{"id":1195,"date":"2021-03-15T09:00:00","date_gmt":"2021-03-15T09:00:00","guid":{"rendered":"https:\/\/independentaudit.com\/thinking-board-evaluator\/?p=1195"},"modified":"2021-04-08T14:55:07","modified_gmt":"2021-04-08T13:55:07","slug":"the-principal-risk-discussion-whats-it-for","status":"publish","type":"post","link":"https:\/\/independentaudit.com\/thinking-board-evaluator\/article\/risk-management\/the-principal-risk-discussion-whats-it-for\/","title":{"rendered":"The Principal Risk Discussion: what\u2019s it for?"},"content":{"rendered":"<div class=\"wpb-content-wrapper\"><p>[vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;yes&#8221; type=&#8221;grid&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;center&#8221; background_image_as_pattern=&#8221;without_pattern&#8221; z_index=&#8221;&#8221; padding_bottom=&#8221;32&#8243; css=&#8221;.vc_custom_1614037424418{margin-top: -48px !important;}&#8221;][vc_column][vc_column_text]<\/p>\n<h6>by <a href=\"https:\/\/www.independentaudit.com\/team\/richard-sheath\/\" target=\"_blank\" rel=\"noopener\">Richard Sheath<\/a><\/h6>\n<p>[\/vc_column_text][vc_empty_space height=&#8221;14px&#8221;]<a  itemprop=\"url\" href=\"http:\/\/..\/\" target=\"_self\" data-hover-background-color=\"#86002e\" data-hover-border-color=\"#86002e\" data-hover-color=\"#ffffff\" class=\"qbutton  small default\" style=\"color: #ffffff; border-color: #86002e; background-color:#86002e;\">Risk Management<\/a>[\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;yes&#8221; type=&#8221;grid&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;center&#8221; background_image_as_pattern=&#8221;without_pattern&#8221; z_index=&#8221;&#8221; padding_bottom=&#8221;32&#8243;][vc_column][vc_single_image image=&#8221;1196&#8243; img_size=&#8221;full&#8221; alignment=&#8221;center&#8221; qode_css_animation=&#8221;&#8221;][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;yes&#8221; type=&#8221;grid&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221; z_index=&#8221;&#8221; padding_bottom=&#8221;64&#8243;][vc_column css=&#8221;.vc_custom_1614037702073{padding-right: 9% !important;padding-left: 9% !important;}&#8221;][vc_column_text]<\/p>\n<section class=\"css-52mc3a\">\n<div>\n<p>For many boards this is the time of year for finalising the Annual Report. So that means, at least for UK listed companies, that it\u2019s time for the principal risk list. But after the upheavals and stresses of the past year, this time round boards have been prompted to ask \u201cwhat are we looking to achieve with this? What\u2019s it trying to capture?&#8221;<\/p>\n<\/div>\n<\/section>\n<section class=\"css-52mc3a\">\n<div><\/div>\n<div>\n<p>Few (if any?) had global pandemic on the list after Sars faded into the dark shadows. If that wasn\u2019t picked up, what else is being missed? Have we got the right approach? Boards are asking questions about the whole process of determining principal risks, and about the picture that emerges. And they\u2019re asking how the concept can be made more useful. Even if it\u2019s too late to restart this year\u2019s process, all should be looking ahead and thinking through how they are going to approach their discussion of risks in future. Here are some tips on what to think about, along with pointers on what doesn\u2019t work so well.<\/p>\n<\/div>\n<\/section>\n<p>[\/vc_column_text][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;yes&#8221; type=&#8221;grid&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221; z_index=&#8221;&#8221; padding_bottom=&#8221;64&#8243;][vc_column css=&#8221;.vc_custom_1614037710843{padding-right: 9% !important;padding-left: 9% !important;}&#8221;][vc_row_inner row_type=&#8221;row&#8221; type=&#8221;full_width&#8221; text_align=&#8221;left&#8221; css_animation=&#8221;&#8221; el_class=&#8221;custom_column_boxes&#8221;][vc_column_inner width=&#8221;5\/12&#8243; css=&#8221;.vc_custom_1614094328542{padding-top: 0px !important;padding-right: 0px !important;padding-bottom: 0px !important;padding-left: 0px !important;background-color: #f4f4f4 !important;}&#8221;][vc_column_text css=&#8221;.vc_custom_1613760211703{padding-top: 14px !important;padding-right: 22px !important;padding-bottom: 14px !important;padding-left: 22px !important;background-color: #449287 !important;border-radius: 10px !important;}&#8221;]<\/p>\n<h5>Good practices to consider&#8230;<\/h5>\n<p>[\/vc_column_text][vc_column_text css=&#8221;.vc_custom_1615812809563{margin-top: -10px !important;padding-top: 1px !important;padding-right: 22px !important;padding-bottom: 22px !important;padding-left: 22px !important;background-color: #f4f4f4 !important;}&#8221;]<\/p>\n<div class=\"css-btf7rs\">\n<p class=\"css-1wc1src\">Make sure you understand how the principal risk list is to be used \u2013 by the Board, by the Executive and by the organisation. If it\u2019s of practical value, a much more insightful and well-thought through picture will emerge. For the Board, this means that the list should provide a useful basis for strategic debate and for regular assessment of strategic positioning and the strategic risk profile.