ABSTRACT
The goal for anyone trying to inject better risk control into an organization, or into themselves, is to bring about pervasive changes to behaviour. People should be prepared to consider any methods of bringing about those behaviour changes that might work. The idea behind the risk weighting control pattern is to set a policy on how risk is to be weighed in decisions and encourage employees to comply with the prescribed approach. Typically there will be more than one such policy. Ideally this involves somehow expressing the value of different levels of risk. A risk limit is, effectively, a crude form of this control where any risk below a threshold is given little or no weight, while any risk above the threshold is given a large negative weight. Other techniques give a smoother relationship between risk level and value to avoid dysfunctional behaviour around the threshold point.
