Learning Outcomes

By the end of this lesson, learners should be able to:

  • Apply risk management frameworks to strengthen institutional resilience and public trust.

  • Use strategic foresight and scenario planning to anticipate future challenges and opportunities.

  • Build institutional resilience through adaptive leadership, proactive risk assessment, and continuous learning.

  • Integrate AI and emerging technologies into risk management and strategic foresight processes.

  • Shift organizational culture from reactive “firefighting” to proactive, forward-looking decision-making.

Introduction

In an era of rapid change, global crises, and unprecedented uncertainty, public institutions must evolve from reactive organizations that respond to problems after they arise to proactive, future-ready institutions that anticipate challenges and build resilience. As the IDI’s Crisis and Risk Management Initiative (CRISP) emphasizes, good governance is about foresight as much as accountability, requiring institutions to develop the systems, leadership capacity, and culture needed to handle risk confidently and recover stronger from shocks .

Strategic foresight—the structured approach to exploring, anticipating, and influencing possible futures—is increasingly recognized as a key tool for public sector leadership. Traditional short-term and reactive management approaches are proving insufficient to cope with a dynamic environment characterized by accelerated technological changes, global crises, demographic transformations, and increased public expectations . Public organizations must develop organizational adaptability, embrace digital transformation, and integrate emerging technologies to build capacity for long-term strategic thinking .

This lesson provides a comprehensive exploration of risk management and future-ready institutions. It examines enterprise risk management frameworks, strategic foresight and scenario planning, the role of leadership in building resilience, the integration of AI and emerging technologies, and the cultural shift from reactive to proactive management.

1. Enterprise Risk Management in the Public Sector

Enterprise Risk Management (ERM) is the comprehensive framework through which public institutions identify, assess, and manage the full range of risks that could affect their ability to achieve strategic objectives. Effective ERM moves beyond compliance to become a strategic capability that supports informed decision-making and builds institutional resilience.

The Strategic Importance of ERM

Risk management in the public sector is no longer a technical function—it is a strategic necessity. As the IDI’s CRISP initiative notes, sound internal control and risk management underpin good governance, safeguard public resources, and enhance citizens’ confidence in institutions . The Joburg Market’s Enterprise Risk Management Maturity Assessment, which achieved a Level 3.2 rating (up from 1.6 in the previous period), demonstrates that organizations with defined and integrated risk practices build a solid foundation for future growth .

The assessment, conducted by independent auditors based on ISO 31000, COSO, and King IV standards, recognized the organization’s consistent identification, monitoring, and reporting of strategic and operational risks, supported by visible leadership and accountability . As Joburg Market’s Chief Risk Officer observed, the journey doesn’t end at compliance—it’s about building resilience and ensuring that every risk decision contributes to long-term sustainability and service excellence .

Key Components of ERM

Effective enterprise risk management in the public sector includes several interconnected components:

Risk Identification and Assessment: Identifying and analyzing risks that could affect the achievement of strategic objectives. This requires systematic processes for scanning the internal and external environment, engaging stakeholders, and prioritizing risks based on likelihood and impact.

Risk Mitigation and Response: Developing strategies to address identified risks. This includes risk avoidance, reduction, transfer, and acceptance, with clear ownership and accountability for each risk.

Risk Monitoring and Reporting: Tracking risk exposure and the effectiveness of mitigation strategies. Regular reporting to senior management and oversight bodies ensures that risks are managed appropriately and that lessons are learned.

Integration with Strategic Planning: Embedding risk management into strategic and operational planning, not treating it as a separate exercise. This ensures that risk considerations inform resource allocation and strategic decisions.

Leadership Engagement: Senior management involvement is critical for effective risk management. As one expert observed, “If senior management is not involved in risk assessment, a ‘firefighting culture’ emerges—where organisations respond only to incidents that have already occurred” .

Moving from Compliance to Strategic Risk Management

The greatest value of risk management lies in moving from compliance to strategic thinking. As the EU4PFM’s risk management workshop emphasized, the goal is to shift the management mindset from reacting to problems after they arise to making preventive, forward-looking decisions .

When each manager shares their view of risk areas, a shared action map is created that strengthens institutional resilience. This is not merely a compliance exercise but a practical management tool that integrates internal control into daily processes of public institutions .

2. Strategic Foresight and Scenario Planning

Strategic foresight is a structured approach to exploring, anticipating, and influencing possible futures. Unlike traditional planning that often extrapolates from past trends, foresight acknowledges that the future is neither predetermined nor predictable but can be actively shaped .

