Risk Management in Strategy

Risk appetite is one of the most commonly misunderstood concepts in governance and risk management. It is often confused with risk tolerance, or reduced to a broad statement that does not guide decisions. In practice: Risk appetite reflects the level and type of risk an organisation is willing to pursue or retain in pursuit of its objectives. Risk tolerance defines the acceptable limits or variation around performance and exposure. The distinction matters. Risk appetite informs strategic direction. Risk tolerance informs escalation and intervention. When the two are blurred, escalation becomes inconsistent, accountability weakens, and reporting loses decision-making value. Clarity in these concepts is not theoretical. It directly shapes oversight, response thresholds, and governance effectiveness. #RiskManagement #Governance #RiskAppetite #GRC #Resilience

Audit, Risk & Compliance (ARC): The Three Pillars of Strong Governance "Let me explain why Audit, Risk, and Compliance aren’t just checkboxes—they’re your governance backbone." I’ve had this conversation many times with peers, clients, and boards. And here’s what I often say when someone asks, “How do you build strong governance?” You start with ARC: - Audit - Risk Management - Compliance Each has its role, but when aligned, they become a strategic force. Let me walk you through it from experience: 🔍 Audit is your independent lens. Think of Audit as the team that tells you what’s happening. Their job is to verify that controls are working not just existing on paper. ▶ Example: I once saw an internal audit uncover a $500K billing discrepancy no one had noticed. That wasn’t just cost savings it was a control failure caught before it became reputational damage. The best audit teams today use data analytics and real-time assurance tools to stay ahead. Traditional static audits no longer suffice. ⚠️ Risk is your radar. Risk Management isn’t about stopping risk, it’s about knowing which risks matter, and how much risk you can take to grow. I’ve seen risk teams run scenario analyses ahead of market expansion that flagged FX volatility. With a solid hedging plan, they avoided a 7% EBITDA hit. That’s what proactive risk management looks like. And right now? The strongest risk programs I’ve seen are integrating AI, ESG risk, and third-party oversight into their frameworks. ✅ Compliance is your moral and legal compass. Compliance isn’t just about avoiding fines. It’s about building trust internally and externally. A solid compliance program is the reason one company I worked with navigated new data privacy regulations across multiple countries without missing a beat or getting penalized. What’s changing? Compliance is becoming more automated, more behavior-driven, and more global. And that means compliance officers need better tech and a seat at the strategy table. Now here’s the key: ARC only works when it's integrated. When Audit, Risk, and Compliance operate in silos, things fall through the cracks. But when they collaborate sharing insights, aligning priorities, and using common platforms governance becomes a value driver. A recent PwC survey backs this up: - 73% of execs say ARC alignment improves decision-making - 65% plan to invest in integrated GRC platforms - Over half say Internal Audit is now a transformation partner If you’re leading or supporting ARC functions, my advice is simple: Don’t build walls, build bridges. The future of governance isn’t in functions. It’s in how those functions work together. Let me know how ARC works in your organization today. Do the functions collaborate, or still operate in silos? #Governance #InternalAudit #RiskManagement #Compliance #GRC #BoardEffectiveness #OperationalResilience #Leadership #3prm #tprm #GovernanceExcellence #RiskStrategy #ComplianceCulture

In 2016, Colgate faced a significant challenge in India as Patanjali's Ayurvedic products rapidly gained popularity. Colgate, holding a dominant 55.6% market share in the toothpaste category, experienced a 1.8% decline in market share and a 4% drop in sales volume. Patanjali, on the other hand, quickly grew into a formidable competitor, evolving into a ₹10,000 crore giant within a decade. To counter Patanjali's rise, Colgate launched Vedshakti, a herbal toothpaste line, in an attempt to align with the Ayurvedic trend. However, this move backfired. Colgate's brand identity, long associated with "doctor-recommended" solutions for whiter teeth, conflicted with the Ayurvedic positioning. By venturing into Ayurveda, Colgate inadvertently endorsed the very essence of Patanjali's brand, which was already seen as the authentic leader in the Ayurvedic space. This strategic misalignment not only diluted Colgate's core brand values but also confused consumers who began to question Colgate’s sudden shift from science to Ayurveda. The result? Patanjali continued to capture more market share, while Vedshakti failed to make a significant impact. Colgate's own CEO later acknowledged that this misstep cost them dearly in terms of market position. Key Takeaway: This case serves as a compelling example of the risks of diverging from a strong brand identity. When a market leader like Colgate steps into a rival's territory without clear differentiation and understanding of consumer perception, it risks not only losing its own loyal customers but also reinforcing the rival’s position. The lesson here is clear: Stay true to your brand’s core strengths, and be cautious of competing on your competitor’s terms rather than your own. Thoughts? #FMCG #branding #Healthcare #brand #HUL #Patanjali

