A new McKinsey survey among board members reports that members acknowledge knowing little about risk. Nearly three in ten (29%) say their boards have limited or no understanding of the risks their companies face. Even more compelling, members say their boards spend just 12% of their time on risk management, an even smaller share of time than two years ago. Not sure about you, but I'd say that the business environment has become more complex and risky, not less complex and risk-free.
This is not good news for executive teams. When it comes to risk management, reputation is high on the list of vulnerabilities that can damage a company's good name. This has me thinking that if board members are not focusing enough on risk, executive teams are going to be held even more responsible for any misdoings and misdeeds. They had better been attuned to crises and risks that are lurking around the corner. CEOs and their direct reports should make reputational issues an A-1 priority on their management agendas.
I received an email about two weeks ago asking if I had information on whose most to blame when crisis strikes. Years ago, I asked that question of executives and if I recall right, CEOs received most of the blame, regardless of whether they knew about the problem or not. The McKinsey research is hinting at the same blame chain. The CEO takes all the credit when things go right and all the blame when things go wrong. The board is looking in all the wrong places. CEOs, beware.