<\/p>\n<\/div>\n<p>[\/vc_column_text][\/vc_column_inner][vc_column_inner width=&#8221;2\/12&#8243;][vc_single_image image=&#8221;339&#8243; img_size=&#8221;full&#8221; alignment=&#8221;center&#8221; qode_css_animation=&#8221;&#8221; el_class=&#8221;rotateimg90&#8243;][\/vc_column_inner][vc_column_inner width=&#8221;5\/12&#8243; css=&#8221;.vc_custom_1614094316482{padding-top: 0px !important;padding-right: 0px !important;padding-bottom: 0px !important;padding-left: 0px !important;background-color: #f4f4f4 !important;}&#8221;][vc_column_text css=&#8221;.vc_custom_1614027379346{padding-top: 14px !important;padding-right: 22px !important;padding-bottom: 14px !important;padding-left: 22px !important;background-color: #ee3535 !important;border-radius: 10px !important;}&#8221;]<\/p>\n<h5>Things to avoid&#8230;<\/h5>\n<p>[\/vc_column_text][vc_column_text css=&#8221;.vc_custom_1615812815683{margin-top: -10px !important;padding-top: 1px !important;padding-right: 22px !important;padding-bottom: 22px !important;padding-left: 22px !important;background-color: #f4f4f4 !important;}&#8221;]<\/p>\n<section class=\"css-19v9fj9\">\n<div class=\"css-l748fp\">\n<div class=\"css-btf7rs\">\n<p class=\"css-1wc1src\">Producing a list just because you have to put one into the Annual Report. If it\u2019s not useful to anybody internally, it\u2019s unlikely to be of a quality that\u2019s much use to stakeholders.<\/p>\n<\/div>\n<\/div>\n<\/section>\n<p>[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;yes&#8221; type=&#8221;grid&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221; z_index=&#8221;&#8221; padding_bottom=&#8221;64&#8243;][vc_column css=&#8221;.vc_custom_1614037710843{padding-right: 9% !important;padding-left: 9% !important;}&#8221;][vc_row_inner row_type=&#8221;row&#8221; type=&#8221;full_width&#8221; text_align=&#8221;left&#8221; css_animation=&#8221;&#8221; el_class=&#8221;custom_column_boxes&#8221;][vc_column_inner width=&#8221;5\/12&#8243; css=&#8221;.vc_custom_1614094328542{padding-top: 0px !important;padding-right: 0px !important;padding-bottom: 0px !important;padding-left: 0px !important;background-color: #f4f4f4 !important;}&#8221;][vc_column_text css=&#8221;.vc_custom_1613760211703{padding-top: 14px !important;padding-right: 22px !important;padding-bottom: 14px !important;padding-left: 22px !important;background-color: #449287 !important;border-radius: 10px !important;}&#8221;]<\/p>\n<h5>Good practices to consider&#8230;<\/h5>\n<p>[\/vc_column_text][vc_column_text css=&#8221;.vc_custom_1615812821999{margin-top: -10px !important;padding-top: 1px !important;padding-right: 22px !important;padding-bottom: 22px !important;padding-left: 22px !important;background-color: #f4f4f4 !important;}&#8221;]<\/p>\n<div class=\"css-btf7rs\">\n<p class=\"css-1wc1src\">Work out what you\u2019re trying to identify. Are you highlighting the things that, if they crystalised, really would be life-threatening to the organisation? Or a threat to the achievement of this year\u2019s business plan? Or to long term value growth and sustainability? The list could look quite different depending on the answer. If it\u2019s useful, there might be sense in producing several lists with different objectives.<\/p>\n<\/div>\n<p>[\/vc_column_text][\/vc_column_inner][vc_column_inner width=&#8221;2\/12&#8243;][vc_single_image image=&#8221;339&#8243; img_size=&#8221;full&#8221; alignment=&#8221;center&#8221; qode_css_animation=&#8221;&#8221; el_class=&#8221;rotateimg90&#8243;][\/vc_column_inner][vc_column_inner width=&#8221;5\/12&#8243; css=&#8221;.vc_custom_1614094316482{padding-top: 0px !important;padding-right: 0px !important;padding-bottom: 0px !important;padding-left: 0px !important;background-color: #f4f4f4 !important;}&#8221;][vc_column_text css=&#8221;.vc_custom_1614027379346{padding-top: 14px !important;padding-right: 22px !important;padding-bottom: 14px !important;padding-left: 22px !important;background-color: #ee3535 !important;border-radius: 10px !important;}&#8221;]<\/p>\n<h5>Things to avoid&#8230;<\/h5>\n<p>[\/vc_column_text][vc_column_text css=&#8221;.vc_custom_1615812829109{margin-top: -10px !important;padding-top: 1px !important;padding-right: 22px !important;padding-bottom: 22px !important;padding-left: 22px !important;background-color: #f4f4f4 !important;}&#8221;]<\/p>\n<section class=\"css-19v9fj9\">\n<div class=\"css-l748fp\">\n<div class=\"css-btf7rs\">\n<p class=\"css-1wc1src\">Assuming that everybody understands and agrees on where you\u2019re trying to get to. That\u2019s unlikely to be the case, so contributions can arrive from different viewpoints and angles and then be merged into what purports to be a coherent list. That makes it difficult for readers to interpret, and reduces its value for oversight and for management.