The New World of Risk—and What to Do About It
Risk has always outpaced risk management, but the scale, complexity, and interconnectedness of risk today mean that businesses need a new approach.
By Clemens Elgeti, Juliet Grabowski, Michele Rigoni, Pascal Vogt, and Aljoscha Zahner
The rough going of the banking industry has been painful and jarring—but also informative.
Recent high-profile risk management failures have shown how consequential an inadequate balance sheet can be to a financial institution, its clients, and the greater economy. Meanwhile, CFOs in every sector must get risk management right to guide their companies through a formidable economic environment, with interest rates and inflation still on the rise.
Building a resilient risk management approach is critical for today’s businesses to handle diverse financial risks and avoid a billion-dollar failure. The proper balance of risk and return brings together several key elements, including short-term decisions, upskilling talent, and a solid understanding of the links between business drivers and risk. With a strong operating model, governance, and capabilities—all absent in the recent US banking failures—a company’s finance and treasury function will have the tools, data, and technology it needs to respond to volatility.
CFOs at financial institutions and companies throughout the global economy can execute several short-term measures to weather economic shocks and mitigate risks. Businesses should conduct continuous review of banking counterparts to manage counterparty risk and operational stability. Leaders should also consider diversifying banking partners.
CFOs should go further by diversifying their funding sources to maintain a healthy mix of bank financing, private capital, and capital markets funding, including commercial papers and secured and unsecured debt. This step avoids concentrating funds in one place—a mistake that led some corporate banking clients to experience significant funding gaps following the March collapse.
Corporate firms affected by an event such as the recent US bank failure could easily lose access to a committed capex line overnight. Diversifying sources would preserve alternate lines of funding even as the banking channel fails.
Corporate firms can focus on three main points to increase resilience to shocks.
Understand their financial risks and balance risk and return. Financial risks are part of any business model. For instance, foreign exchange risk is unavoidable while producing and selling in different currencies. Banks also face commodity price risk, interest rate risk, and the biggest trade-off when managing cash: liquidity risk.
Not all these risks can be eliminated or hedged, so leaders need to balance risk and return using a proper strategy. The finance function must also proceed with a clear definition of the amount of risk a firm is willing to take to pursue its business objectives (also known as a risk appetite framework). Knowing what risks are facing a business is critical. Leaders should treat individual risks as core elements of both the investment decision-making process and any corresponding business cases.
Hedging risks can present its own trade-offs or consequences, which makes it such a tricky balancing act. For example, buying excessive “insurance” from banking partners—say, large volumes of committed credit lines—avoids short-term liquidity issues. But paying the ongoing fees—a sort of unofficial insurance premium—hampers profitability and competitiveness, especially for unutilized lines.
There is often no one right or wrong way to make such decisions. What’s essential is that the executive team has full transparency around the underlying drivers. Leaders must engage in a dialogue around the relevant risks the organization is willing to take.
Another factor in risk management is time. Risk travels fast. The recent bank failure gained pace when a market devaluation of the securities portfolio was followed by a liquidity squeeze. CFOs should stay cautious of this common domino effect. Understanding how quickly the business can react to such challenges will help leaders determine what risks can be mitigated before the damage becomes too severe.
Various sectors each have their own considerations. Leaders in industrial goods, energy, and producing sectors should re-evaluate commodity hedges. For example, wherever raw materials are used, firms should balance cash collateral needs against liquidity risk inherited from commodity price risk. Firms hedging foreign exchange (FX) risk exposures through uncollateralized forwards and options should have a solid grasp on the bank credit counterparty risk attached to such options. Once transparency around the underlying risks is in place, leaders can assess risk against the associated returns and decide on the best action plan.
Strive for the right capabilities and operating model to understand the connection between financial drivers to manage risks. It is easy to talk about generating transparency on financial metrics and risks, and how they are connected. Implementation is much more difficult.
When facing any risk, the approach should include several key points.
The appropriate skillset of the finance team should be shaped by a solid understanding of the company’s business operations, financial drivers, and risk categories. Forming this team-level knowledge may require additional training for staff to understand and proactively manage risks. The training should address both a first-line business capacity and a second-line control function that sets risk management guidelines and advises on risk and returns.
A team must also create a well-understood KPI hierarchy with driver trees that connect operational drivers and financial outcomes, serving as both an early warning trigger and a limit system.
Firms should equip the data and IT infrastructure and tooling to report on performance in a timely and accurate manner. Reporting should be transparent to all critical stakeholders. This reporting relies on common calculation logic for metrics and risk-related KPIs, a harmonized data infrastructure with agreed upon data hierarchies and definitions, and clear owners for different data types.
It is also important to deploy integrated tooling that enables a flexible and dynamic ability to run stress and “what-if” scenarios (including reverse stress scenarios) across risk types. These scenarios should connect to forward-looking forecasting and planning exercises. Scenario analysis is quite useful to anticipate the impact of potential shocks and define mitigating actions proactively, preparing the organization with a contingency plan for when a crisis hits.
Put strong governance in place. Avoid “autopilot” risk management; instead, always be aware of what is happening throughout the business. Strive for strong checks and balances and embrace the concept of a “three lines of defense” model. This includes a first line that proposes risk management-related decisions and a second line to review and audit internal resources.
Financial risks are an executive, “top of the house” topic, and the CEO must be informed on the various challenges facing the company. Choices around refinancing risk, interest rate risk, commodity risk, and FX risk are all too big for CFOs to handle alone. The C-suite must be educated on the inner workings of the balance sheet—and the CEO’s engagement with financial risk management must be consistent.
They must consider whether an ALCo (Asset Liability Management Committee) should handle decisions regarding a firm’s financial risks, strive for the right cadence of the committee’s decision-making meetings, and embed financial risk management proactively into other planning processes, such as ongoing forecasting and annual planning. The CEO should be part of an ALCo or at least informed regularly of the committee’s discussion outcomes.
By initiating the transformation to stronger risk management today, companies can fortify themselves against the inevitable disruptions that lie ahead—even if crisis happens fast.
CFOs should ask themselves and their teams the following questions:
A company finds a variety of benefits by strengthening its balance sheet and financial risk management framework.
In so doing, a business will enjoy an integrated view of financial risk-return trade-offs across foreign exchange, commodities, interest rates, and credit. It will optimize working capital and liquidity across regions and business lines, while its leaders gain transparency on aggregated cash positions to enable accurate forecasting.
Such a company will become more effective at managing its target debt rating and financial KPIs with minimum financial resources, resulting in increased capital productivity and performance and a rapid enterprise-wide perspective on liquidity to inform strategic discussions. It will be ready to react to shocks, using tools and transparency to anticipate how to manage risks proactively before and during a crisis.
Building a resilient balance sheet in a very dynamic and volatile environment is key for long long-term success.
Read More
Read more insights from BCG’s teams of experts.
Risk has always outpaced risk management, but the scale, complexity, and interconnectedness of risk today mean that businesses need a new approach.
Everyone from customers to investors wants AI done right. CEOs who take the lead in implementing Responsible AI can better manage the technology’s many risks.
BCGのリスク、コンプライアンス領域のコンサルティングでは、戦略、トランスフォーメーション、技術の各側面にわたる専門能力を通じて、クライアントの成長への取り組みをサポートします。
Our CFO insights help leaders excel in balancing the CFO agenda, managing daily operations, and driving transformation for long-term success.