Introduction
Risk is usually discussed most urgently when the family has the least time to think.
A lender has called. A founder is unavailable. A cyber incident has interrupted access. A tax or legal deadline is approaching. Markets have fallen and an asset must be sold. Family members disagree about who has authority.
At that point, the immediate problem takes priority. The family responds with the information, relationships and liquidity it can reach.
A family wealth risk register moves part of that work into calmer conditions. It creates a disciplined record of the events that could impair the family’s objectives, the exposures through which those events would travel and the actions required before or after they occur.
The register is not a prediction of disaster. It is a practical tool for preserving decision quality.
Begin With Objectives Rather Than a List of Threats
A generic list of risks quickly becomes too broad to govern.
The family should begin with what it intends to protect: essential financial independence, control of a core enterprise, continuity across generations, the ability to meet obligations, family cohesion, privacy, reputation and commitments to employees, communities or philanthropy.
Risk can then be defined as uncertainty that affects those objectives.
This changes the quality of the discussion. A fall in an asset price is not automatically a critical risk if the family has no need to sell and the long-term thesis remains sound. A modest operational weakness may be critical if it prevents access to funds during incapacity. The same event has different significance depending on what the family relies on it to do.
The register should therefore connect every material risk to a family objective, asset, liability or governance responsibility.
Record the Risk in Plain Language
Risk descriptions should make cause, event and consequence clear.
“Currency risk” is too vague. A more useful entry would explain that the family has dollar debt funded by local-currency business income, and that a material depreciation could weaken debt-service capacity and require additional collateral.
“Succession risk” may conceal several separate issues: no authorised person can act during the founder’s incapacity; ownership passes under documents that no longer reflect the family’s intention; or the next leader lacks the information and support required to run the company.
Specific descriptions produce specific actions.
The register should avoid technical language that only one adviser understands. It is a shared governance document. Family principals, trustees, directors, investment professionals and relevant advisers should be able to recognise the exposure and their role in managing it.
Cover the Whole Wealth System
Investment risk belongs in the register, but it is only one category.
The family should consider concentration, liquidity, leverage, currency, valuation, counterparty, custody and unfunded commitments. It should also consider operating-business risk, guarantees, key-person dependency, tax and legal change, estate and succession, family governance, cyber and information security, fraud, reputation, health and incapacity, property and physical security, and reliance on advisers or service providers.
The aim is not to produce the longest list. It is to identify the risks capable of causing material harm or forcing a decision inconsistent with the family’s objectives.
Connections matter. One event may activate several entries. The founder’s incapacity can affect company leadership, bank access, investment approvals and family governance. A currency shock can affect debt, imported costs, portfolio values and overseas commitments. The register should cross-reference these dependencies rather than score each risk as though it were independent.
Distinguish Inherent Risk From Residual Risk
The family should understand the exposure before and after existing controls.
Inherent risk describes the severity of the risk if no protections are assumed. Residual risk reflects the position after considering insurance, diversification, liquidity, contracts, governance, controls and contingency plans.
This distinction prevents the family from overstating either danger or comfort.
A valuable property may face material physical risk. Appropriate insurance, maintenance and security can reduce the financial consequence. The residual risk may still be high if cover is insufficient, exclusions are poorly understood or replacement would interrupt an essential operation.
A concentrated business holding may carry high inherent risk. Strong governance, low leverage, independent family capital and management succession can reduce the effect without reducing the ownership percentage.
The register should identify the control and the evidence that it works. “Insurance in place” is not enough. The family should know the insured entity, limit, exclusions, renewal date and person responsible for review.
Score to Prioritise Not to Manufacture Precision
Many risk registers score likelihood and impact, often on a simple scale.
This can help prioritise attention if the family does not confuse the score with certainty.
Likelihood is difficult to estimate for rare events. Impact can differ across financial loss, liquidity, control, reputation and family continuity. A low-probability event may still deserve preparation if it could permanently impair the family’s essential objectives.
The family can use ranges or qualitative levels, supported by a short rationale. It can also assess velocity: how quickly the event would affect the family, and how much warning it is likely to provide. A slowly developing concentration may allow years of adjustment. A cyber fraud or sudden incapacity may require action within hours.