<\/p>\n<\/div>\n<\/div>\n<\/section>\n<p>[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;yes&#8221; type=&#8221;grid&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221; z_index=&#8221;&#8221; padding_bottom=&#8221;64&#8243;][vc_column css=&#8221;.vc_custom_1614037710843{padding-right: 9% !important;padding-left: 9% !important;}&#8221;][vc_row_inner row_type=&#8221;row&#8221; type=&#8221;full_width&#8221; text_align=&#8221;left&#8221; css_animation=&#8221;&#8221; el_class=&#8221;custom_column_boxes&#8221;][vc_column_inner width=&#8221;5\/12&#8243; css=&#8221;.vc_custom_1614094328542{padding-top: 0px !important;padding-right: 0px !important;padding-bottom: 0px !important;padding-left: 0px !important;background-color: #f4f4f4 !important;}&#8221;][vc_column_text css=&#8221;.vc_custom_1613760211703{padding-top: 14px !important;padding-right: 22px !important;padding-bottom: 14px !important;padding-left: 22px !important;background-color: #449287 !important;border-radius: 10px !important;}&#8221;]<\/p>\n<h5>Good practices to consider&#8230;<\/h5>\n<p>[\/vc_column_text][vc_column_text css=&#8221;.vc_custom_1615812836335{margin-top: -10px !important;padding-top: 1px !important;padding-right: 22px !important;padding-bottom: 22px !important;padding-left: 22px !important;background-color: #f4f4f4 !important;}&#8221;]<\/p>\n<div class=\"css-btf7rs\">\n<p class=\"css-1wc1src\">As well as defining the purpose of the whole exercise, be clear about what makes something a \u201cprincipal risk\u201d. How bad does something have to be to make it on to the list? And \u201cbad\u201d in what terms?<\/p>\n<\/div>\n<p>[\/vc_column_text][\/vc_column_inner][vc_column_inner width=&#8221;2\/12&#8243;][vc_single_image image=&#8221;339&#8243; img_size=&#8221;full&#8221; alignment=&#8221;center&#8221; qode_css_animation=&#8221;&#8221; el_class=&#8221;rotateimg90&#8243;][\/vc_column_inner][vc_column_inner width=&#8221;5\/12&#8243; css=&#8221;.vc_custom_1614094316482{padding-top: 0px !important;padding-right: 0px !important;padding-bottom: 0px !important;padding-left: 0px !important;background-color: #f4f4f4 !important;}&#8221;][vc_column_text css=&#8221;.vc_custom_1614027379346{padding-top: 14px !important;padding-right: 22px !important;padding-bottom: 14px !important;padding-left: 22px !important;background-color: #ee3535 !important;border-radius: 10px !important;}&#8221;]<\/p>\n<h5>Things to avoid&#8230;<\/h5>\n<p>[\/vc_column_text][vc_column_text css=&#8221;.vc_custom_1615812846158{margin-top: -10px !important;padding-top: 1px !important;padding-right: 22px !important;padding-bottom: 22px !important;padding-left: 22px !important;background-color: #f4f4f4 !important;}&#8221;]<\/p>\n<section class=\"css-19v9fj9\">\n<div class=\"css-l748fp\">\n<div class=\"css-btf7rs\">\n<p class=\"css-1wc1src\">Allowing inconsistencies that make it difficult to understand what is being included or excluded, and on what basis. It\u2019s important to avoid getting bogged down in definitional debate but some consistency is needed.<\/p>\n<\/div>\n<\/div>\n<\/section>\n<p>[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;yes&#8221; type=&#8221;grid&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221; z_index=&#8221;&#8221; padding_bottom=&#8221;64&#8243;][vc_column css=&#8221;.vc_custom_1614037710843{padding-right: 9% !important;padding-left: 9% !important;}&#8221;][vc_row_inner row_type=&#8221;row&#8221; type=&#8221;full_width&#8221; text_align=&#8221;left&#8221; css_animation=&#8221;&#8221; el_class=&#8221;custom_column_boxes&#8221;][vc_column_inner width=&#8221;5\/12&#8243; css=&#8221;.vc_custom_1614094328542{padding-top: 0px !important;padding-right: 0px !important;padding-bottom: 0px !important;padding-left: 0px !important;background-color: #f4f4f4 !important;}&#8221;][vc_column_text css=&#8221;.vc_custom_1613760211703{padding-top: 14px !important;padding-right: 22px !important;padding-bottom: 14px !important;padding-left: 22px !important;background-color: #449287 !important;border-radius: 10px !important;}&#8221;]<\/p>\n<h5>Good practices to consider&#8230;<\/h5>\n<p>[\/vc_column_text][vc_column_text css=&#8221;.vc_custom_1615812863729{margin-top: -10px !important;padding-top: 1px !important;padding-right: 22px !important;padding-bottom: 22px !important;padding-left: 22px !important;background-color: #f4f4f4 !important;}&#8221;]<\/p>\n<section class=\"css-19v9fj9\">\n<div class=\"css-l748fp\">\n<div class=\"css-btf7rs\">\n<div class=\"css-btf7rs\">\n<p class=\"css-1wc1src\">Tie it into scenario discussion. Strong boards have typically carved out time to consider short-term and long-term scenarios. Those who dismiss this as speculation are missing the point \u2013 the purpose isn\u2019t to make a forecast but to explore possibilities in order to gain a better understanding of the business model\u2019s strengths and weaknesses. Boards who do scenario planning find it very valuable \u2013 and this is partly because they do it in a structured way, including describing the risks that are identified in each scenario. Some of them will merit further evaluation. Risks identified in scenario planning can turn out to be significant in a wide range of scenarios, including today\u2019s reality.