A Recommended Framework For IP Risk Management

Recognizing IP risks in advance is the best way to mitigate them and avoid being blindsided, either by losing rights before they are protected or by an infringement claim. That’s according to a consultant’s post, based on a methodology from the Project Management Institute. Like most risk-management systems it rests on an implicit disclaimer: A sound policy can mitigate risks, but it can’t eliminate them.

The framework outlined here is structured around three basic steps: risk identification, risk assessment and risk response. A checklist of mitigation measures includes adding IP protection clauses to employment and contractor agreements; mandatory employee “awareness sessions”; limiting employees’ access to data to what is needed for their work; continuous monitoring to ferret out misappropriation; and regular cybersecurity review and upgrade.