The biggest IPO risk is your own FOMO. I have seen people rush into IPOs without understanding what they are buying. The glossy ads and market chatter make it look like a once-in-a-lifetime opportunity, but if you don’t read the DRHP, you are investing blind. Here is a simple 10-minute filter I use when looking at any IPO: 📍 Object of issue: Is the company raising fresh money to grow, or are promoters exiting? 📍 OFS vs Fresh Issue: Heavy Offer for Sale usually means insiders are cashing out. 📍 Cash flows vs Profits: Profits on paper mean little if cash flows are weak. 📍 Customer concentration: Is revenue dependent on just a few clients? 📍 Promoter pledge: If promoters have pledged shares, that is a red flag. 📍 Related-party transactions: Look for governance issues hiding in plain sight. 📍 Valuation vs peers: Is the IPO priced fairly compared to listed companies? If even one of these looks shaky, I wait. Missing an IPO is better than losing money to hype. Your discipline, not your luck, will decide whether IPOs build your wealth or drain it.

Most people see M&A as a straight line: LOI → Diligence → Close → Integrate. That’s not how deals actually work. Deal success comes from managing three interconnected levers. A concept I learned from Carlos Cesta,  and they’re in a constant feedback loop: 1️⃣ Deal Structure: How you pay and align incentives (cash, equity, earnouts, escrows). Defines who holds risk, how much control you have, and post-close alignment. 2️⃣ Due Diligence: What you uncover and your ability to validate it. Findings shift your comfort level with price, structure, and integration speed. 3️⃣ Integration Strategy: Your blueprint for combining people, go-to-market, and systems. The speed, depth, and sequencing directly impact value capture. Here’s the kicker: Change one lever and the other two have to adjust. Example – shaky revenue forecast?  ➡ Move to a contingent earnout (structure)  ➡ Slow down or phase integration (strategy) Buyer-led M&A™ is about running this loop intentionally: testing assumptions, making trade-offs, and keeping all three levers in sync to engineer success. Don’t manage M&A like a checklist. Manage it like a system.

*The Autonomous Cyber Defence Trinity: Moving from Reactive Defence to Predictive Resilience.* 1. AI GRC (Governance, Risk, and Compliance) Focus: Transitioning from "Point-in-Time" to "Continuous" oversight. The Problem: Reliance on spreadsheets, manual audits, and outdated policies. The AI Solution: - Automated Policy Mapping: AI reads new regulations (like the EU AI Act or updated NIST frameworks) and maps them to your controls instantly. - Predictive Risk Scoring: Utilises internal data to predict which business units are most likely to face a breach. - Dynamic Compliance: Real-time dashboards provide a 24/7 view of compliance posture, not just during audit season. Visual Cue: An automated "Radar" or "Shield" icon representing constant monitoring. 2. AI Pentesting (Penetration Testing) Focus: Evolving from "Annual Scans" to "Continuous Adversarial Testing." The Problem: Traditional pentests are costly, slow, and only capture a single moment in time. The AI Solution: - Automated Exploit Simulation: AI "agents" emulate hacker behavior to uncover complex attack paths that static scanners overlook. - Vulnerability Prioritisation: Rather than presenting a list of 1,000 "Criticals," AI identifies which vulnerabilities are actually reachable and exploitable. - Red Teaming at Scale: Conducting thousands of simulated attacks simultaneously without the need for a large human team. Visual Cue: A "Sword" or "Hacker-bot" icon representing active, offensive testing. 3. AI SOC (Security Operations Centre) Focus: Shifting from "Alert Fatigue" to "Automated Remediation." The Problem: Analysts face overwhelming "noise" from false positives and slow response times. The AI Solution: - Noise Reduction: AI filters out 95% of false positives, emphasising only the "Signal." - Autonomous Response #CyberSecurity #ArtificialIntelligence #AI #InformationSecurity #SecurityLeadership #AIGovernance #RiskManagement #Compliance #PenetrationTesting #SOC #CISO #CyberRisk #EnterpriseSecurity #DigitalTrust

