Reputation resiliency drj 3.28.2012 final

36
Randall Till, Till Continuity Group Linda Locke, Reputare Consulting Reputation Resiliency in a Volatile Environment Spring World 2012 Disaster Recovery Journal March 28, 2012

Transcript of Reputation resiliency drj 3.28.2012 final

Randall Till, Till Continuity Group Linda Locke, Reputare Consulting

Reputation Resiliency in a Volatile Environment

Spring World 2012 Disaster Recovery Journal March 28, 2012

What keeps your CEO up at night?

2 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

What keeps your CEO up at night?

3 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

What keeps your CEO up at night?

4 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

Reputation Resiliency: Key points to explore today

5 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

•  The world has changed

•  Reputation: measureable value, threats and penalties

•  Gaps in risk literacy

•  Enhanced models for ERM and BCM

•  To get there: integrate reputation

•  Value at all levels

Some risks don’t surface in traditional revenue filters

Scraps debit card fee after consumer backlash

6 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

Penn State abuse scandal chilling in details

FedEx vows to track down delivery man who tossed computer monitor over fence

Komen Foundation In Contortions

Over Justifying Planned Parenthood Decision

Why are companies surprised?

7 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

New world, new risks

8 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

Traditional risk mindset is no longer adequate - Limited, insufficient revenue filters -  Operational-only risk preparation and mitigation

Today’s environment requires resiliency: -  Strength, flexibility, swift recovery -  Comprehensive management of operational AND reputation risk -  Adaptability to a continuously changing environment

Resiliency: The ability to adapt to a continuously changing environment

9 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

•  A systematic process improvement for more comprehensive risk management

•  Two sides of resiliency:

­  Prevent conditions of risk

­  Manage consequences of event

•  Increases value to the organization Source – Carnegie Mellon Software Engineering Institute

Resilient organizations understand, measure and manage reputation

10 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

Daily reputation fluctuation

A resilient organization manages both operational AND reputation risk

11 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

Managing for Resiliency

• Ongoing measurement and monitoring

• Balancing the risk and cost tradeoffs

• Taking an enterprise focus

Operational Resiliency Ability to manage risks

and function/adapt throughout the lifecycle of

disruptions

Reputational Resiliency Ability to maintain good stakeholder perceptions and supportive behavior

at all times

Risk Assessment (RA) and Business Impact Analysis (BIA)

Business Continuity Disaster Recovery

(BC/DR) Operational Resiliency Model

Business Continuity IT Operations Security

Operational resiliency is “owned” by the company

12 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

But reputation is “owned” by stakeholders

13 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

•  Customers •  Suppliers •  Investors •  Advocacy groups •  Regulators •  Policymakers •  General public

Reputation = judgments and perceptions of others

Stakeholders’ perceptions develop via three channels

14 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

• Direct experience with the company • What others say about the company (online and off) • What the company says about itself (marketing, PR, etc.)

Photo: mack2happy

Positive reputation yields measurable value

15 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

- Strong brand loyalty - Returning high value customers - Lower employee turnover - Easier recruitment of high-caliber employees - Higher investor confidence - Positive regulatory environment - Lower costs of capital

A company highly regarded by its stakeholders is more likely to enjoy:

The risk: Negative reputation exacts a measurable penalty

16 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

-  Increased customer churn -  Elevated customer acquisition costs -  Higher employee training costs - Regulatory constraints -  Increased cost of capital -  Lower investor confidence -  Increased vulnerability to competitors

A company viewed with distrust and outrage by its stakeholders is more likely to suffer:

The trajectory of reputational crises

17 Reputare Consulting LLC / What We Can Learn from Seven Stranded Castaways © Reputare Consulting 2011

Corporate initiatives and messaging

Stakeholder experiences

Third party conversations

Reputation penalty or advantage?

Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

BP Stock Price vs. DJIA: 2007-2012

18 Chart: Yahoo! Finance

Reputation penalty or advantage?

