Corporate history is often written in hindsight. Once an organisation experiences a significant crisis, the warning signs can appear obvious: weak governance, ineffective leadership, inadequate oversight, poor organisational culture, failures to challenge inappropriate behaviour or decisions that were allowed to continue without sufficient scrutiny. Yet these risks rarely appear suddenly. More often, they develop gradually through a series of decisions, behaviours and omissions that may appear relatively insignificant when viewed in isolation but become deeply consequential when repeated over time.
Ireland has experienced several major organisational crises that demonstrate this pattern. The banking crisis exposed profound failures in governance, risk oversight, organisational culture and constructive challenge. The controversy surrounding RTÉ raised serious questions regarding accountability, transparency, executive oversight and decision-making. The CervicalCheck controversy demonstrated the profound human and reputational consequences that can arise when communication, governance and organisational systems fail those they are intended to protect. Although these organisations operated in very different sectors and circumstances, their experiences reinforce an important lesson for every board: organisational crises are rarely caused by one catastrophic decision made on a single day.
More commonly, significant organisational failures develop through the accumulation of smaller decisions. Concerns are not escalated. Poor behaviours are tolerated. Information is filtered or fails to reach the people responsible for oversight. Leaders become reluctant to challenge one another. Known weaknesses remain unresolved because other priorities appear more urgent. By the time the financial, operational or reputational consequences become visible, the underlying issues may have existed for years.
This raises an important question for boards and chief executives: how many of the risks capable of undermining strategy, organisational performance or public confidence begin as what appear to be routine people decisions?
At Insight HR, our experience suggests that the answer is far more than many organisations recognise. Having advised Irish and international organisations for more than 25 years across workplace investigations, organisational change, employee and industrial relations, restructuring, management capability, culture, job evaluation and complex employment matters, we have repeatedly observed how decisions initially regarded as operational HR issues can develop into significant organisational risks.
For many years, HR was viewed primarily as a support function responsible for recruitment, employee relations, policies, employment documentation and legal compliance. These responsibilities remain important, but they represent only part of HR’s contribution. The quality of an organisation’s people decisions is inseparable from the quality of its governance, organisational resilience and commercial performance. People risk should therefore not be regarded solely as an HR issue. It is a business risk that can affect financial performance, operational continuity, organisational reputation and the successful delivery of strategy, and it warrants appropriate visibility, challenge and oversight at board level.
What Is People Risk?
People risk is the potential for decisions, behaviours, leadership failures, capability gaps or weaknesses in organisational culture to negatively affect an organisation’s performance, governance, reputation, financial position or ability to achieve its strategic objectives.
The term is sometimes interpreted narrowly and associated primarily with recruitment difficulties, employee turnover, absenteeism or employment litigation. While each forms part of the picture, this definition fails to reflect the true scale of organisational exposure. People risk exists wherever individuals exercise judgement, influence others, make decisions or determine how organisational policies and values operate in practice.
It is present when managers recruit, promote, reward, discipline or dismiss employees. It arises when leaders choose whether to confront poor performance, challenge inappropriate behaviour or act on concerns. It influences how organisations respond to protected disclosures, allegations of fraud or wrongdoing, industrial relations disputes, workplace complaints, organisational change, restructuring and succession planning. It is also evident in the strength of the executive team, the effectiveness of the chief executive and the willingness of leaders to challenge one another constructively.
Every significant organisational initiative ultimately depends upon people exercising sound judgement and implementing decisions effectively. Conversely, many organisational failures can be traced to decisions that were poorly made, inadequately implemented, insufficiently challenged or allowed to continue despite evidence that intervention was required.
When Ordinary Management Decisions Become Organisational Risks
Few boards spend time considering whether a line manager documented a performance conversation appropriately, nor would this generally be an appropriate use of board time. However, boards should be concerned about what happens when managers throughout an organisation consistently fail to document performance concerns, avoid difficult conversations or apply standards inconsistently.
Widespread underperformance rarely develops overnight. In many organisations, it becomes embedded gradually because managers lack the confidence, capability or organisational support required to address it. Performance conversations are postponed, expectations remain unclear and poor performance is tolerated because intervention feels difficult or time-consuming. Over time, high performers may become frustrated, accountability weakens and previously unacceptable standards become normalised.
