So we need to have better metrics in place and clean up our management processes in order to fix the crisis that, as I argued, was caused by performance management.
But performance management alone is not enough. In fact, treating performance management as a single discipline is dangerous. Rewarding bankers with huge bonuses without weighing in the risks, was actually part of causing the crisis, according to many commentators.
Risk management is proactive performance management. Why wait until performance indicators show business is not going well? Performance management is proactive risk management: the best defense is a good offense.
There are different types of risk: financial risk, operational risk, reputation risk, and strategic risk. Interestingly enough, this is very close to the perspectives of the balanced scorecard. Financial risk and financial performance are related; operational risk matches the process perspective; reputation risk is related to the customer perspective; and strategic risk can be linked to the growth and learning perspective.
Most performance management methodologies are “closed systems.” They either ignore risk management as a related discipline or try to fit it into one area of performance management. Another way to look at risk management is to combine key performance indicators (KPIs) with the results of a risk management exercise, spanning all areas of performance. In this way every performance indicator has a counterpart, or a key risk indicator (KRI).
The exercise of establishing both performance and risk indicators leads to insightful discussions. Do high rewards always have high risks? Do low risk initiatives contribute enough to the objectives? Are there options that are low risk and high reward?
The structure of strategy maps, linking performance indicators with single lines displaying what-leads-to-what, tend not to recognize these dilemmas between risk and reward. They help us “optimize objectives,” but easily lead to new problems in other areas. For instance, cost cutting, leads to use of inferior materials. Inferior material leads to a heavier burden on the environment and customer complaints of quality problems. Or, think of laying-off people, which negatively affects the knowledge base of the organization and the motivation of the people still left. It is good business to manage these risks when putting together performance management improvements.
Source: Buytendijk, F.A., Performance Leadership, McGraw-Hill, 2008
Comments (2)
Frank --- I applaud you on key points made in this blog. You are taking Performance Management to a higher level. It should be integrated with Risk Management. I like your description that strategy maps, BSC, etc. are about "optimizing objectives." It may take a while (and hopefully not too many years) for performance management practitioners to realize that those strategic objectives should first be determined with risk analysis, such as balancing an organization's risk appetite with its risk exposure.
Posted by Gary Cokins | December 19, 2008 8:58 AM
Posted on December 19, 2008 08:58
Frank
Of course proactive risk management requires tools and technologies not usually associated with performance management - things like business rules and predictive analytics/data mining - so that the decisions taken in the organization that should take account of risk can do so. Check out this post, for instance, on using decision management this way:
http://jtonedm.com/2008/08/20/using-decision-management-for-governance-risk-and-compliance/
JT
Author of Smart (Enough) Systems
Posted by James Taylor | January 8, 2009 5:59 PM
Posted on January 8, 2009 17:59