The EQC Privacy Breach – Where’s the Risk Management?

On Friday, Ian Simpson the Chief Executive of the Earthquake Commission (EQC) held a media conference and announced that a staff member had accidentally sent an email with an attachment containing a spreadsheet with the details of 9,700 Christchurch residents and their claims, to a recipient outside of the organisation.

Read More


So What…?

We do a lot of risk assessments… a lot…. As a result, we spend a lot of time talking about risk, how it is measured and most importantly what it delivers for an organisation. We also do a lot of reading.

Read More


There is only one way to eliminate risk

One common misconception of risk management that I have come up against time and time again is that by managing a risk it has been eliminated and can be closed and removed from the risk register. This is simply not the case as risks can evolve and change over time for any number of reasons.

Read More