Risk Management
Risk is not the enemy of strategy. Unexamined risk is.
Every organisation takes risks. That is what pursuing a goal means. Risk management is the discipline of deciding which risks are worth taking, understanding what could go wrong, and making sure the right people know before it does. It begins with the board saying how much risk it is willing to accept, because without that, no one below can judge what is reasonable.
Done well, it is a conversation held regularly and honestly, not a spreadsheet updated before each meeting. A good risk register ranks what matters, names an owner for each risk and says what is being done about it. A good board asks which risks are rising, which controls have never been tested, and what the organisation is not seeing. Frameworks such as ISO 31000 and the COSO enterprise risk management framework give boards a shared vocabulary, and governance codes from the King Code to the UK Corporate Governance Code expect the board to oversee risk.
This theme is about making risk a working part of decisions: how to identify it, weigh it, and keep the board and management looking at the same picture.
Directors and trustees, risk and audit committee members, executives, and risk officers.