Five years ago, while on retainer with a mid-sized financial institution, I attended a risk committee meeting where the CFO presented a “flawless” risk dashboard.
Every risk was green, no liquidity gaps, no compliance exposures, and no credit deterioration. The board members nodded with relief. Three months later, the same institution issued a profit warning after a large loan book collapsed under poor underwriting.
The board was furious, but the truth is simple: the risks had always been there. Management had painted over them to protect its image. That was the real risk, opacity disguised as leadership.
Stakeholders never lose confidence because you have risks. They lose confidence when the risks you identify and manage are not the real risks your business is exposed to.
Why risk without sunlight becomes poison
When your risk identification process is flawed, or when you hide risks, you trade short-term applause for long-term collapse. Employees sense the silence and assume leadership is dishonest.
Regulators become suspicious and start digging deeper. Investors demand a higher risk premium because they smell hidden rot. In my over 20 years of governance experience, I have seen not-for-profit organisations lose donor funding not because their risks were fatal, but because they were not upfront about control weaknesses.
I have seen manufacturers suffer strikes, not because they could not fix safety issues, but because workers felt management was covering them up. Risk that is concealed always returns multiplied.
Transparency reframes risk as capital. The strongest organizations I have worked with take a very different route. They bring risks into the open. A telecom operator I advised shared its risk heatmaps with all managers, not just the C-suite.
When a compliance breach happened, they published lessons learned across the business. It was uncomfortable at first, but soon employees felt trusted to act as co-owners, not passive bystanders.
Suppliers began to appreciate the openness and adjusted expectations. Regulators were less hostile because the company did not appear to be gaming them. Transparency turns risk into leadership capital; it converts fear into trust.
Executives often believe that protecting image is smarter than protecting integrity. They assume stakeholders admire flawless leaders. The opposite is true. Stakeholders trust leaders who admit imperfection but demonstrate discipline in fixing it.
The leadership challenge is therefore to redesign risk conversations. Stop presenting sanitized dashboards. Start telling the brutal facts and invite stakeholders to co-create solutions. The tool I recommend to leaders is called the transparency ladder.
The tool is made up of four levels.
a) Level one is concealment, risks locked in executive drawers.
b) Level two is disclosure, risks mentioned in reports but stripped of detail.
c) Level three is dialogue, risks openly debated with staff, board, and partners.
d) Level four is co-ownership, risks embedded in daily operations with accountability spread across the enterprise.
The leadership transparency ladder in detail:
Level one: Concealment
This is where most weak leadership begins. Risks are written in notebooks, hidden in emails, or buried in executive drawers. Only a handful of insiders know the truth, and they deliberately sanitize information before it reaches the board.
The illusion of control is maintained, but it is fake. Concealment buys short-term applause but guarantees long-term collapse. Future-ready organizations must abandon this level completely; it is toxic. Concealment is not risk management; it is self-deception.
Level two: Disclosure
Here, risks start appearing in reports, but stripped of substance. Numbers are summarized, red flags turned amber, and narratives softened with jargon. It is “compliance theatre.” Regulators may see a risk register, boards may review a heatmap, but nobody feels the weight of the risk.
Disclosure is like serving a meal with no salt, technically present, but not fit for purpose. Future-ready leaders must resist the temptation of disclosure for its own sake. Reports should not protect reputations; they should protect resilience.
Level three: Dialogue
This is where transparency starts becoming real. Risks are not just mentioned; they are debated. Leadership teams create safe spaces for staff to voice uncomfortable truths. Boards push management to defend assumptions, not just numbers. External partners are briefed honestly about disruptions and vulnerabilities.
Dialogue transforms risk from a compliance burden into a learning process. Future-ready leaders make dialogue a discipline, embedding risk conversations in town halls, strategy sessions, and supplier engagements. At this level, transparency earns trust.
Level four: Co-ownership
The highest rung of the ladder, and the one where resilient organizations thrive. Risks are no longer “owned” by the risk department or by a lonely CRO.
They are embedded in the DNA of daily operations. Frontline staff know the risks in their roles. Departments maintain live dashboards that update exposures in real time. Partners are given visibility into risks that may affect them.
Boards track not just the risks but the culture of response. At this level, risk is everybody’s business. Future-ready organizations reach co-ownership by aligning incentives, linking performance bonuses, supplier contracts, and leadership KPIs to risk accountability.
Why the ladder matters for the future
In a volatile world shaped by cyber threats, climate shocks, and regulatory scrutiny, concealment is corporate suicide, disclosure is inadequate, and dialogue is only halfway.
The future belongs to organizations that institutionalize co-ownership. When everyone in your enterprise feels responsible for identifying, reporting, and mitigating risks, you build not just compliance, but resilience, trust, and stakeholder loyalty.
Most organizations in our region are stuck at level two. To build stronger stakeholders, you must climb to level four. That is where resilience is forged.
Transparency in risk management is not a weakness. It is the hardest form of strength. And it is the difference between an organization’s stakeholders tolerate, and one they are proud to fight for.
If your board or executive team is still stuck in the concealment or disclosure trap, it is time for a reset. Visit SummitRISK: https://www.summitcl.com/summitrisk/ to explore how our risk governance tools can help you build stronger, more resilient stakeholders.
| # | Dimension | Level 1: Concealment | Level 2: Disclosure | Level 3: Dialogue | Level 4: Co-ownership | Your Current Score (1 - 4) | Next Step to Climb |
| 1 | Risk visibility | Risks hidden in files and emails, not shared beyond a few executives. | Risks appear in reports but are heavily sanitized. | Risks are openly shared in management and board sessions. | Risks are visible through real-time dashboards accessible to staff and partners. | ||
| 2 | Board engagement | The board receives “all is well” updates with no real evidence. | The board gets reports, but without context or dissent. | Board challenges management and debates risk assumptions. | Board tracks accountability culture; co-owns risk appetite with management. | ||
| 3 | Staff involvement | Staff are kept in the dark; only the compliance team sees risk data. | Limited staff access to risk registers with no real ownership. | Staff invited to speak up in forums; risks discussed in teams. | Staff are trained, incentivized, and accountable for reporting and managing risks. | ||
| 4 | External stakeholder trust | Partners, regulators, and investors learn about risks through the media. | Partners receive vague disclosures; regulators see only compliance reporting. | Partners are briefed honestly on disruptions; regulators are engaged proactively. | Partners and regulators co-create solutions and see real-time exposures. | ||
| 5 | Culture of accountability | Risk management is defensive and secretive. | Risk management is tick-box and report-driven. | Risk management is interactive, with cross-functional debates. | Risk management is embedded into KPIs, contracts, and leadership incentives. | ||
| 6 | Technology integration | No digital tools; risks tracked in Excel sheets hidden away. | Static reports are generated quarterly or annually. | Live dashboards are used in leadership meetings. | Enterprise-wide risk platforms with predictive analytics and automated reporting. |
How to use the scorecard
1. Rate your organization honestly across all dimensions (1 = concealment, 4 = co-ownership).
2. Identify weak spots - if most scores sit at 2, you are still in compliance theatre.
3. Set quarterly targets - commit to moving each weak dimension up by one level.
4. Assign ownership - make risk improvement part of leadership KPIs, not just the CRO’s report.
5. Track progress visibly - review the scorecard every quarter at EXCO and Board Risk Committee.
Stakeholders do not expect you to eliminate risk; they expect you to face it with discipline and honesty.
This scorecard is not about “looking good.” It is about building credibility. In today’s volatile world, co-ownership of risk is not optional; it is the only competitive advantage that survives turbulence.
I remain, Mr. Strategy