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n<p>[\/vc_column_text][\/vc_column_inner][vc_column_inner width=&#8221;2\/12&#8243;][vc_single_image image=&#8221;339&#8243; img_size=&#8221;full&#8221; alignment=&#8221;center&#8221; qode_css_animation=&#8221;&#8221; el_class=&#8221;rotateimg90&#8243;][\/vc_column_inner][vc_column_inner width=&#8221;5\/12&#8243; css=&#8221;.vc_custom_1614094316482{padding-top: 0px !important;padding-right: 0px !important;padding-bottom: 0px !important;padding-left: 0px !important;background-color: #f4f4f4 !important;}&#8221;][vc_column_text css=&#8221;.vc_custom_1614027379346{padding-top: 14px !important;padding-right: 22px !important;padding-bottom: 14px !important;padding-left: 22px !important;background-color: #ee3535 !important;border-radius: 10px !important;}&#8221;]<\/p>\n<h5>Things to avoid&#8230;<\/h5>\n<p>[\/vc_column_text][vc_column_text css=&#8221;.vc_custom_1615812871129{margin-top: -10px !important;padding-top: 1px !important;padding-right: 22px !important;padding-bottom: 22px !important;padding-left: 22px !important;background-color: #f4f4f4 !important;}&#8221;]<\/p>\n<section class=\"css-19v9fj9\">\n<div class=\"css-l748fp\">\n<div class=\"css-btf7rs\">\n<p class=\"css-1wc1src\">Dismissing scenario discussion as a waste of time, probably without ever having tried it properly. And then failing to follow through the thinking around what could go wrong, and in what circumstances. Many boards are now asking \u201cwhy didn\u2019t we have global pandemic on the list?\u201d It\u2019s fifteen or so years since SARS \u2013 remember when hand sanitiser first appeared at Reception, and all the contingency planning that went on? Since then it became widely taken for granted that the threat of uncontrolled infection had gone away, but of course it hadn\u2019t. And it\u2019s not just pandemics of course: technological change, competitor disruption, climate change, geopolitical shifts\u2026there\u2019s a lot to think through.<\/p>\n<\/div>\n<\/div>\n<\/section>\n<p>[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;yes&#8221; type=&#8221;grid&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221; z_index=&#8221;&#8221; padding_bottom=&#8221;64&#8243;][vc_column css=&#8221;.vc_custom_1614037710843{padding-right: 9% !important;padding-left: 9% !important;}&#8221;][vc_row_inner row_type=&#8221;row&#8221; type=&#8221;full_width&#8221; text_align=&#8221;left&#8221; css_animation=&#8221;&#8221; el_class=&#8221;custom_column_boxes&#8221;][vc_column_inner width=&#8221;5\/12&#8243; css=&#8221;.vc_custom_1614094328542{padding-top: 0px !important;padding-right: 0px !important;padding-bottom: 0px !important;padding-left: 0px !important;background-color: #f4f4f4 !important;}&#8221;][vc_column_text css=&#8221;.vc_custom_1613760211703{padding-top: 14px !important;padding-right: 22px !important;padding-bottom: 14px !important;padding-left: 22px !important;background-color: #449287 !important;border-radius: 10px !important;}&#8221;]<\/p>\n<h5>Good practices to consider&#8230;<\/h5>\n<p>[\/vc_column_text][vc_column_text css=&#8221;.vc_custom_1615812878893{margin-top: -10px !important;padding-top: 1px !important;padding-right: 22px !important;padding-bottom: 22px !important;padding-left: 22px !important;background-color: #f4f4f4 !important;}&#8221;]<\/p>\n<div class=\"css-btf7rs\">\n<p class=\"css-1wc1src\">Stand back, at least to start with. A Board should begin with a clean sheet, with each director asking \u201cwhat would be my top risks?\u201d (This simple question is quite enough if the ground has been prepared as outlined in the first few points of this bulletin.) Do that before comparing the board\u2019s aggregate list with management\u2019s. Differences will arise from the different points of view and these should stimulate useful discussion.<\/p>\n<\/div>\n<p>[\/vc_column_text][\/vc_column_inner][vc_column_inner width=&#8221;2\/12&#8243;][vc_single_image image=&#8221;339&#8243; img_size=&#8221;full&#8221; alignment=&#8221;center&#8221; qode_css_animation=&#8221;&#8221; el_class=&#8221;rotateimg90&#8243;][\/vc_column_inner][vc_column_inner width=&#8221;5\/12&#8243; css=&#8221;.vc_custom_1614094316482{padding-top: 0px !important;padding-right: 0px !important;padding-bottom: 0px !important;padding-left: 0px !important;background-color: #f4f4f4 !important;}&#8221;][vc_column_text css=&#8221;.vc_custom_1614027379346{padding-top: 14px !important;padding-right: 22px !important;padding-bottom: 14px !important;padding-left: 22px !important;background-color: #ee3535 !important;border-radius: 10px !important;}&#8221;]<\/p>\n<h5>Things to avoid&#8230;<\/h5>\n<p>[\/vc_column_text][vc_column_text css=&#8221;.vc_custom_1615812885445{margin-top: -10px !important;padding-top: 1px !important;padding-right: 22px !important;padding-bottom: 22px !important;padding-left: 22px !important;background-color: #f4f4f4 !important;}&#8221;]<\/p>\n<section class=\"css-19v9fj9\">\n<div class=\"css-l748fp\">\n<div class=\"css-btf7rs\">\n<p class=\"css-1wc1src\">Asking the board just to respond to a list from management, rather than doing their own thinking. (It\u2019s the difference between an open question and a leading question.) Getting the full benefit from the NEDs\u2019 different perspectives means creating the space for discussion, rather than starting with a collective stare at pages 121 to 125 on the portal &#8211; And if the Chair isn\u2019t hearing each director\u2019s opinion on the risks to the business, something\u2019s not working, and an opportunity to leverage different experience and views is being lost.