Managing risks in an evolving world.

By Tom Gosschalk – Senior Account Director

The risks facing organisations have never been more varied, or more extreme. Increasing levels of geopolitical instability and economic volatility alongside climate change and frequent extreme weather events are giving organisations new headaches to deal with. Couple this with what feels like an increasingly polarised world which only seems to amplify the scale and frequency of these events.  

But it’s not just that the risks facing brands have become more extreme. In our ever more interconnected and digital world, risks and crises are more visible than they have ever been. The rapid flow of information means decisions taken in one time zone, that might once have been a contained operational issue, can now evolve into a reputational crisis across the world almost instantly.  

As the risks facing organisations become increasingly diffuse we wanted to provide some insight into what these risks are. To do this we analysed the risk registers of the FTSE 100, and mapped exactly what’s keeping the boards of the UK biggest companies up at night.  

The results? Well perhaps somewhat unsurprisingly geopolitical risks lead the way, with 97% of the FTSE 100 worried about the impact these issues could have on their brand. Coming in a close second was cyber security. An issue that will have undoubtedly risen up many organisations risk registers given the high profile attacks over the course of 2025.  

According to figures from the National Cyber Security Centre, the UK experiences four nationally significant cyberattacks each week. But the hacks at much loved British brands, M&S and Jaguar Land Rover have pushed the issue into the spotlight like never before. 

Much of the news reporting focused on the financial implications of the cyberattacks. In the case of Jaguar Land Rover, analysts estimated the automotive company lost around £50 million per week, and the attack cost the UK £1.9 billion. And while the financial damage is hard to ignore, the longer-term reputational impacts of these attacks can be just as damaging. Research by The Harris Poll UK found the percentage of consumers who would recommend M&S dropped by 21% compared to at the start of 2025, and a third of M&S shoppers now intend to shop elsewhere.   

Cyberattacks are undoubtedly one of the most debilitating risks facing organisations, and one that perhaps until now hasn’t been given the credence it deserved. Dealing with cyberattacks requires old thinking. Organisations are encouraged to take a more analogue approach, printing and storing crisis response plans offline, and rehearsing recovery scenarios without access to IT systems and digital channels.  

Whether dealing with a cyberattack, power outage or supply chain disruption it’s never been more important for organisations to be prepared. Our latest report, Risk Radar: Managing risks in an evolving world uncovers the top risks impacting businesses today, the threats they have on their radar and practical strategies for resilience. Download the report here.