Picture a dam that holds back millions of litres of water. On the surface, it’s perfect; smooth concrete, fresh paint, and a proud ribbon-cutting ceremony. But deep underneath, a small crack forms. Engineers notice it but stay quiet; after all, no one wants to ruin the celebration. Weeks pass. The crack widens. One morning, without warning, the dam collapses. The flood doesn’t just destroy the structure; it sweeps away trust, reputation, and livelihoods downstream.
Imagine that dam as your organization. And those cracks? They are the unspoken risks no one dares to name; the things everyone senses but no one says out loud. Every company has them. They live in boardrooms, corridors, and chat groups. They are the risks of ego, culture, silence, and comfort.
The most dangerous risk isn’t cyber, fraud, or liquidity. It’s silence. Silence when someone notices an ethical breach but doesn’t want to “rock the boat.” Silence when managers ignore data manipulation to meet targets. Silence when employees fear being labelled “negative” for raising concerns.
In most companies, silence is often mistaken for loyalty. A senior manager once told me, “We don’t air dirty linen in public.” I told him, “Then prepare for a scandal, because secrets always find daylight.”
When people stop speaking, small problems metastasize into crises. The best indicator of a healthy risk culture is not how fast reports move; it’s how safe people feel to tell the truth.
A board can hire the best auditors and consultants, but if staff believe honesty is career suicide, you’re already compromised.
The risk of success
Paradoxically, success blinds leadership faster than failure. Once you start winning, risk awareness fades. “We’ve always done it this way” becomes a strategy. When profits are rising, dissenting voices are dismissed as pessimistic. That’s how once-great companies collapse; not from external shocks, but internal arrogance.
I once reviewed a thriving telecom company whose CEO was celebrated for record profits. Inside, middle managers were inflating subscriber numbers to meet bonuses. The CEO never questioned it; success had become a religion. When the truth came out, it wasn’t the numbers that failed; it was the culture that rewarded performance over integrity.
Success breeds fragility when it erodes curiosity. The higher you rise, the more you must invite uncomfortable truths.
The risk of the untouchable person
Every organization has “that one person”; too powerful to challenge, too connected to question, too valuable to lose. Maybe it’s the founder, the top salesperson, or the politically protected executive. Everyone knows their behavior is toxic, but everyone avoids them.
That’s a ticking time bomb. When one person becomes bigger than the system, the system dies. I once sat in a board session where directors whispered concerns about a CFO’s side dealings, but none wanted to confront him. Six months later, the company was in court over missing funds. Power unchecked is risk uncontained.
If your culture has “sacred cows,” your risk appetite is already exceeded. True governance means no one is above the rules, not even the founder.
The risk of optimism bias
Optimism is a leadership virtue until it becomes denial. Leaders love good news. They crave progress updates, growth charts, and expansion plans. But every “up and to the right” chart hides a cost. The problem isn’t optimism; it’s the lack of balance.
Teams learn quickly what leaders want to hear. So they filter bad news. Reports become sanitized. Issues are “under control.” You get dashboards that look perfect, until reality hits.
In one manufacturing company, production delays were repeatedly “under control” in reports. No one wanted to admit mthat achinery was outdated. When a client walked out, everyone blamed “market conditions.” The truth was hiding in plain sight.
Leaders who punish bad news create organizations that lie to them beautifully. The risk of compliance jokes
In most institutions, risk management has become a performance art. Fancy frameworks, red-yellow-green heat maps, and glossy dashboards. But beneath the cosmetics, nothing changes. Risks are documented but not managed.
In one multinational subsidiary, the risk register was immaculate; quarterly updates, ratings, and RACI charts. Yet when a cyberattack hit, no one knew who was in charge. The system had become a box-ticking ritual; risk as paperwork, not as behavior.
The real purpose of risk management is not to impress regulators; it’s to improve decisions. When the process becomes an end in itself, it’s no longer governance; it’s theatre.
The risk of cultural comfort
This one is subtle but deadly. Over time, organizations grow comfortable with mediocrity. Delays are normal. Corruption is “part of doing business.” Underperformance is tolerated “because he’s been here long.” This comfort becomes institutionalized.
A culture that avoids discomfort avoids transformation. Leaders who demand loyalty over accountability breed quiet decay. You cannot build a resilient organization on the foundation of emotional avoidance.
Transformation starts when you make people slightly uncomfortable; not unsafe, but uneasy enough to reflect.
Why these risks matter
These unspoken risks matter because they attack the core of performance: trust, credibility, and resilience. They don’t appear in financial statements or audit reports, but they determine whether your business survives disruption or crumbles under pressure.
Cyber threats and fraud can be insured. Silence, arrogance, and cultural decay cannot. They corrode from within. Ignoring these soft risks is like treating a heart attack with lipstick; it looks fine on the outside, but the damage is fatal.
Building psychological safety
If you want your organization to talk about real risks, start by making truth safe.
- Model vulnerability. Admit your own mistakes publicly. It signals that truth is not punished.
- Reward honesty. When someone raises an uncomfortable issue, thank them, not silence them.
- Normalize dissent. Hold “red team” sessions where people challenge assumptions.
In one organization, the CEO created a monthly ritual called “Bad News Friday.” Every department had to present one failure of the month and what they learned. Within a year, reporting quality improved by 60%. People stopped hiding issues; they started owning them.
Psychological safety is the cheapest and most effective risk control you’ll ever build. Use the “Unspoken Risk Audit” tool
In your next leadership meeting, take 30 minutes and conduct this exercise:
- Step 1: Give everyone sticky notes.
- Step 2: Ask: “What are the three biggest risks no one talks about here?”
- Step 3: Collect, group, and discuss without naming individuals.
- Step 4: Identify what makes these risks unspoken: fear, ego, or lack of clarity.
- Step 5: Assign one executive sponsor to address each root cause.
You’ll be stunned by what surfaces: the patterns of silence, the ignored tensions, the blind spots everyone feels but never voices. Then, do this quarterly. Over time, your leadership culture will shift from defensive to proactive.
The most resilient organizations aren’t those that avoid risk; they’re the ones that talk about it early, openly, and intelligently.
Back to our dam: it wasn’t water pressure that caused the collapse; it was the silence about a small crack. Your job as a leader is to find those cracks and fix them before they flood the business.
In the end, what destroys companies isn’t what they didn’t know. It’s what they knew but refused to discuss.
