The report, entitled "Coping with the unknown: Risk management strategies for an uncertain world," is based on a survey of more than 1,000 executives and risk management leaders of Fortune 500 companies from around the world. The findings examine the critical challenge of coping with these unknown and potentially business crippling risks.
According to the report, companies are now more adept at managing internal risks thanks to well-developed enterprise risk management (ERM) programs. Yet these same ERM programs are less effective in dealing with external threats. The survey revealed that 'black swan' events, as known to risk management professionals, strike with no warning and will be among the greatest risks facing companies over the next 18 months. These events include those emanating from geopolitical events, economic developments, new technologies, talent and labor resources, global trade, commodity costs and terrorism. In the report, PwC discusses tools and techniques companies are using to deal with rising instability and risk management strategies that firms appear to be deploying effectively.
"According to our survey, more than 50 percent of companies feel they are not doing enough to manage external risks," said Dean Simone, leader of PwC's U.S. Risk Assurance practice. "Since these risks come from outside of the company, and usually without warning, management is often taken by surprise and may not be prepared to manage them effectively. To address these emerging risks, companies must look to new tools and take an innovative approach to understand their vulnerabilities and become more resilient."
To address the evolving risk landscape, PwC recommends the following risk management strategies for coping with unpredictable, external risks:
Use "reverse stress-testing" to identify vulnerabilities
Rather than running a typical stress-testing scenario, companies are starting from a failure scenario and working backward to understand their organization's level of resilience.
Manage crises as if they occur every day
Unpredicted risk events will happen, and companies must go beyond a disaster recovery mindset to ensure they can manage these events and assure business continuity. For some types of risk, this involves building buffers that provide the space needed to absorb shocks and respond to the crisis.
Enable a company-wide response to emerging threats
Threats on a scale that could endanger a firm's viability tend to require firm-wide responses. Companies should be prepared to respond to an actual risk event that may require firm-wide integration of multiple departments.
Integrate risk management and strategic planning
Strategic risks that often jeopardize a firm's survival are usually embedded within particular corporate strategies, therefore integration of strategy and risk is necessary to manage these risks effectively.
Do not focus exclusively on the downside of risk events
Firms must plan effectively for unexpected success, such as providing for better-than-expected product launches, or developing innovative ways to provide finance to reach new customers.
"Shifts in business strategies and organizational structures are also making firms more vulnerable to external risks," added Simone. "Globalization leads to expansion of operations into foreign markets where geopolitical, economic, and environmental risks can be high. These shifts have led companies to move from rigid organizational structures to extended enterprises with intricate linkages to suppliers, customers, and partners—providing greater flexibility, but also exposing them to greater risks."
Among the most important resources for a risk management leader is inspecting early-warning capabilities, which can enable the identification and tracking of emerging risks. This horizon-scanning strategy must be part of an ongoing process. The report states that more companies are adopting an approach in which risk leaders meet frequently to address threats that go beyond ERM, and utilize scenario planning.
To download a full copy of the report, Risk in Review, please visit: www.pwc.com/us/en/risk-assurance-services/publications/rir-risk-management-strategies.jhtml.
About PwC's Risk Assurance practice
PwC understands that significant risk is rarely confined to discrete areas within an organization. Rather, most significant risks have a wide-ranging impact across the organization. As a result, PwC's Risk Assurance practice has developed a holistic approach to risk that protects business, facilitates strategic decision making and enhances efficiency. This approach is complemented by the extensive risk and controls technical knowledge and sector-specific experience of its Risk Assurance professionals. The end result is a risk solution tailored to meet the unique needs of clients.
About the PwC Network
PwC firms help organizations and individuals create the value they're looking for. We're a network of firms in 158 countries with close to 169,000 people who are committed to delivering quality in assurance, tax and advisory services. Tell us what matters to you and find out more by visiting us at http://www.pwc.com.
© 2012 PricewaterhouseCoopers LLP, a Delaware limited liability partnership. All rights reserved. PwC refers to the US member firm, and may sometimes refer to the PwC network. Each member firm is a separate legal entity. Please see www.pwc.com/structure for further details.
SOURCE PwC US