Risk & Resilience

In his most recent article, Tim Leech explores whether Chief Legal Officers (CLOs), Chief Risk Officers (CROs), and Chief Audit Executives (CAEs) have a legal duty to brief the board on its fiduciary responsibilities related to escalating MCOs and associated risks. By diving into the roles of these executives, Tim Leech highlights their obligations to ensure that boards are well-informed about the risks that need to be managed and monitored to protect the organization.

The world is changing faster than ever, and with it, the landscape of risk and resilience. The 2025 KPMG Risk & Resilience Survey takes a deep dive into how organizations are facing these growing challenges. It clear that the era of “good enough” risk management is over. As risks grow in both size and complexity, companies can no longer afford to rely on outdated strategies. The survey offers crucial insights into what works, and what doesn’t, when it comes to building resilience in today’s fast-paced, volatile world.

The Bank of England has recently launched a consultation to update its approach to how banks and insurers should be managing the risks posed by climate change. The Prudential Regulation Authority (PRA), which oversees financial stability, is refining its expectations on how the sector can stay resilient as climate-related risks intensify. While this isn’t the first time the PRA has addressed the issue, having first issued guidelines back in 2019, the new proposals come as a response to the changing landscape of climate risk, which is evolving faster than many expected.

The world is shifting beneath our feet. From the rising tension between global powers to the rapidly evolving tech landscape, businesses are facing geopolitical risks that feel more real and immediate than ever. These risks no longer sit in the background of boardroom discussions; they’re at the forefront, shaping strategic decisions on a daily basis.

The European Insurance and Occupational Pensions Authority (EIOPA) has released its April 2025 risk dashboards, providing us with a snapshot of the current state of the European insurance and pension sectors. While the data paints a picture of stability overall, the outlook is far from simple. Geopolitical tensions, market volatility, and macroeconomic challenges continue to hover over the industry, creating an air of cautious optimism laced with uncertainty.

The Hong Kong Monetary Authority (HKMA) has released its Annual and Sustainability Reports, showcasing how the city’s financial sector is not only navigating the complexities of a changing global economy but also positioning itself at the forefront of green finance and innovation. Through a year of strategic initiatives, the HKMA has embraced resilience in the face of economic volatility and shown a steadfast commitment to sustainable growth, ensuring that Hong Kong’s financial ecosystem remains robust and adaptable.

Over the years, the term Integrated Risk Management (IRM) has increasingly become a focal point in discussions around governance, risk management, and compliance (GRC). While IRM gained limited traction in some circles, it’s important to remember that the concept of GRC is deeply rooted in a decades-long evolution, beginning with early work in risk management, compliance, and IT security. To understand where IRM fits, it's crucial to first understand how GRC came to be and why it continues to play a central role in managing risk and uncertainty to organizational objectives while ensuring integrity in organizations today.