Risk and Resilience
Escalation Thresholds Should Follow Consequence, Not Just Variance
Why cost and schedule tolerances are not enough, and how to design escalation rules around consequence, reversibility, strategic value and risk.
EraNorth Insights
Decision-grade thinking for complex work.
Professional knowledge and strategic perspectives across strategy, projects, operations, engineering, transformation and business performance.
89 articles found
Risk and Resilience
Assumptions Are Strategic Dependencies Before They Become Risks
How leaders can turn critical assumptions about people, funding, regulation, infrastructure and demand into governed strategic dependencies.
Risk and Resilience
You Cannot Fix the Price of an Undefined Outcome
How specification maturity, acceptance criteria and technology uncertainty determine whether cost risk can be transferred credibly through fixed pricing.
Risk and Resilience
Why One Machine Failure Costs More Than a Thousand Human Ones
Automated decisions are judged as policy because they trace back to a specification someone approved. That asymmetry belongs in your deployment threshold.
Risk and Resilience
Who Retires a Control?
Nothing in the risk discipline retires a control, so the estate compounds unowned, and the assurance function that reviews it can only ever find there is too little.
Risk and Resilience
Which of Your Risk Responses Changes the Probability?
Some risk treatments lower the chance of the event. The rest only decide who pays when it happens. Most registers cannot tell you which one you bought.
Risk and Resilience
Which Failures Does Your Enterprise Decide Not to Investigate?
Most organisations triage failures by how much damage they caused. That rule works only while damage and cause are correlated — and the exceptions are the ones worth finding.
Risk and Resilience
Which Contract Document Wins? Designing the Hierarchy Between MSA, SOW, Purchase Order and Policies
How document precedence should be designed across master agreements, SOWs, purchase orders, pricing schedules, SLAs and incorporated policies.
Risk and Resilience
'When Time Goes at Large: How the Completion Date Can Lose Its Commercial Force'
How principal-caused delay, weak EOT mechanisms and the prevention principle can affect the enforceability of the contractual completion date and delay remedies.
Risk and Resilience
'When the Contract Becomes Impossible to Perform: Governing the Economics of Frustration'
How leaders should think about work completed, materials, demobilisation, payment and commercial transition if a supervening event brings contractual performance to an end.
Risk and Resilience
When Standard Terms Become Strategic Debt: Governing Long-Term Agreement Drift
How long-term agreements can lose strategic fit as pricing, quality, technology, supplier capacity and organisational needs change over time.
Risk and Resilience
When Reliance Becomes Risk: Promissory Estoppel Beyond the Signed Contract
Why silence, encouragement and reliance can create commercial exposure before a formal contract is fully executed.
Risk and Resilience
'When Dispute Boards Fail: Bias, Overreach and Loss of Legitimacy'
How private communications, perceived bias, prejudgment, unclear authority and role overreach can turn a dispute-avoidance mechanism into another source of conflict.
Risk and Resilience
When Contract Freedom Meets Public Policy: Restraint of Trade, Confidentiality and the Limits of Commercial Control
How leaders should think about restraint clauses, confidential information and trade secrets without assuming a contract can control every future behaviour.
Risk and Resilience
'When an Opinion Becomes Commercial Risk: Representations, Forecasts and Reliance'
How statements about approvals, future outcomes and commercial prospects can influence another party's investment decisions and create governance risk before contract signing.
Risk and Resilience
What Limited Liability Actually Excludes
Limited liability allocates risk; it does not remove it. The exposures sitting outside the corporate veil are usually the ones nobody has ever listed.
Risk and Resilience
What Exactly Was the Board Given the Probability Of?
A stated confidence level describes one chain of activities, not the project — and each stream added to protect the date lowers the true figure, not the reported one.
Risk and Resilience
What Did You Hand Your Contract Manufacturer That You Cannot Get Back?
Outsourcing is approved as a transfer of cost and executed as a transfer of capability. What crosses the boundary, and which protections stop at a border.
Risk and Resilience
Unconscionable Conduct: When Bargaining Power Becomes Exploitation
How leaders should distinguish hard bargaining from exploitation of special disadvantage and design safeguards for vulnerable commercial decisions.
Risk and Resilience
Two Funds, Two Authorities
Contingency and management reserve admit different events under different authorities. One undifferentiated pot merges a delivery decision with a governance one.
Risk and Resilience
'Time Is a Contractual System: Delay, EOT, Acceleration and Damages'
Why project schedule performance must be governed together with notices, extensions of time, acceleration, causation and financial consequences.
Risk and Resilience
The Signed Contract Is Not Always the Whole Commercial Story
Why prior conversations, incorporated documents and actual payment behaviour can matter when the signed agreement does not tell the complete commercial story.
