Risks Companies Refuse to See
Montenegrin companies, much like large corporations around the world, now operate in an environment in which uncertainty has become a permanent condition of the market.
Geopolitical tensions, technological change, regulatory pressure, rising costs of capital and shifts in consumer behaviour are now regular items on boardroom agendas across the world.
Almost every serious company today talks about risk. Reports are written, committees are formed, consultants are engaged, scenarios are prepared and control mechanisms are introduced. Risk has become part of the corporate vocabulary.
Yet corporate history points to one important truth: the greatest business failures are rarely the result of entirely unpredictable events. They are most often not caused by the fact that companies did not have enough information. Far more often, they occur because the information existed, but was not interpreted in time, with sufficient seriousness or with enough honesty.
The most dangerous risks are not always those missing from reports. Far more dangerous are those which, if acknowledged, would call into question the strategy, leadership, organisational culture or even the business model itself.
That is where the key distinction lies. Most modern companies have developed risk management systems. Financial, operational, regulatory and reputational risks are monitored, measured and recorded. Scenarios are prepared, policies are adopted and procedures are defined. On paper, the system looks orderly.
However, the greatest failures rarely arise from what an organisation does not see at all. They arise from what management does see, but refuses to interpret differently.
This may be the most difficult form of risk: not the one that is hidden, but the one that is uncomfortable.
Several years ago, I was engaged to analyse the business of a company which, viewed through traditional financial indicators, appeared highly stable.
Revenue was growing, liquidity was strong and clients remained loyal. There were no visible signs of financial pressure. The balance sheet did not suggest an immediate crisis, while profitability created an impression of control.
At first glance, the system was working. However, a more detailed analysis revealed a serious structural vulnerability.
The company was becoming increasingly dependent on a very narrow group of business partners. Key decisions were concentrated in the hands of a small number of people. Formal processes had not kept pace with the actual growth and complexity of the business. Governance still relied on the logic of an earlier stage of development, even though the company had meanwhile become larger, more exposed and more dependent on factors it could no longer easily control.
In the financial statements, this did not look dramatic. On the contrary, the numbers created a sense of security.
But that was precisely the problem. The financial result concealed the fact that the resilience of the business model was not growing at the same pace as revenue. The company was successful, but it was not sufficiently protected against a change in circumstances.
The greatest risk was not in the balance sheet. It was not in the risk register either. It lay in the assumption that the circumstances which had supported success for years would remain unchanged.
This is an important lesson for companies that want to compete not only in the domestic market, but also regionally and internationally.
As markets become more complex, financial performance alone is no longer sufficient proof of long-term sustainability. Profit matters, but it is no longer a sufficient answer.
Investors, banks and strategic partners are increasingly looking at the quality of governance, the resilience of the business model, transparency, risk management capacity and the company’s ability to adapt to change.
The question is no longer only whether a company is profitable today. The question is how resilient that profit really is.
This is precisely where many companies, especially in smaller markets, make the wrong assessment. Stable revenue is often equated with a stable business. Long-standing relationships are interpreted as permanent security.
In the Montenegrin business environment, this issue carries particular weight.
Many companies were created and grew through personal relationships, entrepreneurial intuition and the ability of individuals to make decisions quickly. In the early stages of development, this is often an advantage. It enables flexibility, speed and adaptation.
But what is an advantage in one phase of growth can become a limitation in the next. Once a company passes a certain threshold of complexity, the business can no longer depend solely on the experience of a few people, informal arrangements and the assumption that problems will be solved “as they always have been”.
At that point, a system is needed. Processes are needed. Institutional memory is needed, as well as governance that does not depend on the mood, relationships or intuition of any single individual.
This is exactly where resistance most often appears.
Not because management does not understand risk, but because dealing with risk seriously would require an admission that the previous way of managing the business is no longer enough.
And that is far more difficult than completing another report.
Few examples illustrate this problem better than Nokia, a case I often highlight.
The case of the former mobile industry giant is often simplified as a failure to recognise technological change in time. That explanation is attractive, but it is not sufficient.
Nokia did not suffer from a lack of information. Technological trends were visible. Competitive pressures existed. Changes in user behaviour were becoming increasingly obvious.
The real challenge was deeper. Recognising the full significance of those changes would have required questioning a business model that had produced exceptional results for years. It would have required admitting that what had made the company successful might no longer be enough to make it relevant in a new market cycle.
Technology, in itself, was not the greatest risk.
The risk was the belief that a model which had worked for years would continue to work equally well under changed circumstances.
This logic is not present only in the technology sector. The same weakness can be recognised in banking, energy, telecommunications, logistics, retail and tourism.
Banks that underestimate changes in client behaviour. Energy companies that postpone confronting the transition. Telecommunications companies that still treat infrastructure as a permanent competitive advantage, even as value increasingly shifts toward data, user experience and digital services. Tourism companies that continue to treat the number of guests as the main indicator of success, although real value is measured by spending, quality of offer and the resilience of the destination.
The greatest business challenges often do not arise from change itself. They arise from the fact that management tries to govern new circumstances using assumptions that belong to an earlier period.
That is why serious risk management cannot be reduced to an administrative function. It must not be merely a spreadsheet, a procedure or a mandatory agenda item.
Risk management must become a discipline of questioning the obvious and asking the right question: what if what looks today like our greatest strength is already slowly becoming our weakness?
Companies that want to avoid serious strategic mistakes must regularly ask several uncomfortable but necessary questions:
Which basic assumptions about our market are no longer true?
Which sources of our current competitive advantage are becoming less important?
How much of our current success depends on circumstances that may be temporary?
Does our governance system truly correspond to the size and complexity of the business?
Do key decisions depend on processes or on individuals?
Which small changes in industry rules could tomorrow change the economic logic of our business?
These questions are not comfortable. They often open topics organisations would rather avoid: concentration of power, dependence on a small number of clients, insufficient transparency, outdated processes, weak oversight, unclear responsibilities or excessive reliance on past success.
But that is precisely why they matter. The market rarely punishes companies for one wrong move. Far more often, it punishes them for a long series of assumptions that no one wanted to question.
The most successful companies are not simply those that predict the future best, because the future is uncertain by definition.
The most successful companies are those with enough discipline to challenge their own convictions before the market forces them to do so.
And at a time when markets are changing faster than business models can mature, that distinction may determine who survives and who is left merely explaining, after the fact, why the crisis could not have been avoided.
The greatest business risks rarely arise from what companies do not know. Far more often, they arise from what management believes it knows with too much certainty.
