リスク管理とは何か、そしてなぜ重要なのか？

What Is Risk Management & Why Is It Important? | HBS Online Skip to Main Content Strategy What Is Risk Management & Why Is It Important? By Kate Gibson on October 24, 2023 Share via Facebook Share via LinkedIn Print Share via email Businesses can’t operate without risk. Economic, technological, environmental, and competitive factors introduce obstacles that companies must not only manage but overcome. According to PwC’s Global Risk Survey , organizations that embrace strategic risk management are five times more likely to deliver stakeholder confidence and better business outcomes and two times more likely to expect faster revenue growth. If you want to enhance your job performance and identify and mitigate risk more effectively, here’s a breakdown of what risk management is and why it’s important. Free E-Book How to Formulate a Successful Business Strategy This guide will equip you with the tools, frameworks, and knowledge to formulate a successful business strategy that propels your organization forward. Download now What Is Risk Management? Risk management is the systematic process of identifying, assessing, and mitigating threats or uncertainties that can affect your organization. It involves analyzing risks’ likelihood and impact, developing strategies to minimize harm, and monitoring measures’ effectiveness. “Competing successfully in any industry involves some level of risk,” says Harvard Business School Professor Robert Simons, who teaches the online course Strategy Execution . “But high-performing businesses with high-pressure cultures are especially vulnerable. As a manager, you need to know how and why these risks arise and how to avoid them.” According to Strategy Execution , strategic risk has three main causes: Pressures due to growth: This is often caused by an accelerated rate of expansion that makes staffing or industry knowledge gaps more harmful to your business. Pressures due to culture: While entrepreneurial risk-taking can come with rewards, executive resistance and internal competition can cause problems. Pressures due to information management: Since information is key to effective leadership , gaps in performance measures can result in decentralized decision-making. These pressures can lead to several types of risk that you must manage or mitigate to avoid reputational, financial, or strategic failures. However, risks aren’t always obvious. “I think one of the challenges firms face is the ability to properly identify their risks,” says HBS Professor Eugene Soltes in Strategy Execution . Therefore, it’s crucial to pinpoint unexpected events or conditions that could significantly impede your organization’s business strategy . Related: Business Strategy vs. Strategy Execution: Which Course Is Right for Me? According to Strategy Execution , strategic risk comprises: Operations risk: This occurs when internal operational errors interrupt your products or services’ flow. For example, shipping tainted products can negatively affect food distribution companies. Asset impairment risk: When your company’s assets lose a significant portion of their current value because of a decreased likelihood of receiving future cash flows . For instance, losing property assets, like a manufacturing plant, due to a natural disaster. Competitive risk: Changes in the competitive environment can interrupt your organization’s ability to create value and differentiate its offerings—eventually leading to a significant loss in revenue. Franchise risk: When your organization’s value erodes because stakeholders lose confidence in its objectives. This primarily results from failing to control any of the strategic risk sources listed above. Understanding these risks is essential to ensuring your organization’s long-term success. Here’s a deeper dive into why risk management is important. Explore why effective risk management is critical to long-term business success—and how it can sharpen strategy, improve decisions, and reveal new opportunities in the video below. Be sure to subscribe to our YouTube channel for more explainer content. Play Video duration: 2:09 Risk is unavoidable in business, whether from market shifts, technology changes, or new competition. But when managed effectively, it can protect your strategy, strengthen decision-making, and unlock new growth opportunities.Learn more about risk management on our Business Insights Blog: https://hbs.me/2fyr9f8dExplore our Strategy Execution course: https://hbs.me/2bz8c8nx#Strategy #RiskManagement #BusinessExplained 4 Reasons Why Risk Management Is Important 1. Protects Organization’s Reputation In many cases, effective risk management proactively protects your organization from incidents that can affect its reputation. “Franchise risk is a concern for all businesses,“ Simons says in Strategy Execution . “However, it's especially pressing for businesses whose reputations depend on the trust of key constituents.” For example, airlines are particularly susceptible to franchise risk because of unforeseen events, such as flight delays and cancellations caused by weather or mechanical failure. While such incidents are considered operational risks, they can be incredibly damaging. In 2016, Delta Airlines experienced a national computer outage, resulting in over 2,000 flight cancellations. Delta not only lost an estimated $150 million but took a hit to its reputation as a reliable airline that prided itself on “canceling cancellations.” While Delta bounced back, the incident illustrates how mitigating operational errors can make or break your organization. 