Risk and Resilience
The Party You Cannot Sue
The party that causes your worst loss is rarely one you can sue, and recovery runs in series down a chain, so the probability of getting paid multiplies away.
Risk and Resilience
The Padlock Is Not the Control
The padlock proves encryption, not legitimacy. Consumer-grade cyber advice given to executives stands in for a risk-appetite decision the board never made.
Risk and Resilience
The Liability Cap Nobody Adds Up
Every liability cap is a decision to absorb a supplier's failure above a line, taken by people not accountable for the loss, and nobody holds the total.
Risk and Resilience
The Governance Risk of the Charismatic Leader
Charisma can accelerate commitment, but it can also suppress challenge, increase risk-taking and make organisations dependent on one person.
Risk and Resilience
The Floor Beneath Your Risk Scale
Every risk scoring instrument has a probability floor. Enterprise-ending events live below it, so the risks that destroy organisations cannot be recorded at all.
Risk and Resilience
The Award Letter Is a Commercial Control Point, Not Administrative Correspondence
Why award communications must preserve the exact bargain, authority and evidence needed to move from preferred tenderer to binding delivery commitment.
Risk and Resilience
Terms or Talk? Why Pre-Contract Statements Can Change Commercial Exposure
How leaders should distinguish contractual terms from pre-contract representations and govern commercial promises made before signature.
Risk and Resilience
Supply-Network Resilience: Why Lowest Unit Cost Can Create the Highest Enterprise Risk
A strategic sourcing framework that balances unit cost with continuity, concentration, recovery time, inventory, quality and supplier capability.
Risk and Resilience
Supplier Due Diligence Before Award: Can the Preferred Tenderer Actually Perform?
How leaders should test financial strength, people, experience, quality, systems and subcontractor capability before turning a strong tender into a contract.
Risk and Resilience
Strategic Resilience: Designing for Reversibility, Buffers and Optionality
How leaders can design resilience through reversible commitments, purposeful buffers and strategic options without turning flexibility into inefficiency.
Risk and Resilience
Single-Point Schedules Hide the Risk Leaders Need to See
Why a single project finish date creates false precision—and how leaders can govern schedule confidence, contingency and uncertainty before commitment.
Risk and Resilience
Silence Is a Commercial Signal: Half-Truths, Changed Circumstances and Disclosure Risk
Why silence can become misleading when prior statements, changed circumstances or special relationships create an expectation of disclosure.
Risk and Resilience
Settling for Less: The Strategic Logic Behind Accord, Satisfaction and Debt Compromise
How leaders should think about part-payment, concessions and commercial settlements when preserving value matters more than enforcing the original position.
Risk and Resilience
Risk You Transfer Is Risk You Still Own
Moving a risk to your contractor changes who is liable, not who is exposed. When the contractor cannot carry it, the exposure returns — usually through a court.
Risk and Resilience
Risk Transparency Is Not Risk Control: Build Portfolio Coping Capacity
A visible portfolio risk is not a controlled risk. Leaders need both risk transparency and the organisational capacity to prevent, absorb and respond.
Risk and Resilience
Risk Transfer Does Not Remove Enterprise Exposure
Why contracts can allocate responsibility without eliminating customer, operational, reputational or strategic consequences for the enterprise.
Risk and Resilience
Risk Is Not the Chance That Things Go Wrong
A risk register that records only threats leaves an organisation structurally blind to favourable deviation. The definition itself is the problem.
Risk and Resilience
Risk Culture: Why Constructive Challenge Is a Governance Capability
Why risk systems fail when bad news cannot travel upward, and how leaders can build constructive challenge, escalation safety and evidence-led governance.
Risk and Resilience
Risk Belongs in Portfolio Decisions Before Projects Fail
Portfolio risk management turns project and program risk information into investment choices, resource shifts and early executive intervention.
Risk and Resilience
Risk Appetite, Tolerance and Capacity Are Not the Same Thing
How leaders can distinguish willingness to take risk, operating boundaries and true capacity for loss when making enterprise and portfolio decisions.
Risk and Resilience
Risk Appetite Is a Strategic Boundary, Not a Compliance Statement
How boards and executives can use risk appetite to shape strategy, portfolio choices, tolerances and resource allocation before commitments are made.
Risk and Resilience
Risk Allocation Is Not Risk Elimination: What Procurement Models Really Change
Why procurement models can transfer, retain or share defined risks but cannot eliminate uncertainty, weak scope or poor interface governance from a project.
Risk and Resilience
Repudiation Before the Due Date: Accept, Affirm or Wait?
