Handling Cross-Domain, Cross-Function, and Cross-Organization Interfaces and Communications

The chapter demonstrates, through examples, the transfer of planning, performance, and risk information that needs to take place between risk management activity domains, between functional entities, and between organizational levels in a truly integrated risk management operation. The examples touch on the areas of cyber protection, formation of public-private sector partnerships, enterprise-wide staffing, and design for optimally balanced risks. The chapter continues by demonstrating the need for close communication between systems engineering and project risk management, and then by showing schematically how risk management plans and risk analysis results need to be communicated up and down the organizational ladder. It further illustrates how risk management working groups and risk management executive boards within each organizational unit can facilitate this process. It concludes by highlighting the need for and characteristics of an enterprise-wide repository of integrated program/project, infrastructure/institutional, and enterprise risk models and results, constituting what could be called a model-based risk posture approach.