Drawing on decades of multinational experience, Independent Non-Executive Director Sim Hong Kee reveals how modern boards must use continuous communication and a multifaceted perspective to navigate fast-evolving strategic risks.
Key Insights
- Effective enterprise risk management relies on continuous, candid communication between directors and management to align risk appetite with business strategy.
- To navigate fast-evolving risks like cybersecurity and AI, boards must pursue continuous education that anchors their mitigation strategies in practical business realities.
- Aspiring independent directors should build a T-shaped professional profile, combining deep specialized expertise with broad industry curiosity, to help them connect the dots during complex boardroom deliberations.
Effective risk management requires a multidimensional perspective. For Sim Hong Kee, an Independent Non-Executive Director at Mesiniaga and Hong Leong Assurance and graduate from the Institute of Enterprise Risk Practitioners (IERP®), this perspective stems from a diverse career spanning public accounting, private equity, and over three decades with IBM and Oracle.
Navigating these environments highlighted a critical lesson. “One of the key skills required to survive in a multi-national is to communicate candidly and clearly,” Hong Kee notes. “This is extremely important in the boardroom.”
Whether overseeing a highly regulated financial institution or a technology firm, the universal goals of board oversight remain constant: driving absolute integrity, ensuring compliance, and aligning risk appetite with business strategy. To achieve this, directors must draw on a wealth of experience. Looking back at his diverse roles, Hong Kee notes that they have “honed the habit of keeping an open mind, maintaining curiosity, attention to details, stepping back to consider the implications and connecting the dots.”
Adapting Enterprise Risk Management Across Regulated and Unregulated Sectors
Bank Negara Malaysia plays a highly effective role in regulating and supervising financial institutions. In these environments, board oversight focuses heavily on ensuring comprehensive mitigation measures for both existing and emerging risks. However, companies operating in less regulated industries face a different reality. Without a strong regulatory body, these organisations must apply significantly more effort to establish a comparable enterprise risk management culture.
Drawing from his diverse career, Hong Kee leverages his financial institution experience to guide tech firms in developing robust internal processes. By actively imparting a strong compliance culture, he helps tech boards achieve fundamental governance standards. “The oversight aims for the same outcome: absolute integrity, regulatory compliance, risk appetite consistent with business strategy and protection of stakeholders’ interests,” Hong Kee explained.
Striking the Balance: Enterprise Risk Management Oversight, Execution, and Continuous Dialogue
For any board member, finding the right equilibrium between challenging management’s risk reports and stepping into operational execution is an ongoing challenge. This balance depends heavily on an organisation’s internal culture, transparency, and the alignment of key risks with its overarching strategy.
These hurdles grow more complex as regulatory acts impose increasingly onerous responsibilities on directors. To verify that management adequately addresses these issues, directors must maintain open lines of communication outside the boardroom. Hong Kee advised: “Maintaining contacts of key senior members of management and seeking thoughts and clarifications as and when thoughts or situations arise rather than waiting to raise them at the next meeting is helpful.”
Furthermore, by tapping into resources from the Harvard Business Review, IBM, the IERP, etc he keeps the conversation focused on fast-moving industry dynamics, ensuring enterprise risk management remains an active, daily dialogue.
Tackling 2026’s Emerging Strategic Threats Through Enterprise Risk Management
Looking ahead to 2026, the primary issue in boardrooms is often a fundamental lack of understanding regarding highly sophisticated threats like cyber security and artificial intelligence. “They are already with us, yet at the same time, the landscape is changing so fast that they are also emerging risks,” Hong Kee warned. This reality demands that modern enterprise risk management frameworks champion constant vigilance and enforce continuous education.
Beyond the digital landscape, boards must navigate severe macroeconomic headwinds, such as geopolitical tensions and energy supply disruptions, which lead directly to persistent inflation and increased business costs.
To take the right strategic risks amid this uncertainty, Boards must act collectively. “The Chair plays a very important role by ensuring personal thorough understanding of the board papers tabled, and expecting the same of fellow board members by going round the table to seek input from, and leverage the unique skills, knowledge and experience of each member,” he observed.
The Impact of Formal Enterprise Risk Management Training on Board Leadership
Professional upskilling fundamentally shifts how directors approach their oversight duties. The IERP® Qualified Risk Director (QRD) programme raises a director’s awareness of how distinct vulnerabilities manifest, reinforcing the need to constantly monitor existing threats while remaining alert to new ones.
More importantly, formal enterprise risk management training anchors mitigation strategies in practical business realities. “If a critical system is down, the mitigation measure must include the target recovery time and maximum tolerable down time,” Hong Kee explained.
In practice, this structured lens yields tangible boardroom wins. Robust probing into a company’s cyber security posture led to revamped incident tracking, employee phishing exercises, and formalised security patching policies. Similarly, reviewing operational risks within the procurement process identified significant gaps in vendor onboarding and negotiation, directly improving business margins.
Preparing the Next Generation: Becoming an Effective Independent Non-Executive Director
For young professionals looking to secure a seat at the table as an independent non-executive director, adding immediate value requires deliberate career design. The most effective strategy is developing a T-shape profile.
“By having deep knowledge and expertise in one or two areas, and seizing opportunities to gain exposure to as broad a range of skills and knowledge as possible. It enhances insightfulness and the ability to help connect the dots, which is valuable at board deliberations, the IERP® graduate advised. This combination drastically enhances a director’s ability to connect the dots during complex boardroom deliberations.
Furthermore, as fast-paced technological advancement becomes the permanent norm, he noted the need to “maintain a constant sense of curiosity”. Plus, sustainable leadership requires knowing when to step back from the intense demands of oversight. When he isn’t reviewing extensive board papers, Hong Kee recharges by listening to music, ballroom dancing, reading, closely following Formula 1 and tennis.
