The Risk Victim
Xcavator Inc has been in operation for just under a decade. Its strong reputation places it on top of local GCs’ calling lists when excavation and grading work is needed. Unfortunately, management is a bit closed-minded to installing risk control procedures.  Xcavator Inc has been lucky during its last few years of growth and has grown a little cavalier, mostly due to effects of the success paradox. But all games of Russian Roulette must come to an end.

The Risk Impact
While grading for a public works project, Xcavator Inc hired a third-party to off haul dirt from the construction site. The expense for off hauling dirt wasn’t part of the original contract, but Xcavator received a verbal change order from the public agency’s construction manager to incur the extra cost.

The bill for off hauling came to $20,000 and Xcavator Inc added the additional expense to its next invoice. But the public angency rejected the extra cost, stating that it hadn’t approved the change order. Xcavator Inc tried to produce a valid change request, but since the order was verbal, none could be produced. And to compound matters, the construction manager who had given that verbal order was no longer with the agency.

The Lesson
Faced to absorb the $20,000 expense, Xcavator Inc management set out to lay blame. Ultimately, the superintendent had blame for ordering the hauling company to begin work. With proper controls, there should have been at least two responsible parties: the superintendent making a request and the project manager approving the request.  Lack of a written change request should have been a red flag for one or the other responsible parties. This weakness would have been uncovered by the MyRiskControl system during a review of the Contract Non-compliance risk factor.

This story helps illustrate how Enterprise Risk Management shadows its own success. Xcavator Inc learned a hard lesson. Whether it begins to get serious about installing risk controls has yet to be seen. But even if it does, the reward for installing controls after a disaster is greatly reduced. However, if the controls were in place from day 1, we would never know the value Enterprise Risk Management can have.