Most SEO strategies fail because they’re built in isolation. Traffic grows. Rankings move. Revenue stays flat. This image shows what most brands miss entirely. SEO is not tactics. SEO is a system. And systems only scale when every layer aligns. Here’s the breakdown 👇 The real problem with modern SEO • Teams chase content before fixing technical foundations. • Links are built without relevance or brand trust signals. • Traffic increases but conversions never follow. • SEO becomes busywork instead of a growth engine. The solution is structured SEO growth Not hacks. Not tools. Not trends. A layered system built for compounding results. Top layer: Technical foundation • Search engines must crawl everything cleanly and consistently. • Simple site architecture beats complex, overengineered page structures. • Speed, indexing, and crawlability always outperform visual perfection. Second layer: Content and intent alignment. • Rankings begin with understanding true search intent deeply. • Content clusters build topical authority, not random keyword wins. • Internal links distribute relevance where rankings actually matter. Third layer: Authority and trust signals. • Backlinks validate expertise, not vanity metrics or raw domain scores. • Relevance always beats volume when earning authority links. • Mentions strengthen brand trust across search and AI systems. The hidden middle: System alignment. • Technical health enables content visibility. • Content depth supports authority acquisition. • Authority fuels conversions when funnel paths are clear. • Weak layers stall growth, aligned layers compound results. Bottom layer: Conversion and revenue focus. • Traffic without CTAs is wasted acquisition cost. • Funnel mapping turns rankings into predictable revenue. • Money pages need internal authority to convert consistently. The real secret most brands ignore. • Most stop after publishing content. • Few invest in authority building correctly. • Almost none optimize SEO for conversions. • Full-stack SEO always outperforms isolated tactics. How to build the complete system. • Fix technical issues before scaling content production. • Map keywords to intent, not just search volume. • Build niche-relevant authority with contextual placements. • Optimize SEO for revenue outcomes, not traffic charts. SEO growth isn’t magic. It’s alignment. Build the system once. Let results compound forever.

My underwriter friend shared his growing frustration with the shifting dynamics of his role caused due to Increasing pressure to meet number targets rather than focusing on thorough risk assessment. Regardless of the risk quality, premiums often fail to align with the exposure, which is deeply concerning. Client’s current obsession on L1 over valuing insurers’ expertise in risk advisory and mitigation is alarming. If this trend persists, the insurance sector risks significant instability. As an insurer, we all are troubled by the rising frequency of AOG losses. Events once considered rare now occur every few months in unexpected regions like Kolkata and Punjab, with recent floods serving as stark examples. This unpredictability challenges insurers’ ability to underwrite risks effectively. Moreover, financial pressures are driving clients away from prudent risk management, resulting in substantial non-AOG losses that strain the balance sheets of insurers and reinsurers alike. Compounding the issue, the market is aggressively offering steep FLEXA discounts and now even slashing STFI and EQ rates, further undermining sound underwriting practices. This race to the bottom prioritizes short-term gains over long-term sustainability, putting the industry at risk of systemic failures. #Insurance #RiskManagement #ClimateImpact #Underwriting

