InsightsRisk Strategy
Risk as architecture, not a checklist
When risk work is a quarterly form exercise, gaps hide in how work actually gets done. Treat controls as structure you can walk through with the people who run the process.
Sample article. This draft stands in until Libertad Chey publishes live insights. Keep the structure; rewrite every paragraph with client voice and cases.
Most organisations do not fail risk reviews because they lack a policy binder. They fail because the binder never meets the Tuesday afternoon when a payment exception, a vendor shortcut, or a well-meaning workaround becomes normal.
An architectural view of risk asks different questions. Who can change a control? What evidence proves it still works? Where does judgement live when the SOP runs out? Those answers belong in process design, not in a slide titled residual risk.
Start with one high-stakes workflow. Map the handoffs, the systems of record, and the moments a person can override the system. Then decide which overrides are intentional, which are silent, and which should never happen without a second pair of eyes.
Boutique advisory work earns trust by staying close to that map. The goal is not a longer checklist. It is a clearer path from risk appetite to the controls people can actually run.
This is sample copy for layout and voice. Managing insights via Sanity CMS allows updating articles seamlessly without code redeploys.
Newsletter
The Executive Briefing
Occasional notes on governance, process, and risk. Sample signup for now; real delivery comes when email is connected.
No spam. Unsubscribe anytime once mailing is live.