Recent, unanticipated, and often alarming events encompassed by such phenomena as the COVID
pandemic, SolarWinds hack, and the volatility of the cryptocurrency market have emphasized both the
necessity and importance of enterprise risk management (ERM) in the health and longevity of
organizational operations. Although historically utilized more frequently and robustly within the private sector, ERM has nonetheless seen more recent application to various areas of the public sector, including areas related specifically to federal operations (Holzinger et al., 2018).

A primary challenge faced by federal agencies in integrating ERM into organizational culture has been an incomplete understanding of the fundamental tenets of functional ERM versus other forms of risk management (e.g., transactional,
internal control testing, etc.; Miller et al., 2022).

The Flip This RiskBook Series, including that for Enterprise Security, helps address the above -described challenge by providing both the foundational principles upon which ERM is built and communicating the rationale for its use in various settings. Unlike traditional ERM texts which focus almost exclusively on building a theoretical understanding of the field, Flip This Risk for Enterprise Security places these principles within a practical framework of illustrative examples (i.e., case studies) that are relatable to multiple audiences and end-users. In so doing, the book serves as both a guide and benchmark for the successful application and integration of ERM into an organization’s culture.

A noteworthy aspect of Flip This Risk for Enterprise Security is the degree to which it, through individual case studies, incorporates questions often asked in other forms of organizational management: How do I define a risk? How do you measure success? How is compliance ensured? These aspects of the series are noteworthy because they illustrate a fundamental tenet of ERM: that it cannot exist in a vacuum and therefore functions most effectively when integrated into other forms of organizational management as
part of a holistic approach toward achieving a proactive versus reactive organizational culture.

Given the myriad of challenges currently faced by both the public and private sectors, a positive and practical
resource like the Flip This Risk Series is both timely and refreshing!

Business is risky. Not talking about risk is a recipe for failure. Enter Karen Hardy and her risk management communication methods. In Flip this Risk® for Conversations, Karen teaches her readers how to communicate with management, stakeholders, and the whole corporation concerning risk issues. Early in the book, Karen explains the diverse types of communication and the barriers to effective communication. As with any topic, the discussion of risk leans heavily on one’s ability to communicate well. When one learns how to communicate well, they have already won half the battle. Karen urges those in a position of management to learn how to communicate about risk and do it often. She teaches her audience how to flip the various risks and make their corporation successful.

Karen Hardy brings her expertise to the fore in Flip this Risk® for Conversations. Her style of writing is conversational, making the reader feel like they have entered Karen’s office and are having a personal chat with her. She shares her knowledge in a non-threatening manner and Karen does not judge failures. Instead, she shows the path to success. This book is a gold mine for business risk managers. They will learn how to lead their company into lowering the various risks involved in any business. In addition, Karen helps the risk manager to overcome any fear in discussing severe risk factors. This book is essential for knowing about proper risk management. Finally, Karen does not overstate the need to learn how to flip risks.