ERM Report 2025: Why Most Crises Start Within

Love this Blog? Why not share it with the world?
ERM Report 2025 magazines on a table with a coffee and a pen.

The ERM Report 2025, published by the Lucerne University of Applied Sciences and Arts (HSLU) in cooperation with HAW Kiel, delivers a clear message to boards and executives across the DACH region: severe corporate crises are far more common—and far more internal—than many leaders assume. The study analyzes 669 publicly listed companies from 2018 to 2024 and finds that nearly one in three experienced a share-price collapse of 25% or more within a single month. Recovery is slow and costly; on average, affected firms require almost two years to return to pre-crisis levels, trailing significantly behind the broader market.

The Silent Drivers: Strategy Missteps and Internal Weaknesses

What stands out most in the data is that the majority of crises originate inside the organisation.
The report attributes:

  • 41% of crises to strategic failures, including excessive leverage, flawed capital allocation, overreliance on key customers, or misjudged market dynamics.
  • 19% to preventable internal shortcomings—reporting delays, governance lapses, compliance failures, and operational mismanagement.
 

These findings confront a long-standing misconception in corporate risk discussions: that crises are primarily triggered by unpredictable external shocks. Instead, the ERM Report 2025 shows that internal decisions—not the macroeconomic environment—pose the greatest threat to corporate stability. Even more telling, roughly one-third of affected firms suffer repeated crises, indicating vulnerabilities that remain unresolved over years.

External Shocks Reveal What Was Already Weak

External risks—geopolitical tensions, inflation, supply chain disruptions, financial-market volatility—certainly matter. They account for about 40% of crisis events and are especially visible during periods such as 2022, when inflation spiked and the war in Ukraine intensified pressures across industries. But the report makes clear: external shocks become catastrophic only when internal resilience is weak.

The sector comparison illustrates this vividly. Technology companies were significantly overrepresented among severe declines, while industrials displayed notable stability thanks to diversified structures, disciplined governance, and long-term project management. Swiss companies overall demonstrated greater resilience than German peers, supported by more stable sector composition and stronger governance frameworks.

A Strategic Imperative: Elevate ERM Beyond Compliance

Taken together, the findings point to a decisive conclusion: Enterprise Risk Management must evolve from a compliance-driven activity to a strategic leadership instrument.

High-performing organisations increasingly use ERM to refine capital allocation, test strategic assumptions, understand customer dependencies, and prepare for geopolitical and macroeconomic shifts. ERM becomes valuable not when it documents risks, but when it influences decisions.

This strategic lens is also reflected in the guest contribution included in the ERM Report 2025, authored by Gentian Ajeti, Chief Customer & Commercial Officer and Member of the Board of Directors at Swiss GRC, and Yahya Mohamed Mao, Chief Marketing Officer and Member of the Board of Directors at Swiss GRC. Their essay, «Strategic Value Creation Through Organizational Resilience,» extends the report’s empirical findings into practice, arguing that resilience must be viewed not only as protection against downturns but as a driver of long-term competitiveness. 

Ajeti and Mao highlight that organisations capable of anticipating disruption, adapting quickly, and maintaining strong governance structures do more than survive crises—they use uncertainty to strengthen customer trust, accelerate strategic clarity, and unlock new opportunities. Their perspective reinforces a central theme of the report: resilience is not a defensive posture; it is a strategic capability that shapes performance over time.

A Call to Boards and Executives

The ERM Report 2025 arrives at a moment when volatility has become the norm rather than the exception. Its findings urge leaders to reassess long-held assumptions about risk. Crises are seldom sudden. They build slowly—in the blind spots of strategy, governance, and culture.

The organisations that prosper in this environment will be those that treat ERM as a forward-looking discipline and resilience as a strategic investment. As the report and Swiss GRC’s contribution jointly emphasise, value creation and risk management are no longer separate conversations. They are one and the same.

UPDATES & NEWS

All news about Swiss GRC

Rajeev Dutt

Rajeev Dutt previously served as General Manager for the region and now takes on broader responsibility for the further development of Swiss GRC’s business across MEA and APAC. He brings more than 25 years of experience in Governance, Risk and Compliance and Business Continuity Management. Prior to joining Swiss GRC, he held senior roles at InfiniteBlue, SAI360 and MetricStream.

In the area of quantitative risk analysis, the GRC Toolbox provides advanced capabilities for modelling and assessing risk, including Monte Carlo simulation.

With the latest release, Swiss GRC continues to evolve its GRC software to address key demands in modern risk management. The update brings together advanced quantitative risk analysis, AI-driven capabilities, and enhanced support for regulatory frameworks such as DORA. In the area of quantitative risk analysis, the GRC Toolbox provides advanced capabilities for modelling and assessing risk, including Monte Carlo simulation.

Whitepaper on Contract Management

A newly released whitepaper by Swiss GRC highlights structural gaps in enterprise contract lifecycle practices, identifying measurable financial and compliance risks linked to ineffective contract management. Despite rapid digital transformation across finance, operations and customer processes, contract management remains one of the least modernized enterprise functions.

Get the latest news & updates

Subscribe to our newsletter now

Stay up to date on news trends in Governance, Risk & Compliance (GRC) with our newsletter. We inform you monthly about current topics, events such as the SWISS GRC DAY and exciting professional articles.

Swiss GRC | Switzerland (HQ) | Germany | UK | UAE