The consequences are not confined to productivity. When employees observe that underperformance is rarely addressed, they form conclusions about what the organisation genuinely values and whether effort is recognised. Managers who do attempt to maintain standards may feel unsupported, while others may conclude that avoiding difficult conversations is the safer course. The cumulative effect can be a significant decline in organisational capability that may not be visible in traditional HR reporting.
The relationship between managers and their teams can create similar risks. Strong working relationships are essential to engagement and effective leadership, but managers can become so personally close to team members that objectivity is compromised. They may avoid addressing poor performance because they fear damaging relationships, apply policies inconsistently or struggle to distinguish between being supportive and being accountable. These behaviours are often well-intentioned, but they can create perceptions of favouritism, weaken management authority and make later intervention considerably more difficult.
No individual management decision may appear sufficiently significant to warrant board attention. Taken together, however, these decisions shape organisational culture, influence employee behaviour and determine whether standards are consistently upheld. The cumulative effect of weak or inconsistent management practice can create risks that are substantially more difficult and expensive to resolve than they would have been had the underlying issues been addressed earlier.
Is Leadership Itself an Organisational Risk?
One of the most significant and least discussed dimensions of people risk concerns leadership capability. Boards understandably devote considerable attention to executive appointments, succession planning, strategic performance and remuneration. However, the presence of technically experienced or commercially successful executives does not necessarily mean that an organisation has an effective leadership team.
Weak leadership teams rarely fail because every member lacks expertise. More commonly, risk develops because difficult conversations are avoided, accountability becomes unclear, constructive challenge diminishes, silos emerge or executive relationships become more important than organisational outcomes. An executive team may appear cohesive while operating in an environment where disagreement is discouraged and poor decisions remain insufficiently tested.
A weak chief executive can create significant organisational exposure without making an obviously reckless strategic decision. Risk may arise because the CEO avoids conflict, tolerates poor executive performance, fails to respond decisively to warning signs or surrounds themselves with people who rarely challenge their assumptions. Equally, a dominant CEO may unintentionally create a culture in which executives become reluctant to express disagreement or escalate uncomfortable information.
Boards should therefore assess leadership effectiveness through a broader lens than financial results or the delivery of short-term objectives. A high-performing organisation requires leaders who can make difficult decisions, encourage challenge, address poor performance, act consistently and create an environment in which concerns can be raised without fear of adverse consequences. Leadership behaviours that generate strong short-term results may create substantial longer-term risk if they weaken governance, employee trust or organisational capability.
Boards should also consider whether they receive an accurate picture of organisational reality. Every layer of management creates the possibility that information will be softened, filtered or delayed before reaching senior decision-makers. Concerns relating to culture, employee wellbeing, management capability, ethical conduct or operational performance may gradually lose their urgency as they move through reporting structures. One of the most valuable questions a board can ask is therefore not only whether it receives sufficient information, but whether the culture of the organisation enables difficult information to reach the board in a timely and unfiltered manner.
Trade Unions, Industrial Relations and the Risk of Organisational Disruption
Industrial relations risk is sometimes viewed as a specialist matter to be managed by HR when a dispute arises. This approach can underestimate both the strategic significance of employee relations and the organisational conditions that contribute to industrial conflict.
Industrial action rarely occurs without warning. Disputes often develop over time through deteriorating trust, ineffective consultation, inconsistent communication, unresolved employee concerns or a perception that decisions have already been made before meaningful engagement begins. By the time formal industrial action is threatened, the underlying relationship may have weakened considerably.
Boards do not need to become involved in routine trade union engagement. They should, however, understand the quality of the organisation’s industrial relations environment, particularly where major change, restructuring, outsourcing, changes to working practices or cost-reduction measures are anticipated. A technically sound business decision can become operationally difficult or commercially damaging if the people and industrial relations implications are not considered early enough.
The financial consequences of industrial action may include lost productivity, service disruption, delayed projects, customer dissatisfaction, reputational damage and increased management time. In essential or public-facing services, the wider social and political consequences may be considerable. Effective industrial relations should therefore be regarded as part of organisational resilience rather than simply an HR responsibility.
Fraud, Corruption and Wrongdoing at Scale
When fraud, corruption or large-scale wrongdoing becomes public, organisations understandably focus on financial controls, audit processes and regulatory compliance. These safeguards are essential, but they cannot fully protect an organisation if its culture discourages challenge or its leaders fail to act when concerns are raised.
