In Travel Risk do you ever present your risk appetite or tolerance?

Do you share your travel risk acceptance and tolerance?

Its an interesting premise, I suspect most travel and security departments are not going to advertise where that line in the sand sits, at least not publicly within the business ... doesn't really come across well telling people what you won't respond to or how far you might let things stretch regards to policy. But, within your business, you still need to understand this as you need to understand what policy needs to be in place, how deep that goes, and then how the technology is going support policy.

Many organisations fail to really dive into the details of known and potential risks to clearly understand where that line is, but technology can help. If you build your risk model (the risk register) in such a way that you can run realistic simulations and micro-simulations then you can test all of this. It is a problem with many risk events, you are not going to fully understand each one until you have been through or had some experience in it. Getting the right risk technology in place can at least give you a better starting position and mechanism to analyse and build policy out based off your priorities and objectives of the business.

This is often the greatest challenge, making that start and building out from there. Look to your software platforms, insurers and assistance partners to help build that picture of your risk profile and priorities. Build all of this back into your risk model and look at how you can test with scenarios before putting policy into place. Ideally you should be engaging with your workforce when you have some confidence that your policy can be followed and effectively be supported by your detection and response activities.