It is quite common for risk professionals not to talk to senior executives or board members.

After all, they probably think we are technical staff or analytical specialists involved in the detail of the business, and not relevant to the strategic direction of the organization. And perhaps we think that executives are too important or too busy to waste their valuable time listening to us.

These two attitudes are both completely wrong.

The truth is that risk professionals hold crucial information on key threats and opportunities that could have a major effect on the overall business. Senior decision-makers who set the strategy for the organization need to be aware of these risks in order to avoid potential pitfalls and create maximum value. So it is important for those of us who understand risk to have a voice at the highest level.

One way to ensure that we are heard by executives is to ask key risk-related questions that focus their attention on the uncertainties that matter to organizational strategy. We need to help them understand why risk is important to their role, and how understanding risk exposure can make their task easier.

Here are seven questions risk professionals should ask the board:

  1. Is our overall strategy well-defined and communicated?
  2. Is our risk appetite for this strategy understood and expressed in measurable risk thresholds?
  3. Are we considering a sufficiently broad range of risk sources in our risk landscape?
  4. Do we understand the key risks inherent in pursuing our chosen strategy, including both threats and opportunities?
  5. Have we mapped strategic risks to key performance and value measures in the business?
  6. Are we comfortable with the level of risk exposure that our chosen strategy entails?
  7. Do we regularly reassess our business strategy in the light of the evolving risk landscape?

If the answer to any of these questions is not a clear and confident "yes," then we can support our senior executive colleagues to make best use of risk information in strategic decision-making:

  1. We can help executives to clarify their strategic intent and express it in terms that are specific, measurable, achievable, relevant and timely (SMART). We can also assist in designing effective communications to ensure that everyone knows where the organisation is headed.
  2. We understand how to define corporate risk appetite, and how to express it in measurable risk thresholds that translate into specific risk assessment criteria across the business.
  3. We know that risk comes from many sources, and we can help colleagues look for risk in unfamiliar places.
  4. We are experts in identifying and prioritizing risks, including both threats and opportunities.
  5. We recognize that all risks are linked to objectives, and strategic risks are those which would affect the key drivers of value at corporate level.
  6. We know how to compare current risk exposure with organisational risk capacity, and how to manage risk in order to remain within our chosen risk thresholds.
  7. We know that risk is a dynamic challenge, constantly changing and evolving, and we are committed to keeping risk information up to date so that it can be used to make strategic and tactical decisions across the organization.

Every organization will benefit from an active partnership between its senior decision-makers and its risk professionals. This will ensure that executives take full account of risk when setting organizational strategy, enabling them to create value from uncertainty and maximize benefits for their stakeholders.