The B2B Podcast Index
Index
All categories
MarketingSalesSaaSFinanceHROpsLeadershipCustomer SuccessAI & DataProductStartups & FoundersRevOpsEngineering & DevTools
MethodologySubmit
Best of:MarketingSalesSaaSFinanceHROpsLeadershipCustomer SuccessAI & DataProductStartups & FoundersRevOpsEngineering & DevTools
An independent project byFame
SearchBest episodesGuestsInsightsMethodologySubmit a podcast
Index/Finance/RIMScast
RIMScast artwork

Mid-Year Risk Roundup 2026 with Morgan O'Rourke and Hilary Tuttle

RIMScast · 2026-06-30 · 1h 2m

0:00--:--

Key moments - from our scoring

Substance score

33 / 100

Five dimensions, 20 points each

Insight Density7 / 20
Originality6 / 20
Guest Caliber5 / 20
Specificity & Evidence9 / 20
Conversational Craft6 / 20

RIMS Risk Management Magazine's Q2 2026 edition explores how operational and economic headwinds are reshaping disaster preparedness even as hurricane forecasts predict below-average activity. Hilary Tuttle's cover story on the 2026 hurricane season reveals that the real threat lies not in storm volume but in secondary complications: inflation-driven material costs, federal funding constraints, and supply-chain disruptions from geopolitical instability affecting everything from plywood and plastic sheeting to generator fuel and vehicle parts. Tropical Storm Arthur's $4-6 billion damage illustrates how non-hurricane systems cause catastrophic losses - a critical reminder since hurricane classifications measure only wind speed, not the water damage that drives actual losses. Risk managers must reassess insured values and policy limits upward, stockpile response materials before prices spike further, and recognize that hurricane season has effectively become a year-round threat, exacerbated by Super El Niño patterns shifting Pacific activity toward the west coast, Hawaii, and Central America. Meanwhile, Morgan O'Rourke highlights AI adoption fatigue masking a genuine governance crisis: 90% of IT professionals report employee AI use, yet only 45% treat it as an immediate priority and just 38% believe their boards understand the risks. Shadow AI - unsanctioned tools like ChatGPT and Gemini introduced despite organizational policies - poses data governance and operational risks that most organizations aren't equipped to identify or manage, even as misinformation and disinformation remain documented threats.

Key takeaways

  • →Below-average hurricane forecasts don't reduce 2026 risk - macroeconomic volatility, federal budget cuts, and 40% increases in petrochemical-based materials (plywood, fuel, plastics) make single landfalls more expensive than ever.
  • →Non-hurricane tropical systems like Arthur ($4-6B damage) prove that storm classifications based on wind speed miss the actual threat: storm surge, flooding, and inland water damage cause disproportionate losses.
  • →Risk managers must immediately audit and increase policy limits and insured values to account for inflation in rebuilding costs, as pre-pandemic coverage levels leave organizations significantly underinsured.
  • →90% of organizations have employees using AI, but only 45% prioritize AI risks and shadow AI use (unsanctioned tools like ChatGPT) persists, enabling uncontrolled exposure of proprietary information to public systems.
  • →AI risk perception fatigue has made risk managers dismissive despite genuine governance gaps - data governance, vendor risk, and employee misuse policies remain largely unaddressed across industries.

In this episode

  1. 1RIMS Membership and Upcoming Events
  2. 2Publications Department Overview and Magazine Frequency
  3. 32026 Hurricane Season Outlook and Preparation
  4. 4Hurricane Preparedness: Cost Inflation and Material Shortages
  5. 5Business Continuity Beyond Wind: Water Damage and Tropical Storm Arthur
  6. 6Pacific Hurricane Activity and Super El Niño Climate Pattern
  7. 7AI Adoption, Shadow Use, and Risk Recognition Gaps

Mentioned

RIMSMorgan O'RourkeHilary TuttleJustin SmolisonZurichJames LambGlobal Risk ConsultantsAccuWeatherISACAChatGPTGeminiCopilot

Guests

Morgan O'RourkeHilary Tuttle

Topics in this episode

RIMS Risk Management magazine2026 hurricane season forecastSuper El Niño climate patternTropical Storm ArthurAccuWeathermacroeconomic volatility in disaster recoverypetrochemical supply chain disruptionscrude oil price impact on disaster materialsAI shadow use and data governanceISACA cybersecurity framework

Questions this episode answers

What's driving up disaster recovery costs in 2026 even though the hurricane season is forecast to be below average?

Macroeconomic volatility, geopolitical instability, US federal budget cuts, inflation, supply chain disruptions from the war in Iran, and crude oil price fluctuations are making preparation materials 40% more expensive (fuel, plywood, plastic sheeting, rubber seals, car parts) while federal disaster support is defunded or dysfunctional.

Why does Tropical Storm Arthur's $4-6 billion damage matter more than its non-hurricane classification?

Hurricane classifications measure only wind speed, but wind causes less damage than water - storm surge, flooding, and inland flooding cause the actual catastrophic losses, meaning risk managers should prepare equally for non-hurricane tropical storms.

What is shadow AI and why is it a risk management concern?

Shadow AI is unsanctioned employee use of tools like ChatGPT and Gemini that organizations either prohibit or haven't provided sanctioned alternatives for, creating data governance risks when proprietary information gets dropped into public AI systems without safeguards.

How underinsured are most organizations for disaster recovery in 2026?

Pre-pandemic policy limits and insured values are significantly inadequate because rebuilding costs have risen dramatically due to material inflation and supply constraints; organizations must immediately audit and increase coverage.

What percentage of organizations treat AI risk as an immediate priority despite widespread employee adoption?

Only 45% of IT professionals surveyed consider AI risks an immediate priority, and just 38% are confident their boards understand and act on AI risks, despite 90% reporting employee AI use.

What our scoring noted

Our reviewer’s read on each dimension, with quotes from the episode.

Insight Density

7 / 20

There are pockets of genuine insight - the petrochemical input angle on building material costs and the burnout-from-automating-easy-tasks point are genuinely non-obvious - but they're surrounded by extensive filler: magazine format discussion, banter about print nostalgia, the A-Team, makeup analogies, and promotional segments that consume a substantial fraction of the runtime.

materials that require what people call it petrochemical inputs, include things like plywood and structural lumber. So boarding your windows is going to be more expensive than ever
when you automate the parts that are easy, that means that a hundred percent of your job is now the parts that are hard or that are difficult or that are stressful. And that is a guaranteed ticket to burnout

Originality

6 / 20

The petrochemical-cost-of-disaster-prep angle is a genuinely fresh frame, and the layoff boomerang/burnout-from-automation points show some independent thinking, but the bulk of the episode recycles standard AI caution narratives ('shadow AI is bad,' 'culture matters,' 'prepare for hurricanes') that any risk professional has heard many times.

50% of AI layoffs are going to be reversed by 2027
the hurricane classification system is solely based on wind speed, but wind is one of the least... it does not do as much damage as water

Guest Caliber

5 / 20

Both guests are RIMS's own editorial staff - a VP of Content and a Managing Editor - who cover risk management journalism rather than having practiced it at scale; this is essentially an in-house magazine promotional interview, not a practitioner episode, and the insights reflect secondary reporting rather than direct operational experience.

