By Dr. Jolene Morse
for the 2024 Risky Women Writing Competition, presented in partnership with Bovill Newgate
This article dives into Enterprise Risk Management (ERM) as a vital framework for aligning strategy with risk appetite, emphasizing its role in fostering growth rather than mere compliance. It addresses the challenges of overcoming negativity bias in risk perception and advocates for a proactive risk culture that embraces opportunities, driving innovation and long-term success.
Enterprise Risk Management (ERM) is a comprehensive approach to identifying, quantifying, and managing risks across an organization. Far from being a mere compliance exercise, ERM is critical in aligning an organization’s strategic direction with its risk appetite, enabling better decision-making, reducing earnings volatility, and lowering risk premiums. However, while ERM promises significant value, many organizations struggle to create programs that are both practical and viewed as integral to business growth.
The real challenge lies in moving beyond compliance-driven risk assessments and adopting a proactive risk culture that minimizes unexpected losses while embracing opportunities. When organizations limit ERM to a checkbox exercise aimed at regulatory compliance, they miss the chance to derive real value from risk management. True ERM value is realized when organizations see it as a framework for growth, not just loss prevention.
However, a fundamental challenge faced by risk professionals is the prevailing perception of risk as a purely negative force. In most organizations, the success of a risk management program is measured by how well it prevents losses, rather than by how well it enables positive risk-taking. This raises an important question: why is risk still viewed through such a negative lens?
The roots of this issue lie in human psychology. Nobel laureate Daniel Kahneman, along with Amos Tversky, demonstrated through their “prospect theory” that human decision-making is often biased by a fear of loss. Studies show that the emotional impact of losing something is more intense than the joy of gaining something of equivalent value. This negativity bias is a product of human evolution, where survival often depended on being hyper-aware of potential dangers. Our brains, are hardwired to focus on negative stimuli. This is known as “positive-negative asymmetry” or negativity bias, where negative experiences stick in our memories much more vividly than positive ones.
This negativity bias has a profound impact on how we perceive risk. We tend to associate risk with potential losses and threats, and as a result, we are more inclined to try to avoid risk altogether. This mindset can prevent organizations from seeing the opportunities that often come with taking calculated risks.
Consequently, this negativity bias has a profound effect on how individuals and organizations approach risk. Most people tend to associate risk with potential losses, leading them to take a conservative approach or avoid taking risks altogether. This mindset can prevent organizations from seeing the opportunities that come with taking calculated risks. If risk is always viewed as something to be avoided, growth and innovation will be stifled.
Therefore, shifting the perception of risk requires an understanding of the difference between fear- based and risk-based decision-making. Fear-based decision-making is driven by anxiety and stress and focuses solely on avoiding negative outcomes. While such an approach may reduce immediate risks, it often comes at the cost of long-term growth. In contrast, risk-based decision-making is a rational process that assesses both the risks and benefits of a decision. It acknowledges that risk is inherent in any endeavour, but it seeks to manage those risks in a way that allows for growth and opportunity.
The goal for organizations is to find the right balance between too much and too little fear in their decision-making processes. Fear, when appropriately matched to real threats, can be a useful guide in risk management. However, excessive fear, especially when based on imagined or misunderstood risks, can lead to poor decisions. Research has shown that perceived risks are often inversely related to perceived benefits—when people feel positively about an activity, they tend to downplay its risks. Conversely, fear can cause them to overestimate the benefits of protective measures, even if they are unnecessary or ineffective.
Striking the right balance between fear and risk requires educating oneself about the true nature of risks and viewing them through the proper lens. In practice, this means organizations should adopt risk management frameworks that allow them to make intelligent decisions while embracing a healthy margin for error.
Businesses today operate in an environment of rapid change and increasing volatility. In such an environment, risk should be embraced as a tool for growth, rather than being seen merely as a safeguard against loss. Organizations that limit risk management to a compliance-driven exercises will not achieve the competitive advantages that come from strategic risk-taking. Instead, they should challenge the status quo and seek to leverage risk as an enabler of business growth and innovation.
Ultimately, organizations face a choice: they can either remain in their comfort zones, minimizing risks to avoid discomfort, or they can challenge themselves to embrace risk and drive growth.
Discomfort is often a powerful motivator for change, and without risk, there can be no meaningful improvement. In the long run, growth is impossible without the willingness to take on and manage risks effectively.