Risk Management Maturity Model

I am working on a Thesis involving RM Maturity Model.

Found the RKSM model within CMMi and the M_o_R model.

Additionally I found some "commercial" Maturity Models.


Anyone who can give me some references or pointers?




You need to be a member of Global Risk Community to add comments!

Join Global Risk Community

Votes: 0
Email me when people reply –


  • I am afraid that I am getting a wee bit muddled.  The discussion and related responses appears to range between enterprise risk management and elements of the risk universe that makes up enterprise risk management e.g finance and financial components such as insurance and actuary to IT of ITM. 


    Therefore Stef, may I ask what that you provide some clarity - risk management is so wide and can encompass so much.  Sincerely



  • Hello Dikankatla,


    Thanks for your link!!! This maturity model is new to me. I am doing quite some research on available MM's as a base for my thesis, so it will be added to "the collection".


    Best regards,


    Dikankatla Selahle said:
    Enterprise Risk Maturity model. You might find it useful
  • Enterprise Risk Maturity model. You might find it useful
  • RIMS has a maturity model as well
  • here are 2 files, extract of a book sponsored by the IRM, Institute of Risk Management by Stephaen Ward.

    Maturity model 2.pdf

    Capability and Maturity models.pdf

  • Hi Stef,


    I have just completed a PhD with a focus on risk management maturity and have also been applying the theory and refining the model through my current role (project and business risk management for a major mining company).  I reviewed almost 100 maturity models as a part of this research, a couple of which related directly to risk management, and developed my own model for use in analysing health and safety risk management systems via three case studies.  I am happy to discuss with you if you are interested.





  • I am currently working on a enterprise risk management (ERM) maturity model for the public sector and will probably be able to share some of the info within the next 10 weeks. The limitations may be that although I will use ISO 31000 as the foundation, I will be merging the South African (SA) legal requirements for public entities.  Lets stay in touch. Beulah
  • Stef,


    I have been developing risk management maturity or "capability" models for large complex organizations for the past ten years. I would be interested in learning more about your Thesis and perhaps sharing some of my findings and methods. I have sent a request to connect with you.



  • Thanks Vladimir, for your link.

    If you are interested in wheels & rims.... go to www.rims.com

    If you are interested in RM however.... you better check www.rims.org 

    Vladimir PULCHART said:

    Try www.rims.com - they have very good one.



  • All,


    Thank you all for your responses! Found some new models and some known in your reactions.

    Particularly interested in generic RM Maturity Models, the MM I am looking for (or have to develop) should be able to measure Maturity of RM in any circumstance/environment.

    Whether it be strategic, tactic, operational, financial, market, IT, ......... whether it be profit or non profit organisations,....


    I solemnly promise to present  my findings to this community!




This reply was deleted.

[Free COVID-19 Framework] What's the path to recovery look like?

We created a free presentation (attached), which discusses both global and organizational impacts of the COVID-19 pandemic, along with critical actions organizations should take immediately. This presentation introduces a framework that helps regions and organizations navigate a path to recovery via 9 potential scenarios. These scenarios capture outcomes related to GDP impact, public health response, and economic policies. The presentation also breaks down 6 immediate and critical actions…

Read more…
4 Replies · Reply by Steve Diaz Jul 8, 2023
Views: 204

If risk management is about decision making, are current risk management solutions irrelevant?

Now that the updated COSO and ISO risk management standards emphasize a connection to enterprise objectives and decision making, does this mean ERM and GRC solutions focused on risk registers and regulatory compliance are missing the true value of risk management?Will current risk management solutions evolve to integrate more decision support functionality or will standalone prescriptive analytics and other technology solutions take a more prominent role in enabling risk-informed…

Read more…
3 Replies
Views: 129

A question related to classification of instruments between trading and banking book.

We have an interesting question from one of our members.       "We usually perform OTC FX transactions with clients backed-to-back on the market (with Banks). Now we are going to perform a FX swap (i.e. Spot + forward) JPY/EUR for the Bank account for 1 week at the longest. The purpose is to get EUR place @ CB for LCR compliance purpose (no trading purposes). Bank's Management think that this should be considered as a trading position and therefore be classified within the Bank's trading book.…

Read more…
5 Replies · Reply by Prisha Singh Dec 26, 2023
Views: 305

Plunging oil prices: curse or blessing in disguise?

The recent sudden crash of oil prices has had a major impact on the world economy, leading to many troubled faces in the international arena. The Russians fear the effects of yet another powerful hit on their economy, Venezuela seems to be considering default and the Americans are weary of the consequences for its young and emerging shale oil industry. And then you have the Middle East, where the smallest match is enough to ignite the largest fire. But are these worries really justified or…

Read more…
1 Reply
Views: 89

Introducing the Global Risk Series - Book 1 Risk Management How Tos

Dear GlobalRisk Community member, Our community’s mission is to foster business, networking and educational explorations among members. Learn from some of the top experts in the industry as they clearly explain how to approach the most important Risk management concepts. Check out their expert tips and use the link at the end of each article to navigate back to the website to leave your comment or ask a question. Some of the topics include: How do you Explain Risk Appetite?  How to Prepare a…

Read more…
14 Replies · Reply by Boris Agranovich Sep 12, 2022
Views: 855

    About Us

    The GlobalRisk Community is a thriving community of risk managers and associated service providers. Our purpose is to foster business, networking and educational explorations among members. Our goal is to be the worlds premier Risk forum and contribute to better understanding of the complex world of risk.

    Business Partners

    For companies wanting to create a greater visibility for their products and services among their prospects in the Risk market: Send your business partnership request by filling in the form here!