✦ THE PROBLEM
Risk doesn't disappear because nobody named it.
Every organization accepts risk. Sometimes deliberately, sometimes by default. It can enter through a contract, a business decision, an unclear responsibility, a missing control, a regulatory requirement, a safety practice, or simply something everyone assumes someone else is watching. The exposure exists whether anyone has formally identified it or not.
The problem isn't taking risk. It's taking risk without understanding what is exposed, who owns it, what controls are actually working, and what happens if an assumption proves wrong. Good risk decisions require enough visibility to choose what to accept, what to reduce, what to transfer, and what deserves another look.
✦ WHAT IT CAN LOOK LIKE
Exposure often hides inside ordinary decisions.
It can look like a contract nobody has examined beyond price and delivery, a control everyone assumes someone else performs, authority that exists informally but not on paper, insurance that no longer matches the exposure, or a decision made without seeing how the consequences travel into another part of the organization.
Sometimes the warning is inconsistency rather than crisis: exceptions handled differently each time, accountability that becomes clear only after something goes wrong, policies that no longer match practice, unresolved safety or compliance concerns, or governance arrangements that leave important decisions without enough independence, information, or challenge.
✦ WHAT I CAN HELP CHANGE
The goal isn't less risk. It's better decisions about risk.
I help make risk management decisions more deliberate by making exposure visible. That can mean examining contracts and obligations, clarifying accountability and decision authority, assessing controls, reviewing insurance and risk-transfer strategies, identifying compliance or safety gaps, or looking at whether governance provides the information and challenge a decision actually requires.
From there, the organization can decide what deserves stronger controls, clearer ownership, different terms, additional protection, escalation, or simply documented acceptance. Not every risk needs to be eliminated. The important part is knowing what you are accepting, why you are accepting it, and who owns what happens next.
✦ WHEN THIS WORK IS USEFUL
Before the decision becomes the consequence.
This work is especially useful when the organization is entering unfamiliar territory: a significant contract, acquisition, ownership or governance change, new regulatory requirement, insurance or benefits decision, major investment, new operating model, or another choice where the exposure may extend well beyond the immediate decision.
It is also useful when something simply does not feel as controlled as it should. Responsibilities overlap, exceptions keep multiplying, an old practice has never been reconsidered, leadership lacks enough information to evaluate the exposure, or a near miss reveals that the organization was relying on an assumption nobody had actually tested.
✦ HOW I APPROACH IT
Start with the exposure, then follow the evidence.
I start by defining what could actually be affected: people, money, operations, obligations, reputation, decision authority, or the organization's ability to keep functioning as intended. Then I look at the evidence around that exposure: contracts, policies, controls, insurance, responsibilities, past incidents, regulatory requirements, operating practices, and the assumptions supporting the decision.
From there, I look at likelihood, consequence, ownership, and the strength of the controls already in place. The recommendation should match the exposure. Sometimes that means strengthening a control, transferring risk, changing terms, clarifying authority, documenting acceptance, or getting specialized legal, financial, insurance, or technical advice. Sometimes the existing approach is reasonable once the evidence is actually assembled.
If the exposure isn't clear, start by making it visible.
You don’t need to know what the solution is before we talk.
Start with what’s happening, and we’ll figure out what actually needs to change.