Morgan o', Rourke, RIMS Vice President of Content and Publications and Hillary Tuttle, the managing editor of RIMS Risk Management magazine
they're joining us today to discuss some of the Highlights of the Q2 edition of Rims Risk Management magazine

Specificity & Evidence

9 / 20

The episode cites multiple concrete figures - ISACA poll of 3,400 professionals, Tropical Storm Arthur's $4 - 6B damage, 56% AI wage premium (PwC), Gartner's 50%-reversal forecast, AI governance market trajectory - though sourcing is sometimes vague ('a recent study,' 'one CEO said') and much of the data is aggregated from secondary reporting rather than primary research.

In NI SOCA poll Of more than 3,400 IT professionals, 90% of respondents said that employees are using AI in their organization... only 45% of respondents saying AI risks are an immediate priority
Tropical storm Arthur come through last week and it never reached hurricane strength, but it still managed to do 4 to 6 billion dollars in damage

Conversational Craft

6 / 20

The host occasionally draws out useful specifics ('what's an unsanctioned use? Give us an example') and has some prepared data to scaffold the conversation, but there is no meaningful pushback, no challenging of claims, and extended stretches are consumed by jokes, impression bits, makeup analogies, and conference promotions rather than substantive follow-up.

What's an unsanctioned use? Give us an example
I promised Charlie I would ask the question as Jiminy Glick because he loves Jiminy Glick

Conversation analysis

Computed from the transcript - who did the talking, and the words that came up most.

Share of words spoken

  • Speaker C40%
  • Speaker B35%
  • Speaker A24%

Most-used words

risk64rims44hillary27management23necessarily19point18hurricane16back14magazine14interesting14rimscast13teaming13worth13seeing13episode12morgan12

Episode notes

Welcome to RIMScast. Your host is Justin Smulison, Business Content Manager at RIMS, the Risk and Insurance Management Society. In this episode, Justin interviews RIMS Vice President of Content & Publications, Morgan O'Rourke, and RIMS Risk Management Magazine Managing Editor, Hilary Tuttle, on the Q2 digital edition online now. The discussion starts with Hilary's Hurricane prediction and the risks associated with storms. They discussed the risks of applying AI in the risk industry, and how using it for the simple tasks means your remaining tasks are the hard ones. To get the best results, be polite to your AI! Justin asks about Red Teaming, its purpose, and how it operates. Human behavior is an important consideration in risk management. Listen for pointers on what to do as a risk manager for the rest of 2026, and some things to avoid. Key Takeaways: [:01] About RIMS and RIMScast. [:16] About this episode of RIMScast. This is our mid-year risk review, and we will be rejoined by Morgan O'Rourke and Hilary Tuttle. They are here to discuss the major trends shaping the risk landscape; what's happened so far in 2026, and what we can look forward to.

Full transcript

1h 2m

Transcribed and scored by The B2B Podcast Index.

Speaker A: RIMS is global. Discover why 10,000 of your peers in more than 60 countries are part of the world's largest risk management community. Visit rims.orgmembership to find the best membership for you and your organization. Coming to you from RIMS headquarters in New York. This is rimscast, the official podcast of the Risk and Insurance Management Society. I am Justin Smolison, Business Content Manager here at RIMS and your proud RIMSCAST host. This is episode 397. It is our mid year risk review and we will be rejoined by Morgan o' Rourke and Hilary Tuttle. They are here to discuss the major trends shaping the risk landscape, what's happened so far in 2026 and what we can look forward to. But first, let's talk about some virtual workshops. The next RIM CRMP Exam Prep with PARIMA will be held virtually July 21st and 22nd. Registration links are on this episode's notes and we have a summertime webinar. On July 16, Zurich will present too Hot to Ignore Heat Related Injuries and Workers compensation. Register@Rims.org webinars and via, uh, the link on this episode's show Notes. Also on the webinars page you will see a two part series hosted by the RIMS Membership Department. The Classroom to Career webinar series highlights how RIMS equips students with the knowledge, skills and connections needed to thrive in risk management careers. Participants will gain insights into industry trends, career pathways and practical tools that help them confidently step into the evolving world of risk management. After graduation, these sessions will be hosted on September 1st and 9th. These sessions are member exclusives and complimentary for members of course, so if you are interested in becoming a member, this would be the time. Visit rims.org membership and we've got another popular virtual series to tell you about folks. You can enroll now, uh, in the RIMS CRO Certificate Program in Advanced Enterprise Risk Management hosted by the famous James Lamb beginning July 15th. Workshops will be held bi weekly from 11am to 3pm Eastern Time. A link to registration is on this episode's show. Notes Speaking of ERM, the RIMS ERM Conference 2026 will be held November 19th and 20th in Columbus, Ohio. Registration will open in July and be on the lookout for the call for nominations for the RIMS ERM Global Award of distinction. Visit rims.orgermm2026 in July for that announcement. Folks, RIMS is back on YouTube. Our handle is @rimsofficial channel. We've got plenty of videos there, including Rimscast, Rimscast Canada. Video, podcasts and other informative and entertaining content from rims. Subscribe to the channel today. We have more plugs later. Let's get on with the show. We are smack in the middle of the year and that means that it's time for our mid year risk review with two of my favorite people. Morgan o', Rourke, RIMS Vice President of Content and Publications and Hillary Tuttle, the managing editor of RIMS Risk Management magazine. They're joining us today to discuss some of the Highlights of the Q2 edition of Rims Risk Management magazine which is available now. We're going to talk hurricane preparedness, reputation red teaming, AI and other emerging trends that risk professionals should be aware of avoiding and embracing. We're going to have a lot of fun. Let's get to it. Morgan o' Rourke and Hilary Tuttle, welcome back to rimscast. It is worth mentioning that we are not a large group in the publications department. We are a team of five I believe.

Speaker B: Yeah.

Speaker A: And I've been here nine years. I'm the still uh, the second newest person. So that's pretty cool.

Speaker B: Look at that. It's cause we love each other. You were doing this on Zoom and Zoom just randomly decided to throw some balloons in front of Justin. Yeah, that's when we should have had the video going. Let's see.

Speaker A: Well yeah, I can always splice that in there.

Speaker B: Yeah, sure. People will love it.

Speaker A: So let's, before we dive in, let's remind the audience what's the frequency with which they can find RIMS Risk Management magazine. We got articles separate and then you can compile them for a special quarterly edition. Right. Tell us what's going on.

Speaker B: That's exactly. Pretty much got it. So yeah we have articles go up every week and then every quarter we have a digital issue that's kind of reminiscent of a magazine. Uh, you know in a physical magazine where you go, you've seen those digital where it flips the pages and everything and as I love the all over the place and a table of contents. So yeah every quarter we put that out we just one just was released probably a week ago from when you're listening now yesterday for when we're recording this and then uh, you know there's some occasional special issues like uh, on erm and on the RIMS awards that we give out at Risk World. So those will pop in every so often.

Speaker C: We also send out editors fix emails every month with a selection of things that you may have missed on the website.

Speaker B: Yeah, either either new stuff or sometimes Archival stuff that's still relevant, you know, timely things like that. So it's not all just, here's the latest five articles. It's sometimes, here's the coolest, the most interesting, in fact, our picks, as the, uh, title Editor's Picks would suggest.

Speaker A: Right.

Speaker B: Look at us.

Speaker A: So you're keeping the readership engaged in all these different ways.

