ERM Report 2025: Why Most Crises Start Within

Love this Blog? Why not share it with the world?
ERM Report 2025 magazines on a table with a coffee and a pen.

The ERM Report 2025, published by the Lucerne University of Applied Sciences and Arts (HSLU) in cooperation with HAW Kiel, delivers a clear message to boards and executives across the DACH region: severe corporate crises are far more common—and far more internal—than many leaders assume. The study analyzes 669 publicly listed companies from 2018 to 2024 and finds that nearly one in three experienced a share-price collapse of 25% or more within a single month. Recovery is slow and costly; on average, affected firms require almost two years to return to pre-crisis levels, trailing significantly behind the broader market.

The Silent Drivers: Strategy Missteps and Internal Weaknesses

What stands out most in the data is that the majority of crises originate inside the organisation.
The report attributes:

  • 41% of crises to strategic failures, including excessive leverage, flawed capital allocation, overreliance on key customers, or misjudged market dynamics.
  • 19% to preventable internal shortcomings—reporting delays, governance lapses, compliance failures, and operational mismanagement.
 

These findings confront a long-standing misconception in corporate risk discussions: that crises are primarily triggered by unpredictable external shocks. Instead, the ERM Report 2025 shows that internal decisions—not the macroeconomic environment—pose the greatest threat to corporate stability. Even more telling, roughly one-third of affected firms suffer repeated crises, indicating vulnerabilities that remain unresolved over years.

External Shocks Reveal What Was Already Weak

External risks—geopolitical tensions, inflation, supply chain disruptions, financial-market volatility—certainly matter. They account for about 40% of crisis events and are especially visible during periods such as 2022, when inflation spiked and the war in Ukraine intensified pressures across industries. But the report makes clear: external shocks become catastrophic only when internal resilience is weak.

The sector comparison illustrates this vividly. Technology companies were significantly overrepresented among severe declines, while industrials displayed notable stability thanks to diversified structures, disciplined governance, and long-term project management. Swiss companies overall demonstrated greater resilience than German peers, supported by more stable sector composition and stronger governance frameworks.

A Strategic Imperative: Elevate ERM Beyond Compliance

Taken together, the findings point to a decisive conclusion: Enterprise Risk Management must evolve from a compliance-driven activity to a strategic leadership instrument.

High-performing organisations increasingly use ERM to refine capital allocation, test strategic assumptions, understand customer dependencies, and prepare for geopolitical and macroeconomic shifts. ERM becomes valuable not when it documents risks, but when it influences decisions.

This strategic lens is also reflected in the guest contribution included in the ERM Report 2025, authored by Gentian Ajeti, Chief Customer & Commercial Officer and Member of the Board of Directors at Swiss GRC, and Yahya Mohamed Mao, Chief Marketing Officer and Member of the Board of Directors at Swiss GRC. Their essay, «Strategic Value Creation Through Organizational Resilience,» extends the report’s empirical findings into practice, arguing that resilience must be viewed not only as protection against downturns but as a driver of long-term competitiveness. 

Ajeti and Mao highlight that organisations capable of anticipating disruption, adapting quickly, and maintaining strong governance structures do more than survive crises—they use uncertainty to strengthen customer trust, accelerate strategic clarity, and unlock new opportunities. Their perspective reinforces a central theme of the report: resilience is not a defensive posture; it is a strategic capability that shapes performance over time.

A Call to Boards and Executives

The ERM Report 2025 arrives at a moment when volatility has become the norm rather than the exception. Its findings urge leaders to reassess long-held assumptions about risk. Crises are seldom sudden. They build slowly—in the blind spots of strategy, governance, and culture.

The organisations that prosper in this environment will be those that treat ERM as a forward-looking discipline and resilience as a strategic investment. As the report and Swiss GRC’s contribution jointly emphasise, value creation and risk management are no longer separate conversations. They are one and the same.

UPDATES & NEWS

All news about Swiss GRC

Connecting Strategy, Performance, and Risk: Swiss GRC and Profit.co Join Forces

Swiss GRC has entered into a partnership with US-based Profit.co, a global leader in performance management software. The partnership is focused on offering customers access to both GRC and performance management capabilities as part of a joint offering. The partnership addresses a growing market need for objective-centric risk management, where risks are not assessed in isolation but evaluated based on their impact on strategic goals, operational performance, and execution.

Swiss GRC Included in Global GRC Platforms Landscape Report

Swiss GRC is included in Forrester Research, Inc.'s Governance, Risk, and Compliance Platforms Landscape, Q4 2025. The Landscape report provides a market overview of technology providers in the global GRC platform environment and classifies them according to key solution areas that address the regulatory, risk, and compliance requirements of organizations in various industries.

Prof. Dr. Stefan Hunziker, Professor of Risk Management and Head of the Competence Center for Risk and Compliance Management at HSLU

Prof. Dr. Stefan Hunziker, Professor of Risk Management and Head of the Competence Center for Risk and Compliance Management at HSLU, as well as Advisory Board Member of Swiss GRC, highlights a key issue that affects many organizations: why risk management must go beyond procedural processes and be understood more as a management task.

Get the latest news & updates

Subscribe to our newsletter now

Stay up to date on news trends in Governance, Risk & Compliance (GRC) with our newsletter. We inform you monthly about current topics, events such as the SWISS GRC DAY and exciting professional articles.

Swiss GRC | Switzerland (HQ) | Germany | UK | UAE