Enterprise risk management must abandon the illusion of rigidcontrol for an agile, leadership-driven model if organisations hope to survive the compounding threats of Industry 6.0.
Key Insights
- Protecting corporate legitimacy during a crisis requires leaders to demonstrate uncompromising, transparent accountability rather than hiding behind technical excuses or shifting blame.
- As rigid governance structures fracture under the speed of modern disruptions, organisations must shift from centralised control to an agile command model that empowers frontline decision-making.
- Anticipating exponential risks like AI and climate volatility demands abandoning static risk registers in favour of real-time data telemetry, continuous wargaming, and built-in strategic redundancy.
Transforming a business in today’s volatile landscape starts with a single, uncompromising asset: trust. At the Institute of Enterprise Risk Practitioners’ (IERP®) Global Conference 2026, industry leaders converged on a stark reality: modern crises do not unfold in silos. Because risks are now deeply interconnected, a single technical glitch or supply chain fracture immediately becomes a crisis of trust, eroding stakeholder confidence in seconds.
Protecting this confidence requires enterprise risk management to evolve from a defensive checklist exercise into a dynamic leadership mandate. The conference panels explored this shift as one cohesive argument. Building true resilience begins with credible leadership at the top, where executives consistently embody their values.
It means replacing rigid control with agile command to navigate operational complexity. It means defending corporate legitimacy through transparent communication. Above all, it demands actionable foresight to anticipate incoming threats. Together, these principles provide the blueprint for governing chaos in Industry 6.0.
The CEO Mandate: Credible Risk Leadership
In a world reshaped by digital acceleration, stakeholder confidence is a commercial necessity rather than a public relations outcome. Jasmine Ng, Board Director of the Institute of Corporate Directors Malaysia (ICDM), framed this challenge clearly: how do executives maintain trust when transformation falters?
The foundation of authentic risk leadership is absolute ownership. Dato’ Amir Firdaus Abdullah, GMD and Chairman of Aurelius Healthcare, illustrated this with a defining crisis from his earlier tenure as CEO of Gleneagles Hospital, involving a fatal medication error. Despite the infant’s poor prognosis, he rejected a convenient medical excuse. Instead, he immediately informed the family of the hospital’s fault. This uncompromising ownership set a cultural standard that remains intact today.
True accountability means that the buck stops at the top. Anamika Talwar, Former Chief Executive Officer of Mercedes-Benz Financial Services emphasised that executives must take full responsibility and ownership of an issue, while separating the people from the problem. The focus should then be on understanding the root cause through thorough analysis and addressing the underlying issue appropriately, taking into account the interest of various stakeholders.
This same principle of accountability is critical during periods of transformation. Tolga Cebe, Chief Executive Officer of Coca-Cola Bottling Investment Group (BIG) Southeast Asia) noted that during Coca-Cola’s digital B2B transformation, leaders remained aligned on the purpose of the change while engaging openly with both frontline sales teams and traditional trade customers. He stressed that trust is strengthened when leaders stay visible, address concerns directly, and take ownership when implementation does not go according to plan.
At its core, credibility hinges on demonstrable conviction. As Dato’ Amir observed, stakeholders sense a leader’s sincerity, or the lack thereof, long before the leader finishes speaking.
Governing Industry 6.0: From Control to Command
While credible leadership secures trust, rigid control mechanisms inevitably fracture under the complexity of Industry 6.0. Traditional control ensures an organisation does the right thing, but modern command ensures it acts at the right time, for the right reason.
To achieve this speed, Ramesh Pillai, Group Managing Director of Friday Concepts, explained that companies must accept that predictability is a relic. Linear sign-offs collapse the moment a single decision-maker becomes unavailable. Instead of acting as restrictive barriers, risk professionals must empower frontline teams to make immediate decisions. In Industry 6.0, the speed of a response matters far more than predicting the odds of a crisis.
This agility is critical in managing increasingly interconnected risks. Noraina Mustapha, Head of Risk, Governance & Compliance at Prasarana noted that a single cyber incident can simultaneously affect operational technology, safety, regulatory obligations and public confidence.
As organisations become more interconnected and decision-making increasingly autonomous, governance must evolve with them. Boards and executives must define their appetite for autonomous decision-making, establish clear decision rights and escalation thresholds, and determine when human intervention or override is required. Her central point was that before organisations decide what AI can do, they must first decide what they are prepared to let AI decide, while ensuring that accountability ultimately remains human.