Speaker B: Try to be out there, try to be out there in the frequency and format that everybody can appreciate.

Speaker A: Do you miss the physical print?

Speaker B: Who doesn't, Hillary?

Speaker C: You miss it? Yes. I've got them right here. You can kind of see.

Speaker B: Yeah, yeah, it's a, it's, it's, you know, it's a, I don't know, bittersweet sometimes. Sometimes. If you think about it, I think

Speaker A: you've captured or maintained the essence of the print, though.

Speaker B: You're very, I mean, that's, that's kind of what the digital editions are meant to do. It's kind of evoke that sort of traditional way of looking at an article. That's why I like the flipping, you know. Yeah, I mean, I, I, I, I'll admit as much as a, uh, you know, as much as the next person, I'm probably 90% digital for most things, but it's still kind of fun to look at, uh, you know, the old layout and all that sort of stuff to put on a magazine or book or whatever or what have you, you know, the physical versions. Yeah, but that's not necessarily the way of, everybody consumes things nowadays, so you got to be where everybody's attention is. So that's what we're trying to do.

Speaker A: Exactly.

Speaker C: All right.

Speaker A: You know, Armored Saint has a song called the End of the Attention Span, and they open with it because it's cool.

Speaker B: That's a good pull. I feel like that's, um, you and maybe one other person know who you're talking about.

Speaker A: It's totally making the cut also. So we've got the marquee article. In the Q2 edition is Hillary's coverage of the 2026 hurricane season outlook. Now, uh, Hillary, we, we know you from like you were in a movie. We know you from a movie called Cybersecurity. But you're also, you're also very well versed in, in hurricane, uh, preparedness and seasonal outlooks. How does this year measure up to past ones?

Speaker C: Yeah. So, um, you know, it's always an interesting challenge to try to figure out how to make the weather seem different here to here, particularly this year. Um, a lot of the forecasts are calling for a below average season. So as, as a writer and an editor, you know, you're kind of like, what's the angle? How do I make this interesting?

Speaker A: Yeah.

Speaker C: Um, so this year we focused on some of the factors that are kind of complicating the season and what will make it different from other years. And it's not necessarily like a tremendous number of storms, at least from initial forecasts. Um, it's really the challenge of the operating environment. Um, so we focus a lot on, um, the macroeconomic volatility, geopolitical instability and US Federal budget cuts as, ah, some of the biggest complications this year that are making a really fragile and challenging recovery landscape. Um, so we talk about increased prices in disaster, um, materials or preparation materials, um, the general kind of inflation impact, um, supply problems from the war in Iran, um, and a really stretched federal support system that is kind of

Speaker A: characterized,

Speaker C: uh, by either defunding or dysfunction.

Speaker A: Right.

Speaker C: And what that will mean for, um, risk managers who are tasked with, uh, hurricane preparation or recovery.

Speaker A: Right. So even if the physical hurricane isn't devastating, all these other factors can make its impact devastating.

Speaker C: Yeah. Um, and I think it's also important to underscore, you know, looking beyond the forecast, um, it's always important to assess how your resilience strategy is going to hold up in practice.

Speaker A: Yeah.

Speaker C: Um, you know, there's the cliche of like, it only takes one and you know, we don't. I don't like to rely on that as a, like a reason that someone should.

Speaker B: It's a cliche because it works. But.

Speaker C: Yeah, but it is a cliche because it's true.

Speaker A: Right.

Speaker C: Um, and it is an environment where even a single landfall is going to be more expensive.

Speaker A: Right.

Speaker C: Um, potentially, like the cost is going to be higher than ever. Um, whether that be because of, you know, your value at risk or if it's because of the response materials being 40% more expensive for things like that.

Speaker B: Yeah.

Speaker A: Because we had a risk engineer from Global Risk Consultants on the show recently and we were talking about more the physical preparations 48 hours, 36 hours and 24 hours before an impact. And I feel like your perspective provides the, the aftermath. Okay, you've survived, but now you've got all these other issues to check out beyond just whether or not your warehouse is still standing.

Speaker C: There's definitely that. Um, it's also worth underscoring that, you know, between material shortages and price increases, um, the supply chain is going to be potentially a huge problem for disaster preparation and response this year. Um, and some of it Is you know with the straight of four moves closed getting things is difficult and people are certainly seeing that across industries and across, across materials. Um, but um, a number of response materials are also going to be more expensive because of the increased cost of oil. And that I thought was one problem that I um, was not necessarily fully aware of going in. But I found really interesting in reporting the piece. Um, I mean obviously like generator fuel drastically more expensive than it has been in the past and kind of the best practices to have 72 hours worth per gener on site if you're in like a high risk area. So that's going to be drastically more expensive than it was in the past. But some of the trickle down stuff in terms of like materials that require what people call it petrochemical inputs, um include things like plywood and structural lumber. So boarding your windows is going to be more expensive than ever if you can get it right. Um the transport costs are obviously going to be drastically more heavy duty. Plastic sheeting, plastics are all kind of petrochemical related products and they, some of these also use um, byproducts of the crude oil production. So polymers and petroleum derivatives and plastics. Um, so like um, the rubber seals that you might use, things like that, all of those are going to be drastically more expensive because they fluctuate as crude oil fluctuates.

Speaker A: Yeah. Buy it in bulk now while you can.

Speaker B: Yes, kind of comes. Well you also have. Also the idea is you have to prepare for those increased costs. Yeah, you may have insurance that you may think well that'll cover it. But you may find yourself underinsured for the actual cost of those materials that you may have budgeted for or insured for in the beginning. So that's sort of like a, you know, be aware of the increased costs, do what you can beforehand to you know, whether, whether it's increase your policy um, coverage or like Justin said, you know, buy them, buy more in bulk. But the idea being that if you're going to face increased costs the most, you know, the more you can do beforehand to offset those costs is probably for, for the better.

Speaker C: Yeah, yeah, we, I did put together like a 10 tips.

Speaker A: Yeah, looking at it right now, it's great. Yeah.

Speaker C: Um, and there we try to go for things that are a lot more detailed and also more useful than just the standard like half batteries, you know some of that stuff. And one of the ones that I bumped up the list is specifically to revisit your insured values and your current policy limits because I do think that the risk of underinsurance is worth underscoring this year. Um, it is going to be drastically more expensive to rebuild, um, and making sure that you have the coverage that you need to cover those expenses and to cover the expenses of potentially needing to relocate during, you know, if things are closed. Um, car parts are also drastically more expensive. So for people who operate fleets, um, it's worth noting that, you know, all of those metals are delayed and pricier, um, partially because of tariffs and partially because of supply chain problems. Um, it's also worth noting that, you know, we just had Tropical storm Arthur come through last week and it never reached hurricane strength, but it still managed to do 4 to 6 billion dollars in damage according to like initial estimates from AccuWeather.

Speaker A: Billion?

Speaker C: Yes, billion with a B. So surprising. Um, hit the Gulf coast and you know, it did do a lot of damage in terms of business interruption, delayed flights, um, extended power outages, things like that. Um, so it does underscore kind of some of the business continuity issues, um, and the losses there. But it also underscores like it doesn't need to be a hurricane to do a tremendous amount of damage. And accuweather, I thought, made a great point when they pointed out that like the hurricane classification system is solely based on wind speed, but wind is one of the least, I don't want to say entirely irrelevant, but like, it does not do as much damage as water.

