Businesses fail to quantify risk

Businesses fail to quantify risk

While businesses manage risk in a wide variety of ways, too many are not quantifying the threats they face, according to Aon’s Global risk management survey 2019. In a wide-ranging report of global businesses, it found that only 24 percent of respondents said they quantify their top 10 risks. In addition, only 20 percent used…

While businesses manage risk in a wide variety of ways, too many are not quantifying the threats they face, according to Aon’s Global risk management survey 2019.

In a wide-ranging report of global businesses, it found that only 24 percent of respondents said they quantify their top 10 risks. In addition, only 20 percent used risk modelling and one in ten admitted they had no formalised process in place to identify risks.

“Aon’s 2019 survey has attracted the largest number of participants since inception, but the participants’ risk readinesshas reached the lowest level in 12 years,” the report said. “With volatile global economic conditions and fast changes in today’s digital and sharing economy, these top risks, many of which are either non-insurable or only partially insurable, are becoming increasingly unpredictable to prepare for and mitigate.”

Digging deeper into the findings, the report found that managing the failure to innovate and meet customer needs is the risk that has the dubious honour of being the least prepared for. Its risk readiness has fallen by 11 percent between 2017 and 2019. This is “… at a time when technologies and new business models are transforming not only how new products are being created, but also how they are consumed,” the report said. Businesses and risk departments are clearly struggling to keep pace with these changes.

Risk quantification was the least cited mitigation action among respondents. It suggested that this could be partly down to the fact that more of the top risks identified by respondents were uninsurable, it could also be the result of belt tightening. But it said, “as more organisations have tightened their risk management budgets in response to changing market factors, quantification is an effective way to prioritise risks, and decide what corrective actions to take.”

About 10 percent of respondents said they had no formalised process in place to identify risks. This lack of formal risk management practice was not limited to small businesses, as might be expected. “About 12 percent of European and 10 percent of North American companies have no formal process for risk identification and a small percentage of companies with turnover of more than $10 billion indicated they manage risk without a formal process.”

The research supports the IRM’s own findings from an extensive survey carried out on its behalf by the Cambridge Centre for Risk Studies last year. There was a lack of dedicated tools to address many of the top risks identified by the researchers. “What is particularly interesting is the lack of maturity in the development of tools to support the risks that feature in the top ten list,” the report said. “Frameworks and tools are lacking for geopolitical risks, reputation, company viability, and macroeconomic and trade factors.”

Top five risks identified by Aon’s survey:

  1. Economic slowdown and slow recovery
  2. Damage to brand or reputation
  3. Accelerated rates of change in market factors
  4. Business interruption
  5. Increasing competition

 





← Previous

Humans and AI together
In 2021, artificial intelligence (AI) augmentation will create $2.9 trillion of business value and 6.2…






Next →

Cyber insurance underused
Businesses are finding it difficult to protect themselves against the increasingly diverse range of tactics…

9 SEPTEMBER 2026

Owning your space: confidence, visibility & voice

This event marks the formal public launch of the IRM Women in Risk Special Interest Group. The session is themed around the most pressing personal and professional challenges identified by women in the risk profession today.

Find out more

10 SEPTEMBER 2026

Beyond compliance

Managing equity compensation risk through automation, governance and the unified equity compensation risk & automation framework (UECRAF).

Find out more

17 SEPTEMBER 2026

Building an effective risk culture in your organisation

The proactive cultivation of an effective risk culture can serve as a strategic differentiator, enhancing the organisation’s resilience, agility, and reputation in the eyes of customers, investors, and regulators alike.

Find out more

Advertisement