Risk
Risk appetite that boards actually use
Too many risk appetite statements are approved once a year and never consulted again. A few design choices make them part of real decisions.
Read more: Risk appetite that boards actually useRisk Management
Enterprise and operational risk, risk appetite, scenario analysis and resilience.
Introduction
Risk management turns uncertainty into decisions. It covers how organisations identify, assess and respond to risk — and how they stay resilient when things go wrong.
The discipline is shifting from registers and heat maps towards scenarios, quantification and resilience: understanding what could disrupt the organisation and how it would recover.
Governance
Risk appetite statements, risk committees and the board’s view of principal risks.
Controls
Key risk indicators, control self-assessment and the link between risks and controls.
Risk
Enterprise, operational, strategic and emerging risk frameworks and methods.
Compliance
Supervisory expectations for risk management in regulated sectors.
Sub-themes
The topics this pillar covers in its events, articles and working groups.
Enterprise risk management
Frameworks that connect strategy, risk and performance.
Operational risk & resilience
Important business services, impact tolerances and recovery.
Risk appetite & tolerance
Translating board appetite into usable limits.
Scenario analysis & stress testing
Severe but plausible scenarios that inform decisions.
Third-party & supply-chain risk
Outsourcing, concentration and fourth-party exposure.
Emerging & geopolitical risk
Horizon scanning and early-warning indicators.
Risk culture
Behaviours, incentives and the willingness to escalate.
Risk data & quantification
Data quality, aggregation and quantitative methods.
Regulatory watch
The frameworks and regulation we track for this pillar. Updates are published as Insights.
Europe
- Digital Operational Resilience Act (DORA) for financial entities
- European supervisory expectations on risk governance and risk data
- Risk management requirements under Solvency II and the Capital Requirements Directive
GCC
- Central bank risk management and operational resilience guidance
- Enterprise risk management mandates for listed companies and government entities
- Business continuity and resilience standards
Global
- ISO 31000 Risk management — Guidelines
- COSO Enterprise Risk Management — Integrating with Strategy and Performance
- Basel Committee Principles for Operational Resilience
Events & webinars
Upcoming sessions for this pillar.
New dates are being finalised. Join the network to hear about upcoming roundtables, webinars and panels first.
Articles & insights
Analysis and regulatory updates from practitioners.
Expert contributors
The practitioners who lead and contribute to this pillar.
Replace the placeholders with confirmed pillar leads and contributors (photo, name, role, organisation).
Pillar lead
[Contributor name]
[Role]
[Organisation]
[Organisation]
Contributor
[Contributor name]
[Role]
[Organisation]
[Organisation]
Contributor
[Contributor name]
[Role]
[Organisation]
[Organisation]
Bring your expertise to the Risk Management pillar.
We invite women working across Governance, Risk, Internal Control, Compliance and related disciplines to express their interest in joining Ladies in Control and contributing to its development.