Want 5-10x faster growth? Stop optimizing tactics in isolation and start mapping the SEO value chain. Most SEO strategies fail because they optimize isolated activities. I mapped the complete SEO value chain for 30+ clients. The ones who understood the chain grew 5-10x faster. What is the SEO Value Chain? The sequence of activities that transform SEO inputs into revenue outputs. Each link adds value, creates dependencies, has measurable output, feeds the next stage. Optimize one wrong and the entire chain breaks. The 8 Links Market Research → Insights Keyword Strategy → Target list Content Creation → Indexed pages Technical Optimization → Crawlability Link Acquisition → Authority Rankings → Visibility Traffic → Users Conversion → Revenue Link 1: Market Research → Insights Key metrics: TAM size, competitor gap count, search demand volume, customer intent mapping. Weak research equals wrong strategy. Link 2: Keyword Strategy → Target List Key metrics: Keywords identified, keywords by funnel stage, estimated traffic potential, difficulty versus authority match. Mistake: Targeting keywords you can't rank for in 12 months. Link 3: Content Creation → Indexed Pages Key metrics: Publishing velocity, word count, quality score, indexation rate. Bottleneck here? Everything downstream suffers. Target: 12-20 pieces monthly. Link 4: Technical Optimization → Crawlability Key metrics: Page speed, crawl efficiency, schema markup coverage, mobile optimization. Technical issues kill great content. Audit quarterly. Link 5: Link Acquisition → Authority Key metrics: New referring domains monthly, average DR, topically relevant links percentage, link velocity. No links equals no rankings. Target: 15-25 quality links monthly. Link 6: Rankings → Visibility Key metrics: Keywords in top 3, top 10, average position, featured snippets. Track weekly. Adjust monthly. Link 7: Traffic → Users Key metrics: Organic sessions, traffic by funnel stage, new versus returning visitors, growth rate. 10K visits at 3% conversion beats 50K at 0.5%. Link 8: Conversion → Revenue Key metrics: Conversion rate, revenue per session, cost per acquisition, customer LTV. The only metric that ultimately matters. Diagnose Breakdowns Work backwards: Low revenue, high traffic? Conversion problem. Low traffic, good rankings? Wrong keywords. Good rankings, no traffic? Low search volume. No rankings? Content, technical, or links issue. The Compounding Effect Better research → better keywords (1.5x) Better keywords → more relevant traffic (2x) More relevant traffic → higher conversions (3x) 10% improvement in each link equals 3-4x overall improvement. Common Mistakes Optimizing one link while ignoring others, working out of sequence, not measuring each link, over-investing in one area.

Everyone loves to talk about the strategy behind M&A deals. But the thing I’ve learned watching FMCG leaders up close? Deals don’t fail because of bad strategy. They fail because of people. It’s never the financial model that breaks first — it’s leadership misalignment. I see it happen all the time in FMCG — especially in Private Equity backed environments. The model looks perfect on paper: → Acquire a few fast-growing brands → Roll them into a global portfolio → Drive efficiencies, cost synergies, market expansion But then the integration starts — and suddenly things look very different. Because what the spreadsheet doesn’t tell you is: → The founder isn’t used to quarterly board meetings with EBITDA pressure → The CMO is still running a startup playbook in a scaled organization → The CEO doesn’t align with the go-to-market model in a new geography → The commercial leaders can’t navigate two different company cultures merging overnight And this happens more than most will admit. In fact — Bain & Company data shows 70% of M&A deals underperform expectations. And culture is one of the top 3 reasons. In the FMCG space — where brands carry legacy pride and deeply embedded ways of working — leadership integration is no longer “important.” It’s non-negotiable. Great M&A outcomes today don’t just come from smart strategy. They come from: → Leadership teams that trust each other faster than the market moves → Leaders who can flex between entrepreneurial scrappiness and corporate discipline → People who know when to protect brand identity — and when to evolve it And here’s what I tell my clients: If leadership alignment is not your #1 risk mitigation strategy in M&A — you’re not just betting on growth. You’re betting on luck. The smartest investors I work with in FMCG? They’ve learned this the hard way. They’re doing culture diligence as seriously as financial diligence. They’re assessing leadership “integration readiness” before the deal closes. They’re hiring talent not just for operational excellence — but for the ability to navigate ambiguity, pressure, and transformation. Because the future of FMCG M&A won’t be won by the best strategy. It will be won by the best people. Drop me a message — I’m always up for a conversation on building high performing teams. #FMCG #ExecutiveSearch #PrivateEquity #MergersAndAcquisitions #Leadership #CultureIntegration #ConsumerGoods #HiringStrategy