Steps to Effective Risk Management
1. Define your goals & objectives.
2. Identify the risks you face in achieving objectives.
3. Determine your risk tolerance.
4. Establish a risk management policy.
5. Implement the risk management policy.
6. Monitor risk through a regularly updated position report.
Effective risk management is aware, current, assertive, and cost effective. It never surprises upper management nor is surprised by the company's risk takers.
There are a number of excellent risk management resources and tools available on the web. Here are two of the best.