Serious wrongdoing rarely occurs entirely in isolation. In many cases, employees observe warning signs, question unusual practices or become aware of conduct that appears inconsistent with organisational values. Whether those concerns are raised and addressed depends significantly on leadership behaviour, organisational culture and the credibility of internal reporting mechanisms.
An organisation may have a comprehensive protected disclosures policy and still create an environment in which employees fear speaking up. Employees observe what happens to those who challenge senior colleagues, raise uncomfortable questions or report inappropriate conduct. If concerns are dismissed, individuals become isolated or leaders appear defensive, the formal existence of a reporting procedure may provide little practical protection.
The same risk arises when high-performing or commercially important individuals are treated differently. Organisations may tolerate behaviour because an individual generates significant revenue, holds specialist knowledge, maintains important relationships or is perceived as difficult to replace. Over time, commercial value can become a form of informal protection, allowing inappropriate conduct or questionable decisions to continue without meaningful challenge.
Fraud, corruption and wrongdoing at scale are not solely failures of financial control. They may also reflect failures of leadership, culture, accountability and organisational courage. Ethical organisations are not organisations in which wrongdoing never occurs. They are organisations capable of identifying, challenging and addressing wrongdoing before it becomes systemic.
Workplace Investigations as a Test of Organisational Credibility
The quality of a workplace investigation influences far more than the outcome of an individual complaint. It affects employee trust, organisational credibility and the organisation’s ability to demonstrate that serious concerns are addressed fairly, independently and competently.
Workplace investigations can involve allegations of bullying, harassment, sexual harassment, fraud, theft, misconduct, discrimination, protected disclosures or other serious wrongdoing. These matters are often complex, emotionally difficult and procedurally demanding. The investigator may be required to assess conflicting evidence, interview reluctant witnesses, review substantial documentation, distinguish fact from opinion and produce findings capable of withstanding detailed scrutiny.
Errors in an investigation report may fundamentally alter the meaning of evidence or influence subsequent decisions. Vague allegations may prevent a respondent from understanding the case they are required to answer. Relevant witnesses may be overlooked, the investigator may move outside the agreed scope or conclusions may be reached without sufficient evidential support. These are not minor administrative errors. They can undermine confidence in the process and expose the organisation to legal, financial and reputational risk.
Boards should not involve themselves in individual workplace investigations. They should, however, seek assurance that the organisation has access to appropriate expertise, that investigations are conducted independently where required and that those responsible understand fair procedures, evidence assessment and the limits of their role. A poorly conducted investigation may create greater organisational risk than the original complaint.
Organisational Change Is a People Risk
Boards are currently overseeing significant organisational change arising from artificial intelligence, digital transformation, restructuring, mergers, acquisitions, cost pressures, changing workforce expectations and new regulatory obligations. These initiatives are often designed primarily through a financial, technological or operational lens, with the people implications addressed later in the process.
This sequencing can create avoidable risk. Organisational change succeeds or fails through leadership, communication, consultation, trust and management capability. Employees need to understand not only what is changing but why the change is necessary, how decisions will be made and what the implications may be for their roles. Managers need sufficient information and capability to lead teams through uncertainty without creating confusion or making commitments that cannot be fulfilled.
Poorly managed change can result in employee resistance, industrial relations disputes, increased turnover, loss of critical knowledge, reduced engagement and reputational damage. In restructuring or redundancy programmes, failures in planning, consultation or decision-making may also create significant legal exposure.
Boards should therefore consider the people dimension at the beginning of strategic change rather than treating it as an implementation issue. The commercial rationale may determine why change is necessary, but leadership and organisational capability will determine whether it succeeds.
Seeing People Risk Through a Different Lens
At Insight HR, we have never believed that effective HR is simply about administering policies, answering employment law questions or responding to employee relations issues as they arise. As a leading independent Irish HR consultancy, we support organisations across Ireland through complex workplace investigations, employee and industrial relations, organisational change, restructuring, management development, culture, job evaluation, pay transparency and strategic HR advisory work.
