Enterprise Risk and Crisis Management

Every large company runs some form of risk management. The harder question, and the one that surfaces at board level, is whether all that local effort adds up to a coherent enterprise picture, or just a collection of well-run silos.

This client, a global consumer technology business operating across many markets, had strong risk management inside individual teams and still felt exposed at the top. Enterprise risk looked fragmented, and leadership wanted to understand why before committing to yet another reorganisation or tool.

The approach

KASP ran a structured diagnosis rather than a checklist audit. We interviewed 15 senior stakeholders across the business and reviewed the existing control environment end to end, mapping not just what risks existed but who owned them, who could act on them, and where the two diverged.

What we found

We identified 120 distinct enterprise risks across 17 categories. The surprise was not the volume; it was the pattern. Risk awareness was genuinely strong. Ownership was not. Several of the most critical risks had a named accountable owner who held none of the operational authority needed to manage them. Accountability and authority had drifted apart, and that gap, not any single unmanaged threat, was the real source of the fragmentation.

Why it mattered

A diagnosis is only useful if leadership can act on it. We delivered a clear-eyed picture of the problem alongside four sequenced investment options, from minimal change through to full centralisation, and a quantified case for a technology-enabled risk function that included an AI-driven opportunity assessment.

The result was not another compliance framework destined to sit unread. It was a defensible, board-ready roadmap, sequenced by cost, complexity, and business value, that let leadership choose their own pace of change with full visibility of the trade-offs.