19 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012 Chart: Yahoo! Finance

Apple Stock Price vs. DJIA: 2007-2012

Why reputation matters to business

v

20 Reputare Consulting LLC / What We Can Learn from Seven Stranded Castaways © Reputare Consulting 2011

Provided by Trust Across America

Based on five factors: Financial stability Accounting conservatism Corporate integrity Transparency Sustainability

The resiliency model for reputation

21 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

Data-driven insight

24 x 7 monitoring

Outside-in perspective

Willingness to engage, act

Enterprise-wide understanding

Balanced desire to protect revenue

AND reputation

Problem: Major gaps in reputation risk management for corporations

22 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

Reputation literacy not on risk agenda

Risk literacy not on reputation agenda

Current gaps provide pathway to value for the organization

•  Help lines of business understand competitive risks – and opportunities – to protect reputation.

•  Help shape strategy to address drivers of reputation.

•  Quantitatively measure the impact of communications response in a crisis – to improve next time

•  Escalate emerging risks to c-suite and board for shift in resources, strategy to mitigate risk

•  Elevate the role of risk organization

23 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

How do we manage reputation risk?

24 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

ERM: Integrate

reputation into risk agenda

BCM: Incorporate reputation

intelligence, mitigation into

practices

Integrating reputation resiliency into ERM

25 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

Deliverables: • Distinct reputation risk assessment • Set baseline measurement • Integrate reputation into reporting

Opportunity: • Define reputation resiliency for organization • Expand view of risk to include non-market, non-

operational issues with impact to reputation • Address broader issues of concern to Board

Business processes: ERM

26 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

Reputation resiliency for ERM

Develop mitigation strategies

Identify key risks; establish agenda

Monitor; report to c-suite

Build risk competency at strategic level

Outcome of ERM reputation process

27 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

Quantified reputation risk for the enterprise

Build culture of risk literacy

Define drivers of risk, priorities

Embed reputation intelligence into BCM governance

28 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

Risk Assessment (RA) and Business Impact Analysis (BIA)

Business Continuity Disaster Recovery

(BC/DR)

BCM Governance

Crisis/Emergency Management

(CM/EM)

Business Continuity/

Disaster Recovery (BC/DR)

Risk Assessment (RA)

Business Impact Analysis (BIA)

Transformed BCM program

29 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

BCM: Reputation Resiliency

RA/BIA: Incorporate quantitative analysis of reputation

impact

BC/DR: Integrate reputation impact analyses into BC planning

CM/EM: Enhance plans,

processes to include

reputation risk monitoring

Conduct exercises related to reputation risk scenarios

Integrating reputation into BCM

30 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

Risk Assessment •  Incorporate reputation risks •  Build reputation risk awareness for the business area

Business Impact Analysis (BIA) •  Enhance reputation impact analysis •  Provide meaningful reputation data

Current approach is only a guess at reputation impacts:

(1 = Critical, 5 = Low)

Current approach is only a guess at reputation impacts:

Integrating reputation into BCM

31 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

Business Recovery Planning •  Incorporate reputation risks •  Elevate reputation risks within business areas

Emergency/Crisis Plans •  Enhance crisis plans to include reputation measures

•  Monitor reputation risks dynamically

•  Expand EM/CM processes to address non-physical disaster events

Integrating reputation into BCM

32 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

BCM Exercises and Scenario Planning

•  Incorporate reputation management

•  Expand the scope of BCM exercises to address non-physical disaster events

•  Expand training and testing for PR/Comm teams

•  Form reputation team within crisis management organization

Summary: Value of Reputation Resiliency to BCM

33 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

Enhance risk management practices and become reputation champions

Provide more quantitative analysis and rigor to set corporate priorities

Elevate the value of BCM planning processes by addressing reputation risks

Move enterprise to a more secure, resilient state

34 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

The resiliency model for reputation

Data-driven insight

24 x 7 monitoring

Outside-in perspective

Willingness to engage, act

Enterprise-wide understanding

Balanced desire to protect revenue

AND reputation

The ultimate goal of resiliency

35 Reputare Consulting LLC | DRJ: Reputation Resiliency | March 2012

Strong revenue

AND reputation

Linda Locke +1 314 435 3428 Twitter: Reputationista

Thank you.

For a copy of our white paper, please contact: [email protected] [email protected]

Randall Till +1 314-608-7672