<\/p>\n<\/div>\n<\/div>\n<\/section>\n<p>[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;yes&#8221; type=&#8221;grid&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221; z_index=&#8221;&#8221; padding_bottom=&#8221;64&#8243;][vc_column css=&#8221;.vc_custom_1614037710843{padding-right: 9% !important;padding-left: 9% !important;}&#8221;][vc_row_inner row_type=&#8221;row&#8221; type=&#8221;full_width&#8221; text_align=&#8221;left&#8221; css_animation=&#8221;&#8221; el_class=&#8221;custom_column_boxes&#8221;][vc_column_inner width=&#8221;5\/12&#8243; css=&#8221;.vc_custom_1614094328542{padding-top: 0px !important;padding-right: 0px !important;padding-bottom: 0px !important;padding-left: 0px !important;background-color: #f4f4f4 !important;}&#8221;][vc_column_text css=&#8221;.vc_custom_1613760211703{padding-top: 14px !important;padding-right: 22px !important;padding-bottom: 14px !important;padding-left: 22px !important;background-color: #449287 !important;border-radius: 10px !important;}&#8221;]<\/p>\n<h5>Good practices to consider&#8230;<\/h5>\n<p>[\/vc_column_text][vc_column_text css=&#8221;.vc_custom_1615812894962{margin-top: -10px !important;padding-top: 1px !important;padding-right: 22px !important;padding-bottom: 22px !important;padding-left: 22px !important;background-color: #f4f4f4 !important;}&#8221;]<\/p>\n<div class=\"css-btf7rs\">\n<p class=\"css-1wc1src\">Use the strategy as a starting point. A lot of thinking and time has been invested in agreeing the strategy \u2013 and the risks needs identifying in order to judge the uncertainties and the risk-adjusted returns. So the principal risks need to be tied into each strategic strand and important angles, such as threats to the business model, future performance, solvency or liquidity (good practical points that are to be found, believe it or not, in the UK Governance Code. It\u2019s worth a read).<\/p>\n<\/div>\n<p>[\/vc_column_text][\/vc_column_inner][vc_column_inner width=&#8221;2\/12&#8243;][vc_single_image image=&#8221;339&#8243; img_size=&#8221;full&#8221; alignment=&#8221;center&#8221; qode_css_animation=&#8221;&#8221; el_class=&#8221;rotateimg90&#8243;][\/vc_column_inner][vc_column_inner width=&#8221;5\/12&#8243; css=&#8221;.vc_custom_1614094316482{padding-top: 0px !important;padding-right: 0px !important;padding-bottom: 0px !important;padding-left: 0px !important;background-color: #f4f4f4 !important;}&#8221;][vc_column_text css=&#8221;.vc_custom_1614027379346{padding-top: 14px !important;padding-right: 22px !important;padding-bottom: 14px !important;padding-left: 22px !important;background-color: #ee3535 !important;border-radius: 10px !important;}&#8221;]<\/p>\n<h5>Things to avoid&#8230;<\/h5>\n<p>[\/vc_column_text][vc_column_text css=&#8221;.vc_custom_1615812907570{margin-top: -10px !important;padding-top: 1px !important;padding-right: 22px !important;padding-bottom: 22px !important;padding-left: 22px !important;background-color: #f4f4f4 !important;}&#8221;]<\/p>\n<section class=\"css-19v9fj9\">\n<div class=\"css-l748fp\">\n<div class=\"css-btf7rs\">\n<p class=\"css-1wc1src\">Divorcing the principal risk discussion from strategic thinking. It may be that management started from well-linked thinking, but by the time the principal risk list is brought to the Board, the linkages can have become difficult to discern or even lost. Even if the intent had been there originally, reducing it to a small number of risks can squeeze out the strategic coherence too.<\/p>\n<\/div>\n<\/div>\n<\/section>\n<p>[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;yes&#8221; type=&#8221;grid&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221; z_index=&#8221;&#8221; padding_bottom=&#8221;64&#8243;][vc_column css=&#8221;.vc_custom_1614037710843{padding-right: 9% !important;padding-left: 9% !important;}&#8221;][vc_row_inner row_type=&#8221;row&#8221; type=&#8221;full_width&#8221; text_align=&#8221;left&#8221; css_animation=&#8221;&#8221; el_class=&#8221;custom_column_boxes&#8221;][vc_column_inner width=&#8221;5\/12&#8243; css=&#8221;.vc_custom_1614094328542{padding-top: 0px !important;padding-right: 0px !important;padding-bottom: 0px !important;padding-left: 0px !important;background-color: #f4f4f4 !important;}&#8221;][vc_column_text css=&#8221;.vc_custom_1613760211703{padding-top: 14px !important;padding-right: 22px !important;padding-bottom: 14px !important;padding-left: 22px !important;background-color: #449287 !important;border-radius: 10px !important;}&#8221;]<\/p>\n<h5>Good practices to consider&#8230;<\/h5>\n<p>[\/vc_column_text][vc_column_text css=&#8221;.vc_custom_1615812914773{margin-top: -10px !important;padding-top: 1px !important;padding-right: 22px !important;padding-bottom: 22px !important;padding-left: 22px !important;background-color: #f4f4f4 !important;}&#8221;]<\/p>\n<div class=\"css-btf7rs\">\n<p class=\"css-1wc1src\">Use categorisation to avoid mixing up risks that require quite different responses. For some, the response will be strategic \u2013 and may even need to result in fundamental changes to the business model. For others, it might be a financial or operational response around capital and financing, strengthening core processes, people\u2026 And emerging versus current is often a useful grouping too.