Category Archives: Risk Management

One Important Lesson Not Learned From Six Failed Implementations

Over on the 21st Century Supply Chain, you’ll find a post entitled “six lessons learned from six failed software implementations” which is quite scary, because it indicates that there was one very important lesson that the organization did not learn.

If you don’t understand the technology, get a 3rd party consultant who is an expert in technology to guide you. (Don’t rely on a vendor!)

One failure is understandable. Every organization will fail in a technology project at one time or another. What’s important is what happens next. If the organiztaion is able to identify what it believes are the (primary) reasons for failure and solutions to those problems, then it is understandable if the organization tries again on its own. (And if it doesn’t, see the above lesson.) If it fails again, then the organization has to admit that it needs help and get the help it needs.

Because if it doesn’t, it’s just going to fail again and again and every other lesson learned is going to be irrelevant because the likelihood of it succeeding in time to get an ROI is slim, approaching none over the long term.

How to Tell the CEO that Your Legacy ERP is a Disaster Waiting To Happen

This recent post over on the HBR blogs about “a system for speaking IT truths to CEOs” is a must read for every CIO and CPO alike. Both the CIO and CPO know that every IT purchase has a life-span and that every piece of legacy software is a ticking time-bomb waiting to detonate and cost the company millions of dollars in a matter of days (or hours, as Comair found out in 2004) if it is not safely disposed of before the clock runs out, but both often have problems conveying the message.

According to the author, who modified a methodology used by medical doctors who often have to deliver bad news on a regular basis, the following seven-step process will often make the process easier.

  1. Understand the CEO’s perceptions
    Does the CEO grasp what a legacy systems issue is?
  2. Hold the calls
    Deliver the bad news in one, uninterrupted, focussed session.
  3. Enlist a business ally
    Make it a business problem, not just a technical one.
  4. Stick to the Facts
    Focus on the risk and the associated loss. CEOs are generally NOT technical.
  5. Don’t Improvise
    Have a set of best-, typical-, and worst-case scenarios prepared in advance and do not deviate.
  6. Insist on Immediate Action
    Infuse a sense of urgency and a time line for corrective action.
  7. Have a Clear Next Step
    Have a specific plan for getting to the goal.

It’s certainly worth a try if you don’t have a better option (and, chances are, you don’t).

If You Don’t Understand Your Energy Risk …

… those hard-earned “savings” could disappear overnight if:

  • oil surpasses $100 a barrel again
    (which many economists and futurists think it will do by the end of the year)
  • carbon taxes are imposed
    (which are unlikely to be postponed much further)
  • energy grids hit capacity
    (and the organization is forced to get its own power plants up and running quickly)

And if that isn’t scary enough, there’s a 69% chance that your organization does not understand it’s energy risk, according to a recent survey by Treasury and Risk (as quoted in a recent Technology Review article on “Navigating Your Energy Risk”). It’s about time your organization calculates its carbon footprint. Unless the risk is known, the organization will be unable to mitigate it when energy prices rise rapidly or carbon taxes are introduced in one of its locales of operation.

Another Reason to Source Close to Home

According to this recent article over in eyefortransport, “maritime privacy costs [the] global community up to $12 Billion a year” (with excess insurance costs alone eating up to $3.2 Billion). In addition, at the end of 2010, around 500 seafarers from more than eighteen countries were being held hostage by pirates, despite the fact that over 238 Million in ransom (including a ransom of 9.5 Million for a South Korean oil tanker) was paid to Somali pirates last year. Ouch!

Furthermore, despite the facts that navy presence (from more than thirty countries) has reduced the rate of successful hijackings, pirates have doubled the number of attacks and expanded their range. In addition, even though merchant seafarers deserve our protection, 85% of pirates pursued and captured end up being released because the countries who catch them don’t have the jurisdiction to prosecute. And over 2600 seafarers have been held hostage in the last three years alone. The 19th century belonged to the mafia. The 20th century belonged to the mob. Looks like the 21st century belongs to the new pirates. Is the risk to life really worth sourcing lead point toys and melamine milk from global destinations?

And the Siemens Bribery Scandal Continues

Siemens, who just a few years ago was found guilty of serious bribery and fraud under the FCPA and who was required to to pay a record $800M in fines and disgorgement of profits, is facing legal action again. Already found guilty of fraud that spanned at least half a dozen countries, including Germany, Italy, US, UK, Switzerland, Russia, and Nigeria, and dozens of subsidiaries, Siemens is now facing legal action in Greece after an 11-month parliamentary investigation that estimated the cost to Greek taxpayers of the alleged bribery at 2 Billion Euros.

The bribery, which allegedly took place between 1997 and 2002, and which affected contracts and security prior to the 2004 Athens Olympics, included bribing of Ministers. According to this article from BBC News, a former Transport Minister told the investigating committee that he had accepted the equivalent of 100,000 Euros in 1998.

It just goes to show the importance of having an FCPA Compliance Strategy in place.