Recoverability is another useful consideration. A temporary market decline may be reversible if the family can wait. A missed legal deadline, forced sale or loss of control may not be.
The score should direct resources. It should never replace the conversation about consequences.
Assign an Owner With Authority
Every material risk needs a named owner.
Ownership does not mean one person carries the risk alone. It means someone is responsible for keeping the information current, coordinating action and escalating changes.
The owner must have sufficient access and authority. Assigning a junior administrator to a risk that requires decisions by trustees or the company board creates an appearance of accountability without the ability to act.
Some risks sit across several structures. The family office may coordinate liquidity, while company management owns operating cash and trustees control trust distributions. The register should show both the coordinating owner and the people or bodies whose decisions are required.
This is where the register supports scalability. As the family adds entities, advisers and jurisdictions, responsibility remains visible rather than dissolving across professional boundaries.
Convert Every Priority Risk Into an Action
A register that only describes risk is incomplete.
Each priority exposure should lead to a decision: accept it deliberately, reduce it, transfer part of it, build capacity to absorb it or stop the activity creating it.
The action should have an owner, timing and evidence of completion. A vague instruction to “diversify” is difficult to execute. A defined policy to direct a portion of future distributions into unencumbered assets outside the core business is more useful. “Improve liquidity” can become a requirement to maintain coverage for specified obligations in the currencies where they arise.
The family should record why a risk is accepted. Some concentrations, illiquid investments and jurisdictional exposures are deliberate because they carry strategic benefit. Acceptance should be informed and proportionate, not the default outcome of inaction.
Add Early Warning Indicators
The family cannot review every risk continuously. It can monitor the conditions that suggest exposure is increasing.
Relevant indicators may include declining liquidity coverage, approaching debt maturities, changes in collateral values, greater customer concentration, delayed fund distributions, new guarantees, stale valuations, adviser turnover, unresolved audit findings, changes in family residence or prolonged dependency on one decision-maker.
Each indicator should have a threshold that triggers attention. The threshold may lead to a discussion, deeper analysis or immediate action depending on the risk.
Indicators should be few enough to monitor reliably. A dashboard of dozens of measures can create the appearance of control while important changes remain buried.
Link the Register to Documents and Response Plans
During a crisis, the family needs more than a description of the risk.
The register should point to the governing documents, insurance policies, facilities, signatory mandates, contact details and response plans relevant to each exposure. Sensitive information can remain in secure systems, but the route to it should be clear.
For high-velocity risks, the family should define immediate steps. Who contacts the bank after suspected fraud? Who can act if the founder is incapacitated? Which adviser confirms sanctions exposure? Who communicates with family members, employees or the public? Which payments take priority if access is disrupted?
These plans should be tested. A tabletop exercise often reveals outdated contacts, missing authority and assumptions that have never been verified.
Review the Register as the Family Changes
A risk register becomes stale quickly if it is treated as a one-off project.
The family should update it after major investments, borrowings, guarantees, disposals, changes of residence, marriages, divorces, deaths, leadership transitions and changes in law or regulation. A formal review should occur at least within the family’s annual governance cycle, with more frequent attention to fast-moving financial and operating risks.
Closed actions should remain traceable. New risks should be added without allowing the document to become an archive of every historical concern. The family investment committee, board, trustees and family council should receive the parts relevant to their mandates rather than an indiscriminate copy of all sensitive information.
Prepared Families Still Face Surprises
No register can identify every event or remove uncertainty.
Its value lies in strengthening the family’s capacity to respond to events it did not predict. A current balance sheet, adequate liquidity, clear authority, secure information and tested relationships are useful across many different crises.
The register also changes the family’s culture. It makes risk discussable before concern becomes accusation. It allows independent advisers to challenge assumptions within an agreed process. It records decisions so future generations can understand why certain exposures were accepted and how the family intended to manage them.
Wealth preservation is often described in terms of assets. In practice, it depends just as much on preparedness.
A family that understands its risks can act earlier, allocate resources more intelligently and remain calm enough to protect what matters.
The crisis will still create pressure.
It should not be the first time the family has asked what could go wrong, who must decide and what needs to happen next.
