Question 1
Scenario 1: Go speed Ltd. is a trucking and logistics company headquartered in Birmingham, UK, specializing in domestic and EU road haulage. Operating a fleet of 25 trucks for both heavy loads and express deliveries, it provides transport services for packaged goods, textiles, iron, and steel. Recently, the company has faced challenges, including stricter EU regulations, customs delays, driver shortages, and supply chain disruptions. Most critically, limited and unreliable information has created uncertainty in anticipating delays, equipment failures, or regulatory changes, complicating decision making. To address these issues and strengthen resilience, Go speed’s top management decided to implement a risk management framework and apply a risk management process aligned with ISO 31000 guidelines. Considering the importance of stakeholders’ perspectives when initiating the implementation of the risk management framework, top management brought together all relevant stakeholders to evaluate potential risks and ensure alignment of risk management efforts with the company’s strategic objectives. The top management outlined the general level and types of risks it was prepared to take to pursue opportunities, while also clarifying which risks would not be acceptable under any circumstances. They accepted moderate financial risks, such as fuel price fluctuations or minor delays, but ruled out compromising safety or breaching regulations. As part of the risk management process, the company moved from setting its overall direction to a closer examination of potential exposures, ensuring that identified risks were systematically analyzed, evaluated, and treated. Top management examined the main operational factors that significantly influence the likelihood and impact of risks. This analysis highlighted concerns related to supply chain disruptions, technological failures, and human errors. Additionally, Go speed’s top management identified several external risks beyond their control, including interest rate changes, currency fluctuations, inflation trends, and new regulatory requirements. Consequently, top management agreed to adopt practical strategies to protect the company’s financial stability and operations, including hedging against interest rate fluctuations, monitoring inflation, and ensuring compliance through staff training sessions. However, other challenges emerged when top management pushed forward with a new contract for international deliveries without fully considering risk implications at the planning stage. Operational staff raised concerns about unreliable customs data and potential delays, but their input was overlooked in the rush to secure the deal. This resulted in delivery setbacks and financial penalties, revealing weaknesses in how risks were incorporated into day-to-day decision-making. Based on the scenario above, answer the following question: Which risk management principle did Go speed’s top management violate, resulting in delivery delays and financial penalties? Refer to Scenario 1.
- AOption A:
Integration
- BOption B:
Inclusive
- COption C:
Continual improvement
- DOption D:
Dynamic
Show answer and explanation
Correct answer: B
The correct answer is B. Inclusive. ISO 31000:2018 identifies inclusiveness as a key principle of effective risk management. This principle requires appropriate and timely involvement of relevant stakeholders to ensure their knowledge, views, and perceptions are considered when managing risk. Inclusive risk management improves awareness, supports informed decision-making, and enhances ownership of risk responses. In the scenario, Go speed’s top management failed to adequately consider input from operational staff when pursuing a new international delivery contract. Despite staff raising concerns about unreliable customs data and potential delays, their feedback was ignored in the rush to secure the deal. This directly contradicts the inclusiveness principle outlined in ISO 31000, which emphasizes that stakeholder engagement should occur at all stages of the risk management process, particularly when decisions have operational implications. The consequence of this failure was delivery delays and financial penalties, demonstrating how excluding key stakeholders weakens risk identification, analysis, and treatment. While integration is also an important ISO 31000 principle, the issue described is not the absence of risk management from organizational processes, but rather the exclusion of relevant stakeholders from decision making. Continual improvement relates to learning and enhancing the risk management framework over time, which is not the primary failure described. The dynamic principle concerns responding to change and emerging risks, whereas the core issue here was ignoring available knowledge. From a PECB ISO 31000 Lead Risk Manager perspective, the scenario clearly illustrates a violation of the inclusive principle, making option B the correct answer.