ACTive ALIA

Library risk management

Paul Longley, cprm, mrmia, November 2005

An issue since 48BC

The Great Library of Alexandria - destroyed by fire.

What is risk?

• Risk is the chance that something can or will go wrong.

Or

• That opportunities will be realised - i.e. that acquisition is obtained.

Risk management is about managing the positives as well as negatives.

Why do risk management?

What's in it for me?

• Provides assurance to executive that issues are being identified and 'treated'.
  
  
• Provides transparent governance structure.
  
  
• Provides an rational 'business case' to support your requirements.
  
  

Risk management - The philosophy in 2004

• Enterprise or organisation wide risk management - what affects big picture.
  
  
• beyond individual 'silos' - thinking outside the box
  
  
• similar in concept to 'upstream' and 'downstream' process mapping etc

What does this mean to the library context?

How to quantify the potential issues?

Three levels:

• Strategic - outsourcing? Competition?
  
  
• Operational - internal marketing? Client service?
  
  
• Tactical level: - key staff? IT services?

Risk analysis

• Service delivery - flexibility?
  
  
• Stakeholder management - image? marketing strategies?
  
  
• Financial management - salaries?
  
  
• Facilities and equipment - adequate.
  
  
• Collection management - damage or theft?
  
  
• HR management - qualifications?

Studies* show most 'likely' risks:

• Fire, flood, earthquake, other natural events.
  
  
• Theft or unauthorised access.
  
  
• Vandalism/damage by internal/external parties.
  
  
• Loss of 'profile' leading to outsourcing.
  
  
• Client demands not met.

Ungarelli (1984)

Some solutions (risk treatments)

• Do a risk assessment - id issues!
  
  
• Have a disaster recovery plan!
  
  
• Test the plan and review.
  
  
• Adequate insurance - are '$' enough?
  
  
• Security systems - facility design, training, awareness.
  
  
• OHS for staff and clients

So - risk treatments for the great Library?

• Environmental analysis - warning -Ceasar is coming!
  
  
• Business continuity/disaster recovery plans - key staff (scribes, tally keepers etc)
  
  
  • offsite storage
    
    
  • copies of scrolls

Risk management information

Source from:
url: - general info
Standard - AS/NZ 4360:2004
Practical Guides library issues:

• Howell 1994
  
  
• Doig and Jilovsky 1994 et al