<\/p>\n<\/div>\n<p>[\/vc_column_text][\/vc_column_inner][vc_column_inner width=&#8221;2\/12&#8243;][vc_single_image image=&#8221;339&#8243; img_size=&#8221;full&#8221; alignment=&#8221;center&#8221; qode_css_animation=&#8221;&#8221; el_class=&#8221;rotateimg90&#8243;][\/vc_column_inner][vc_column_inner width=&#8221;5\/12&#8243; css=&#8221;.vc_custom_1614094316482{padding-top: 0px !important;padding-right: 0px !important;padding-bottom: 0px !important;padding-left: 0px !important;background-color: #f4f4f4 !important;}&#8221;][vc_column_text css=&#8221;.vc_custom_1614027379346{padding-top: 14px !important;padding-right: 22px !important;padding-bottom: 14px !important;padding-left: 22px !important;background-color: #ee3535 !important;border-radius: 10px !important;}&#8221;]<\/p>\n<h5>Things to avoid&#8230;<\/h5>\n<p>[\/vc_column_text][vc_column_text css=&#8221;.vc_custom_1615812924777{margin-top: -10px !important;padding-top: 1px !important;padding-right: 22px !important;padding-bottom: 22px !important;padding-left: 22px !important;background-color: #f4f4f4 !important;}&#8221;]<\/p>\n<section class=\"css-19v9fj9\">\n<div class=\"css-l748fp\">\n<div class=\"css-btf7rs\">\n<p class=\"css-1wc1src\">Confusing strategy and risk management. Of course they are interconnected. But keeping in mind the distinction will help bring more coherent thinking about risk responses, and should make the principal risk list more useful to management should some of the risks start crystalising. And don\u2019t become obsessed with sticking to a magic number. You don\u2019t want a long list, but the importance of any risk isn\u2019t actually constrained by how many fingers you have\u2026<\/p>\n<\/div>\n<\/div>\n<\/section>\n<p>[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;yes&#8221; type=&#8221;grid&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221; z_index=&#8221;&#8221; padding_bottom=&#8221;64&#8243;][vc_column css=&#8221;.vc_custom_1614037710843{padding-right: 9% !important;padding-left: 9% !important;}&#8221;][vc_row_inner row_type=&#8221;row&#8221; type=&#8221;full_width&#8221; text_align=&#8221;left&#8221; css_animation=&#8221;&#8221; el_class=&#8221;custom_column_boxes&#8221;][vc_column_inner width=&#8221;5\/12&#8243; css=&#8221;.vc_custom_1614094328542{padding-top: 0px !important;padding-right: 0px !important;padding-bottom: 0px !important;padding-left: 0px !important;background-color: #f4f4f4 !important;}&#8221;][vc_column_text css=&#8221;.vc_custom_1613760211703{padding-top: 14px !important;padding-right: 22px !important;padding-bottom: 14px !important;padding-left: 22px !important;background-color: #449287 !important;border-radius: 10px !important;}&#8221;]<\/p>\n<h5>Good practices to consider&#8230;<\/h5>\n<p>[\/vc_column_text][vc_column_text css=&#8221;.vc_custom_1615812932318{margin-top: -10px !important;padding-top: 1px !important;padding-right: 22px !important;padding-bottom: 22px !important;padding-left: 22px !important;background-color: #f4f4f4 !important;}&#8221;]<\/p>\n<div class=\"css-btf7rs\">\n<p class=\"css-1wc1src\">Tie it into the risk register. There might be different processes involved but at some point before it reaches the exco, the two need to come together.<\/p>\n<\/div>\n<p>[\/vc_column_text][\/vc_column_inner][vc_column_inner width=&#8221;2\/12&#8243;][vc_single_image image=&#8221;339&#8243; img_size=&#8221;full&#8221; alignment=&#8221;center&#8221; qode_css_animation=&#8221;&#8221; el_class=&#8221;rotateimg90&#8243;][\/vc_column_inner][vc_column_inner width=&#8221;5\/12&#8243; css=&#8221;.vc_custom_1614094316482{padding-top: 0px !important;padding-right: 0px !important;padding-bottom: 0px !important;padding-left: 0px !important;background-color: #f4f4f4 !important;}&#8221;][vc_column_text css=&#8221;.vc_custom_1614027379346{padding-top: 14px !important;padding-right: 22px !important;padding-bottom: 14px !important;padding-left: 22px !important;background-color: #ee3535 !important;border-radius: 10px !important;}&#8221;]<\/p>\n<h5>Things to avoid&#8230;<\/h5>\n<p>[\/vc_column_text][vc_column_text css=&#8221;.vc_custom_1615812942420{margin-top: -10px !important;padding-top: 1px !important;padding-right: 22px !important;padding-bottom: 22px !important;padding-left: 22px !important;background-color: #f4f4f4 !important;}&#8221;]<\/p>\n<section class=\"css-19v9fj9\">\n<div class=\"css-l748fp\">\n<div class=\"css-btf7rs\">\n<p class=\"css-1wc1src\">Failing to align the two risk pictures just because they\u2019re in different documents or emerge at different times. The principal risks don\u2019t have to tie in verbatim but it should be evident how they form an integrated whole.