How do you successfully implement a risk management system while aligning with existing organisational processes? And what does it take to embed it across the entire organisation in practice? In our recent webinar, Sonja Pullinen from Rauma Marine Constructions shared how their team has tackled these questions using Granite’s tools.
Laying the Groundwork for Risk Management at Rauma Marine Constructions
At Rauma Marine Constructions (RMC), the early stages of developing a risk management framework were guided by a clear set of principles. The aim was never to build a heavy, separate process, but rather to integrate risk management into the company’s existing management systems, operations, and everyday practices. The approach was pragmatic: focus on genuine needs, leverage employee expertise, and identify risks in a realistic forward-looking timeframe, but without worrying excessively about distant what-ifs.
During the planning phase, RMC placed strong emphasis on understanding the company’s actual needs and creating a tool that would support rather than complicate operations. The goal was to ensure that every employee could see the value of the system and understand when and why to use it. All RMC staff have access to the Granite platform, a decision that underlines the organisation-wide nature of their risk management approach. According to Pullinen, this openness has helped reinforce the sense among employees that their input matters and that their voices are valued.
Training and Communication: Key to Implementation
Training played a central role in embedding the risk management process throughout the organisation. The objectives were clear: foster learning and connection with the topic, encourage questions and feedback, promote interaction, and create a safe, inclusive space where everyone’s ideas are welcome. Using relatable team- and department-specific examples and keeping the language simple and jargon-free helped people engage with the subject matter.
Although there was no real resistance to the change, training sessions did raise questions about the purpose of the tool. These were addressed through open dialogue, explaining the rationale behind the system. Access to the Granite platform was granted only after training to ensure that all users understood the purpose and function of the system before receiving notifications via email.
To avoid what Pullinen calls a “risk salad”—a messy, unstructured collection of entries—risk coordinators play a vital role in monitoring their teams’ risk registers. Training also provided practical guidance on how to log risks, improving the overall quality of information. Employees are encouraged to help find solutions: each risk is assigned an owner, and control measures are developed together with the experts who best understand the issue.
Lessons Learned from the Rollout
Pullinen highlights several key takeaways: the critical importance of leadership support, proper resourcing during implementation, and the value of a relaxed training atmosphere in promoting engagement and learning. Risk management becomes a natural part of an organisation’s leadership tools when managers and team leads can easily review the most significant business and team-level risks within the Granite platform.
RMC’s structure supports a clear division of responsibility, which helps prevent risks from being siloed or overlooked. Risk coordinators, alongside their regular roles, act as in-house experts in identifying and documenting risks.
All in all, RMC’s experience shows that successful implementation of a risk management system depends on thorough planning, dedicated training efforts, clear communication, and the commitment of the entire organisation. The insights shared by Sonja Pullinen offer valuable perspectives for any organisation embarking on a similar journey.
Interested in finding out which risk management solutions could benefit your organisation most in the future? Get in touch with one of our experts for a chat.
Published on 24 March 2025