
A framework developed by the UK government's Office of Government Commerce (OGC) for managing risks in organizations. It provides a structured approach to identifying, assessing, and controlling risks at strategic, program, project, and operational levels. MoR is designed to be compatible with other OGC best practice frameworks, such as PRINCE2 for project management and MSP for program management. It can be applied across various industries and sectors and at different organizational levels.
Key Concepts in MoR
MoR introduces several key concepts to help organizations manage risks effectively.
- Risk: An uncertain event or set of events that, should it occur, will have an effect on the achievement of objectives. Risks can be threats (negative effects) or opportunities (positive effects).
- Risk Management Process: MoR defines a four-step process for managing risks: Identify, Assess, Plan, and Implement.
- Risk Register: A central repository for capturing and recording information about identified risks, including their description, impact, likelihood, ownership, and mitigation plans.
- Risk Appetite: The level of risk an organization is willing to accept in pursuit of its objectives. It helps guide decision-making and resource allocation.
- Risk Tolerance: The specific levels of risk an organization is willing to accept for individual risks or categories of risks.
- Risk Maturity: The extent to which an organization has embedded risk management practices into its culture and processes. MoR provides a Risk Maturity Model to assess an organization's current level of risk management capability.
- Risk Governance: The structures, roles, and responsibilities for overseeing and managing risks within an organization, including risk ownership, escalation, and reporting.
Benefits of Using MoR
Implementing the MoR framework offers several benefits to organizations.
- Consistent Approach: Provides a structured and consistent approach to managing risks.
- Improved Decision-Making: Enhances decision-making by considering risks and opportunities.
- Achievement of Objectives: Increases the likelihood of achieving organizational objectives.
- Resource Allocation: Facilitates effective allocation of resources based on risk priorities.
- Proactive Management: Promotes a proactive and preventive approach to risk management.
- Compliance: Supports compliance with legal and regulatory requirements.
- Stakeholder Confidence: Improves stakeholder confidence and trust in the organization.
MoR Certifications
MoR certifications are available at different levels for individuals who want to demonstrate their knowledge and understanding of the framework.
- Foundation Level: Covers the basic principles and terminology of MoR.
- Practitioner Level: Focuses on the application of MoR principles in real-world scenarios.
While MoR was developed by the UK government, it has been widely adopted by organizations in the public and private sectors worldwide as a best practice approach to managing risks effectively.