<\/p>\n<\/div>\n<\/div>\n<\/section>\n<p>[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;yes&#8221; type=&#8221;grid&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221; z_index=&#8221;&#8221; padding_bottom=&#8221;64&#8243;][vc_column css=&#8221;.vc_custom_1614037710843{padding-right: 9% !important;padding-left: 9% !important;}&#8221;][vc_row_inner row_type=&#8221;row&#8221; type=&#8221;full_width&#8221; text_align=&#8221;left&#8221; css_animation=&#8221;&#8221; el_class=&#8221;custom_column_boxes&#8221;][vc_column_inner width=&#8221;5\/12&#8243; css=&#8221;.vc_custom_1614094328542{padding-top: 0px !important;padding-right: 0px !important;padding-bottom: 0px !important;padding-left: 0px !important;background-color: #f4f4f4 !important;}&#8221;][vc_column_text css=&#8221;.vc_custom_1613760211703{padding-top: 14px !important;padding-right: 22px !important;padding-bottom: 14px !important;padding-left: 22px !important;background-color: #449287 !important;border-radius: 10px !important;}&#8221;]<\/p>\n<h5>Good practices to consider&#8230;<\/h5>\n<p>[\/vc_column_text][vc_column_text css=&#8221;.vc_custom_1615812949391{margin-top: -10px !important;padding-top: 1px !important;padding-right: 22px !important;padding-bottom: 22px !important;padding-left: 22px !important;background-color: #f4f4f4 !important;}&#8221;]<\/p>\n<div class=\"css-btf7rs\">\n<p class=\"css-1wc1src\">Test the logic. Each risk should have meaning. And it should lead to development of a risk management response, with actionable steps that can be monitored. Or if the risk response is \u201cthere\u2019s nothing we can do so we\u2019ll keep our fingers crossed and hope for the best\u201d, this should be made explicit so it\u2019s a position that is taken knowingly rather than accidentally.<\/p>\n<\/div>\n<p>[\/vc_column_text][\/vc_column_inner][vc_column_inner width=&#8221;2\/12&#8243;][vc_single_image image=&#8221;339&#8243; img_size=&#8221;full&#8221; alignment=&#8221;center&#8221; qode_css_animation=&#8221;&#8221; el_class=&#8221;rotateimg90&#8243;][\/vc_column_inner][vc_column_inner width=&#8221;5\/12&#8243; css=&#8221;.vc_custom_1614094316482{padding-top: 0px !important;padding-right: 0px !important;padding-bottom: 0px !important;padding-left: 0px !important;background-color: #f4f4f4 !important;}&#8221;][vc_column_text css=&#8221;.vc_custom_1614027379346{padding-top: 14px !important;padding-right: 22px !important;padding-bottom: 14px !important;padding-left: 22px !important;background-color: #ee3535 !important;border-radius: 10px !important;}&#8221;]<\/p>\n<h5>Things to avoid&#8230;<\/h5>\n<p>[\/vc_column_text][vc_column_text css=&#8221;.vc_custom_1615812959748{margin-top: -10px !important;padding-top: 1px !important;padding-right: 22px !important;padding-bottom: 22px !important;padding-left: 22px !important;background-color: #f4f4f4 !important;}&#8221;]<\/p>\n<section class=\"css-19v9fj9\">\n<div class=\"css-l748fp\">\n<div class=\"css-btf7rs\">\n<p class=\"css-1wc1src\">Making statements of the obvious or introducing tautologies. For example, if the purpose of the principal risk discussion is to assess threats to achieving the business plan, it is not helpful if the so-called risks are \u201ctargets will be missed\u201d and \u201cwe fail to implement the business plan\u201d. (Sadly, both are real examples.) Such \u201crisks\u201d can be restated as \u201cwe fail to manage the business\u201d \u2013 which invites a rather obvious sort of response.<\/p>\n<\/div>\n<\/div>\n<\/section>\n<p>[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;yes&#8221; type=&#8221;grid&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221; z_index=&#8221;&#8221; padding_bottom=&#8221;64&#8243;][vc_column css=&#8221;.vc_custom_1614037710843{padding-right: 9% !important;padding-left: 9% !important;}&#8221;][vc_row_inner row_type=&#8221;row&#8221; type=&#8221;full_width&#8221; text_align=&#8221;left&#8221; css_animation=&#8221;&#8221; el_class=&#8221;custom_column_boxes&#8221;][vc_column_inner width=&#8221;5\/12&#8243; css=&#8221;.vc_custom_1614094328542{padding-top: 0px !important;padding-right: 0px !important;padding-bottom: 0px !important;padding-left: 0px !important;background-color: #f4f4f4 !important;}&#8221;][vc_column_text css=&#8221;.vc_custom_1613760211703{padding-top: 14px !important;padding-right: 22px !important;padding-bottom: 14px !important;padding-left: 22px !important;background-color: #449287 !important;border-radius: 10px !important;}&#8221;]<\/p>\n<h5>Good practices to consider&#8230;<\/h5>\n<p>[\/vc_column_text][vc_column_text css=&#8221;.vc_custom_1615812972848{margin-top: -10px !important;padding-top: 1px !important;padding-right: 22px !important;padding-bottom: 22px !important;padding-left: 22px !important;background-color: #f4f4f4 !important;}&#8221;]<\/p>\n<div class=\"css-btf7rs\">\n<p class=\"css-1wc1src\">Make the principal risk discussion part of regular boardroom debate. And encourage the executives to tie the issues and proposals they bring to the Board into the principal risks. If the risks are that important, directors will want to know how a major initiative or development might impact them, and if it might cause new risks to make it onto the list.