• About us
  • Raising the Bar
  • Raising your Game
  • The Extra G - Geopolitical
  • Risk Matters - Roundtables
  • Leadership Team
  • Events
  • Blog
  • Contact
  • Menu

The Risk Coalition

  • About us
  • Raising the Bar
  • Raising your Game
  • The Extra G - Geopolitical
  • Risk Matters - Roundtables
  • Leadership Team
  • Events
  • Blog
  • Contact
nathan-dumlao-pMW4jzELQCw-unsplash.jpg

Cognitive diversity (what’s that?) – and its value to risk oversight and risk management

August 11, 2020

Bryan Foss, a co-founder of the Risk Coalition, met with Dr Roger Miles through the CISI Risk Forum to understand his work with UK Finance and the FCA, to develop diversity within financial services, specifically related to improving risk and governance accountability and outcomes under SMCR. 

A subsequent panel debate for NEDonBoard members asked that the Risk Coalition capture Roger’s thoughts for consideration and practical board application.  Here they are in his Q&A with Bryan! 

Bryan’s first question. You’ve said that ‘Diversity takes diverse forms’… Which diversity indicator best predicts for team performance? 

Roger’s answer.  It's great that we're all using a wider range of diversity indicators now – gender, ethnicity, social origins and so on – but the best indicator is none of the above, it’s a thing called cognitive diversity.  In simple terms, that’s your capacity to consider problems in new ways, free from preconceptions.  Often that’s embodied by a mix in the room of all the other diversity factors, plus some other new elements such as your mix of non-neurotypicals.

Q.    How have corporate health indicators of Value and Purpose changed?

A.     The whole conduct project asks us to take a fresh look at the way we report value and purpose in business.  In the past we’ve looked to classic indicators of business financial health such as capitalisation, efficiency, solvency, profitability – the things you are used to seeing in an annual report from a public company. 

Now, we’re looking for assurances about how well the business looks after its human relationships, with staff and customers, and with the wider stakeholder surround including suppliers, the public, politicians, and so on.  To be able to give this assurance you need to verify that you have, and can point to, a culture based on psychological safety: mostly simply tested by, how far is each member of staff really comfortable that they can ask a serious question without fear of reprisal? 

Psychological Safety itself rests on several elements such as diversity, moral courage, and people’s personal understanding of their firm’s social licence.  On that last point, how situationally alert are staff and senior managers, meaning how routinely tuned-in are they to the topics that customers, investors, regulators, supply-chain partners and fellow employees most care about today?  And if they are, how do they share this knowledge? 

Q.    What is the problem of the ‘work tribe’? 

A.     One reason why we engage in any collective activity, whether it’s social zoom calls, a sports club, or going to work in an office, is that we evolved as human animals to be sociable creatures; we’re best suited to living in tribes.  We find it comforting to be surrounded by people who think the same way, who reflect our perspectives, who confirm our views.  This, we feel, validates our world view and it stimulates the pleasure centres of our brains, like a hidden gravitational force, reassuring us and making us feel safe. 

But, of course, you’ll have spotted there is a problem in there.  Although our brain chemistry rewards us for the pleasure of living in this echo chamber, unfortunately it does nothing to challenge our unconscious biases against ‘other ways of doing things’.  We all have unconscious biases as a product of our upbringing and whilst many of these are harmless, they may take socially unacceptable forms, ranging from “micro-aggressions” that distress colleagues to more obvious blind spots in empathy.  Ironically, these undermine the very sense of common purpose and cohesion that a tribal social structure evolved to develop.  Whether or not we recognise it, whenever we are looking to hire a team colleague our unconscious biases are at work encouraging us to hire the person who most fits our preconception of what a supportive member of the tribe looks like – a stereotype based on, as often as not, its current members.  

To overcome this problem we need to strive to look beyond our innate preference for “more of the same” and to make a conscious effort to welcome challenge from diverse thinkers.  Consider the alternative: if everyone in your team has a similar view of how the world works, based on their family upbringing, system of education, and so on, nobody is likely to bring to the table an alternative viewpoint, let alone to anticipate what a competing interest might be about to do.  If you get people around you who routinely consider alternative and dissenting views, based on a wider variety of different experiences of their own, not only will you get a richer and more accurate view of the world – you’ll spot and solve business problems far earlier.

