Back
Article·

Why People & Culture Risk Management (PCRM) Matters: A Strategic Perspective on Corporate Fragility

By formalizing people and culture risk as a measurable, monitorable, reportable, and governable domain, PCRM restores early warning, strengthens board oversight, and shifts governance from reactive control to anticipatory risk management.

In every major organizational failure over the past several decades - from energy behemoths to global banks - one strategic pattern recurs: people and culture risks were present long before financial or operational collapse became visible. These risks did not emerge from isolated incidents or "bad apples" but from systemic behaviors, incentives, and communication patterns that went undetected until it was too late.

Example Cases: People & Culture Risk Before Collapse

Below are some business cases where early behavioral and cultural risk patterns were present but not surfaced in time contributing to systemic failure or crisis.

1. Wells Fargo - Short-Term Focused Incentives and Norms

The Wells Fargo account-opening scandal where millions of unauthorized customer accounts were created shows how internal incentive systems and culture norms can precede regulatory crises.

Key lessons:

  • Pressure to meet sales goals created persistent internal stress. Employees were placed in incentive regimes that prioritized performance on a narrow metric set.
  • Risk indicators were missed or ignored. Early indications from staff about pressure tactics and unrealistic expectations did not translate into enterprise-level action before external exposure.

From a PCRM perspective, uneven incentive perceptions, complaints about pressure to meet aggressive sales targets, and attrition drivers could have been aggregated into risk profiles that matter long before millions of customer accounts showed up on regulators' radar.

2. HBOS - Growth Ambition Versus Cultural Balance

The UK bank HBOS's failure during the 2008 global financial crisis highlights how cultural and governance misalignments can weaken enterprise resilience. Investigations emphasized that its board failed to instill a culture balancing risk and return, and that rapid growth was prioritized over prudent organizational behaviors and risk management.

Though not as publicly dramatic as other collapses, the strategic pattern was clear:

  • Behavioral norms and governance mismatch risk appetite.
  • Risk function was weak by design.

This is a case on governance, risk, and controls gaps, along with cultural shortcomings.

3. BYJU'S - When Hypergrowth Outpaced Governance

The crisis at BYJU'S illustrates how people and culture risks accumulate silently in hypergrowth environments long before financial distress becomes visible.

At its peak, BYJU'S pursued rapid expansion supported by funding and an aggressive acquisition strategy. Governance and control systems did not mature at the same pace.

Early organizational risk patterns included:

  • Growth pressure dominated internal decision systems. Speed and expansion became primary performance indicators. Control rigor, integration discipline, and reporting quality were subordinated to execution velocity.
  • Sales practices drifted into high-risk behavior. Persistent reports of aggressive sales tactics that alienated customers, refund friction, and rising customer complaints indicated conduct and representation risk forming at scale.
  • Financial control discipline weakened progressively. Delayed filings, auditor exits, and revenue recognition disputes signaled weakening financial discipline rather than isolated accounting failures.
  • Governance visibility degraded as complexity increased. Board oversight struggled to maintain clarity across acquisitions, offshore entities, and layered funding structures.

From a PCRM perspective, multiple leading indicators were present long before the liquidity crisis:

  • Pressure intensified in sales and finance functions, often at the expense of customers
  • Incentives prioritized short-term growth and valuation over sustainability
  • Escalation mechanisms weakened across regions and acquisitions
  • Control discipline declined as teams scaled rapidly
  • Trust and confidence eroded between management, auditors, and investors

These weakened internal coherence, control credibility, and governance confidence over time.

The eventual collapse was not triggered by a single market event, but by accumulated organizational fragility.

In hypergrowth enterprises, people and culture risks concentrate fastest where scale outpaces governance maturity. Without explicit monitoring of pressure, conduct, and control health, organizational stability erodes long before balance sheets reveal distress.

What These Failures Have in Common

These organizations differed in industry, geography, and business model. Yet their failures shared four systemic features that recur across complex enterprises particularly as scale, pressure, and organizational complexity increase.

Visibility Degraded Over Time

In each case, anomalies were recognized early at different levels of the organization. What weakened was the visibility and reliability of escalation mechanisms as organizations grew more complex and performance pressure increased.

Over time:

  • Information became filtered through layers
  • Bad news travelled more slowly than good news
  • Issues were reframed to preserve momentum
  • Risk indicators lost fidelity before reaching governance bodies

It is a known organizational phenomenon in large, high-pressure systems.

Strategic implication:

As organizations scale, risk and governance architecture must evolve explicitly or leadership gradually loses visibility to early risk indicators.

Incentive Structures Drifted Away from Risk Balance

Across these cases, performance systems became progressively optimized for:

  • Growth
  • Volume
  • Speed
  • Market share
  • Short-term financial metrics

Over time, this produced predictable second-order effects:

  • Risk-taking increased
  • Shortcut behaviors normalized
  • Information quality degraded
  • Exposure concentrated in specific roles or functions

It is economic design drift.

Strategic implication:

Incentive systems require continuous governance, because small design shifts can materially change organizational risk behavior long before financial impact appears.

Psychological Safety and Challenge Capacity Weakened Gradually

In high-performance environments, sustained pressure often alters communication dynamics.

Over time:

  • Challenge became more costly
  • Questioning slowed execution
  • Consensus replaced scrutiny
  • Silence increased around sensitive risks

This pattern is common in fast-growing, competitive organizations and is rarely intentional.

Strategic implication:

When challenge capacity weakens, leadership loses early warning and sounding board. At that point, governance becomes reactive rather than anticipatory.

Governance Lacked Behavioral Visibility

In all cases, boards and executives had strong visibility into:

  • Financial performance
  • Compliance status
  • Audit outcomes

What remained structurally invisible were:

  • Pressure patterns
  • Escalation health
  • Incentive side-effects
  • Power concentration
  • Trust erosion
  • Communication breakdowns

This is the central limitation of traditional governance.

Strategic implication:

Governance frameworks designed for financial and compliance risk are not sufficient to detect behavioral and cultural risk formation (that often cascades to other enterprise risks) in complex organizations.

Synthesis: Where Fragility Actually Forms

In high-growth, high-pressure organizational environments, these patterns are amplified. Rapid scale, capital inflows, acquisition velocity, and major changes increase the probability of organizational complexity outpacing risk visibility.

In such environments, people and culture risks tend to form earlier and surface later increasing the severity and cost of eventual correction.

PCRM: Closing the Enterprise Risk Gap

GuardVae reframes internal organizational dynamics as a formal risk domain within enterprise risk and governance architecture.

By formalizing people and culture risk as a measurable, monitorable, reportable, and governable domain, PCRM restores early warning, strengthens board oversight, and shifts governance from reactive control to anticipatory risk management.