Risk Intelligence
Most organizations have a risk process.
Fewer have risk intelligence.
Risk intelligence is the organization's ability to recognize weak signals, evaluate uncertainty with experienced judgment, and act before risks become events. It is distinct from risk compliance: an organization can maintain a complete risk register, hold regular risk reviews, and report to governance - while still operating with low risk intelligence. These articles examine the difference between risk documentation and the experienced judgment that changes decisions.
What risk intelligence governs
Risk intelligence determines whether the organization sees what is coming and acts on it with judgment, or treats risk as paperwork filed after the fact. It is distinct from risk compliance.
What strong risk intelligence looks like
- Risk ownership sits with people who have the experience to recognize what matters.
- Weak signals surface early and change decisions.
- The organization separates likelihood from wishful thinking.
- Risk is discussed before commitments, not after incidents.
What weak risk intelligence looks like
- Risk coordination is handed to whoever has capacity.
- The risk register is complete and no one reads it.
- Likelihood is treated as a feeling, not a probability.
- Risk is a compliance ritual disconnected from real decisions.
Diagnose the conditions behind risk
Articles · Risk
The Risk Register Nobody Reads
Most organizations have a risk register. Most risk registers are read once: during the review that required them. This is an attention problem, not a documentation problem.
Read article →
Why 'Likely' Is Not a Probability
When two risk reviewers assign different numerical meanings to the same word, the risk register is not a shared instrument - it is a collection of individual opinions formatted to look like one.
Read article →
Risk Ownership Without Authority
Naming a risk owner without empowering one creates the illusion of accountability, and leaves every significant risk actually unmanaged.
Read article →
The Organizational Pre-Mortem
The most productive risk tool most organizations never use is not a model or a matrix. It is a question: imagine this has already failed. What happened?
Read article →
Risk Appetite Is Not Alignment
Publishing a risk appetite statement is not the same as building an organization that operates within it. The gap between declaration and behavior is where governance fails.
Read article →
The Risk Experience Deficit
Organizations routinely assign risk coordination to whoever has capacity. When ownership rotates with team changes, risk identification separates from the experience required to recognize what actually matters.
Read article →
When the Least Experienced Person Owns Risk
A direct address to the leader who made the staffing decision: what you gave up when you assigned risk coordination to whoever had capacity, and what you can do about it now.
Read article →
More from the Library