Operational risk is not an abstract concept confined to textbooks or the boardrooms of multinational corporations. It is the lived reality of every Canadian organization, from a sole proprietor running a consulting practice in Halifax to a construction firm managing multiple jobsites across Alberta, from a non-profit delivering social services in Winnipeg to a healthcare clinic operating in suburban Toronto. Understanding where operational risk originates is the first step toward managing it effectively, and Canadian organizations face a distinctive landscape of risk sources shaped by our regulatory environment, geographic realities, economic structure, and workforce characteristics. This lesson examines the most significant sources of operational risk that Canadian organizations encounter, providing a framework for identifying, understanding, and ultimately addressing the vulnerabilities that can disrupt operations, damage reputations, and threaten organizational survival.
The people within an organization represent both its greatest asset and one of its most significant sources of operational risk. Human factors encompass everything from unintentional errors made by well-meaning employees to deliberate misconduct, fraud, and workplace violence. In Canadian organizations, human-related risks are amplified by factors including labour market tightness in certain sectors, skills gaps in technical fields, and the complexity of managing increasingly diverse and distributed workforces. The errors that employees make are not random occurrences but rather predictable outcomes of system design, training adequacy, workload management, and organizational culture. When a bookkeeper at a manufacturing company in Mississauga accidentally processes a duplicate payment to a supplier, the root cause is rarely individual incompetence. More often, it reflects inadequate segregation of duties, insufficient system controls, excessive workload during month-end closing, or training that failed to address common error patterns. Canadian employment standards legislation, which varies across provinces and territories, creates additional complexity. The federal Canada Labour Code governs federally regulated industries such as banking, telecommunications, and interprovincial transportation, while provincial legislation such as the Employment Standards Act in Ontario, the Employment Standards Code in Alberta, and the Labour Standards Act in Quebec establishes baseline requirements for most private-sector employers. As of the date of authorship, these frameworks impose significant obligations on employers regarding termination, overtime, leaves of absence, and workplace standards, and failure to comply creates operational risk through potential litigation, regulatory penalties, and workforce disruption.