Abstract

Many believe that the recent emphasis on enterprise risk management function is misguided, especially after the failure of sophisticated quantitative risk models during the global financial crisis. The concern is that top-down risk management will inhibit innovation and entrepreneurial activities. We disagree and argue that risk management should function as a Revealing Hand to identify, assess, and mitigate risks in a cost–efficient manner. Done well, the Revealing Hand of risk management adds value to firms by allowing them to take on innovative, therefore riskier projects and strategies. But risk management must overcome severe individual and organizational biases that prevent managers and employees from thinking deeply and analytically about their risk exposure. In this paper, we draw lessons from seven case studies about the multiple and contingent ways that a corporate risk function can foster highly interactive and intrusive dialogues to surface and prioritize risks, help to allocate resources to mitigate them, and bring clarity to the value trade-offs and moral dilemmas that lurk in those decisions.