When a counterparty announces it will not perform, leaders must choose whether to accept repudiation, affirm the contract or preserve another strategic option.
Risk and Resilience
'Quantum Meruit After an Unfinished Contract: Payment, Restitution and the Limits of Recovery'
Why payment for work performed after a contract ends can become a restitution problem, and why leaders should distinguish contractual entitlement from quantum meruit.
Risk and Resilience
Quantitative Risk Analysis: When More Precision Improves the Decision — and When It Does Not
How leaders should use PERT, Monte Carlo, decision trees and ranges without allowing sophisticated models to create false confidence or hide weak inputs.
Risk and Resilience
Procurement Policy Has a Version: Why Old Evaluation Rules Create New Governance Risk
Why procurement templates, thresholds, weightings and tender rules need active version control as policy, law and organisational requirements change over time.
Risk and Resilience
Performance Security Is Not Free Protection
How leaders should choose between bonds, retention and guarantees by balancing continuity protection, supplier economics, enforceability and project risk.
Risk and Resilience
Optimal Risk Allocation Is Not Maximum Risk Transfer
Why PPP value depends on allocating each risk to the party best able to manage it rather than transferring as much risk as possible to the private sector.
Risk and Resilience
Open Book Is Not an Open Cheque: Cost Transparency and Commercial Discipline in Alliances
Why open-book alliance costing requires independent challenge, disciplined contingency and strong owner capability rather than passive acceptance.
Risk and Resilience
One Risk Score Hides Too Much: Separating Different Sources of Uncertainty
Why leaders should separate technical, market, execution and systemic uncertainty instead of compressing every exposure into a single risk score.
Risk and Resilience
Not Every Portfolio Uncertainty Belongs on a Risk Register
Why portfolio leaders need more than probability-impact scoring when uncertainty emerges from markets, organisational complexity and project interactions.
Risk and Resilience
Not Every Loss Is Recoverable: Remoteness and the Information Leaders Must Share
Why contract recovery depends on foreseeability, remoteness and whether unusual downstream business dependencies were communicated before the breach.
Risk and Resilience
Normalisation and the Illusion of Precision in Tender Scoring
How normalised tender scoring changes relative rankings, why small score differences can be misleading and where executive judgement must remain visible.
Risk and Resilience
Mistaken Identity, Fraud and the Innocent Purchaser
How identity verification, fraud, title transfer and innocent third-party rights collide when a valuable transaction is induced by an impersonating buyer.
Risk and Resilience
Mistake Is Not a Get-Out Clause: When Shared Error Undermines the Deal
How common and mutual mistake affect transaction integrity, and why leaders should separate fundamental assumptions from ordinary commercial misjudgement.
Risk and Resilience
Misleading or Deceptive Conduct Is Broader Than Misrepresentation
Why executives should distinguish common-law misrepresentation from the broader Australian Consumer Law test for misleading or deceptive conduct.
Risk and Resilience
Masking the Attribute Does Not Remove It
A widely taught fairness audit returns a clean result precisely when bias is most deeply encoded. What an assurance test must do to detect proxy encoding.
Risk and Resilience
Liquidated Damages Should Price Consequence, Not Punish Delay
Why liquidated damages should create commercial certainty around late completion rather than operate as an arbitrary threat or substitute for weak schedule governance.
Risk and Resilience
'Latent Defects Outlive Handover: Governing Residual Liability After Completion'
How leaders should manage hidden defects, evidence, warranties, records and residual risk after practical completion and the defects liability period have passed.
Risk and Resilience
'Interdependencies Are Portfolio Risk: Why Project Dashboards Miss the System'
Individual projects can look healthy while shared dependencies create portfolio-level failure. Leaders need a system view of interfaces and constraints.
Risk and Resilience
Integrity Is an Operating Control
Why integrity is not merely a personal virtue but a practical control that affects information quality, risk, trust and execution performance.
Risk and Resilience
'Insurance Is Risk Architecture: Match Cover to Responsibility, Not Habit'
Why contract insurance should follow the actual loss pathways, responsibilities and project interfaces rather than being copied mechanically from precedent.
Risk and Resilience
How Legal Authority Actually Works: Statute, Common Law, Equity and Precedent
A practical executive guide to understanding legal authority, precedent and why not every legal opinion carries the same decision weight.
Risk and Resilience
Frustration Is Not a Bad-Bargain Escape: When External Events Change the Deal
How leaders should distinguish true contractual frustration from hardship, higher cost or inconvenience when external events disrupt performance.
Risk and Resilience
From Tender to Variation: Contract-Law Traps Project Leaders Cannot Ignore
Tender communication, acceptance and later promises can create legal consequences. Project leaders need disciplined commercial communication and verified legal advice.