Our experience means that we rarely see people issues in isolation. Where others may see an investigation, we see organisational credibility being tested. Where others may see a disciplinary process, we consider whether the decision-making and evidence will withstand external scrutiny. Where others may see restructuring, we examine the leadership, consultation and organisational risks capable of determining whether the strategy succeeds. Where others may see preparation for the EU Pay Transparency Directive as a compliance exercise, we see an opportunity to strengthen reward governance, organisational fairness and long-term workforce planning.
This perspective influences how we approach day-to-day HR operations. Routine employment decisions are rarely routine when they are repeated across an organisation or when the consequences of getting them wrong extend beyond the immediate issue. Effective HR advice should not simply identify what an organisation is legally permitted to do. It should consider the commercial context, the organisational impact, the quality of the evidence, the effect on employee trust and the risks that may arise in the future.
We encourage boards, chief executives, senior leadership teams and HR professionals to move beyond asking, “What is the HR issue?” and to consider a broader question: “What organisational risk does this people decision create if we get it wrong?” That change in perspective frequently leads to more robust discussion, earlier intervention and better decision-making.
The Questions Every Board Should Ask About People Risk
Boards do not need to become involved in operational HR decisions. Their responsibility is to ensure that appropriate capability, governance, information and oversight exist throughout the organisation. The following questions can support a more strategic discussion of people risk:
- Do we receive meaningful information about organisational people risk, or primarily operational HR metrics?
- What people-related issues have the potential to affect our strategic objectives, financial performance, reputation or operational resilience?
- Could widespread underperformance be developing because managers lack the capability, confidence or support required to address it?
- Are managers sufficiently objective and accountable, or have some become too close to their teams to make difficult decisions consistently?
- Does our CEO and senior leadership team encourage constructive challenge, address poor performance and act decisively when concerns arise?
- Are behavioural and ethical standards applied consistently regardless of seniority, influence or commercial contribution?
- What is the quality of our relationship with trade unions, and are there emerging employee relations issues capable of developing into industrial disputes or industrial action?
- Are workplace investigations sufficiently independent, robust and procedurally fair to withstand external scrutiny?
- Would our managers be capable of explaining and defending significant employment decisions before the Workplace Relations Commission?
- Are our protected disclosure arrangements trusted in practice, and would employees feel safe raising concerns about fraud, corruption or wrongdoing?
- Could information relating to culture, leadership, employee concerns or organisational capability be filtered before reaching the board?
- Are the people, consultation and industrial relations implications of major organisational change considered early enough in strategic decision-making?
- Are we investing in management and leadership capability with the same seriousness that we invest in financial, operational and technical capability?
- What people risks are currently absent from our risk register because they have traditionally been regarded as operational HR matters?
Conclusion: Why People Risk Belongs on the Board Agenda
The organisations best equipped to navigate uncertainty are not necessarily those with the strongest balance sheets, the most sophisticated technology or the most ambitious growth strategies. Long-term organisational resilience also depends on the quality of leadership, management capability, ethical culture, employee trust and the decisions made throughout the organisation every day.
People decisions influence productivity, financial performance, innovation, organisational culture, employee relations, industrial stability, ethical conduct, reputation and the successful delivery of change. When those decisions are made consistently and supported by appropriate expertise, they strengthen organisational capability. When poor decisions are repeated, left unchallenged or allowed to become embedded, they can create risks that extend far beyond the HR function.
For too long, many organisations have viewed HR primarily through an operational or compliance lens. At Insight HR, we believe this perspective no longer reflects the complexity of the environment in which boards and executive teams operate. The quality of an organisation’s people decisions is increasingly one of the strongest determinants of its ability to manage risk, protect trust and deliver its strategic objectives.
The most effective boards understand that people risk cannot be delegated entirely to HR. Board members do not need to manage individual employee relations matters, but they do need confidence that the organisation has capable leaders, effective managers, robust employment practices, credible investigation processes and a culture in which concerns can be raised and addressed before they become organisational crises.
Ireland’s major organisational failures demonstrate that serious financial, operational and reputational consequences rarely emerge without warning. They are often preceded by leadership weaknesses, unchallenged behaviours, information that fails to reach decision-makers and ordinary decisions that accumulate over time.
Understanding people risk therefore requires boards to look beyond policies, employment statistics and traditional HR metrics. It requires them to examine how decisions are made, how leaders behave, how managers exercise authority, how concerns are escalated and whether the organisation possesses the capability and courage to address difficult issues early.
People risk is not separate from business risk. It is embedded within it.
