If we assume that you’ve properly done your homework to understand what your risks are, the next question is – what do you want to do about it?
It’s entirely acceptable for you to ignore it of course. That’s your choice, or at least it’s usually your choice. If you’ve let the bankers stitch you up with covenants, well, maybe it won’t be your choice and you’ll have to do whatever you need to do to stay within the bank’s good books.
I remember a company in the 80s that had significant offshore operations and the value of those operations was not surprisingly, subject to exchange rate risk when translated back to the holding company’s own currency. Nothing unusual about that, but the company carried a covenant from its lenders that its debt not exceed a defined percentage of its balance sheet. Volatile exchange rates could play havoc with the valuation of that balance sheet so the company had no choice but to hedge its overseas assets, often at a very high interest cost. So, a policy that had as its objective “minimize the cost of hedging” (as many policies do) would be pointless, as the decision as to whether or what to hedge was taken out of the company’s hands. The overriding objective was “don’t breach the covenants”.
Many policies that I have reviewed contain objectives that are vague, ambiguous, unattainable, or even in conflict with other objectives within the same policy. The test of a good policy is that the objective must be able to be “recited” by anyone who has an interest in it, whether that’s the Chairman reporting to shareholders, the dealer implementing the policy and risk management strategies, or the auditors conducting their review. The members of the Risk Committee should be in no doubt as to what the clear and unambiguous objective is.
Let’s face it though, CEOs are opportunists and are used to getting their own way with management, so when presented with a précis of the risks of the company and being asked to give guidance on what the company’s objectives should be, they’ll often say “I want this, I want that, and a bit of this too. I want maximum protection at minimum cost with total flexibility” The risk manager, the consultant, perhaps the member of the Risk Committee needs to be able to say to the CEO “I’m sorry, you can have A, but you can’t have B too (as they may be inherently in conflict) so you need to choose which one will drive the company’s policy”. Many CEOs don’t like being boxed into a corner like that of course, but trust me, they’ll respect you for developing a better policy.
I recall the CEO of a large mining company becoming increasingly frustrated at the attempts by management to define what the risk management objectives should be for their commodity risk. Eventually the CEO rose from his chair, and expounded “Look, I’d rather stand up in front of the shareholders and tell them why earnings were down because commodity prices fell, than to have to tell them they missed out on gains because we were hedged.” Bingo! – There’s your policy. The CEO understood that shareholders bought in to the company as a speculative play on commodity prices and the last thing the shareholders wanted was to be locked out of any speculative gains. So any other objectives that might sound comfortable and safe, were irrelevant, or at least overridden by that one very clear objective – make sure that the shareholders participate in commodity price gains.
The goal (and skill) of anyone formulating and writing risk management policies is to get that level of clarity from their CEO.