Change is inevitable has been the corporate mantra for years, and is often framed as a strategy exercise, a technology upgrade, or an operational improvement initiative. But for risk managers, change represents something deeper which is uncertainty introduced into systems, people, culture, and decision-making processes.
In my view, now more that ever with the advances in AI technology, change management effectiveness is critical.
Every meaningful change will carry risks. How many corporate changes are you aware of that have failed the corporate culture or negatively changed public perceptions of the company?
Sometimes the risk is obvious such as regulatory breaches, operational disruption, financial loss, or reputational damage. Other times the risk is less visible foe example loss of institutional knowledge, employee disengagement, weakened controls, poor communication, or leadership fatigue.
Ironically, organizations that avoid change can also create significant risk to themselves. Markets evolve, client expectations shift, technology advances, and regulatory environments become more complex. Standing still is rarely a neutral decision.
This places risk managers in an interesting position.
Historically, risk professionals have sometimes been viewed as the people who hinder or slow things down, identify obstacles, or challenge new initiatives. In reality, effective risk managers should help organizations navigate change safely and intelligently — not prevent progress.
The role is not to eliminate risk entirely. It is to get and be involved in the process to understand it, quantify or qualify it where possible, and help leadership make informed decisions.
During periods of change, risk managers need to pay particular attention to a few areas:
• Are controls keeping pace with operational changes?
• Is communication clear and consistent across teams?
• Have roles and responsibilities shifted without proper oversight?
• Are assumptions being challenged, or simply accepted because of urgency?
• Is organizational culture supporting the change, or quietly resisting it?
One of the greatest risks in change management is overconfidence. The leadership of the organizations will often focus heavily on the technical or financial aspects of a project while underestimating the human element. Resistance, uncertainty, and communication breakdowns can derail even well-designed initiatives.
At the same time, change can create tremendous positive opportunities.
Good leaders will have a well-managed change process that can strengthen governance, modernize processes, improve accountability, enhance culture, and create competitive advantages. Some of the strongest organizations are not those that avoid disruption, but those that adapt effectively while maintaining discipline and trust.
For leaders and risk managers alike, a few leadership skills become especially important during times of change.
First is communication. People rarely resist change simply because it is new; they resist uncertainty and lack of clarity. Leaders who communicate openly, consistently, and honestly tend to build stronger trust during transitions.
Second is adaptability. Risk managers cannot rely solely on historical experience or “the way things have always been done.” Effective risk leaders remain open to new information, evolving risks, and alternative perspectives while maintaining sound judgment.
Perhaps the real value of risk management during change is not acting as a barrier but acting as a stabilizing influence by helping organizations move forward with awareness, discipline, and confidence.
Because change itself is not the risk, failing to understand and manage it is.
Why Post
The idea behind postings on this platform is to ask questions. Also, hopefully provide ideas, concepts or thoughts that highlight the challenges facing risk and compliance managers in the corporate governance structure. These postings are based on my personal experience, the experiences of others, and developing my understanding of the many leadership challenges, through publications and literature.
It’s my desire to help close the perceived negative gaps between corporate governance and risk/compliance management. There are ways and means to enhance the relationship, which I’ve focused on for several years. Direct message me for additional information on how to create a collaborative governance environment