also find that running an organisation with an embedded culture of risk management, will mean the potential of a significantly disruptive event occurring becomes increasingly unlikely.
The most important thing is not to repeat the mistakes of the past. Get started today. Read some case studies that are closely aligned to what you're doing on your program and discuss them with your team. Build that culture of the proactive risk manager mindset into your organisation and ensure that you're running the best programs possible with the best framework possible to challenge and really push your students and at the same time ensuring their safety.