Q.     Why is cognitive diversity the key to better risk oversight?

A.     As a general premise, the greater the range of human experience you bring to bear on identifying a problem, the better you’ll be able to overcome it.  Being able to draw on a resource of people with a wider range of ways of thinking and life-experiences helps avoid the collective blindness brought on by “assumed framing” of a topic; it prevents the onset of groupthink – a condition where people suppress their own divergent thinking, usually out of undue deference to the status of the group they’re in, such as board or senior committee meeting. 

Yet, healthy challenge is vital to prevent overconfidence and, at its best, is transformative.  The biggest leaps forward occur when groups of people don’t just pursue incremental change but recombine - exchanging and merging ideas from different fields.  In plain parochial terms of conduct reporting, rather than high strategy, adopting this approach is a simple way to show that your “challenge function” is working, which of course keeps conduct regulators happy as well as improving your grasp of risk.

Q.    What new reporting or MI is a good example of regulated conduct in relation to risk oversight?

A.     At the slight risk of oversimplifying the ethical landscape I like to divide conduct reporting into, on the one side, the virtues and on the other, their evil twins.  In current regulatory jargon some of the most valued virtues are psychological safety, moral courage, reflexivity, cognitive diversity and intellectual humility.  The evil twins of these are respectively, abusive behaviour, bystanding, pointless habits, stereotyping and motivated reasoning.

The good news is that behavioural research already exists to identify reporting MI for all ten of these factors. The even better news is that you don't in fact need fancy academic models to derive meaningful observation-based MI for most of them.

Let’s take just two easy example indicators.  Rather than running an elaborate and unnerving all-staff survey on psychological safety, you could simply look at entries on the website Glassdoor.com, where staff past and present are already publishing their frank appraisals of your culture.  If you’re unsure whether you have a problem with by-standing (that is, a culture of denying or dodging problems) take a look at how many workarounds of various kinds are around you in your business – creative dodges, expedients that people use to skip over the problem rather than to address it. 

By the way, it's not just IT people who use workarounds, though they perhaps most often use the phrase; everybody does this from time to time.  Some other industries even give the practice a fancy risk register label such as “authorised deviations”, but they’re still the same thing – creative ways of putting off addressing an underlying problem.  

So yes, we could go the route of importing fancy academic MI tools such as the Active Open-Mindedness Scale, or the Implicit Association Test, or Cultural Cognition.  Or we can walk more directly towards the issue and make some practical changes.  Simply reorganise senior managers’ diaries to make sure that they spend more time “socialising risk learning” – that is, having informal, status-free conversations with people at all levels across the business, staying alert for early and weak signals of risk.  Do more ‘Town Hall’ meetings and configure them so they really work (most firms’ don’t, by the way).  Introduce time for challenge and blue-sky discussion into board and committee schedules.

Finally let’s not lose sight of, for me, for now, our two best “silver bullet” indicators.  These are the behavioural MIs that correlate most clearly to business value (as well as, of course, virtuous conduct in the regulated sense): cognitive diversity and psychological safety.  Where these two are present, you will keep your best staff, spot problems sooner, solve them better, innovate and build business, have more loyal, better quality clients.  Obvious benefits in terms of business running costs but also a big long-term boost to the retained value of the business.

Q.    Any final tips for our risk blog?

A.     Readers could be interested in reflecting on the definitions of psychological safety – from my own digest and based on the FCA’s own latest reading material:

Among teams:

“a belief that one will not be punished or humiliated for speaking up with ideas, questions, concerns, or mistakes, and that the team is safe for interpersonal risk-taking.” 

(Amy Edmondson, HBS, 1999)

“a climate in which team members are not afraid to express themselves, feel accepted and respected; a fertile environment for thinking, creativity, innovation and growth, that leads to more collaborative relationships and an overall improvement in team productivity.” 

(Dan Radecki, Psychological Safety, 2018)

At individual level:

Not being exposed to “social rejection which triggers a stress response that compromises our cognitive abilities”, suppressing “higher, logical brain activity [such as] thinking, creativity, decision-making and self-control”, inducing “a stress state in which we can find it difficult to concentrate, make decisions or control our emotions.”

(Lupien, 2012)

PROF. BRYAN FOSS and DR ROGER MILES

Our thanks, from the Risk Coalition, for Roger’s personal insights into the role, development and application of diversity in risk oversight and management.  Roger’s full details can be found at https://www.linkedin.com/in/rogermiles/

Tags: Prof Bryan Foss & Dr Roger Miles
Prev / Next

Blog

Featured
Boards do not have a risk problem.  They have a decision problem.
July 22, 2026
Boards do not have a risk problem.  They have a decision problem.
July 22, 2026

Boards now receive more risk information than ever.  Dashboards are richer, risk packs are more sophisticated and oversight frameworks are more mature.  Yet the key question is whether this has really improved the quality of board decision making.  In some organisations, more risk information has sharpened oversight.  In others, it has created more caution and more process comfort without making the decision itself any clearer.  The Risk Coalition’s recent Risk Matters roundtable considered the issues around information and decision making.

