Risk management

Risk management

What is risk?

There is a widely accepted definition of risk, ie:

Risk = probability x impact

So, for any given risk faced by your business, there are two questions:

•
how likely is it that the risk will materialise, ie what’s the probability?
•
if the risk does materialise, how bad will it be, ie what’s the impact?

See Practice Note: Protecting your practice—an introduction to law firm risk management.

SRA Standards and Regulations

General risk

You must identify, monitor and manage all material risks to your business.

This obligation extends to risks that may arise from a connected practice, ie a person, company, LLP, partnership etc, that is connected to your firm by virtue of:

•
being a parent undertaking
•
being jointly managed or owned, or having a partner, member or owner in common, or being controlled by your firm
•
participating in a joint enterprise or, across its practice generally, sharing costs, revenue or profits related to the provision of legal services with your firm
•
common branding

Financial risk

You must actively monitor your financial stability and business

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

TAKE A FREE TRIAL

Latest Practice Compliance News

Jonathan Fisher KC updates on fraud offences and disclosure reform progress

Chair of the Home Office Independent Review of Disclosure and Fraud Offences, Jonathan Fisher KC has published an update outlining the progress of the review's second phase. The update identifies three focus areas: whistleblowing mechanisms for fraud detection, sentencing reform and technological/legislative changes. Fisher reports consulting over 120 stakeholders across the justice system and plans to submit final recommendations to the Home Secretary by end-2025. The review examines the Fraud Act 2006's effectiveness for internet fraud cases, which now constitute 43% of all recorded crime in England and Wales.

Practice Compliance weekly highlights—3 July 2025

This week's edition of Practice Compliance weekly highlights includes: OFSI’s new confidential reporting guidance, a Red Alert on Russian oil sanctions evasion, US sanctions targeting cybercrime infrastructure, analysis of the conclusions of the cross-government review of UK sanctions implementation and enforcement and news of a new Practice Note on the DUAA 2025 and its implications for data protection compliance.

AI risks leaving UK businesses exposed to insurance gaps

Law360, London: Businesses that replace workers with artificial intelligence (AI) tools could face difficulties when they make claims under standard negligence insurance policies after consumers lose out, lawyers say.

OFSI updates UK Financial Sanctions FAQs

The Office of Financial Sanctions Implementation (OFSI) has updated its UK Financial Sanctions FAQs, adding FAQ 149 on ‘What constitutes an economic resource?’, FAQs 150–151 relating to Crown Dependencies and Overseas Territories and FAQ 152 on ‘When should securities held at designated local Russian registrars be reported to OFSI?’. Additionally, FAQs 123–124 have been moved to the withdrawn FAQs document.

View Practice Compliance by content type :

News