Social risk is now a boardroom issue

“We only operate nationally, so we do not really have human rights exposure.”

It is a sentence many leaders will recognise. It often appears in training sessions, in management discussions and, sometimes, between the lines of corporate reporting. The assumption is simple: if the company is based in a stable market, operates close to home and has familiar suppliers, the social risks must be limited.

That assumption is becoming increasingly difficult to defend.

Social risk is no longer a distant issue in faraway supply chains. It is part of the operating environment for companies in almost every sector. It can emerge through employees, contractors, communities, suppliers, business partners, customers, public authorities, investors, insurers and civil society. It can be triggered by working conditions, wages, safety, local land use, community expectations, procurement practices, access to essential services or the way a company responds when concerns are raised.

Most importantly, it can move quickly from being a “soft” stakeholder concern to a hard business problem.

For many years, companies could treat human rights and related social impacts as matters of voluntary responsibility. That era is over. Regulation, reporting expectations, investor scrutiny and lender assessments are all moving in the same direction: companies are expected to understand their social exposure, act on it and be able to explain what they have done.

This is not just about compliance. It is about resilience.

A conflict that begins with dissatisfied workers, unpaid contractors or a local community that feels ignored can disrupt production, delay projects and absorb senior management attention for months or years. It can also create a wider reputational issue, bringing investors, insurers, regulators, politicians and the media into the same conversation. Once that happens, the organisation is rarely dealing with one problem. It is dealing with a system of connected risks.

Boards and executive teams therefore need to ask a more demanding question: where could social risk affect our ability to operate, grow and retain trust?

In some sectors, this is already visible. Renewable energy projects, infrastructure development and natural resource extraction can all depend on strong relationships with local communities. If trust is lost early, no amount of legal certainty or physical security can fully restore the conditions needed for long-term success. Early engagement, credible dialogue and benefit sharing may appear costly at the outset, but they are often modest compared with the cost of delay, conflict or loss of legitimacy.

The same logic applies inside the value chain. Workers are not just a cost line or a resource category. They are often the first signal of whether a company’s standards are working in practice. If unsafe conditions, withheld pay or poor treatment are allowed to persist among suppliers or contractors, the risk can travel quickly back to the company whose brand, financing, licences and stakeholder relationships are ultimately exposed.

So how should boards and senior leaders approach social risk in a way that is practical, proportionate and tied to business value?

Four questions are worth putting on the leadership agenda:

Where are the real points of exposure? Social risk does not always sit where the organisation expects it. It may be hidden in indirect suppliers, subcontracting models, new markets, outsourced labour, land use, local partnerships or changes in stakeholder expectations. A board that only receives aggregated compliance updates may miss the early signals that matter most.
Who owns the risk in practice? Procurement, HR, legal, sustainability, communications and operations may all see parts of the picture. But fragmented ownership can leave no one accountable for the full implications. The question is whether social risk is being managed as an integrated business issue, not simply as a functional responsibility.
What intelligence reaches decision-makers? Many organisations collect information from audits, employee surveys, grievance channels, media monitoring, investor questions and stakeholder dialogue. The value comes from connecting these signals and translating them into decisions. Boards do not need more data for its own sake. They need insight into material issues, future pressure points and the potential business consequences of inaction.
What happens if the risk materialises? Scenario planning is often the moment when hidden assumptions become visible. What would a two-year project delay mean? How would an injunction, supplier dispute, community protest or investor escalation affect financing, delivery, leadership credibility and stakeholder trust? If the answer is unclear, the organisation may not yet understand the true cost of the risk.

The board does not need to manage every operational detail. But it does need confidence that the organisation has the right structures, intelligence and behaviours in place. That means asking whether social considerations are built into strategy, investment decisions, partner selection, project development, reporting and crisis preparedness. It also means ensuring that management can explain not only what the company believes, but how those beliefs are translated into decisions.

This is where reputation and governance meet.

Reputation is shaped by how an organisation behaves before pressure arrives. Governance determines whether the right questions are asked early enough. When social risk is treated as a peripheral topic, companies tend to discover its cost only after conflict has already escalated. When it is treated as part of strategic risk and value creation, leaders are better placed to protect trust, reduce disruption and make more resilient decisions.

Every board should therefore be able to answer a simple question: when did we last discuss the people and communities most affected by our business model, and what did that discussion change?

The companies that answer that question seriously will not avoid every difficult issue. No organisation can. But they will be better prepared to see risk earlier, act with credibility and preserve the trust on which long-term success increasingly depends.