Refining risk oversight for heightened volatility: with the board's help, how some companies are recalibrating their strategy and risk profile.

• Author: Whalen, Dennis T.
• Position: ON THE GOVERNANCE AGENDA

Disruptions in the oil market and swings in other commodity prices. A strengthening U.S. dollar--and a decelerating China and struggling Brazil. Geopolitical unrest and hotspots around the world--Russia, Iran and the Middle East. Ongoing challenges in the Eurozone--from economic stagnation to unprecedented migration. Growing cyber security risk and technology continuing to drive business model disruption. In this unprecedented mix of volatility and uncertainty, boards will need to closely monitor changes in the business landscape --on an ongoing basis--to understand the impact on the company's strategy and risk profile, and help the company calibrate as needed.

Indeed, more than 80% of the directors and executives responding to our recent global survey--"Calibrating Strategy and Risk"--said their board has deepened its engagement in strategy-- e.g., considering strategic alternatives, monitoring execution, or recalibrating strategy. Connecting strategy and risk, and testing the continuing validity of critical risk assumptions continue to be key areas of focus -and significant challenges--for many boards.

Given the role that many audit committees play in risk oversight, our survey findings offer insights into the challenges audit committees and boards face in their efforts to refine their risk oversight processes to help their companies meet the challenges posed by the new level of volatility. Our survey shows that many boards have recently taken steps--or dis cussed ways--to strengthen their oversight of risk, mainly by improving risk-related information flowing to the board, but also by hearing more independent views and refreshing the board/recruiting expertise, coordinating (and reallocating) risk oversight responsibilities among the board's committees, and/or changing the board's committee structure.

Boards are also wrestling with other risk-related challenges, including effectively linking risk and strategy in boardroom discussion, devoting sufficient agenda time to cyber security, and communicating and coordinating among the full board and its committees on oversight of the company's key strategic and operational risks.

To dig deeper, we interviewed seasoned audit committee chairs and risk professionals for their perspectives on how audit committees and boards are refining their oversight of risk in an increasingly volatile environment. Among the takeaways:

* Good risk management is an ongoing business discussion--dynamic and...