Risk oversight and the board: Navigating the evolving terrain

  • August 24, 2022

We’re living in an era of unforeseen events that give rise to risks, including geographic conflicts and a global pandemic — a “black swan” event (something so unpredictable that it’s not on anyone’s radar) with far-reaching economic and social consequences. While a company can’t always anticipate what might be around the corner, strong risk oversight by the board can help the company respond with more rigor and agility. The number and types of risks the board oversees continue to grow, even as their nature changes. Some become more likely as businesses are more interconnected. Some are likely to impact just a certain area of the business. Others could severely impact the entire brand.

Download the report

The evolution of enterprise risk management (ERM)

ERM has always been about identifying and managing the top risks to the organization. That hasn’t changed. The inputs, the methodology, the output and the overall process have—because they’ve had to. As depicted below, there are several drivers for the evolution of ERM and risk oversight processes.

The link between strategy and risk

Large institutional investors have been pushing for more information about how a company’s statement of purpose is linked to its long-term strategy and success. Let’s use environmental, social and governance (ESG) risks to illustrate this. For many companies, these risks were already on the radar — somewhere. But the recent focus by large institutional investors, combined with an increase in shareholder proposals seeking disclosure, have brought these risks to the forefront. Large institutional investors are suggesting that ESG risks could have an impact on the long-term sustainable value of the company.

Learn more

For more discussion on ESG and ERM, read Safeguarding trust: the board’s role in integrating ESG and ERM.

First things first: Board composition

Risk oversight is a full board responsibility. Having diverse skills, backgrounds and experiences on the board is vital to understanding the broad range of risks a company can face. It is important to have some board members with deep expertise in the industry who can help anticipate what’s to come. On the other hand, it is also important to have fresh perspectives—whether it’s new directors, those with experience in different industries or different skill sets—to view risk through different lenses. Directors who have specific risk management expertise can also bring real value.

Understanding and maximizing ERM

In conclusion...

In a business risk environment that is becoming more complex and interconnected, boards play a crucial role in overseeing risk and keeping shareholders informed. 

  • To begin, boards can start by looking around the table. Is there diversity of experience, thought, gender and race to bring different perspectives on risk?
  • Boards will also want to understand their company’s ERM program and how they can contribute to that program. Additionally, they will want to spend time on their own structure for oversight.
  • Finally, boards will not want to forget about the company’s various stakeholders—what information is provided to them about the company’s risk management programs and activities?

By examining and refining its approach to risk oversight, a board can deliver enhanced value to the company and its shareholders.

Our insights. Your choices.

Get started with PwC's preference center

Contact us

Ray  Garcia

Ray Garcia

Partner & Leader, Governance Insights Center, PwC US

Paul DeNicola

Paul DeNicola

Principal, Governance Insights Center, PwC US

Stephen G. Parker

Stephen G. Parker

Partner, Governance Insights Center, PwC US

Brian Schwartz

Brian Schwartz

Partner, Governance Insights Center, PwC US

Jamie Gamble

Jamie Gamble

Managing Director, PwC US

Catie Hall

Catie Hall

Director, Governance Insights Center, PwC US

Carin  Robinson

Carin Robinson

Director, Governance Insights Center, PwC US

Follow us
Hide

Required fields are marked with an asterisk(*)

Your personal information will be handled in accordance with our Privacy Statement. You can update your communication preferences at any time by clicking the unsubscribe link in a PwC email or by submitting a request as outlined in our Privacy Statement.