AI in Risk Management: What It Can Do, What It Cannot, and What That Means for Accountability Quick answer: Artificial intelligence is being applied to risk functions faster than governance frameworks can keep pace with it, creating an accountability gap that is itself a risk problem. This set... 20 June 2026
Where Travellers Actually Get Hurt: The Data Organisations Ignore When They Assess Travel Risk Quick answer: Published research on where and how travellers actually get hurt consistently challenges the assumptions underpinning most corporate travel risk programmes. The gap between the data and ... 20 June 2026
Supply Chain Risk: Why Most Organisational Risk Frameworks Miss the Exposure That Actually Matters Quick answer: Supply chain risk has sat on risk registers for years, yet most organisational frameworks still understate the real depth of that exposure. This identifies what organisations are consist... 20 June 2026
Crisis Management Planning That Actually Works When a Crisis Arrives Quick answer: Most crisis management plans are written for the scenario planners who designed them, not for the people who must use them under pressure when a real crisis arrives. Effective plans are ... 20 June 2026
What Boards Actually Need to Know About Enterprise Risk (And Rarely Do) Quick answer: Boards are accountable for risk oversight but typically operate without the information, frameworks, or challenge culture to exercise it effectively. Registers and heat maps create an il... 20 June 2026
Security Culture Is Not a Values Statement. It Is Behaviour Under Pressure. Quick answer: A security policy and an awareness programme are not a security culture, they're documentation. Genuine security culture is behaviour under pressure, when no one is watching, and most or... 20 June 2026
The Expert Witness Standard: What Organisations Discover When Risk Management Is Examined Quick answer: When incidents become disputes, risk management programmes face a standard of scrutiny most were never designed to withstand. This explains what the expert witness process actually exami... 20 June 2026
Australia's SOCI Act: What Critical Infrastructure Operators Need to Understand About CIRMP Compliance Quick answer: Australia's SOCI Act obligations catch many critical infrastructure operators unprepared, most are further from CIRMP compliance than their current programmes suggest. This explains what... 20 June 2026
The Problem with Risk Matrices (And What Defensible Risk Assessment Actually Looks Like) Quick answer: Risk matrices are the most widely used risk tool in the world, yet rest on mathematically flawed foundations that mislead boards. They produce work that looks structured but offers limit... 20 June 2026
Why Duty of Care Is Failing Your Global Business Quick answer: A travel policy, insurance, and an emergency number are not duty of care — they're compliance artefacts. Courts judge organisations against what a prudent operator would reasonably have ... 20 June 2026