Risk Culture: Governing in the age of exponential technology

Rachael Johnson discusses with Andrea Bonime-Blanc the importance of risk culture and governance in the face of rapid technological change and corporate governance failures. Andrea emphasizes the need for situational awareness, especially regarding AI and cyber risks, and advocates for a proactive approach to risk management. She introduces the concept of "poly risk," highlighting the interconnected nature of modern risks, and stresses the importance of digital trust and maintaining diversity in teams. Andrea also suggests that finance professionals should adopt skills outside their expertise and work for trustworthy leaders to navigate the complexities of exponential technology and geopolitical uncertainty.

David discusses the evolving threat of industrialised and personalised fraud, exacerbated by AI. He emphasises the urgent need for continuous learning and preparedness among accountants and professionals. He highlights the importance of data quality in AI models, the rise of deepfake scams, and the necessity of comprehensive risk assessments and insurance. He stresses the critical need for boards to invest in AI governance and data strategies to mitigate risks and protect against advanced threats.

Ashu Sharma, a fraud expert, discusses the evolving nature of fraud, emphasizing the shift from opportunistic to systematic fraud, where entire organizations can be compromised. He highlights the importance of understanding and addressing the cultural aspects that enable fraud, such as incentive structures and fear of retaliation. Sharma criticizes the three lines model for its siloed approach and advocates for a resilience-based thinking that integrates fraud prevention into business decisions. He also stresses the need for proactive measures, including encouraging employees to report unusual activities and leveraging AI for anomaly detection, while not ignoring the human element in fraud prevention.

We discuss how financial accounts can and should include more complete information about the often-hidden material risks, such as climate, cyber, and fraud – helping boards make better informed, forward-looking decisions.

Vera Cherepanova discusses ethical leadership, from boardroom blind spots to the ethical implications of AI and investor short-termism, this conversation is a call to action for those who want governance to matter. She highlights the importance of boards fostering ethical reflection and embedding values into strategy, especially amidst ESG policy changes and the new US administration's executive orders. Cherepanova notes three types of corporate responses to ESG challenges: withdrawal, green hushing, and public resistance. She stresses the need for boards to ask good questions, formulate great questions, and recognize their role in defining organizational values. Cherepanova also introduces a new board ethics and compliance assessment tool to help boards structure their ethical frameworks.

Ben discusses the current state of risk management, emphasizing its disconnection from organizational decision-making. He highlights the need for good decision-making, advocating for a shift from traditional risk management to a focus on decision quality. He introduces the concept of "benevolent subversion," a guide with 22 practical techniques to embed good decision-making in organizationsand stresses the importance of management accounting in understanding business contexts and combating fraud effectively.

This episode discusses the Ivy Business School's leader character framework, emphasising the importance of character in leadership and risk management and how elevating character to the same level as competence and commitment can ensure better decision-making and financial oversight, especially during such uncertain times. Dr Mary Crossan explains the framework's development post-2008 financial crisis, highlighting 10 dimensions of character like integrity and humility. Bill Furlong, with a background in capital markets, shares how the framework can help address compliance issues by linking character imbalances to suboptimal judgments. He also stresses how critical the accountant’s role is in governance, oversight, and the smooth functioning of the economy. Dr Corey Crossan, from Oxford University, details university programs integrating the framework, noting significant improvements in leader effectiveness and well-being. The framework is seen as crucial for navigating today's challenges and enhancing organizational culture and performance.

In this episode, Richard and Rachael discuss the evolving risk management landscape in healthcare, emphasising the need for a dynamic approach to risk appetite. Richard highlights the importance of aligning risk management with patient safety and financial sustainability, suggesting that risk appetite should be applied to areas like estates and finances rather than just patient safety. He also addresses the challenges of cyber risks, advocating for proactive prevention and response measures.

This month, we discuss the evolving landscape of cyber risk management, focusing on healthcare and broader industry implications. James Parker, a cyber professional, shares insights from the 2017 WannaCry ransomware attack on the NHS, highlighting the lack of cyber skills and awareness among staff, and the slow prioritisation of IT projects. Lutz Naake, a partner at EY, emphasises the importance of identifying critical IT systems and implementing proper controls, noting the challenges companies face in cyber risk management. They stress the need for shared language and understanding between cyber professionals and business leaders to effectively manage and prioritise cyber risks. The conversation also touches on the impact of emerging regulations like the EU's NIS2 directive and AI Act on cybersecurity practices.

The discussion explores the intersection of AI and healthcare at MIT's Jameel Clinic. Ignacio Fuentes highlights their work in clinical AI, particularly in oncology, and drug discovery, including a new protein folding model. Frank Schuler emphasizes the role of accountants in building trust and managing AI risks in healthcare, suggesting future audits of AI systems. They discuss the importance of ethical decision-making, data quality, and regulatory frameworks. The clinic's global network of 43 hospitals aims to validate and implement AI models, enhancing early disease detection and clinical efficiency. The conversation underscores the need for collaboration among accountants, doctors, and policymakers to navigate AI's transformative impact on healthcare.