Speaker B: Right.

Speaker C: And that's not measured by hurricanes. So storm surge and flooding and inland flooding and things of that nature, like all of those water damages are not reflected in a hurricane classification. So we shouldn't just be concerned if it does reach hurricane strength. Um, it's really worth underscoring that the peril and the need for preparation are just as dramatic, um, for other storms.

Speaker B: I think it's kind of interesting that, you know, it's storm season started June 1, technically, and you immediately have a billion dollar potential damage within a week or so.

Speaker C: It's one of the earliest that we've seen.

Speaker B: Um, I was gonna say like a lot of the timelines are. The timelines are necessary. Either they're straight on point or it's just like every, you know, usually think more in the fall, September, October is when it's really going to ramp.

Speaker A: Yeah, no, but it's, it's extended.

Speaker B: I mean you've seen some years where it's been before. There's been some tropical storms before the season. But to be right on point like that just felt very, uh, interesting.

Speaker A: A lot of the conversations that I've had with risk engineers and such is that there's no such thing as the hurricane season anymore. It's basically just the hurricane year and that's it.

Speaker B: Yeah, and not only that too. There's like, it's, it's not necessarily confined to the Atlantic coast. You know, you got uh, Pacific storms that to take into account. Notably.

Speaker C: I was really proud that when I, uh, put that one in there, Morgan messaged me when he read my draft, he's like, I learned about a new thing. I didn't know it was a big stormstrong problem.

Speaker B: Well, and so she had.

Speaker C: So Hillary played that worth noting that between my m. Handing in a draft and us editing it and laying it out, there were three Pacific hurricanes that did form. Um, so I had to like frantically update this.

Speaker A: The Super El Nino was one. Right.

Speaker B: Well, that's.

Speaker C: Super El Nino is the general climate pattern that's going to create a lot of these storms in the Pacific. So you get more activity in the eastern Pacific, less in the Atlantic. Um, it's because of like warmer waters in the Pacific and then more trade winds in the Atlantic. Um, they kind of like act to break up storm formation. Um, but you get more stuff on the, on the west coast or in the Pacific. So, um, parts of Central America, Mexico and the west coast are going to be at increased risk. Um, Hawaii as well.

Speaker A: Um, Hillary, have you ever considered changing your title here at RIMS to Chief Meteorologist?

Speaker C: I have not, but I did. I did work with a dude who, like it was one of his primary

Speaker B: hobbies, I feel like in the month of May and June, which he's writing this, that would be a temporary title. But also, you gotta. Also speaking of the Pacific storms, I thought it was pretty, it's pretty amusing to me at least that the, one of the more impactful storms on the Pacific was named Hillary in 2023. So you know, Hillary's in the article.

Speaker C: The section is learn from another Hillary.

Speaker B: So it's not only is she the meteorologist, but she is the, I don't know, the, the namesake. The namesake of.

Speaker C: I will point out that she also was a billion dollar storm and she killed three people. Which is tragic, but it's just enough to know that like she meant it.

Speaker B: Yeah.

Speaker C: Without like truly being.

Speaker B: I do remember when that storm came through because every time I saw it, you know, there was a, every time there's a news headline about Hillary doing something, I just kept thinking of our Hillary as opposed to the storm and it made me kind of smile even.

Speaker C: Yeah, very Good. So yeah, Hillary's on the half measures.

Speaker A: Not to make light.

Speaker B: Uh, exactly. But Hillary's do not do things by half measures.

Speaker A: No, they do not.

Speaker B: To steal her line that she just said.

Speaker C: Yeah.

Speaker A: Let's take a quick break and talk about all the fantastic RIMS events coming up in 2026. The annual Florida Educational Conference will be held July 28 through August 1, once again at the lovely Ritz Carlton in Naples, Florida. A link to the event is on this episode. Show Notes and you can register now for the second annual RIMS Texas Regional Conference, which will be held August 10th 12th at the wonderful Grand Hyatt on the San Antonio Riverwalk. The 11th annual Chicagoland Risk Forum will return to the Old Post Office on Thursday, September 24th. Visit ChicagoLandRiskForum.org for more information. The RIMS Western Regional Conference will be held October 4th through the 7th in Seattle, Washington. The agenda is live and registration is, uh, now open. Visit rimswesternregional.com and the link on this episode's Show Notes for more information and save the dates. October 18th through the 21st we will be in Quebec City to celebrate the 50th live RIMS Canada conference. Booth sales are open and sponsorship opportunities are still available and advanced registration is open now. Visit rimscanadaconference CA for more information and also remember to check out rims.org canada for our spin off show, RIMSCAST Canada, hosted by National Conference Committee Chair Aaron Liconi. And as we said at the top, the RIMS ERM Conference 2026 will be held November 19th and 20th in Columbus, Ohio. Registration opens in July. And be on the lookout for an announcement about submissions for the RIMS Global ERM Award of Distinction. Visit rims.org erm2026 and now let's return to our interview with RIMS Risk Management Magazine's Hilary Tuttle and Morgan o'. Rourke. We gotta talk about the kind of, the, uh. Now it's kind of like the artificial intelligence. We gotta talk, we gotta talk about it because that's what's on people's minds, right? It's emerged beyond. It's emerged beyond a technology issue and evolved into a data governance and operational risk challenge in part of a script that I definitely didn't write. So in your opinions, what are the top AI related concerns for risk managers? Because we talk about this a lot on webinars, but I want to get your take on it.

Speaker B: I mean, a lot of times I look at AI and the first reaction is that what else can we say about this there is a little bit of burnout. I think that's one of the things that happens is because you hear all this AI stuff and I think at a certain point, you know, you've been inundated with here's all the potential risks.

Speaker C: Yeah.

Speaker B: And then here's a bunch of.

Speaker C: We also do get so many articles that are like, AI for X, you

Speaker B: know, just like, here's a bunch of products that are just AI related. And so it starts to get to a point where it's like, well, is this even worth paying attention to? Is there anything that's really worth getting into? Um, and so sometimes it's just kind of like the same old, same old. But it doesn't reduce the fact that there does need to be attention paid to, you know, your AI use policies if you're, if you're kind of doing something like that. Well, how are your, how are your, uh, employees using AI? Are they introducing risk into your environment? Because even though we may have discussed this stuff ad nauseam, it doesn't mean it's not happening. So there was a study that we cited in the issue, uh, a bunch of isaca, which I believe, I don't remember the acronym, but I know it's a lot of security. It's a security, uh, and cybersecurity related. I'm going to mess that up because I hear the ASACA people somewhere in the audience going, you don't know our acronym, but I don't. I forgot. I'll get it before the end of it all. But, you know, it's still, you know, some of the biggest risks they're still seeing would be stuff like misinformation and disinformation. But at the same time, they also don't necessarily consider themselves the IT people or their companies necessarily prepared to identify those risks, at least not across the board. So it doesn't mean that these things that we've discussed aren't relevant.

Speaker A: In NI SOCA poll Of more than 3,400 IT professionals, 90% of respondents said that employees are using AI in their organization. However, risk recognition is lagging, with only 45% of respondents saying AI risks are an immediate priority and 38% saying they are confident in their board's understanding of and action against AI risks. There's more, but I'm running out of gas.

