Organisations “overconfident” on risk management

Organisations “overconfident” on risk management

Organisations have a high opinion of their abilities to be prepared for a crisis, but the actions they take to be prepared are falling short, said a survey by Origami Risk. In fact, the amount of priority that organisations put on risk management has dropped almost by 10 per cent in the past year, the…

Organisations have a high opinion of their abilities to be prepared for a crisis, but the actions they take to be prepared are falling short, said a survey by Origami Risk.

In fact, the amount of priority that organisations put on risk management has dropped almost by 10 per cent in the past year, the report said, and the percentage of respondents who said they had fully connected risks with strategic objectives was down by about one third.

“Nearly every sign points to a retreat back from the two-year expansion in risk-related capabilities the survey has previously shown,” the report said. “This could indicate that overconfidence and complacency are creeping back in at a time when the risk environment is demanding agility and foresight.”

Disagreement in the ranks

Business leaders tended to be more optimistic about the six-month outlook for their organisations. For example, C-level respondents were 50 per cent more likely to rate that outlook as excellent than senior management. 

“If organisations can’t even agree on assessments of the current situation (or the status of technology used to manage current challenges) there is little chance for developing a strategy that unites all levels of the enterprise,” the report said.

AI gold rush

One area where organisations are acting quickly is in the adoption of AI – but in doing so are paying little attention to the kind of technology risks associated with rapid adoption.

Familiar mistakes include implementing safeguards that are easy to circumvent, using poorly resourced staff to fill in gaps in the technology, and having little transparency over how products are developed and used.

“The key to balancing these opposing points is to find a way to quickly learn these skills and build up the organisation’s institutional AI knowledge without rushing into well-known mistakes of the past,” the report said.

Most organisations failed to develop a unified, enterprise-wide understanding of what is (or is not) being done with AI. “A shared context is an essential element to gain complete buy-in, up and down an organisation, for any AI strategy the organisation chooses to adopt,” the report said.





← Previous

Organisations struggle to make ESG work strategically
Organisations are struggling to make ESG work strategically because they are often unable to move…






Next →

Grey zone aggression rises
Organisations are increasingly concerned about disruptions to global commerce by so-called grey zone aggression, according…

7 OCTOBER 2026

Key elements of a mature programme risk capability

Hosted by Vinay Shrivastava. Vinay's presentation will cover lessons he has learned over the course of his career. These insights will be shared using the principles of ISO31000 risk management.

Find out more

8 OCTOBER 2026

Pre-deployment agentic risk management

Delivered by Adam Grainger, the outcome of this session is to be able to support an agentic implementation with effective pre-deployment risk identification and mitigation.

Find out more

14 OCTOBER 2026

AI Transforming Enterprise Risk Management Activities

Risk management has changed considerably over the years, with new frameworks, standards and expectations shaping the way organisations manage risk. However, many of the day-to-day activities within Enterprise Risk Management (ERM) functions have remained much the same.

Find out more

Advertisement