Five questions for a more effective board risk committee
A risk report becomes useful when it changes the questions a committee asks and the actions it follows. I would organise the discussion around five questions that connect oversight with decisions.
What has changed since the last meeting?
Ask for a concise account of changes in exposure, assumptions and controls. A risk can keep the same rating while its underlying drivers deteriorate. The committee needs to see the movement beneath the rating, including new concentrations, delayed mitigations and changes in the external environment. The explanation should distinguish a real change in the business from a change in the way it is measured.
Where are we outside our appetite?
A risk appetite statement is most useful when management can connect it to current activity. Ask which limits have been approached or breached, how long exceptions have lasted and what decision is required. If an important exposure cannot be compared with the stated appetite, the committee should understand why and whether the framework needs revision.
Which assumptions are carrying the strategy?
Every strategic plan depends on assumptions about demand, funding, execution and people. Ask management to identify the assumptions whose failure would most affect the plan. A scenario discussion can then examine how those failures might combine. The purpose is to understand the organisation’s choices before a forecast misses its target.
Who owns the response?
Each material action needs an accountable executive, a due date and evidence that would demonstrate completion. A committee should be able to distinguish an action that has been discussed from one that has reduced the exposure. Repeated extensions deserve an explanation, especially when the original mitigation depended on a deadline.
What remains unresolved?
The record should preserve material challenges, information still required and the reasons for decisions. When a question returns three meetings later, members should be able to see what was previously known and why the earlier response was considered sufficient. This helps new members understand the history and existing members test the consistency of their judgement.
Make the next meeting easier to use
These questions work best when the paper and action log share the same structure. Ask for a short decision summary, references to the supporting evidence and an explicit account of the unresolved issues. The committee can then spend more time on the choices that require judgement. This approach informs my work on OneBetaRisk and the developing manuscript for The Intelligent Boardroom.