Most of my writing is aimed at small businesses. That is because I believe there is a market there for my services and because I believe small businesses need to manage their risks at least as well as big businesses. Arguably their need is greater.
A fair criticism of a lot of the advice that I give is that it is impractical in a big, or even medium-sized, business. Nobody can be constantly aware of all the risks or all the controls. Nobody can be sure all the controls are working as they should.
The obvious answer is to delegate. But that can mean simply pushing the problem onto someone else. I have worked for bosses like that!
A better solution is to bring in systems to ensure the whole business is covered and that everyone knows what his or her responsibilities are with regard to risk.
I will be writing more about this soon, but if you cannot wait, get in touch.