Consequently, enterprise risk management must evolve. Azwang Omar, Head of Governance and Risk Management at DXN Holdings, shared how governance and risk management must evolve from traditional control and compliance towards continuous, intelligence-driven governance. He highlighted that today’s organisations face dynamic complexity from geopolitical developments, supply chain disruptions, AI, digital platforms and interconnected ecosystems—requiring faster sensing, interpretation, coordination and response.
Azwang emphasised that the role of risk professionals has changed —from maintaining risk registers and compliance reports to becoming strategic advisors, enterprise intelligence leaders, scenario analysts, resilience architects and decision enablers.
Defending Corporate Legitimacy in a Trust Deficit
A critical part of continuous risk response is strategic communication. In an environment where public trust is increasingly fragile, silence does not create neutrality; it creates a vacuum that speculation, misinformation and emotion can quickly fill. Syed Mohammed Idid, Deputy Chairman of the Public Relations Practitioners Society of Malaysia and General Manager, Strategic Communications and Stakeholder Engagement at West Coast Expressway, argued that organisations facing heightened scrutiny must look beyond protecting reputation to protecting something more fundamental: corporate legitimacy and the social licence to operate.
Reputation reflects what stakeholders think and feel about an organization. Corporate legitimacy goes deeper: it determines whether stakeholders believe the organisation deserves their continuing trust, acceptance and licence to operate. Syed emphasised that while technical interventions may correct the immediate failure, they do not automatically restore confidence. Systems can be repaired technically; trust must be repaired behaviourally — through transparency, accountability and visible leadership.
This distinction becomes particularly important during a crisis. A seemingly small technical failure can trigger much larger questions about organisational culture, governance and leadership. Boeing’s aircraft safety controversies demonstrated how individual technical failures can escalate into broader scrutiny of safety culture, while the UK Post Office Horizon scandal showed the consequences of placing institutional and technological certainty ahead of human evidence. Syed also drew from West Coast Expressway’s own live highway crisis simulation to illustrate another dimension of risk: an operationally sound response can still create reputational consequences when the stakeholder experience is not anticipated and managed alongside the operational response.
The implication for leadership is clear. Strategic communication should not be positioned as a reactive function brought in after an incident to manage publicity. It should operate as an organisational control — sensing stakeholder concerns, interpreting emerging risks, challenging assumptions and helping leadership respond before an operational issue becomes a crisis of confidence.
Syed identified three critical pressure points when organisations face public scrutiny: clarity in what they communicate, demonstrable ownership of consequences, and alignment between what the organisation says and what stakeholders actually experience. When these diverge, credibility deteriorates rapidly.
Ultimately, facts remain essential, but facts alone rarely resolve a trust deficit. Facts answer the technical question; transparency demonstrates accountability; and visible leadership answers the public’s deeper question: “Can we still trust you?”
Anticipating the Future of Enterprise Risk Management
While transparency protects the organisation in the present, navigating Industry 6.0 calls for anticipating the threats of the future. The playbook many risk professionals spent their careers mastering is now obsolete.
Ramesh highlighted a critical danger: the velocity gap. Modern risks are exponential and instantaneous, yet traditional governance remains linear and slow. This widening gap leaves organisations severely exposed.
Notably, three accelerants drive this shift: AI compressing decision windows to near-zero, the extreme fragility of public trust, and the reality of climate change as a tangible balance-sheet risk rather than a corporate social responsibility talking point.
With these converging risks compounding exponentially, manual compliance checkpoints are no longer viable. Ramesh argued that modern risk leadership must transition from a rigid human-in-the-loop approach to flexible human-on-the-loop oversight.
By building automated guardrails, businesses can empower their operations to act faster and more safely. Furthermore, as climate volatility and shifting geopolitics disrupt global operations, the era of just-in-time supply chains is over; companies must now optimise for ‘just-in-case’ rather than ‘just-in-time’.
To survive the collision of technology, regulation, and geopolitics, proactive risk leadership demands foresight over static registers. Ramesh outlined three non-negotiable mandates for the future: upgrade data telemetry to real-time, run continuous adversarial wargaming, and build strategic redundancy directly into the business model.
Risk Leadership in Industry 6.0
Surviving compounding threats, such as AI-driven disruptions, fragile public trust, and climate volatility, compels a fundamental shift in how businesses operate. In the volatile landscape of Industry 6.0, enterprise risk management must function as a strategic enabler.
Rather than managing risks in isolated silos, leaders must treat risk management as an integrated ecosystem. As the conference highlighted, the focus must shift from predicting every possible failure to building the agility to respond when things inevitably break.
The future of the profession belongs to those who adapt. By embedding flexibility into their DNA, organisations transform potential vulnerabilities into strategic resilience. In essence, modern enterprise risk management is not about building thicker walls; it is about equipping the business to navigate the chaos confidently.