<\/p>\n<\/div>\n<p>[\/vc_column_text][\/vc_column_inner][vc_column_inner width=&#8221;2\/12&#8243;][vc_single_image image=&#8221;339&#8243; img_size=&#8221;full&#8221; alignment=&#8221;center&#8221; qode_css_animation=&#8221;&#8221; el_class=&#8221;rotateimg90&#8243;][\/vc_column_inner][vc_column_inner width=&#8221;5\/12&#8243; css=&#8221;.vc_custom_1614094316482{padding-top: 0px !important;padding-right: 0px !important;padding-bottom: 0px !important;padding-left: 0px !important;background-color: #f4f4f4 !important;}&#8221;][vc_column_text css=&#8221;.vc_custom_1614027379346{padding-top: 14px !important;padding-right: 22px !important;padding-bottom: 14px !important;padding-left: 22px !important;background-color: #ee3535 !important;border-radius: 10px !important;}&#8221;]<\/p>\n<h5>Things to avoid&#8230;<\/h5>\n<p>[\/vc_column_text][vc_column_text css=&#8221;.vc_custom_1615812979940{margin-top: -10px !important;padding-top: 1px !important;padding-right: 22px !important;padding-bottom: 22px !important;padding-left: 22px !important;background-color: #f4f4f4 !important;}&#8221;]<\/p>\n<section class=\"css-19v9fj9\">\n<div class=\"css-l748fp\">\n<div class=\"css-btf7rs\">\n<p class=\"css-1wc1src\">Positioning the discussion as a separate self-contained item on the board agenda. Yes, some longer-term emerging risks might wait until the annual strategy review. But some, due to their immediacy or significantly changing profile, would be better considered as part of the regular CEO Report. And if the principal risks are part of the regular risk report to a committee, make sure their strategic nature does not become subsumed as part of a process for reviewing the risk register.<\/p>\n<\/div>\n<\/div>\n<\/section>\n<p>[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;yes&#8221; type=&#8221;grid&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221; z_index=&#8221;&#8221; padding_bottom=&#8221;64&#8243;][vc_column css=&#8221;.vc_custom_1614037702073{padding-right: 9% !important;padding-left: 9% !important;}&#8221;][vc_column_text]On 20 January 2021 The Chartered Governance Institute published the final report arising from its\u00a0<a href=\"https:\/\/www.icsa.org.uk\/knowledge\/board-evaluation-report\" rel=\"noopener\"><em>Review of the effectiveness of independent board evaluation in the UK listed sector<\/em><\/a>.\u00a0 We welcome this as a significant step forward which will help to bring about consistently high standards in a still-evolving but already important discipline, and would encourage BEIS to accept its recommendations and set out a clear timetable for implementation.\u00a0 We will fully comply with the new Code of Practice for Board Reviewers, which very largely accords with our current practice, but does point us to some valuable refinements.\u00a0 Consequently, we will be making some changes to our client contracts and enlarging our website to give more information on our credentials, approach and independence.[\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.independentaudit.com\/wp-content\/uploads\/guidance-risk-78.png\" alt=\"Risk Management\" width=\"166\" height=\"39\"><br \/>\nFor many boards this is the time of year for finalising the Annual Report. So that means, at least for the UK listed companies, that it&#8217;s time for the principal risk list<\/p>\n","protected":false},"author":3,"featured_media":1196,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[15],"tags":[],"class_list":["post-1195","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-risk-management"],"_links":{"self":[{"href":"https:\/\/independentaudit.com\/thinking-board-evaluator\/wp-json\/wp\/v2\/posts\/1195","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/independentaudit.com\/thinking-board-evaluator\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/independentaudit.com\/thinking-board-evaluator\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/independentaudit.com\/thinking-board-evaluator\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/independentaudit.com\/thinking-board-evaluator\/wp-json\/wp\/v2\/comments?post=1195"}],"version-history":[{"count":3,"href":"https:\/\/independentaudit.com\/thinking-board-evaluator\/wp-json\/wp\/v2\/posts\/1195\/revisions"}],"predecessor-version":[{"id":1530,"href":"https:\/\/independentaudit.com\/thinking-board-evaluator\/wp-json\/wp\/v2\/posts\/1195\/revisions\/1530"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/independentaudit.com\/thinking-board-evaluator\/wp-json\/wp\/v2\/media\/1196"}],"wp:attachment":[{"href":"https:\/\/independentaudit.com\/thinking-board-evaluator\/wp-json\/wp\/v2\/media?parent=1195"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/independentaudit.com\/thinking-board-evaluator\/wp-json\/wp\/v2\/categories?post=1195"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/independentaudit.com\/thinking-board-evaluator\/wp-json\/wp\/v2\/tags?post=1195"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}