Here's a radical idea.
Think about it.
Who takes risk? It's the decision-makers across the extended enterprise.
If we want reasonable assurance that they are taking the desired level of risk to achieve objectives, we need to know they are making effective decisions.
How many of us think about whether people know how to, let alone actually make, quality decisions?
I recently wrote about audits that I performed to obtain assurance that people had reliable information on which to base their decisions.
But what if they don't give the decision enough thought, don't involve others, or so on?
Maybe this should be a focus of our attention.
Perhaps we should talk to and perhaps partner with human resources and make training in decision-making a required course for every decision-maker.
Maybe we should think about how we can prevent or detect poor decisions.
What do you think?
I welcome your comments.