Risk and Resilience
From Estimate to Commitment
Every serious estimate arrives with a range around it. The number that leaves the approval meeting has none, and nobody decided to remove it.
Risk and Resilience
Fraud, Negligence or Honest Error? Why the Type of Misrepresentation Changes Exposure
How fraudulent, negligent and innocent misrepresentation differ, and why organisational controls should focus on knowledge, verification and reliance.
Risk and Resilience
Foreseeable Risk Should Be Contracted, Not Hoped Away: The Limits of Frustration
Why leaders should allocate foreseeable disruption, approval risk and contingency in contracts rather than rely on frustration after the event.
Risk and Resilience
Force Majeure and Frustration Are Not the Same Risk
Why exceptional-event clauses and the legal doctrine of frustration solve different problems, and how leaders should decide which uncertainty belongs in the contract.
Risk and Resilience
'Expectations Become Requirements: The Hidden Commitments That Reshape Programs'
Stakeholder expectations can quietly become acceptance criteria, political commitments and delivery risks unless programs surface and govern them deliberately.
Risk and Resilience
Exclusion Clauses Are Risk Allocation, Not Escape Clauses
How leaders should evaluate exclusion and limitation clauses as deliberate choices about liability, insurance and enterprise risk.
Risk and Resilience
Economic Price Adjustment: Stop Paying Suppliers to Guess Inflation and Market Risk
Why long-duration fixed-price contracts may need transparent adjustment when labour, materials, exchange rates or other external costs move.
Risk and Resilience
'Economic Loss After Construction: Where Contract Risk Meets Tort'
Why defective assets can create long-tail liability beyond the immediate contract, and why leaders should distinguish contract, tort and statutory exposure.
Risk and Resilience
Early-Warning Signals, Triggers and Contingencies: Turning Risk into Action
How risk governance becomes actionable when leading indicators, decision triggers, contingency ownership and escalation rules are defined before events occur.
Risk and Resilience
Delay Entitlement Is a Causation System, Not a Calendar Argument
Why extension-of-time decisions should connect the event, responsibility, notice, causation, critical-path effect, mitigation and contractual entitlement.
Risk and Resilience
Crisis Leadership Is a System, Not a Personality Trait
What crisis leadership really requires: clear authority, trusted expertise, disciplined problem solving and decision systems that work under pressure.
Risk and Resilience
Counteroffers, Revocation and 'Subject to Contract': How Negotiations Change the Deal
How counteroffers, revocation, lapse and conditional wording can change the state of a commercial negotiation before leaders realise the deal has moved.
Risk and Resilience
Contractor Failure Is a Continuity Problem Before It Is a Legal Problem
Why security, default processes, insolvency planning, subcontractor knowledge and replacement options should be designed around continuity of project outcomes.
Risk and Resilience
A Contract Can Exist Before Anyone Signs It
Why signatures are not the only path to contractual commitment, and what project leaders should control before work begins or conduct implies agreement.
Risk and Resilience
Commercial Pressure or Economic Duress? Where Hard Bargaining Crosses the Line
How leaders should distinguish legitimate commercial pressure from economic duress when renegotiating distressed contracts and critical supplier arrangements.
Risk and Resilience
Claims Begin with Evidence, Not Lawyers
Why cost, delay and scope claims should be built from timely notice, causation, records, mitigation and quantum before positions harden into disputes.
Risk and Resilience
Cash Arrives Fast. Is That Profitability, or Only That You Have Not Found Out?
Fast inbound cash reads as prosperity and licenses spending that thin margins cannot support. How to tell an earned buffer from an unearned obligation.
Risk and Resilience
An Expected Value in a Ranking's Clothes
Multiplying probability by impact is an expected-value calculation used as a ranking rule. It is correct only for an enterprise indifferent to variance.
Risk and Resilience
Alternative Tenders: Invite Innovation Without Breaking Comparability
How buyers can encourage alternative and innovative tenders while preserving fair competition, comparability, confidentiality and defensible evaluation.
Risk and Resilience
Acceptance in the Digital Workplace: Email, Conduct, Silence and the Postal Rule
How acceptance works across email, conduct, silence and traditional post, and why digital speed makes commercial communication governance more important.
Risk and Resilience
A Zero-Tolerance Commitment Is a Capital Decision
An absolute constraint abolishes acceptance and most of transfer, leaving only the two costliest risk responses — and that price never returns to the business case.
Risk and Resilience
A Risk Register Is Not a Risk Management System
Why documenting project risks is insufficient, and how leaders create active ownership, triggers, responses and practical portfolio-level resilience.
Loading more Insights…