Risk Leaders Face Rising Pressure as Budgets Stall and Economic Risk Increases

A new survey of risk, compliance, and resilience professionals found that 75% report increased pressure on their role over the past year, according to Riskonnect.
By: | October 30, 2026
risk council meeting concept

Risk leaders are being asked to do more with less, according to the 2026 New Generation of Risk Report from Riskonnect, which surveyed more than 250 risk, compliance, and resilience professionals worldwide.

Seventy-five percent of respondents said pressure on their role has increased over the past year, with 20% calling the increase significant and 37% describing the pressure as high or extreme. Yet only 25% said their risk management technology budget has increased in the past six months, while 66% said budgets have stayed flat.

Jim Wetekamp, CEO of Riskonnect, said risk leaders are “caught between accelerating risk velocity and stagnating budgets,” noting that “organizations are facing fast-moving regulatory changes, consumer sentiment shifts, mounting financial pressures, and more” while “everything a company does is more visible which raises the risk to brand reputation.”

Despite the strain, 86% of respondents said they would recommend a career in risk management to a family member or friend.

Economic Risk Rivals Cyber as Internal Silos Persist

Cybersecurity’s two-year run as the top-ranked business risk ended in a tie this year, Riskonnect found, with 55% of risk leaders saying economic risk is having a severe or significant impact on their business, level with cybersecurity. The report attributed economic risk’s climb to tariff shocks, persistent inflation and a cooling labor market.

Political risk (38%), geopolitical risk (37%) and talent risk (37%) rounded out the top five, with talent risk re-entering that group this year amid A.I.-driven shifts in workforce needs, skills shortages and a slower job market that is keeping employees in place. Only 20% of respondents said they feel very prepared for talent risks.

Internal coordination remains a separate challenge. Forty-one percent of respondents said a department in their organization made a risk-based decision in the past year without consulting the risk team, resulting in a significant, unforeseen disruption elsewhere in the organization. To make risk more visible to leadership, 66% of respondents said they are making risk information easier to understand, 59% are linking risks to business priorities and strategy, and 56% are focusing on top or new risks rather than covering all likely risks.

Geopolitical risk also weighed heavily on organizations in 2026. Forty percent of respondents cited the Iran war as the event or vulnerability with the most significant impact on their organization in the past year, ahead of extreme weather events (31%), major cloud outages (24%) and Red Sea shipping attacks (5%). Among those who ranked the Iran war highest, only 1 in 4 said they were ready for all of its impacts.

Just 19% of all respondents said they feel very prepared to assess, manage and recover from geopolitical risk, essentially flat compared with 2025.

A.I. Adoption Outpaces Governance

Seventy-four percent of respondents said they currently use or plan to use A.I. for risk management, up from 70% in 2025 and 62% in 2024, with top use cases including assessing risks (37%), scenario planning and simulations (34%) and surfacing previously unconsidered risks (32%). Thirty-one percent said A.I. has helped them uncover gaps or weaknesses in internal processes or controls in the past 12 months.

Governance has not kept pace, the report found. While 72% of respondents said they have a policy governing employee A.I. use, up from 58% last year, only 54% said those policies clearly specify which tools can be used and how. Among companies already using agentic A.I., 84% said they’ve assessed the related risks, but among the larger group still considering adoption, 58% have not conducted a risk assessment.

Only 11% have a budget specifically directed at mitigating A.I.-related risks, and just 17% of risk leaders said they feel very prepared for A.I. and A.I. governance risks, while 62% said they feel somewhat prepared.

Structurally, 53% of companies reported having a chief risk officer, a figure that has not meaningfully changed over the past four years. Of companies without one, 92% said they have no plans to hire for the role in the next six to 12 months.

Wetekamp said this reflects companies expressing “a desire for a single view of risk vs. centralizing risk leadership in a single role,” often through a risk council bringing together business partners such as “the head of business continuity and resilience, internal audit, insurable risk, compliance, and others who are out in the business and understand how it operates.”

Obtain the full report here. &

The R&I Editorial Team can be reached at [email protected].

More from Risk & Insurance