Risk and Decision-Making

Risk and Decision-Making

Norman Marks on Governance, Risk Management, and Internal Audit
Norman Marks on Governance, Risk Management, and Internal AuditFeb 5, 2026

Key Takeaways

  • Ask about outcome ranges, not just likelihood
  • Focus risk questions on decision impact
  • Replace risk appetite lists with scenario analysis
  • Align risk management with strategic choices
  • Test assumptions to uncover hidden uncertainties

Summary

The discussion sparked by Alex Sidorenko’s LinkedIn post, echoed by Norman Marks, urges risk professionals to shift from static top‑risk lists to decision‑focused questioning. By centering on the uncertainties that could alter a choice, risk assessment becomes a tool for insight rather than a checklist. This reframing aligns risk work directly with business objectives and supports agile governance. The new mindset replaces false precision with outcome‑oriented analysis, enabling faster, more informed decisions.

Pulse Analysis

The latest conversation sparked by Alex Sidorenko’s LinkedIn post, amplified by Norman Marks, challenges the traditional risk‑management playbook. Instead of compiling static top‑risk lists, practitioners are urged to reframe their inquiry around the decision at hand and the uncertainties that could sway it. This shift from probability‑impact matrices to outcome‑oriented questioning creates actionable insight, turning risk assessment into a decision‑enabling function. Companies that adopt this mindset can move beyond false precision and align risk work directly with business objectives. The approach also dovetails with agile governance, where rapid iteration demands real‑time risk insight. Understanding uncertainty is the linchpin of this new approach. ISO 31000 defines risk as the effect of uncertainty on objectives, a nuance many managers miss when they equate risk with likelihood alone. By asking “What could happen or not happen that would change your decision?” risk professionals translate abstract concepts into concrete scenarios that resonate with executives. This language shift not only demystifies risk but also surfaces hidden variables, enabling more robust contingency planning and faster response when conditions evolve. When uncertainty is mapped to financial impact ranges, CFOs can model scenario‑based forecasts, improving capital allocation. Practically, risk teams should embed decision‑centric questions into every governance checkpoint. Instead of a generic “What’s our risk appetite?” they might probe “Which option maximizes success given unknowns?” or “What must be true for this choice to fail?” Such probes force managers to articulate assumptions, prioritize data gaps, and allocate resources where they matter most. Early adopters report tighter alignment between risk registers and strategic roadmaps, reduced mitigation spend, and clearer communication with boards—all hallmarks of a mature, value‑driven risk function. Technology platforms that capture question‑driven risk data further automate analysis, turning qualitative insights into quantitative metrics for dashboards.

Risk and decision-making

Comments

Want to join the conversation?