Practice study
Emerging risks: Identification and management
Current practices and observations on evolving and future practice
Service
ORX Membership
Community
Risk and Resilience Community
Risk programme
Management, Practice & Framework
Practice study - May 2025
This study outlines current practices for identifying and managing emerging risks, bringing in observations on evolving and future practice.
This study is primarily based on discussions held with our Risk and Resilience Working Group in the first half of 2025 and is available to all ORX members.
Our view on emerging risks
Emerging risk categories and factors
Rather than looking at standalone emerging risks, ORX have set out the following 11 emerging risk categories:
- Advancing cybercrime
- Business service disruption
- Climate risk
- Conduct
- Data
- Fraud
- Health and wellbeing
- People and skills
- Regulation/supervision
- Supply chain (incl. third parties)
- Technology and digital strategy
While these categories support an overall view, our main focus is on analysing the underlying, dynamic and often interconnected emerging risk factors that influence the emerging risk landscape.
These factors can be narrow and specific to a single category for example, an emerging fraud methodology. Or, they could be broader in scope, impacting across a range of risk categories – e.g. certain geopolitical developments.
Our members can use this analysis to help them understand what impact emerging threats may have on their existing risk profile. For example:
- Will their existing risks likely change in size/shape?
- Or, occasionally, could there be new, previously unidentified risks on the horizon that need to be defined?
For more examples and to read our latest insights, read our latest Operational Risk Horizon report.
Gated content stop
Disclaimer: ORX has prepared this resource with care and attention. ORX does not accept responsibility for any errors or omissions. ORX does not warrant the accuracy of the advice, statement or recommendations in this resource. ORX shall not be liable for any loss, expense, damage or claim arising from this resource. The content of this resource does not itself constitute a contractual agreement, and ORX accepts no obligation associated with this resource except as expressly agreed in writing. ©ORX 2025
Contacts:

Steve Bishop
Research and Information Director, ORX

Emilie Odin
Senior Research Manager, ORX
.png?width=92&height=92&name=Abi%20Jones%20MONO%20(3).png)
Abi Jones
Research Analyst, ORX