The Assumptions Hidden Inside Risk Frameworks

Part 2 - Most organisations didn't miss the concentration because they lacked information. They missed it because their frameworks were built for a world that no longer exists — and the assumptions holding that worldview in place were never written down, never reviewed, and never questioned.

The World Still Runs Through Chokepoints

Part 1 - Globalisation optimised for efficiency, not resilience. The geometry it produced was extremely narrow in critical places—energy routes, shipping corridors, insurance markets. Complexity became a proxy for resilience. The more elaborate the system, the harder to see where it ran thin.

The System Behind the Patterns

Part 6 - Five structural patterns compound: isolation delays recognition, compliance replaces judgment, expertise arrives after decisions form, reporting displaces sensing, governance seams orphan risks. What looks like independent failures is one system optimizing for yesterday.

When The Three Lines of Defense Creates Four Blind Spots

Part 5 - Clear division of labor requires boundaries. Boundaries create seams. Interaction risks—dependencies, concentrations, cascading failures—don't fit bounded categories. They sit between the lines, where each operates rationally within its mandate while the risk remains unowned.

What Recognizing Risk Early Actually Looks Like

Part 5 - Practitioners who recognize risk early watch behavioral signals before metrics confirm them: correspondents asking more questions, market-makers reducing inventory, assumptions drifting quietly. By the time dashboards turn red, the consequential decisions already passed.

The Reporting Treadmill: How Risk Functions Drown in Their Own Output

Part 4 - Reporting requirements accumulate through defensible additions—each legitimate, none retire. Organizations resource scheduled work with deadlines. Emergent sensing competes for leftover capacity. Forward-looking analysis becomes "next quarter" then "once we clear the audit cycle."

Why Expertise Becomes a Liability

Part 3 - Risk teams are hired for regulatory credibility—technical depth that withstands external scrutiny. They're judged on executive influence—arriving early enough to shape decisions before consensus forms. These require different optimization, but organizations assume they're interchangeable.

Why Wrong-Way Risk Is Worse Than We Admit

Part 4 - Exposure peaks exactly when counterparty capacity weakens. The hedge protects until the hedger can't pay. Collateral secures until it's what keeps the borrower alive. Standard models assume independence; wrong-way risk means severe correlation nobody's pricing.

The Compliance Trap: When Risk Functions Optimize for the Wrong Thing

Part 2 - Organizations measure what's unambiguous—control completeness, regulatory adherence, audit findings. Strategic risk identification has none of this clarity. So risk functions optimize for what generates visible returns: compliance excellence over strategic foresight.

When Independence Becomes Isolation

Part 1 - Formal independence solves conflict of interest but creates information blindness. When risk functions become structurally separate, business units shift from sharing context to managing exposure. Risk teams see polished versions of problems already contained—by design, not accident.

The Quiet Withdrawal of Liquidity Providers

Part 3 - Liquidity providers withdraw incrementally through behavioral shifts metrics miss: selective spread widening, correspondent de-risking, conditional depth. Markets quote prices until institutions need execution at size—then discover relationships changed while dashboards still showed green.

Dependency Risk: The Exposure No One Owns

Part 4 - Some risks don't sit in any category. They live in what you assume will continue—availability, responsiveness, stability. Dependency risk doesn't announce itself. It presents as infrastructure. Until something stops working.

The Practice of Uncertainty

From Truth to Traction - How to Land an Inconvenient Risk

Part 3 - How to communicate risk effectively to leadership: Traction comes from shaping the next decision, not securing agreement on full diagnosis. Four practical translations make uncomfortable organizational risks land without diluting truth or compromising integrity.

What I’m Watching Now

Geopolitics Is No Longer a Scenario

Part 2 - Geopolitical risk has shifted from episodic scenario to structural operating condition. Sanctions cascade beyond compliance, capital flows become policy-dependent, trade routes grow conditional—while most risk frameworks still assume convergence and stability that no longer exists.

The Practice of Uncertainty

The Meeting After the Meeting

Part 2 - The official meeting is where people show their faces. The real meeting is where they show their worries. Organizations decide through people, and people process threat through social cost before analytical truth.

The Practice of Uncertainty

Sensemaking Is the New Risk Leadership

Part 1 - Risk leadership is no longer about prediction—it's about orientation under uncertainty. When frameworks can't keep pace, control becomes a trap. Here's what works: sensemaking, assumption tracking, and making uncertainty discussable.

What I’m Watching Now

Why I’m Concerned About Correlation Regimes

Part 1 - Portfolio diversification benefits are eroding as correlation regimes shift faster than risk models can capture. When assets move in lockstep under stress, balanced portfolios become concentrated positions—and governance structures can't track changes.

When Risk Stops Behaving

When Seriousness Arrives Too Late

Part 8 - How organizational urgency arrives without the decision-making capacity to act—and why "Why didn't we act sooner?" is the wrong question about structural failure in risk management.

When Risk Stops Behaving

How Judgment Gets Quietly Outsourced

Part 7 - How organizational judgment gets delegated to decision-making tools and risk frameworks when exercising direct judgment becomes too costly—and why this automation feels like progress until critical failures emerge.

Why The Old Tools Fail Quietly

What Comes After

Part 4 - When frameworks can't keep pace with risk velocity, what actually works? This post synthesizes the pattern: why the old tools fail quietly and what capabilities matter when certainty isn't available.

When Risk Stops Behaving

When Experience Becomes a Blindfold

Part 6 - How leadership experience and pattern recognition create confident organizational blindness—and why the more certain we are about recognizing risks, the less likely we are to notice what's actually different.

When Risk Stops Behaving

How Incentives Quietly Shape What Gets Taken Seriously

Part 5 - How organizational incentives filter which risks become urgent through quiet alignment with leadership reward structures and performance metrics.

Why The Old Tools Fail Quietly

Where Risk Becomes Invisible

Part 3 - Risk accumulates in the spaces between frameworks—where no function owns it, where pieces are visible but the whole never crystallizes. How organizational structures create blind spots faster than governance can detect them.

When Risk Stops Behaving

Risk Escalation Fails Long Before Anyone Raises Their Voice

Part 4 - How organizational risk escalation erodes through gradual wear in governance layers rather than sudden blockage—and why this feels abrupt when it becomes unavoidable to leadership.