Speaker B: That's exactly what I was getting at.

Speaker C: Yeah. And you know, you're seeing a lot of shadow AI use. You're seeing a lot of, um, unlicensed and unsanctioned use.

Speaker A: Um, what's an unsanctioned use? Give us an example.

Speaker C: So if, um, if your organization says, like, we don't want you using AI, or if they say, here's copilot, but they make no other provisions, um, but you're out here using ChatGPT and Gemini and, you know, a million other things like those are not necessarily sanctioned uses.

Speaker A: Right.

Speaker B: Um, and dropping the entire, you know, whatever report in that might be proprietary information to, you know, distill that into a public environment, you know, that's. That's the actual use itself. Not just the fact you open up the program, but the stuff you're putting into it may be, you know, stuff that no one would want out.

Speaker C: It's worth noting there also was a recent study that 90% of organizations have employees who regularly use personal AI tools for work. Um, 40% of companies have purchased official subscriptions to some of these services. And that is really what you should be doing because you get different privacy protections than you do if you don't. Um, but the other 50% are running on Shadow AI. They're either letting employees basically foot the bill by using their personal subscriptions, or you're using free models, and that's a disaster. Um, and one of the things that a lot of organizations aren't thinking about is the cost of all of those subscriptions and all of the tokens that get used. Um, a lot of companies that are starting to adopt this stuff at large scale and that are footing that bill are running into these astoundingly large bills for these services and not factoring in like, oh, this is not free computing power. This is not a free tool. And particularly now that some of these companies are. Are going for ipo, um, it's not going to stay free even if it is free.

Speaker A: Right.

Speaker B: Yeah.

Speaker A: There's like Netflix or like Roku.

Speaker B: Yeah, well, that's it.

Speaker A: That's my contribution there. Those are the risks that we should. Th. Those are the risks that. That should be paid attention to that are flying under the radar. Right.

Speaker B: To an extent. I think, uh, the reason why I would say some of my fly under the radar is because it sort of gets. It sort of feels like we've already discussed it. So it's one of those things. It's almost like a reminder that just because it's not necessarily something you want to hear the 15th time doesn't mean it shouldn't be doing something about it.

Speaker C: Um, yeah, I mean, I think hidden cost is a big one.

Speaker B: Yeah, yeah.

Speaker C: Um, that people really aren't thinking about, you know, thinking about governance. And that is incredibly important. Um, and interestingly, like the market for that is unfortunately also booming. So people have a very best interest in making you just as afraid of it as they do hawking it to you in the first place. Um, I mean the governance market is going from like 200 something million two years ago to an estimated like I think it was 3 or $4 billion by 2037. Like it's, it's a huge um, industry to make you dependent on AI and then to charge you to, to rule it or to govern it or to make it safer. Um, but we're also starting to see a lot more studies that are finding company after company made these huge investments in AI and they're not seeing ROI of any kind. So there was a recent one that 5% of organizations have had transformative returns from AI investment. The other 95 said there is zero measurable impact on profit and loss if not being a net negative. Um, they're just like, you're not getting money from it. I think one CEO said that unless it's for coding specifically, you are not going to get money like monetary value out of AI whatsoever. Um, and a lot of companies that have fired people are starting to reverse course really quickly. We're also seeing companies that make AI who are walking back a lot of their claims about how transformative it's going to be. The CEOs of OpenAI, um, and Anthropic, um, have officially walked back a lot of their claims. You know, they said that there was going to be a job, job apocalypse because widespread job automation was going to be so easy. They're walking those claims back. Um, the CEO of Uber said that gains and productivity were absolutely nothing compared to the increased AI related expenses that they're experiencing. So they're walking back a lot of their investment. And the former chief of AI at Microsoft said that employees default to automating tasks that are ones they dislike rather than ones that create value. And that that bill is coming. Um, so it is, it's, I think, worth discussing. Like where is this?

Speaker B: I think it's probably, you know, it speaks to being practical about what you're going to get out of it as opposed to it being some sort of like magic, magic button to press. You know, I mean I hate to, I hate to paint this as these people that are like, you know, pre Internet takeoff going, oh, that Internet's going to go nowhere. AI is not going to go nowhere. It's just that there is in the early going of anything, there's always this finding its footing. Exactly. There's this kind of spike in, like, promise versus reality. And I think we're at a point where the promise has peaked. Reality is kicking in. It does not mean it's going to be, like, tossed aside like, you know, some.com bubble back in the 90s or whatever, or 2000s.

Speaker C: I do think there's a hype bubble around it in terms of, you know, we're seeing AI for everything, and we're seeing all of these claims that, like, AI is going to replace everyone. And we're seeing companies that are laying off. I mean, last year, 125,000 tech workers lost their jobs, and this year, it's the end of June, we've already had 120,000. They're looking to already beat that by July. Um, we are seeing huge kind of overinflated promise of what AI is going to be. And I think people are very slowly starting to realize it is to augment employees, it's not to replace them. Right.

Speaker B: Well, I think that's kind of important too, because when you get right down to it, there's still a lot of push for the human in a loop part which says that, you know, a lot of people have come to recognize that we can't leave the people out of this, if not, if only to just check accuracy of results. But it's the idea that, yeah, you can't replace workers because there's stuff that the AI can't do. As Hillary always loves to remind me, AI is going to always tell you what you want to hear. Doesn't necessarily, you know, and it's always going to give you stuff that's. It's a predictive engine. So it's always going to kind of give you stuff that's already out there. It's not necessarily creating new information, it's just distilling it differently.

Speaker C: So I do think that's a really important core competency that people need to be developing right now. Um, you know, taking a quick look at a thing and being like, oh, that makes sense, like, done is really not an adequate amount of oversight to be providing for things that you're using AI for, particularly as you start using it for more and more stuff. Um, AI is structured to give you things that it thinks you want or to kind of predict what you would do. Right. And so it's not hard to imagine a situation where you're like, oh, yeah, that makes sense, or like, that seems well written, but you don't necessarily Pay enough attention to what's actually in there or whether it makes sense. And we see that sometimes in people who try to, like, submit things too. Um, it restates. It doesn't actually, like, explore ideas. And you need to be really giving it more than a look to approve it. You need to be giving it a look to assess it and a look to truly analyze what it is doing before you're putting stuff forward.

Speaker A: Well, you bring up a really, you bring up a really interesting point that I was going to ask you, and that's. As the gatekeepers of the editorial integrity of our magazine, RIMS, Risk Management Magazine, rmmagazine.com, always be promoting. What are you looking for in submissions about AI articles?

Speaker C: So to be very clear, um, we do not accept articles that are written with AI.

Speaker A: Right.

Speaker C: Um, well, there's that part.

Speaker B: Yeah, we've definitely started with that.

Speaker C: That's basically receive submissions that people don't necessarily seem to get that.

Speaker A: Right.

Speaker B: And there's ways to check for that.

Speaker C: Yeah, yeah. It's also something that, you know, there's an art to it because it is meant to replicate humans. So it's, it's tricky. But we do have a very firm policy on that.

Speaker A: Right.

Speaker C: Um, when it comes to stuff about AI, we've seen pretty much everything that you could make. Um, so it's, it's a little tricky.

Speaker B: I, um, think that's where I was talking about the burnout is on our side too, where it's kind of like as Hillary said at some point earlier, she said something like, we see where you get a ton of articles about here's AI for X. Like, and just change X to like AI fraud detection. And it's the same.

