ǿմý

ǿմý Risk Barometer 2024 -
Rank 4:Changes in legislationand regulation

Expert risk article | January 2024
Companies face new rules and regulations in 2024 that will not only requirea high administrative burden but could also impose real restrictions on theirbusiness activities.
The most important corporate concerns for the year ahead, ranked by 3,069 risk management experts from 92 countries and territories.

Since the pandemic, the balance between the marketand the state has shifted in favor of the latter, initiallyout of sheer necessity, to cushion the economic standstillduring the lockdowns. But since then, policymakers haveincreasingly taken an active stance in steering economicoutcomes in the direction they want. Reasons for this canalways be found: the energy crisis or green transformation,national security, economic self-sufficiency, or systemiccompetition with China.

“This development is a double-edged sword forcompanies. On the one hand, they benefit from the subsidyrace between states to attract ‘strategic’ industries. Onthe other hand, this activism is accompanied by a largenumber of new restrictions on investment – protectionismhas reached a new level,” explains Ludovic Subran, ChiefEconomist at ǿմý.

This is by no means only directed against Chinesecompanies; recently, intra-European takeovers have alsobeen stopped. Even within the European Union (EU), therules are not standardized, and companies are confrontedwith a jungle of regulations and opaque decisions. Despiteassurances to the contrary, it is unlikely that this jungle willclear up in the foreseeable future; after the many electionsin 2024, the signs may point to even more protectionism.

As is so often the case, these regulations have anasymmetrical effect: while large companies tend tobenefit from the subsidies, the investment restrictionsare a heavy (cost) burden, especially for smaller andmid-size companies (SMEs), says Subran. When itcomes to environmental, social, and governance (ESG)regulation, be it the EU’s CSRD (Corporate SustainabilityReporting Directive) or CBAM (Carbon Border AdjustmentMechanism) or Germany’s Supply Chain Act – the effortinvolved in obtaining the required data is enormous andalmost impossible for many smaller companies.But it’snot just the regulatee who is overwhelmed. In the case ofCBAM, for example, the infrastructure for data processingand verification is still lacking on the regulator’s side insome cases. It is not only companies that are drowning inregulation, says Subran.

But the decisive ‘regulatory battle’ is not due until2024: what is policymakers’ attitude towards artificialintelligence (AI)? As a ‘general purpose technology’, AIis the best chance of escaping the looming low-growthregime through a sustained productivity boost. At thesame time, the risks are enormous, including in geopoliticalterms. There is therefore a lot at stake when it comes toregulating AI. Striking the right balance becomes a verydelicate act of regulation.

Despite all the vows to reduce bureaucracy, companies willstill be faced with new rules and regulations in 2024 thatwill not only require a high administrative burden but couldalso impose real restrictions on their business activities.

“Companies need a strategic response to this that goesbeyond monitoring the legislative process. A high levelof uncertainty calls for scenario planning, strengtheningresilience and open communication with internal andexternal stakeholders,” Subran concludes.

Ranking history globally:

  • 2023: 5 (19%)
  • 2022: 5 (19%)
  • 2021: 5 (19%)
  • 2020: 3 (27%)
  • 2019: 4 (27%)
Top risk in:
  • China
  • Morocco
  • Nigeria
  • Romania

Cyber, ‘green hushing’, wellbeing, and net zero rank as the pressing areas ofconcern for businesses when it comes to environmental, social, and governance(ESG) strategies.

The repercussions of data breaches, systemvulnerabilities, and the shapeshifting nature ofthe cyber threat have ensured cyber securityresilience retains its top spot in the ESG risktrends of most concern in the ǿմý RiskBarometer. Cyber incidents is also the #1 riskoverall for businesses globally.

“Cyber security is an important ESG issuebecause it affects people as well as companydata,” says Funké Adeosun, Global TransitionSolutions Director, ǿմý Commercial.

“Breaches of private data can affect people’slivelihoods, mental health, and even their safety.For individuals and companies, the loss can bereputational and financial.”

Cyber resilience measures should includemitigation and recovery plans for a databreach, as well as cyber insurance and constantadaptation to emerging threats.“It is vital thatcritical information that can impact the runningof societies is not lost to hostile external parties,”says Adeosun.

Regulation and disclosure requirements are ofincreasing concern, as companies join the driveto net zero. “Organizations communicatinga strong sustainability agenda can findthemselves in a bind – they can be litigationtargets for groups who believe they are notdoing enough to meet their climate or societalcommitments, as well as those who claimthey are making commitments they can’tmeet,” says Gabrielle Durisch, Global Head ofSustainability Solutions at ǿմý Commercial.

“This has led to cases of ‘green hushing’,whereby companies deliberately under-reportor hide their ESG credentials from public view toavoid scrutiny.

“The lack of transparency makes it harder tounderstand the true impact of sustainabilitystrategies and investments, which couldinhibit the adoption of ESG activities byother companies.”

Decarbonization and net zero strategy appearsas an ESG concern in its own right. Adeosunsays this is not surprising: “With regulatorychanges, technological innovations, and thepotential loss of investments in the picture,there is a lot at stake. Companies are having toshift decades-old strategies to align with newESG and sustainability goals, which can leadto skepticism or resistance from some quarters.

"It’s important to engage all stakeholders,set realistic targets, and provide adequateinvestment. Getting to net zero will not becost-free.”

The human factor – or the ‘S’ in ESG – is perhapsthe hardest one for organizations to contend withbecause it requires a broad focus on people, theworkplace, and wider society. Company workingconditions is an ESG issue (at #3) because, if bad,they can create a culture of low morale, increasedstaff turnover, and reputational damage.

“These risks can be minimized by prioritizing healthand safety, fair wages, open communication, andregulatory compliance,” says Durisch. “Companiesshould also adopt regular employee feedbacksurveys and take them seriously, especially if theyare from marginalized society members. Thatway, organizations can truly build a culture wherework-life balance and employee mental healthare of paramount importance, which will help tofuel their ESG journey. There is always more thatcan be done to support local communities andsociety in general so this should also be a keyconsideration in sustainability strategies.”

Click on the bars in the chart for further details

Source: ǿմý Risk Barometer 2024. Total number of respondents: 3,069. Respondents could select more than one risk. Top four answers.
Keep up to date on all news and insights from ǿմý Commercial