The Value of Strategic Foresight

Futures thinking recognizes the need for long-term thinking and policies underpinned by an understanding of emerging trends and issues . As the OECD describes it, foresight is about “illuminating the ways that policy, strategies and actions can promote desirable futures and help prevent those we consider undesirable” .

Key benefits of strategic foresight include:

  • Challenging Assumptions: Foresight surfaces hidden assumptions and creates space for innovative thinking beyond day-to-day operational pressures .

  • Identifying Emerging Issues: Foresight helps organizations recognize potential opportunities and threats before they manifest .

  • Building Adaptive Strategies: Scenario planning enables decision-makers to rehearse responses and develop policies that perform well across various conditions .

  • Fostering Organizational Learning: Foresight creates opportunities for stakeholders to become problem-solvers who can challenge assumptions and consider alternative futures .

Scenario Planning: A Core Methodology

Scenario planning is a core foresight methodology that involves developing multiple plausible futures to test policy robustness and identify strategic options. Rather than predicting a single outcome, scenarios create narratives about different possible futures, allowing decision-makers to rehearse responses and develop policies that perform well across various conditions .

The Victorian Government’s 2006 project, “The Future of the Public Sector in 2025,” illustrates the power of scenario planning . The project did not attempt to predict the future. Instead, the aim was to map the interconnected drivers of change that could shape the future and craft plausible narratives about how it could unfold. The project asked ‘what if’ questions: What if the long economic boom came to an end? What if there was a shift in geopolitical power? What if our social identity centred increasingly on the individual or on the community? .

The project used strategic foresight and scenario planning to map multiple possible futures. It recognized that the future is uncertain and explored this uncertainty through what has been called “the art of the long view”—allowing decision-makers to identify emerging opportunities, mitigate risks, and build more adaptive strategies .

The Scenario Planning Process

Scenario planning follows a structured process:

Stage 1: Research and Interviews: The Victorian project began with interviews at Secretary/Deputy Secretary level in each public service department about their concerns and aspirations for the future. This was supplemented with research on future trends and the drivers of change in nature, society, politics, public administration, the economy, and technology (the INSPECT framework) .

Stage 2: Identifying Drivers of Change: Participants identified 800 drivers of change which could affect the public sector environment. These were then categorised into a set of ‘top eight’ drivers: demography, economy, work environment, energy/climate change, health, education, social identity, technology, and the wild card—those drivers of change that are impossible to predict. Examples included environmental disasters, terrorism, and a major pandemic .

Stage 3: Scenario Development: The economy and social identity were chosen as the scenarios’ foundation. These were mapped on a 2×2 matrix and layered with other drivers to create four scenarios: BRICS and Mortar, Why Generation, Climatica, and Urbaniquity .

Stage 4: Implications and Strategy Development: Seven issues across the scenarios were highlighted as having implications for the public sector: strengthening trust in government, choice in public services, supporting individual responsibility, working with the private and NGO sectors, collaboration across portfolios and jurisdictions, and workforce planning .

Participatory Approaches to Foresight

Participatory engagement is a critical dimension of strategic foresight. A comparison of stakeholder engagement among strategic foresight, co-design, and transdisciplinary approaches found that participatory approaches create spaces for stakeholders to become problem-solvers who can challenge assumptions and consider alternative futures . This participatory dimension is particularly valuable in public policy contexts where stakeholder engagement is essential for implementation success .

Public sector and not-for-profit managers can begin implementing futures thinking through several practical steps: incorporating horizon scanning into existing strategic planning processes, convening cross-disciplinary teams to identify emerging issues, developing simple scenarios to test the robustness of current strategies, and creating dedicated time for longer-term thinking within teams .

3. Leadership for Future-Ready Institutions

Building future-ready institutions requires leadership that embraces adaptability, resilience, and strategic foresight. Adaptive leadership provides the framework for guiding organizations through change and uncertainty.

Adaptive Leadership

Adaptive leadership, as described by Ronald Heifetz and Marty Linsky, emphasizes the importance of leaders who can guide their organizations through periods of change and uncertainty by encouraging flexible, innovative thinking and a focus on long-term goals . For public sector organizations, this approach is crucial for balancing legal requirements with the realities of constrained resources.