Read more →
July 22, 2026
AI governance: why boards need to look beneath the surface
June 14, 2026
Pauline Norstrom
AI governance: why boards need to look beneath the surface
June 14, 2026
Pauline Norstrom

When it comes to AI, in the boardroom there is recognition that something material is changing.  But there isn’t always a shared view of where it sits, who owns it or how it should shape decisions.  This gap matters and, with AI, the optics of governance can arrive well before the substance.

Developing frameworks and committees bring structure, provide a common language and signal that an issue is being taken seriously – but AI does not behave like traditional technology.  AI-enabled features appear inside mainstream tools and its capability can span processes, functions and suppliers in ways that are not immediately visible.  In a recent Risk Coalition roundtable, Pauline Norstrom, characterised this as an iceberg problem, and discussed the risks and challenges that all boards need to be aware of.

Read more →
June 14, 2026
Pauline Norstrom
Uncovering a hidden risk - focusing on intelligibility
May 8, 2026
Ewan Willars
Uncovering a hidden risk - focusing on intelligibility
May 8, 2026
Ewan Willars

Across sectors, there is an increasing focus by regulators on consumer understanding, as well as preventing harm and confusion by ensuring that key disclosures are made more intelligible.  At present, the form and format of disclosures prescribed by law and regulation continue to be the dominant influence on how firms communicate, from pre-sales information, terms and conditions, contractual agreements, to post-sales communications.  These rigid disclosure rules often work at odds with the ability of consumers to understand the communications, and we are now seeing regulators focus increasingly on removing prescription to ensure a focus on better outcomes.  Ewan Willars from Amplified Global discusses the changes that are taking place.  

Read more →
May 8, 2026
Ewan Willars
Go to jail.jpg
December 15, 2025
Risk Matters: ECCTA – in the Boardroom
December 15, 2025
Read more →
December 15, 2025
Strengthening risk oversight
October 27, 2025
Hanif Barma
Strengthening risk oversight
October 27, 2025
Hanif Barma

Risk governance is an essential element of decision making by organisations, even more so today in a complex, unpredictable and fast-changing business environment. Risk arrangements at board level can miss the point if they focus only on mitigating downside risk - they are in danger of losing sight of new opportunities that are necessarily grasped to ensure long-term sustainability. Hanif Barma summarises a recent roundtable discussion jointly hosted by Diligent and the Risk Coalition. A major conclusion of the discussion, which involved board members and senior risk professionals, was that a change in mindsets and behaviours was needed to drive effective risk governance.

Read more →
October 27, 2025
Hanif Barma
September 16, 2025
True, Fair... and Future-Proof: Risk Accounting for a New Era
September 16, 2025
Read more →
September 16, 2025
Risk Matters Blog – The Anatomy of a Ransomware Attack
September 16, 2025
Risk Matters Blog – The Anatomy of a Ransomware Attack
September 16, 2025
Read more →
September 16, 2025
The future of ESG: navigating a fragmented landscape
April 15, 2025
Vera Cherepanova
The future of ESG: navigating a fragmented landscape
April 15, 2025
Vera Cherepanova

The business world has long wrestled with the question of purpose beyond profit. But in the era of ESG (Environmental, Social and Governance), this debate has become more than philosophical – it’s a battleground where culture wars, regulatory demands and investor expectations collide. In this Risk Coalition blog, Vera Cherepanova looks ahead and considers the evolution and challenges of the ESG landscape, and discusses how this might evolve in future.

Read more →
April 15, 2025
Vera Cherepanova
Internal audit and risk management must work together to navigate uncertainty
March 6, 2025
Mo Warsame, Gavin Hayes
Internal audit and risk management must work together to navigate uncertainty
March 6, 2025
Mo Warsame, Gavin Hayes

Heightened economic volatility, technological disruption and geopolitical tensions impact all organisations today - whatever their sector. This means that internal audit and risk professionals are under more pressure than ever to help their organisations remain resilient. The Chartered Institute of Internal Auditors (Chartered IIA)’s new Internal Audit Code of Practice - now in force - designed to strengthen internal audit functions and support organisations in tackling these emerging risks head-on, raising the bar for the profession across financial services, private, and third sectors. Mo Warsame from the Chartered IIA explains why internal audit and risk management need to work together to navigate these ever-increasingly challenging risks.