Speaker C: Right?

Speaker B: It's the same article.

Speaker A: But if somebody gave you. Right, but if somebody gave you something about here's where the ROI has been.

Speaker B: I mean, I would, I would probably be interested in practical use cases that aren't promotional. If there's such a thing that somebody found some success in using AI, uh, that, that, that fellow that their colleagues could benefit from as well. You know, not something that's so proprietary that it only works for our company.

Speaker A: Right.

Speaker B: Something that, like, you know, this is where AI might be able to help risk managers in general. I think that a lot of people are using for a lot of different things. So there's not necessarily this, this is the, you know, the only best practice. But in order to establish a kind of list of best practices, those are the stories that I think will help us along that route. Of getting from promise to reality by establishing that. Here's a few things that AI has been very effective for in the risk management process.

Speaker C: I think it's also helpful to get stuff that um, has practical guidance on what they're using that is useful in terms of the governance piece. So how are you crafting policies that are effective? How are you, um, working to train your workforce on best practices so that they're using AI responsibly and getting the most out of it? Um, how are you exploring the ideas of customization if that's something that your company is doing in house? Um, a lot of these more practical things, and then we're also seeing some that are kind of legal exposure and how a lot of that is shaping up since all of the case law is so nascent. Um, what are the exposures that you're thinking of or what are the liabilities that other organizations are learning in real time that you can kind of start guarding against?

Speaker B: I mean, at this point, a lot of that stuff, as Hillary said, you know, there's a lot of cases working through the through, so there's not necessarily precedent immediately, but some of these things will become that, you know, and that's, that, that's the sort of thing knowing what risks are out there, if there's new ones that we haven't thought of. You know, we ran through the, the five or, you know, three or four years ago, everybody was talking about the basic general risks now, specific risks of applications and things like that.

Speaker A: Yeah, let's get granular.

Speaker B: Yeah, that's really what it comes down to is how do you do this for real as opposed to theory.

Speaker C: There are also interesting costs of it. And I think that is something again that is under explored and would be interesting to read about. Um, you know, are companies seeing that it's particularly having an impact in us in a particular area that they didn't anticipate? I mean even like if you, you think of OpenAI, they have had, I think over 100 million at this point in money. That is simply as a result of people saying please and thank you to ChatGPT, because the GPUs that are used, every time there is a prompt, it adds up. And so they're spending millions upon millions of dollars just to process that. You said thank you to the AI,

Speaker B: but you don't want to make the AI angry.

Speaker C: Yeah, so I also read a really interesting study.

Speaker B: Yeah, Mike come for you included that,

Speaker C: um, I think it was like 80% of people are doing it because they don't want to make the AI angry. And then the other 18% were just like, it's just the right thing to do.

Speaker A: Um, I'm one of the 80%.

Speaker C: Well, I do it as well, but I make a point of including it within my last prompt, not after. So it's not a separate line item that has to be processed.

Speaker B: Well, because you're researching.

Speaker C: Because I care about the Earth.

Speaker B: You care about the.

Speaker A: It conserves water.

Speaker C: Interestingly, they have also said that certain AI platforms actually perform better when you do talk to them politely. So like, ChatGPT will give you more kind of coherent, nicer, and like more polished answers if your input is, um, more polite.

Speaker B: Yeah, that's funny.

Speaker C: I feel like they're also like, creating their own problem, but that it costs money to be polite.

Speaker B: Whenever the last time you watched the Terminator movies will be directly, will directly affect how polite you are to the AI, perhaps.

Speaker C: I mean, you want to be polite, but you don't want to be empowering.

Speaker B: Wow, that's a good one. Put that on a T shirt.

Speaker C: I was watching this really interesting video from a, uh, conference from the American Psychological association, and this professor, uh, from Michigan State was talking about how like, the underappreciated risk or problem with, with AI is, you know, we talk about how like, one of the upsides is that you can automate all of the like, mundane or like, boring or easy stuff. And she was saying that's actually a huge problem because when you automate the parts that are easy, that means that a hundred percent of your job is now the parts that are hard or that are difficult or that are stressful. And that is a guaranteed ticket to burnout. Like, you've, you've made the easy wins and the like, low level stuff that your brain needs to recover part of your job that is no longer relevant. Like, you don't get to do those little breaks or those little bits. And so everything is complicated, difficult, exhausting. And that's not how the brain is designed to function.

Speaker B: Nor is it fascinating, nor is it how we wanted AI to be in the first place. You didn't want AI to do the fun stuff or like the easy.

Speaker C: It's not even about fun. But like, if you think about, like with customer service, like think about a call center if it's just a simple thing where it's like, what time are you open? Or, you know, like, do I have a warranty? Those are things that you can close quickly and easily. But if you're dealing with people who are like, furious at you and it's 20 minute conversation of them, like yelling at you. And that's all you do all day, every day. What is your life gonna be like?

Speaker B: Stressful.

Speaker C: After stress, you then also start like, you know, put things on hold for a while because you're just like, I need a second to be able to get back to this. And if your goal was efficiency in the first place, like, you're not making it more efficient, you're adding more buffer time because you can't handle that all the time. So, um, fun fact.

Speaker B: There you go. That's a fun fact.

Speaker A: Fun fact. All right.

Speaker C: I enjoy psychology. Psychology moments.

Speaker B: Who doesn't, who doesn't love a good psychology?

Speaker A: We will take one more quick break. The Spencer Educational Foundations Funding their future gala will be held September 17th in New York City at the famous Waldorf Astoria. This year, Spencer will honor Sierra Signorelli of Zurich and our recent guest, Mariah Propis of RT Specialty. A link to the gala is on this episode's notes. Let's talk about the openings and deadlines, uh, for various Spencer Educational foundation programs and grants. We have reached the deadline for Risk Manager on campus subject submissions. Grant awardees, colleges and universities are typically notified in September. General grants are open and the application deadline is July 30th. And internship grant applications open on August 15th and close on October 15th. Links to each of these grants are on this episode's show Notes. And of course, you can visit spencered.org for more information. And let's conclude, conclude our interview with Morgan o' Rourke and Hillary Tuttle of RIMS Risk Management magazine. And so we are back with Morgan O' Rourke and Hillary Tuttle. They have released the Q2 issue of Rims Risk Management magazine. And you can flip the pages digitally and there's an article about red teaming. What's red teaming?

Speaker B: What's red teaming?

Speaker A: And why isn't it called a teaming? And why doesn't Mr. M T just blast through?

Speaker B: Well, I think it's probably the military. And if you know things about the A team, the A team was being hunted by the military. So I think they wouldn't necessarily want to name an exercise they do against their adversary. But regardless of what Mr. T was doing in the 80s, red teaming is really just basically, you know, if you're trying to do some sort of, um, what do you call, like a crisis evaluation or like, simulation. Yeah, you've, you have to have a team that is the adversary, the one that acts as your, like, devil's advocate or your, you know, Your, your opponent to challenge all of your assumptions, to challenge all of your plans.

Speaker C: That's their immersive exercises that involve some form of, uh, offense and defense. Uh, and it's basically the same as war gaming.

Speaker B: Yeah.

Speaker A: I promised Charlie I would ask the question as Jiminy Glick because he loves Jiminy Glick.