2. Minimizes Losses Most businesses create risk management teams to avoid major financial losses. Yet, various risks can still impact their bottom lines. A Vault Platform study found that dealing with workplace misconduct cost U.S. businesses over $20 billion in 2021. In addition, Soltes says in Strategy Execution that corporate fines for misconduct have risen 40-fold in the U.S. over the last 20 years. One way to mitigate financial losses related to employee misconduct is by implementing internal controls. According to Strategy Execution , internal controls are the policies and procedures designed to ensure reliable accounting information and safeguard company assets. “Managers use internal controls to limit the opportunities employees have to expose the business to risk,” Simons says in the course. One company that could have benefited from implementing internal controls is Volkswagen (VW). In 2015, VW whistle-blowers revealed that the company’s engineers deliberately manipulated diesel vehicles’ emissions data to make them appear more environmentally friendly. This led to severe consequences, including regulatory penalties, expensive vehicle recalls, and legal settlements—all of which resulted in significant financial losses. By 2018, U.S. authorities had extracted $25 billion in fines, penalties, civil damages, and restitution from the company. Had VW maintained more rigorous internal controls to ensure transparency, compliance, and proper oversight of its engineering practices, perhaps it could have detected—or even averted—the situation. Related: What Are Business Ethics & Why Are They Important? 3. Encourages Innovation and Growth Risk management isn’t just about avoiding negative outcomes. It can also be the catalyst that drives your organization’s innovation and growth. “Risks may not be pleasant to think about, but they’re inevitable if you want to push your business to innovate and remain competitive,” Simons says in Strategy Execution . According to PwC , 83 percent of companies’ business strategies focus on growth, despite risks and mixed economic signals. In Strategy Execution , Simons notes that competitive risk is a challenge you must constantly monitor and address. “Any firm operating in a competitive market must focus its attention on changes in the external environment that could impair its ability to create value for its customers,” Simons says. This requires incorporating boundary systems —explicit statements that define and communicate risks to avoid—to ensure internal controls don’t extinguish innovation. “Boundary systems are essential levers in businesses to give people freedom,” Simons says. “In such circumstances, you don’t want to stifle innovation or entrepreneurial behavior by telling people how to do their jobs. And if you want to remain competitive, you’ll need to innovate and adapt.” Featured Course Strategy Execution Successfully implement strategy within your organization. Netflix is an example of how risk management can inspire innovation. In the early 2000s, the company was primarily known for its DVD-by-mail rental service. With growing competition from video rental stores, Netflix went against the grain and introduced its streaming service. This changed the market, resulting in a booming industry nearly a decade later. Netflix’s innovation didn’t stop there. Once the streaming services market became highly competitive, the company shifted once again to gain a competitive edge. It ventured into producing original content, which ultimately helped differentiate its platform and attract additional subscribers. By offering more freedom within internal controls, you can encourage innovation and constant growth. 4. Enhances Decision-Making Risk management also provides a structured framework for decision-making. This can be beneficial if your business is inclined toward risks that are difficult to manage. By pulling data from existing control systems to develop hypothetical scenarios, you can discuss and debate strategies’ efficacy before executing them. “Interactive control systems are the formal information systems managers use to personally involve themselves in the decision activities of subordinates,” Simons says in Strategy Execution . “Decision activities that relate to and impact strategic uncertainties.” JPMorgan Chase, one of the most prominent financial institutions in the wor