Read more →
March 6, 2025
Mo Warsame, Gavin Hayes
Three key threats of phishing to be aware of
September 4, 2024
Polly Williams, Mia Harris
Three key threats of phishing to be aware of
September 4, 2024
Polly Williams, Mia Harris

Phishing is a significant IT risk and this risk is largely a behavioural one. It is estimated that 90% of cyber attacks originate with a phishing attack so, with cyber regularly identified by boards as one of the biggest risks their businesses faces, it is useful to be reminded what the warning signs are, and how to best prepare and respond. Polly Williams tells us how to avoid the common pitfalls.

Read more →
September 4, 2024
Polly Williams, Mia Harris
Principles versus rules in data and corporate governance
August 25, 2024
Felix Ritchie
Principles versus rules in data and corporate governance
August 25, 2024
Felix Ritchie

In the world of corporate governance, the question of whether a principles-based approach or a rules-based approach is the most effective is often a matter of debate. Different jurisdictions and different regulators take alternative approaches and, indeed, different approaches may be followed at different times. Felix Ritchie considers these two alternative approaches in his blog for the Risk Coalition. He looks at the cross-sector consultation document, Raising Your Game from the Risk Coalition and he draws on this to provides him with some lessons for data governance.

Read more →
August 25, 2024
Felix Ritchie
How can you maintain high standards in your business without suffering burnout?
July 16, 2024
Jane Hunter, Mia Harris
How can you maintain high standards in your business without suffering burnout?
July 16, 2024
Jane Hunter, Mia Harris

People risk is nowadays recognised as a very wide-ranging concept, in its many dimensions. Gone are the days when this focused solely on headcount (we haven’t got enough people! or, we can’t afford the people we have!) and their capability (we haven’t got the right skill sets!). Wellbeing is now recognised as a key part of people risk, and an important aspect of this is burnout. Burnout is a state of complete mental and physical exhaustion, where we become so overwhelmed that our performance at work can suffer, while physical and mental health issues can also affect us outside of the work environment. If not addressed and adequately managed, it can easily become a feature of high perfoming businesses. Jane Hunter discusses how to maintain high standards and high levels of performance without suffering burnout.

Read more →
July 16, 2024
Jane Hunter, Mia Harris
Enforcement of individual accountability in UK banking: a new boardroom recipe for change or continuity?
June 2, 2024
Afshan Moeed
Enforcement of individual accountability in UK banking: a new boardroom recipe for change or continuity?
June 2, 2024
Afshan Moeed

Increasing personal accountability was the focus of the Senior Managers and  Certification Regime (SMCR), introduced by the financial regulators following the 2008 financial crisis.  However, has individual accountability really resulted since the introduction of SMCR, have behaviours changed and has governance and risk culture improved?  These are questions that Afshan Moeed considered in her now-completed PhD project, and she discusses this in her blog.

Read more →
June 2, 2024
Afshan Moeed
Three exciting new developments for AI in 2024 that you need to know about
May 28, 2024
Craig Morris, Mia Harris
Three exciting new developments for AI in 2024 that you need to know about
May 28, 2024
Craig Morris, Mia Harris

Robotics and artificial intelligence have been in the public consciousness for decades, but only in recent years have we really started to comprehend the technology’s sheer potential. Businesses of any size now have the chance to leverage AI to keep up with the competition, to make better informed decisions, and to improve operational efficiency. Craig Morris discusses the key developments to watch out for in three critical sectors: healthcare, environmental sustainability and cyber security.

Read more →
May 28, 2024
Craig Morris, Mia Harris
The stuff of nightmares: risk management is shut down, and nobody notices
May 24, 2024
Stefan Hunziker
The stuff of nightmares: risk management is shut down, and nobody notices
May 24, 2024
Stefan Hunziker

Do a firm’s risk management activities actually create value? Companies increasingly spend time and money implementing a range of risk norms and frameworks whose focus is often on risk identification, analysis, and risk reporting; these are risk process activities that do not create value for decision-makers argues Stefan Hunziker. He say that, typically, nothing has been managed and no decision has been made better by these processes. In this blog, he gets to the heart of risk management - explaining that its single purpose is increasing decision quality.

Read more →
May 24, 2024
Stefan Hunziker