Executive Summary
-
Corporate risk is any threat to financial objectives, measured in financial terms.
-
Risk is defined not necessarily as absolute risk, but relative to a benchmark.
-
If risk is free, corporate departments will squander it. By putting a price on risk, it is managed when it should be.
-
Corporate treasuries tend to minimize risk, probably not consistently with corporate objectives.
-
Procurement risk problems often come from fixed budget levels.
-
Marketing risk problems often come from giveaways in customer contracts.
-
An integrated corporate risk policy defines how risk should be measured, priced, and rewarded in the corporation, leading to better corporate decisions in all departments.
Defining Risk—Harder Than It Seems
Risk can be described as the threat of an adverse outcome. Many firms take the benchmark strategy of doing nothing (i.e., investing in Treasury Bills), and measure their risk in absolute terms relative to the strategy of doing nothing. Others measure their risk-taking behavior relative to what might be considered risky benchmarks. Mutual funds, for example, do not focus on the absolute risk of their portfolios; rather, they determine how far away they are from a market benchmark, such as being long the S&P 500. Corporations should explicitly determine their proper benchmarks.
For example, when a gold company hedges its exposure to gold prices, it is arguably reducing risk. However, shareholders may see this as an increase in risk, since it moves the company away from its natural gold exposure. Similarly, shareholders own all sorts of assets and diversify their risks; if a company moves away from its natural risk profile it is making the shareholder portfolio less diversified.
Most financial institutions should measure their risks relative to holding Treasury Bills, since that is an appropriate benchmark strategy for its shareholders. Furthermore, because financial institutions’ risk capital levels are regulated, risk is a scarce resource that must be consumed wisely.
In all cases, shareholder preferences should be considered in establishing the risk benchmark, risk measure, and risk appetite. This is the first critical step in establishing a best practice integrated risk policy.
Risk Integration
Many treatments of risk deal with risk silos: treasury risk, insurance risk, budget risk, procurement risk, sales price risk, and marketing risk. While specialized knowledge in each of these areas informs risk management and execution, it does not address questions like the following:
-
How important is one risk vis-à-vis the corporation’s entire risk profile?
-
Is it better to manage a risk operationally or through financial means?
-
Are there natural risk offsets to consider before targeting a particular risk for elimination?
-
What are the interactions among risks and the natural diversification benefit companies generally have?
The following sections consider selected risks that are shared by many corporations, within the framework that good risk management in each area must be consistent with the overall corporate standard. The overall corporate standard should include a cost for risk to prevent it from being squandered, measures of risk that are consistent with corporate objectives, consistent policies for treasury and insurance risk, best practices in procurement and marketing risk, corporate hedging policy to hedge integrated risk (not in each silo), and risk-based performance measurement to reward those who manage risk prudently.
- Page 1 of 5
- Next section The Cost of Risk