Speaker B: Is that what that was?

Speaker A: Yes.

Speaker B: What. What's red teaming? That is actually a pretty good Jiminy Glick. So good for you, I'll give you that.

Speaker A: That's another outdated reference and impression I can do.

Speaker B: Justin does love them. You are good at them. So, yeah, that's.

Speaker C: There are war games that are teeming with opportunity.

Speaker A: Uh, finally, Hillary plays along with the pun game.

Speaker C: I love a good pun.

Speaker B: Well, you know, so there we go. That's. That's. So that's what red teaming is. It's a lot of Jiminy Glick. A team war games. Oh, yeah, War Games. That's the real one.

Speaker C: I can't make, I can't make a team references. So I apologize. I'm out of focus on that.

Speaker A: Not even the movie, which is underrated and made no sense.

Speaker C: No, I'm sorry, I can't.

Speaker A: Uh, Bradley Cooper was in it. Come on.

Speaker C: I mean, that's nice.

Speaker B: That's the best reaction to Bradley Cooper or Liam Neeson, I believe. So there's. Yeah. Anyway.

Speaker A: Well, the, the feature on reputation red teaming suggests that organizations need to prepare like hurricanes for the first 48 hours. In this case, it's the 48 hours of a crisis as much as the crisis itself. So with that in mind, what is social media's influence on reputation risk and red teaming?

Speaker B: Uh, Hillary.

Speaker C: Go ahead, Morgan.

Speaker B: I don't know what I was going to say. Yeah, every time he says red teaming that way, it kind of throws me off. But social media. Yeah, so social media is going to amplify the impact of a crisis, especially immediately. I mean, think about all the things you see online that are like knee jerk reactions to anything that's happening. And if you lose track of that as a company, if you kind of lose control of the narrative, people are telling a story that maybe isn't your story, isn't accurate, isn't anything. I'm speaking of AI thinking of this before, there was just a story that came that my, uh, wife was telling me an anecdote she saw that Jeff Bezos at some point said that we should be using water for AI purposes rather than human consumption because AI will solve more problems. And it sounds like a crazy matrix level insanity, but it turns Out. He never said that. That's not necessarily a crisis. But that's the point of, you know, social media amplifies something beyond the point to which it's got. Gets legs before people even think to like question its validity.

Speaker A: Right.

Speaker C: A bigger reputation crisis might be the fact that, that a hundred percent sounds. That's like a legitimate thing.

Speaker B: He would say that's true. And I had to tell her that. And that was her response as well. She's like, yeah, but it sound like it could be said because we're in a craz. But we're in a. We're in an environment where crazy.

Speaker C: Yeah.

Speaker B: More. More often than not sounds crazy is becoming the norm. Well, it's. And sometimes it's not. Right.

Speaker C: And social media really is a force multiplier for a lot. But that's uh, particularly now that they're like zero content moderation controls on Twitter. It is a cesspool of misinformation, disinformation and hate speech. So, you know, a lot of things that uh, you are not in control of and that are not necessarily true do run really rampant very quickly.

Speaker B: And a lot of. So I mean, a lot of social media is like that even if there is moderation, there's the chance that something is going to go up that stays up for a certain amount of time before it gets moderated. You know, there's an instantaneous ability to post anything, uh, wild. And you don't, like, like I said, the Bezos thing is all, you know, all over Snopes and all that stuff. That's not true. But how many people follow up a story like that after they see the headline? And they may have seen it once, they may not even know where they saw it. You know, it was on LinkedIn, was it on Facebook, was it on Twitter or X whatever. You know, like it just becomes part of the stuff that floods into your brain. So, you know, the whole point of trying to throw these exercises together is to acknowledge the fact that you need to have. Not only do you need to have a plan, but you have to have. The plan has to be in place to be able to move quickly. Because, you know, when it comes to a crisis that happens within your organization, oftentimes the biggest part of it is that, you know, one of the bigger parts of it is the reputation elements. People run with and just say, you know, not only was this a bad thing a company did or a questionable thing, but like, they're terrible for it and we're just gonna, you know, they're irredeemable uh, right. In the narrative.

Speaker C: Yeah. And if in the first, you know, 12 hours after something starting to make a conversation on the Internet, um, if people can't verify that because you haven't put out a statement on it because you weren't ready or because you're waiting to see or because whatever, um, that means that you're entirely missing out on any opportunity to correct that misinformation and to be the part of the narrative that actually is steering that conversation.

Speaker B: Um, I mean, you think about the attention spans people have anyway, if they see that headline, they move, they're going to move on to the next headline within minutes. And your, your first impression in that case, you know, maybe the only impression they're, you know, you're ever given. And it sounds borderline cliche in, somewhere in there, but you know what I mean? You know, it's. Yeah, so it's, that's, that's the issue you're running, is that you have to be on these things pretty quickly and make sure that you have the people in place and the plans in place. And, you know, it's good an exercise to make sure you have people who are poking holes in it. You're right.

Speaker A: Well, it's a good article because the author, Ted Skinner. Skinner, is giving you actionable takeaways.

Speaker B: Just its pop culture, um, I don't know. Improvs.

Speaker A: Yeah.

Speaker B: Legendary.

Speaker A: Yeah.

Speaker C: You know, there's this woman on Instagram that I really enjoy who was like, you know, I'm so tired of being in meetings where people make like sports analogies that she was like, what if we start making makeup related analogies and

Speaker B: then like, you know, lay the foundation for those.

Speaker C: Yes, exactly. Um, you know, you're not going for a full red lip right off the bat. You're not going without liner. You're not doing. Correction.

Speaker A: There's different shades to every perspective.

Speaker B: You don't want to cover up all of your flaws. We, we can, maybe we can roll with it. I don't know. That was.

Speaker A: We live with women who wear makeup.

Speaker C: You know, you're going for full coverage on a, uh, skin tint budget.

Speaker B: See, Hillary's got his beat. So, you know, it is a good

Speaker A: article and I'm glad it's in there. I've never seen, I had admittedly never seen red teaming before and it's very common in cybersecurity.

Speaker C: Right. Um, but yeah, it was the first time we'd really run across it in other applications, so that also kind of set that one apart for us.

Speaker A: Right. And as I looked it up, also on the interwebs, I saw that it's in the middle of the diagram is a red team, a team in red.

Speaker B: So it's not. They're the one that stands out. I mean, think red. Red is often what, the danger color. So that's of course, if you're gonna put a, you know, the color to every team, why not make the adversary be the red one?

Speaker A: Exactly, exactly.

Speaker C: Yeah.

Speaker A: So let's also discuss. Okay, so this was, this is something that kind of is woven throughout our discussion today. Human behavior. It's in the, it's in the issue that is out now and it's also still permeating every risk that we have discussed and everything that's out there. Right. We're saying you can't just let AI do your job for you. You have to put human perspective and input into it. Human behavior also is impacting employee misconduct. And that was a big article that we ran a few times in Weekend Read because we knew we were getting some traction with it because that's something that is on the minds of risk professionals and executives. So how are organizations recognizing culture as a risk management issue?

Speaker B: Well, um, I think if you think about culture, to me, like, you know, it's, culture's probably like, you know, it's a good stopgap to have if you can't be everywhere at once as a, as say a risk manager to manage all the, you can't see everything in everybody's operation. So if you're called, if you have a risk aware culture, it can sort of be in the places and stand in for when you're not around. This analogy is tough, but you know what I mean, like almost it allows everyone to be aware of risk so that you don't have to be the only person as a risk professional.

