Important Risk Meetings

Important Risk Meetings

Norman Marks on Governance, Risk Management, and Internal Audit
Norman Marks on Governance, Risk Management, and Internal AuditJan 19, 2026

Key Takeaways

  • Decision meetings inherently contain risk assessments.
  • Risk officers should embed in procurement, hiring, security meetings.
  • Ignoring risk in everyday decisions creates blind spots.
  • Boards must ensure risk data informs all choices.
  • Effective risk management needs reliable information at decisions.

Summary

Norman Marks argues that the most critical risk meetings are the everyday decision‑making gatherings, not formal risk‑officer briefings. He cites procurement, hiring, and national‑security deliberations as examples where risk is implicitly evaluated. The piece urges organizations to embed risk expertise in these forums and to verify that decision‑makers have reliable risk data. Ultimately, risk management should be woven into every choice rather than isolated in periodic risk‑review sessions.

Pulse Analysis

Risk management has traditionally been siloed in quarterly reviews and static risk registers, but modern enterprises are discovering that true risk mitigation occurs at the moment a decision is made. By reframing every decision forum—whether a procurement negotiation, a hiring panel, or a strategic brief—as a risk meeting, organizations shift from reactive reporting to proactive governance. This approach aligns risk considerations with business objectives, ensuring that potential downsides are evaluated alongside opportunities in real time.

In practice, integrating risk expertise into procurement meetings helps assess vendor reliability, supply‑chain continuity, and cost implications before contracts are signed. Hiring discussions benefit from evaluating candidate fit against operational risk, cultural alignment, and succession planning. Even high‑stakes national‑security briefings illustrate how risk officers can provide calibrated intelligence, scenario analysis, and mitigation pathways. Chief Risk Officers (CROs) and Chief Audit Executives (CAEs) can act as facilitators, supplying validated data, risk models, and decision‑support tools that empower managers to make informed choices without slowing the process.

For CEOs and boards, the imperative is clear: embed risk ownership across all decision‑making layers and demand evidence‑based risk inputs at every meeting agenda. This governance shift not only reduces surprise losses but also enhances stakeholder confidence and regulatory compliance. Companies that institutionalise risk‑informed decision making gain a competitive edge, turning uncertainty into a strategic advantage.

Important risk meetings

Comments

Want to join the conversation?