ERM Technology Up to the Task?

Can certain technologies hurt or help business processes, and is technology worth the investment right now? These are questions insurers ask themselves. Such is the case with enterprise risk management (ERM). The turmoil in the financial industry has brought a greater awareness of ERM and the technologies that risk practitioners use to implement ERM programs, according to the Risk and Insurance Management Society (RIMS) report, “Enterprise Risk Management Technology Solutions.”

The report is based on results from two surveys—one to ERM practitioners, and one to system providers—and is intended to provide insight to risk practitioners at the beginning and intermediate stages of adopting ERM.

The results of the user survey highlight the immature nature of the ERM technology market, according to RIMS. Desktop applications such as Microsoft Office products were the most commonly cited tools, followed by a variety of other solutions, includingcustomized systems.

Monitoring risks, data storage and analysis are the most commonly identified functionality of the ERM technology solutions employed by the survey respondents. Comparing current usages and desired future usages, the ability to address interdependency of risks was the most sought-after future functionality.

“Technology can provide strong support for an ERM process; however, practitioners must make certain that the system is user-friendly and flexible enough to accommodate the changes that most ERM programs experience over time,” says Leslie Lamb, member of RIMS Technology Advisory Council and risk manager at Cisco Systems Inc.

The RIMS survey isn’t the first to highlight the lack of ERM fundamentals. A survey of KMPG LLP’s internal auditors and board members reveals that many companies are falling short in three critical areas of their ERM programs—risk culture, risk management processes and technology.

Approximately 130 respondents, including a mix of senior internal audit executives and board members across all industries, including insurance, participated in the survey. More than half the survey respondents (58%) reported deficiencies around risk culture, namely, that their company's employees had little or no understanding of how risk exposures should be assessed for likelihood and impact.

For reprint and licensing requests for this article, click here.
Security risk Core systems Policy adminstration Data security
MORE FROM DIGITAL INSURANCE