Rather than merely reacting to challenges, adaptive leadership emphasizes proactive problem-solving by:

  • Identifying Core Issues: Leaders must differentiate between technical problems (those with clear solutions) and adaptive challenges (which require new perspectives or innovations) .

  • Encouraging Collaboration: By creating a culture of collective problem-solving, leaders foster an environment where diverse perspectives can contribute to effective solutions .

  • Building Resilience: Preparing teams to handle uncertainty, particularly when it involves managing unforeseen procedural or budgetary shifts .

The Theory U Framework

Otto Scharmer’s Theory U offers valuable guidance for leadership development in crisis-prone environments. The framework emphasizes deep listening, willingness to abandon outdated approaches, and capacity to co-create responses aligned with evolving needs .

Research on healthcare leadership during the COVID-19 pandemic in South Africa found that while institutional leadership structures often remained constrained, many frontline leaders demonstrated meaningful adaptive shifts in leadership practice. Shifts from authoritative toward more relational and human-centred leadership practices were evident among some frontline leaders, reflecting elements consistent with Theory U’s emphasis on awareness-based leadership .

The study found that traditional healthcare leadership models—emphasizing hierarchy, technical expertise, and individual authority—proved inadequate for crisis conditions, necessitating profound transformation in leadership approaches . Leadership development must shift from knowledge transmission toward experiential learning, building adaptive capacity through simulation, reflection, and guided practice in uncertain environments .

Building Future-Ready Leadership Capabilities

Future-ready leadership requires several key capabilities:

Mental, Emotional, and Behavioral Flexibility: Leaders must build the mental, emotional, and behavioral flexibility necessary for sustained leadership effectiveness. This requires addressing cognitive and emotional barriers to personal adaptability .

Strategic Foresight: Leaders must develop the capacity to anticipate future trends, identify emerging issues, and challenge assumptions. Strategic foresight is increasingly recognized as a key leadership competency .

Resilience and Adaptability: Leaders must build resilience—the capacity to withstand and recover from setbacks—and model adaptability for their teams. As the LBJ School’s Adaptive Leadership Series emphasizes, leaders at every level must develop the capacity to adapt their thinking and behavior in response to ongoing ambiguity and transformation .

Proactive Problem-Solving: Rather than merely reacting to challenges, adaptive leaders emphasize proactive problem-solving, identifying core issues, encouraging collaboration, and building resilience .

4. Integrating AI and Technology for Risk and Foresight

Artificial intelligence and emerging technologies are transforming how public institutions approach risk management and strategic foresight. Generative AI, in particular, offers new capabilities for enhancing scenario generation, improving data processing efficiency, and supporting human decision-making.

Generative AI for Strategic Foresight

A pilot project conducted by an Australian state government demonstrated AI’s potential to enhance scenario generation for strategic foresight, improve data processing efficiency, and support human decision-making . The project leveraged generative AI, specifically large language models, for strategic foresight using a design science approach .

However, the study also found that it is essential to balance AI automation with human expertise for validation and oversight. The findings highlight the importance of iterative design to develop robust AI tools for strategic foresight which, alongside stakeholder engagement and process transparency, build trust and ensure practical relevance .

AI-Enabled Risk Management

Digital transformation and the integration of technologies, including artificial intelligence, are key to building capacity for long-term strategic thinking. Countries with a developed institutional environment, integrated technological solutions, and effective risk management mechanisms achieve a higher degree of sustainability and organizational effectiveness .

Organizations like the Joburg Market are adopting digital risk management platforms to replace manual systems and expand structured risk training across all staff levels. Future initiatives include the use of Key Risk Indicators and analytics, and regular risk culture surveys to strengthen decision-making and stakeholder confidence .

Balancing AI and Human Expertise

The effective integration of AI requires a balanced approach:

  • AI Automation for Efficiency: AI can process large volumes of data, identify patterns, and generate scenarios more efficiently than manual processes .

  • Human Expertise for Validation: Human judgment is essential for validating AI-generated insights, interpreting results in context, and making final decisions .

  • Human-Machine Collaboration: Generative AI can be integrated more creatively into the strategic foresight process, but human expertise must remain central for oversight and validation .

  • Process Transparency: Transparency in AI use builds trust and ensures practical relevance. Stakeholder engagement is critical for successful AI integration .

5. The Cultural Shift: From Reactive to Proactive Management

One of the most significant challenges in building future-ready institutions is shifting organizational culture from reactive “firefighting” to proactive, forward-looking decision-making.

