Managing legal risk

Managing legal risk

All commercially successful organisations take risks. Without taking risks, an organisation will stand still, which is a risk in itself.

Organisations take risks in return for increased revenue or profit. Commercial organisations are unlikely to want to eliminate risk altogether, but are likely to want to control it so they can reap the benefits of taking risks while mitigating potential negative consequences.

What is risk?

The informal notion of risk as the chance that ‘something bad might happen’ is one place to start to define risk. A more tangible and easily understood approach is to define risk as probability multiplied by impact.

So, for any given legal risk faced by your business, there are two questions:

•
how likely is it that the risk will materialise, ie what’s the probability?
•
if the risk does materialise, how bad will it be, ie what’s the impact?

You can then evaluate the risk, by adopting a simple risk matrix or scoring system.

How likely is it that the risk will materialise, ie what’s the probability?

Assign a score to your answer between 1 and 5
(where 1 = very low probability

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

TAKE A FREE TRIAL

Latest Risk & Compliance News

Asset-freeze target lists and General Licences updated for new UK global migration and trafficking sanctions regime

In response to the commencement of the Global Irregular Migration and Trafficking in Persons Sanctions Regulations 2025, SI 2025/902, OFSI has published a list of designated persons under this new sanctions regime. OFSI has also updated two existing General Licences—INT/2025/5632740 and INT/2022/1679676—to incorporate the latest designations. These licences allow designated individuals to receive payments for basic necessities such as food and housing, under clearly defined conditions and reporting obligations, helping prevent unintended humanitarian consequences. General Licence INT/2025/5632740, issued in January 2025, and INT/2022/1679676, issued in April 2022, both remain active and now reflect the expanded sanctions list. They apply across multiple regimes, including those concerning irregular migration, anti-corruption, and Russia-related measures.

Home Office publishes response to ransomware consultation on new legislative proposals to tackle cybercrime

The Home Office has published its response to the public consultation on legislative proposals to address ransomware. The consultation ran from 14 January to 8 April 2025 and sought views on three measures: a targeted ban on ransomware payments for public sector and regulated critical national infrastructure (CNI); a ransomware payment prevention regime; and a mandatory incident reporting regime. A total of 273 responses were received and 36 engagement events were held. The response confirms ransomware is considered the most serious organised cybercrime threat to UK national security. Feedback was broadly supportive and highlighted several cross-cutting themes, including the need for clarity on scope and definitions, proportionate penalties that avoid revictimising victims, tailored guidance and support, and improved cyber resilience. The government intends to continue to develop the proposals in collaboration with stakeholders, explore appropriate enforcement mechanisms and publish guidance to support implementation.

HMT consults on reforms to civil enforcement of financial sanctions

HM Treasury (HMT) has launched a consultation on proposed reforms to the civil enforcement processes of the Office of Financial Sanctions Implementation (OFSI), aimed at improving the efficiency, transparency and effectiveness of financial sanctions enforcement in the UK. Key proposals include the introduction of a settlement scheme for monetary penalties, an Early Account Scheme (EAS) to allow subjects to provide a full factual account early in investigations, a streamlined process with indicative penalties for minor breaches such as reporting or licensing offences, updates to OFSI’s public guidance on case assessments and penalty discounts for voluntary disclosure and cooperation as well as changes to statutory penalty maximums. These reforms would apply only to OFSI’s civil enforcement powers in relation to financial sanctions and the UK Maritime Services Ban and Oil Price Cap and would not affect criminal enforcement or non-financial sanctions. Responses are sought by 13 October 2025.

OFSI issues three General Licences for shipping and trading entities

The Office of Financial Sanctions Implementation (OFSI) has issued three General Licences under regulation 64 of the Russia (Sanctions) (EU Exit) Regulations 2019, SI 2019/855. General Licence INT/2025/6403704 permits the continuation of business operations for vessels owned or operated by, or on behalf of, the Government of the Gabonese Republic. General Licences INT/2025/6488808 and INT/2025/6397444 allow persons to wind down transactions involving Litasco Middle East DMCC and Intershipping Services LLC, respectively.

View Risk & Compliance by content type :

News