Study first
Review the ideas behind the questions
Review risk before the plan continues. Check ownership and treatment first. Then review monitoring, reporting and evidence confidence. The team should know what to learn if work stops.
Make Risk Part Of Planning
Risk review should affect which strategy moves forward and who owns the response. Treat it as part of planning, not separate paperwork.
- Risk management should be part of governance, leadership, and decision-making in pursuit of objectives.
- Managers in the first line own the risks created by their activities and are accountable for managing them.
- Campaign governance should have named accountability and integrated governance when the campaign is part of a wider initiative.
In Practice
Name The Owner
A serious strategy risk needs one accountable owner and a clear path to the wider governance group when the risk affects more than marketing.
Integrate Wider Risk
When a campaign promise depends on operations, product, legal, or service teams, the risk cannot stay inside a marketing-only plan.
Common mistakes
Listing the risk in a slide but leaving no owner, escalation path, or response rule.
Assign accountable ownership and connect the risk to the governance path that can change the plan.
Q&A
Who should own a risk created by a marketing strategy choice?
The team or manager whose activity creates or manages the risk should own it, with escalation when wider governance is needed.
When should risk move beyond the marketing plan?
When the risk affects a wider initiative, customer promise, public claim, delivery dependency, or leadership approval that marketing cannot control alone.
Use Controls And Monitoring
A risk register only helps if it leads to treatment choices, useful monitoring, and timely reporting.
- Risk processes should identify, assess, treat, monitor, and report risks so management can respond.
- Controls should be reassessed when remaining risk is not acceptable or when the control creates new risk.
- Monitoring and reporting should be designed to support risk-based management and oversight.
In Practice
Treat The Risk
If the risk is material, the plan should name the prevention, detection, correction, or acceptance choice instead of only naming the risk.
Monitor For Response
A dashboard should tell leaders when to continue, change, pause, or escalate. Counting activities is not enough.
Common mistakes
Assuming a control solved the risk without checking whether it works or creates a new problem.
Review control effectiveness, remaining risk, and any new risk the control creates before continuing.
Q&A
What is wrong with a risk register that has no treatment plan?
It names uncertainty but does not show how the team will manage the risk to an acceptable level.
Use Evidence For Stop-Go Choices
A stop-go review should use evidence at the same strength as the action being considered. Weak or uncertain evidence may justify learning, not scaling.
- Evaluation can inform whether to continue, improve, minimise risk, stop, or invest elsewhere.
- Monitoring data can show whether a plan is reaching the target population and whether implementation is working as expected.
- Confidence in analysis falls when there are uncertainties about information integrity or underlying processes.
In Practice
Stop With Learning
Stopping a weak strategy should still produce learning about what failed, what worked, and what not to repeat.
Match Evidence To Stakes
If the evidence is uncertain and the action is large, improve assurance or narrow the next step before scaling.
Common mistakes
Scaling a strategy because early activity metrics look busy while target-audience reach and risk evidence are weak.
Use monitoring and evaluation evidence to decide whether to continue, improve, pause, or invest elsewhere.
Q&A
Can stopping a strategy still create value?
Yes. A stopped strategy can still produce useful learning about mistakes to avoid and elements worth keeping.