PT Astra Honda Motor

Michael L. Wijaya, Risk Management Manager, PT Astra Honda Motor

Through this article, Wijaya reflects on how risk management has evolved from a predictable, financially driven discipline into a dynamic, interconnected landscape shaped by technology, geopolitics, and global events. He highlights how disruptions, from social unrest to supply chain shocks, reveal both vulnerabilities and opportunities. By shifting from a traditional, compliance-focused approach to a forward-looking ERM model, he argues that organizations can transform uncertainty into strategic advantage. Resilience becomes not just survival, but growth, enabling companies to innovate, adapt and thrive in an unpredictable world.

Having spent nearly 15 years in risk management, I have observed a profound evolution in the challenges confronting industries. Two to three decades ago, economic factors, such as recessions, inflation, or currency fluctuations, dominated organizational risk landscapes. These were largely predictable cycles that could be modeled and hedged against with financial instruments and strategic planning. In contrast, today's risks are far more dynamic and multifaceted, driven by rapid technological advancements, geopolitical tensions, and global pandemics. The COVID-19 crisis, for instance, disrupted supply chains worldwide, forcing companies to reassess their sourcing strategies overnight. These threats are amplified by the interconnectedness of modern systems: a single event can cascade across borders, sectors, and digital networks, thereby amplifying impacts in ways that were previously unimaginable.

A recent example of this interconnected vulnerability occurred in Indonesia a few months ago. What began as localized social unrest, sparked by policy disputes or economic distress, quickly escalated through viral amplification on social media platforms. Hashtags and videos spread misinformation and mobilized crowds, transforming isolated protests into nationwide security concerns. Businesses faced an immediate, undesirable impact: distribution networks were halted due to road blockades, daily operations came to a standstill amid area restrictions and violence, and supply chains were interrupted as ports and warehouses became inaccessible. Retailers lost inventory, manufacturers idled factories, and logistics firms rerouted shipments at increased costs. This event highlights how digital connectivity, while being an asset for communication, can turn minor incidents into systemic crises, eroding investor confidence and consumer trust.

Geopolitical uncertainties provide another stark example of interconnected risks. Sudden policy shifts, such as trade tariffs, sanctions, or export controls, can trigger material shortages that ripple through global industries, causing disruptions that can be far-reaching. In the electronics and automotive sectors, for instance, restrictions on rare earth minerals from conflict zones or semiconductor chips from tense regions, such as Taiwan, have led to production delays and inflated costs. The U.S.-China trade war exemplified this, where tariffs on components forced companies to diversify suppliers, incurring billions in relocation expenses. Yet, amid these disruptions lie opportunities: firms that anticipated such shifts invested in domestic manufacturing or alternative technologies, thereby gaining a competitive edge through innovation and resilience. While these uncertainties pose undeniable threats, they also present pathways for growth. I believe that organizations must cultivate agility to seize emerging prospects, such as pivoting to e-commerce during pandemics or adopting AI for supply chain forecasting, while vigilantly mitigating downsides. This dual side of uncertainties elevates enterprise risk management (ERM) from only a compliance exercise to a strategic foundation for organizational resilience. Traditionally, under the Three Lines of Defense (3LOD) model, risk management aligns with internal audit as an oversight function in the second line, focusing its role to protect the value of the organization. It establishes control frameworks, monitors effectiveness, and safeguards value by preventing losses through policies, assessments, and incident reporting. This protective role remains essential, ensuring adherence to governance and regulatory requirements.

“Modern risk isn’t just something to defend against, it’s a catalyst. When organizations balance value protection with value creation, they don’t just survive uncertainty; they transform it into strength, innovation, and longterm advantage.”

However, a transformative approach of ERM, a forward-looking ERM, transcends value protection to enable value creation. By integrating risk intelligence into decision-making, leaders are empowered to navigate uncertainties more proactively. Scenario planning, realtime data analytics, and cross-functional collaboration allow firms to identify the upside of uncertainties, which are opportunities disguised as threats, and capitalize on them. Therefore, ERM fosters a culture of informed decision-making, where boards allocate resources to highreward ventures with built-in safeguards.

Resilience is a core aspiration for organizations, yet it extends far beyond survival. True resilience empowers firms not only to endure shocks but to flourish in the middle of dynamic, unpredictable conditions. This aligns with the holistic, forward-looking ERM framework. By balancing robust value protection with proactive value creation, ERM equips organizations to recover stronger. It enables strategic expansion, transforming potential crises into catalysts for growth that drive the business well beyond its pre-disruption state.

In essence, the evolving business landscape demands that the paradigm of risk management also grow accordingly. It must strike a balance between defense and offense, transforming potential pitfalls into drivers of sustainable growth. Organizations that embed this holistic approach will not only withstand shocks but also emerge stronger, turning interconnected uncertainties into engines of innovation and long-term success. As risk professionals, our mandate is clear: guide enterprises toward resilience that endures and thrives in an unpredictable world.