While risk reporting has improved, COVID-19 raises the question of whether risk processes are becoming too familiar or even complacent. Our comprehensive analysis of the FTSE 350's annual reports and accounts shows that only 24% of companies identified a coronavirus-type event as a threat to their business and planned accordingly.
Looked at more closely, only 18% of companies with 2019 year-ends identified such risks whereas, with the benefit of hindsight, 53% of those with 2020 year-ends did so.
Categories of emerging and principal risks disclosed by companies (%)
Eighty-nine percent of companies say, in their annual reports, that they assess emerging risks. However, most focus on how they will identify what’s coming over the horizon, rather than the actual risks. Surprisingly, only 30% of companies indicated how they will mitigate emerging risks.
The primary risks for the FTSE 350 relate to climate, pandemic and macro-economic driven events, but what is the message when it comes to individual industries?
Top three emerging risks by industry (%)
With more companies reporting on principal risks than ever before, it is a modern-day governance success story. However, business leaders need to be mindful of complacency. Go back and really challenge your processes to ensure your horizon scanning is capturing those risks of the future and you have plans in place to mitigate them.
For more information about how great governance practices can drive sustainable value for your business, read our 2020 Corporate Governance Review.
