Financial institutions have been drawing flak for unacceptable attitudes and behaviour, despite spending large amount of resources on conventional risk management. This could be because they have not addressed the "social risks"-risks that come from changing social attitudes and norms, argues a new paper from Australia's Actuaries Institute.
Conventional risk management may be failing Australia's financial institutions, which have been subjected to community and government criticism, tougher regulations, and now a Royal Commission looking into misconduct in the banking, superannuation and financial services industry.
Social expectations now higher
According to the Social Risks – for a financial services business paper by Mr Ian Laughlin, organisational standards and behaviour are actually higher in some areas than they were in the past. What has changed though, is the community—social expectations are much higher and tolerance for egregious practices is much lower than they once were. In addition, society's ability to see and to call out unacceptable practices and to highlight poor outcomes has become much more powerful via social media platforms like Twitter and Facebook.
"Institutions have not managed the risks that come from changing social attitudes and norms and the power of new social capabilities,” said Mr Laughlin, adding that these “social risks” need a fresh approach.
The factors that fuel social risks include ready access to information and social media. At the same time, there is something of a paradox: more information, but also more wrong information that spreads with great speed.
14 types of social risks
To help provide insight into social risks, Mr Laughlin produced 14 labels for types of social risk, among which are:
- cynicism risk; when a business consciously accepts its own poor attitudes and behaviour - for example, systematic underpayment of staff in franchise businesses.
- true values risk; when the actual values of management and staff conflict with the company’s espoused values. Most companies in financial services will have suffered from the consequences of this risk, driven perhaps by culture or remuneration. An example might be sales targets for bank branch staff driving behaviour at odds with the espoused values.
- insight risk; where a business has a poor appreciation of current social norms and expectations, and the pace of change. An example of this is the life insurance industry’s struggle with adequately anticipating and pricing for rising mental health claims.
- tolerance risk; society's attitudes change quickly and significantly, catching a business unawares.
Fake news a danger
He said fake news is a danger for Australian corporations, particularly banks, because consumers seem to have little sympathy for banks and their boards and management. There is a risk that an accusation may be blown up whether it has merit or not, the paper states. A critical article then might be fuelled by trolling from readers. “And once trust is damaged, it is very difficult to recover." Mr Laughlin notes the difference between fake news, and what he calls reverse fake news – the latter being where correctly reported news is effectively dismissed as fake news.
While some of these risks may not be new, the pace at which they can manifest themselves is very high. Mr Laughlin draws a distinction between internal and external social risks. Internal social risks are a function of awareness, knowledge, understanding, attitudes and behaviour of boards, management and staff.
This includes the organisation's risk culture, an area of keen interest for the Australian Prudential Regulation Authority. External social risks are more a function of what is happening in the community and the impact of this on the business. They are harder to mitigate but still require high awareness and conscious management.
Social risk sensing
The paper promotes the idea of social risk sensing, and draws a distinction between this and the use of more traditional risk indicators. The latter are often backward-looking and lack an element of anticipation. Risk sensing is a much more sophisticated approach, involving sensing social risks and their possible impact in almost real time.
The paper called for FIs to have deep and effective capabilities to monitor and assess social risks, such as feeding assessments of social attitudes and norms, and interpreting their impact on risk for the business. Sensors could take multiple forms – for example, pulse checks of attitudes, or automated analysis of trends on social media, including the use of artificial intelligence to assess attitudes as they are expressed – but would need to be much more sensitive and relevant than current measures.
In turn this will need new and quite different resources and capabilities – technology and people – allied with a deep understanding of the business and its customers. At the heart of this might be a Social Risk Officer, dedicated to the risks that emerge from attitudes and norms in society, how they are changing, and the implications for the business.