External risk reporting: 6 key trends from 2024

5 min read
Feb 10, 2025

Do most companies mention how their principal risks are trending, disclose their risk appetite and list the emerging risks they're monitoring in their external reports? For many, there is an important balance to maintain between meeting obligations and not revealing too much.

material risks 2023
Download the top 10 principal/material risk categories of 2024
With 3 year trends of data, from our AI-powered Risk Reporting Comparison Tool.
Download

While organisations' external risk reports rarely change noticeably year-on-year, data from our Risk Reporting Comparison Tool does highlight some trends across listed companies and their annual reports.

In this article, we highlight common themes between organisations' reporting approaches and explore how the content of risk reports evolved in 2024 among FTSE- and ASX-listed organisations.
 
RRCT gif-1
Access the full data platform
Save time validating your annual risk report with Risk Leadership Network's Risk Reporting Comparison Tool
Request a demo
 

1. Risk trends on the rise

Risk reporting trends - 1

87% of FTSE organisations highlight (albeit briefly) how each of their principal risks is trending, up from 81% in 2021. 

While the majority of ASX organisations don't include trend detail, this is on the rise, up from 11% in 2021 to 15% in 2024. 

They ask: is the risk increasing, decreasing or stable? This is typically represented by arrows or a colour code (e.g. traffic lights) which show the movement of principal risks.

A much smaller percentage of companies, just 26% (31% of FTSE, 4% ASX), include a likelihood-severity matrix in their report.

Practitioner view

At a recent workshop we facilitated, on annual risk reporting, one risk leader argued that there may be more value in drawing out a narrative about where risks are going, focusing on broader trends instead of details that don't change very often


2. Increased reporting of appetite per risk

Risk reporting trends - 3

While it is still relatively uncommon for FTSE- and ASX-listed organisations to include risk appetite in their annual report, the proportion of companies reporting this information has steadily increased over the past four years. 29% of FTSE organisations now include this detail (up from 18% in 2021), and we've seen a small percentage of ASX companies introducing this to their annual reports in the last two years.

Practitioner view

While companies are clearly becoming more open to sharing their risk appetite externally, it remains a point of sensitivity for a lot of organisations. Their concern is that this may send the wrong message about how much risk they want to embrace.

To address this challenge, one practitioner in our network is weaving references to "tolerance" into their risk descriptions, as opposed to including an explicit appetite statement for each risk.


RRCT gif v2
Explore more risk reporting data
Filter our data by sector, exchange or region in our interactive Risk Reporting Comparison Tool.
Request a demo

3. More focus on opportunities at ASX organisations

Risk reporting trends - 4b

The vast majority of FTSE organisations do not include upside risk or opportunities in their annual report, however, more ASX-listed companies have been adding that detail in 2024.

For most companies though, it seems that there is a risk of giving away competitive advantage if they are too open about the business' opportunities.

Practitioner view

While the vast majority of companies' annual risk reports are focused on downside risk, some of our members are taking steps to provide a more balanced view of their principal/material risks.

For example, a practitioner in our network suggested that they may use more neutral language, where appropriate, to reflect the balanced nature of some risks, without necessarily highlighting specific opportunities.

 

4. Fewer companies linking risks to strategy

Risk reporting trends - 5

It's relatively common for companies to connect risk and strategy in their reports, with 60% of FTSE- and ASX-listed organisations including this information. However, there was a 3pp (percentage point) overall drop in 2024, driven by fewer FTSE organisations laying out the links to strategy in their annual reports.

Practitioner view

One company in our network is dividing the risk section of their annual report into material risks (as standard) and "material matters".

These are topics which dovetail what is being discussed by the board, as well as key trends other companies in the same sector are reporting on.

 


5. Average number of principal risks decreasing

Risk reporting trends - 6b

Since 2021, the average number of principal risks that FTSE-and ASX-listed companies report has fallen. This could be down to consolidation of similar risks, or certain categories of risk, such as pandemic, dropping off the radar.

Risk reporting trends - 7

At the same time, the average size of the risk section is increasing at FTSE organisations, and shrinking in those listed on the ASX.

Practitioner view

This may be the last year we see the average page count of risk sections increase. A key theme raised by risk leaders in our network is that there is increasing board pressure to make the annual report shorter, without sacrificing any important detail.

This is prompting risk leaders to be more concise in their reporting and avoid unnecessary duplication.

One approach to the challenge, as shared by a member, is to include more links to other sections and weave narrative about risk throughout the annual report — rather than repeating detail from elsewhere in the risk section.


6. More organisations are including emerging risks

Emerging risk in annual report

There has been a significant increase in the percentage of FTSE organisations reporting on emerging risks in their company annual reports. 48% of FTSE organisations now include emerging risks in their company annual reports, up 12pp from 2021.

Risk_Leadership_Network_Top_emerging_risks_2023_vs_2024
What were the top emerging risks of 2024?
Take a look at the top three-year trend in externally reported emerging risks.
Read article

 


What next?

This data comes from Risk Leadership Network's Risk Reporting Comparison Tool, an AI-powered data platform that collects trends from the risk sections of company annual reports. Created and updated to support our members who wanted to save time validating their external reporting, the tool is now available to all Risk Leadership Network members. Find out more about the tool and membership here.

A priority for risk leaders is engaging stakeholders and challenging the perception that annual risk reporting is solely the remit of the risk management team.

In this interest, a number of companies have established either a steering committee or working group to lead annual reporting, typically convening key stakeholders from different parts of the organisation (including risk management).

If you would like to collaborate with your peers on the topic of annual risk reporting, or find out how we could support you with a specific challenge you're facing, please book an introductory call.

Get new posts by email