As risks increasingly cascade across financial and operational domains, organizations must rethink resilience as a strategic capability. Søren Agergaard Andersen of Copenhagen Infrastructure Partners explains why governance, scenario planning, and board l
Financial institutions are entering a new phase of risk management where traditional boundaries between financial and operational resilience are rapidly breaking down. In this environment, disruptions rarely remain contained.
Instead, they spread quickly across liquidity, capital, operations, and reputation, forcing firms to rethink how resilience is designed and governed.
Søren Agergaard Andersen, Chief Risk and Compliance Officer at Copenhagen Infrastructure Partners, believes the fundamental challenge lies in the interconnected nature of modern risks.
“In today’s environment, we can no longer purely look at each risk category in isolation,” he explains. “We know that risks cascade across the different categories - capital, liquidity, operations, technology, reputation, and so on.”
This cascading effect means that seemingly isolated incidents can escalate into broader financial consequences within a short timeframe.
Andersen points to practical examples across industries, from funding pressures in banking to operational disruptions in infrastructure assets.
“For a bank, a funding squeeze will quickly become an operational strain with collateral bottlenecks,” he says. “This leads to increased conduct risk and eventually reputational risk.”
Similarly, cyber incidents can trigger a chain reaction that extends far beyond technology systems. Payment disruptions can create liquidity stress, which in turn may lead to regulatory scrutiny and reputational damage.
“These simple examples illustrate how one risk or incident will spill over to others - and eventually almost always end up as financial impact,” Andersen says. “Operational shocks become financial shocks with a very short time delay.”
Despite this growing awareness, integrating different risk categories into a unified framework remains a significant challenge for many organizations. Andersen argues that the difficulty is not technical capability but governance design.
“Integrating into a single enterprise framework requires a strong governance architecture,” he says. “This means clear ownership, escalation paths, and board level risk appetite statements that set thresholds for both financial and operational resilience.”
Establishing this structure requires more than aligning processes. Firms must map critical activities, develop a shared risk taxonomy, and understand how second order effects can amplify initial shocks.
Without this, organizations risk underestimating the true scale of potential disruptions.
“Mapping critical processes and establishing an integrated risk taxonomy is crucial for understanding second order effects,” Andersen notes. “You need to understand how financial and operational impacts interact.”