The Firefighting Culture Problem

When senior management is not involved in risk assessment, a firefighting culture emerges—where organizations respond only to incidents that have already occurred. As one expert observed, “Our goal is to help management act proactively” . Without proactive risk management, institutions become trapped in a cycle of crisis response, never addressing the underlying vulnerabilities that create crises.

The greatest value of risk management lies in live discussion—when each manager shares their view of risk areas, a shared action map is created that strengthens institutional resilience . This is not about adding bureaucracy but about building the capability for foresight and adaptation.

Strategies for Cultural Change

Shifting to a proactive culture requires several strategies:

Institutionalizing Foresight: Integrating risk management and foresight into strategic planning and daily operations. The IDI’s CRISP initiative emphasizes embedding risk management into daily operations, ensuring institutions can continue delivering independent oversight even in the face of political, financial, or organisational challenges .

Building Leadership Capacity: Developing leaders who can think strategically, anticipate challenges, and act proactively. Leadership development must shift from knowledge transmission toward experiential learning, building adaptive capacity through simulation, reflection, and guided practice in uncertain environments .

Creating Platforms for Exchange: Creating opportunities for exchange between professionals and experts from across the public and private sectors . Through workshops and events, participants benefit from diverse perspectives and real-world insights into risk and crisis management .

Celebrating Proactive Decision-Making: Recognizing and rewarding proactive risk management, not just crisis response. When institutions celebrate foresight and prevention, they reinforce the cultural shift from reaction to anticipation.

Institutionalizing Risk Management

Effective risk management requires embedding risk practices into the organization’s systems and culture. The Joburg Market’s journey from a Level 1.6 to Level 3.2 ERM maturity rating demonstrates the value of defined and integrated risk practices as a solid foundation for future growth .

Future initiatives include a Combined Assurance Framework, the use of Key Risk Indicators and analytics, and regular risk culture surveys to strengthen decision-making and stakeholder confidence . This reflects a commitment to building resilience and ensuring that every risk decision contributes to long-term sustainability and service excellence .

6. Comparative Insights and Best Practices

Comparative analysis of international experience reveals key factors that enable successful risk management and strategic foresight in the public sector.

Institutional Environment

Countries with a developed institutional environment, integrated technological solutions, and effective risk management mechanisms achieve a higher degree of sustainability and organizational effectiveness . This suggests that building institutional capacity is essential for effective risk management and foresight.

Organizational Adaptability

Organizational adaptability is critical for building future-ready institutions. As Bulgarian research on strategic foresight and risk management in the public sector emphasizes, organizational adaptability and digital transformation are key to building capacity for long-term strategic thinking .

Integrated Technological Solutions

Integration of technologies, including artificial intelligence, is key to building capacity for long-term strategic thinking . However, technology alone is not sufficient—it must be integrated with leadership development, cultural change, and institutional capacity building.

Continuous Improvement

Future-ready institutions embrace continuous improvement. The Joburg Market’s journey toward Level 4 (“Managed and Integrated”) ERM maturity reflects a commitment to ongoing development, including adopting digital risk management platforms, expanding structured risk training, and implementing combined assurance frameworks .

Key Takeaways

  • Enterprise Risk Management moves beyond compliance to become a strategic capability that supports informed decision-making and builds institutional resilience. Integrated risk practices are a solid foundation for future growth .

  • Strategic foresight is a structured approach to exploring, anticipating, and influencing possible futures. It involves scenario planning, horizon scanning, and identifying emerging issues to build adaptive strategies .

  • Adaptive leadership emphasizes proactive problem-solving by identifying core issues, encouraging collaboration, and building resilience. Theory U emphasizes deep listening and co-creating responses aligned with evolving needs .

  • Generative AI can enhance scenario generation and data processing efficiency for strategic foresight, but requires balancing automation with human expertise for validation and oversight .

  • Shifting from reactive “firefighting” to proactive management requires institutionalizing foresight, building leadership capacity, and creating platforms for exchange. The greatest value lies in live discussion creating a shared action map .

  • International experience shows that countries with developed institutional environments, integrated technological solutions, and effective risk management achieve greater sustainability and organizational effectiveness .

  • Future-ready institutions require a “whole-of-system” transformation, with individual transformation and systemic change occurring simultaneously. While adaptive capabilities may be developed at the individual and unit levels, institutional embedding requires deliberate reforms that support rather than constrain leadership development .

PreviousNext