Speaker C: I'll give you a skincare analogy.

Speaker A: Go for it.

Speaker C: Culture is your sunscreen, it's your everyday, it's your automatic. It's the thing that you need to do to like prevent the majority of photo aging and skin cancer. Um, whereas, you know, some of the more subject specific areas are your serums. You're going to spot, treat your hype, your, your hyperpigmentation, you're going to treat redness, you're going to do whatever else. You know, it depends on what your specific skin is. Like, um, are you focusing on wrinkles? Are we working on adding antioxidants? What are we going to do? Uh, but the sunscreen is the thing that every single day you need to be doing because it does cover the vast majority of problems.

Speaker A: It's a dermatological issue.

Speaker C: It is.

Speaker B: Well, see, and if you consider the, the, you know, the dermis to be the entire organization. And there's your analogy right there.

Speaker C: Right. Well, it is the largest organ.

Speaker B: It is the largest organ.

Speaker A: Oh, it's too bad I already titled this episode Mid Year Roundup because this would have just been called the Dermis. The Dermis.

Speaker B: That's great. That's great. Well, I mean, you know, you mentioned, like, culture. You mentioned the human element. I think it's the. The human element is always. Is it. It's necessary to interweave. Interweave into all of this because, you know, events are kind of largely out of your control. But the things you can control, like some of these larger events, geopolitical events, or like, you know, storms and things like that, you can't stop these things from happening. But you can control some of the stuff on the ground. You can't control whether or not you put the sunscreen on.

Speaker A: Yeah.

Speaker B: You know, you can control whether or not you have plans in place for any sort of disaster. You know, it's, you know, that's the stuff that allows you to have a little bit of sleep at night, I guess, is the. Is the thing, you know, feel like you can at least do something in an environment where it feels like nothing can be done, that can get overwhelming.

Speaker C: You know, I think that's a great point. And part of overcoming that overwhelm is also the empowerment that comes with educating yourself, um, and doing the work in terms of you can't control geopolitical risk on a large scale. What you need to figure out is what does that mean for your supply chain? What does that mean for your costs of whatever materials? And those are the things that it takes time and it's not necessarily glamorous to look up. How much asphalt do we use in a year? But the stuff that keeps all of the gravel together in asphalt is a byproduct of oil production and drastically increases in price. So what is that going to mean for your organization? Or what does it mean if your supply chain for, you know, X materials is going to be drastically delayed? Those are the ways that you can empower yourself, and those are the ways that, like, you make a difference within your organization with some of these, these big kind of ephemeral risks.

Speaker A: That's the way people have to think about polycrisis and business continuity.

Speaker C: I feel like Hillary's mean for us. And, um, one of the Things that we evaluate really often with articles. And that is like probably the single most common edit note that I give. Or the most common, like, assessment I give on submitted articles is, so what? Like, yes, that's an interesting risk. Or maybe it's, it is a risk period. Like a lot of them are not interesting. That's fine. What does it mean for you? Or what do you do about it? Or what consequence does this have to your organization? Those are the questions where, like, that's the distinction between an article that I read, an article that I publish, and those are the distinctions between a risk manager who is informed and a risk manager who is empowered. There you go.

Speaker A: There's our visualizer right there too. Hillary's got the bites.

Speaker B: She's done, she's got the sound bites today. I like it.

Speaker A: The bites.

Speaker C: I'm prepared. What can I say?

Speaker B: Good.

Speaker A: She didn't bring any cookies, but she's got the bites.

Speaker B: Jesus.

Speaker A: That got the laugh. The joke I would have used on, um, my nine year old. All right, so here's the big question. Based on the news, information and perspective in this issue, as well as what you heard and saw at RiskWorld 2026, what action or actions should risk managers take before the end of 2026? Stop there. Digest.

Speaker B: Uh, well, I guess it depends on where you, where you're coming from. I think, I think there's, you know, we were talking about a lot of the stuff now a lot of the idea of planning, you know, understanding where risks exist for you as opposed to the, you know, breaking it down, as Hillary was saying before, breaking it down to the things you can control and, and paying attention to those sorts of things, you know, looking at where the, all of these big, uh, picture things intersect your business. So a lot of times that'll come down to strengthening, perhaps strengthening your fundamental risk management practices or, you know, and not to say ignoring these bigger issues, but, uh, you know, but to make sure you don't lose sight of the, of the basics too. At the same time, you know, there's some talk of the insurance, the, uh, insurance market softening the property market particularly. So, you know, that might give you a little bit more freedom or funds to kind of invest in training or invest in infrastructure improvements that you might have been putting off, or at the very least just reassess your policies in terms of conditions and kind of see if you can't take advantage of pricing in that sort of sense. Um, you know, it's kind of, those are the basic fundamentals of risk management. But in A time when everything is crazy, when there's a lot of, when the poly crisis, even though that word is sort of overused, when it's a poly crisis environment, sometimes that's really, to me that feels like the thing that you're going to have to do because it's just, uh, otherwise it will get too crazy.

Speaker C: I think.

Speaker B: Otherwise it's too crazy to look at all the big stuff. That makes sense.

Speaker C: Yeah, yeah, I agree. Um, I think focusing on more localized impacts, um, whether that be, you know, the impact of supply chain disruption to your business or storm to your business or, um, inflation to your business, um, also working on like your own skill set in terms of, you know, we were discussing earlier, like really learning how to have a critical eye when it comes to how you're using AI and if you're using AI and what it's being used for. Um, fun fact, there's a 56% wage premium for workers with AI skills according to PwC. Um, a lot of those self improvement and education things are critical to doing your job well now, but they also do obviously set you up to be more prepared, um, career wise. Um, I think also, you know, one area that I tried to touch on a little bit in the hurricane forecast was thinking about what some of these impacts also do to your workforce. Um, AI certainly is a tremendously stressful and confusing one for your workforce. So redirecting some of that money, as Morgan mentioned, into training programs, um, is a great option for that in terms of you have a better workforce and they feel better. Um, studies do show that the more training you offer, the less resistance you usually get when it comes to like tool integration, um, and the better outcomes, um, when it comes to storm season. Also thinking about the fact that like, you're dealing with astounding inflation, but so are your workers. And if they can't afford plywood to board up their houses, that is also a problem. Um, if they are displaced, you have a displaced workforce and that means business interruption. Um, so what can you do to assist? Is that ordering things in bulk so that, you know, you have some purchasing power to help them obtain supplies? Is that providing, um, emergency kits so that you know they are prepared at home and you have a more prepared workforce that it hopefully comes back to work sooner, Things like that. Um, think small, um, when the big stuff is a little too big.

Speaker B: Yeah.

Speaker A: So what, so what should risk professionals avoid?

Speaker B: No, no, that's a tough question. It's a tough one. It really will probably depend on your business. But I mean, I Think we're kind of, you know, like it's the other side of the coin of what we're talking about here is, you know, avoid getting distracted by headlines that maybe don't have as much relevance.

Speaker A: Um, going all in on emerging technology perhaps.

Speaker B: I mean really everybody's risk appetite is going to be different for the emerging stuff. I think it really, you know, it does again, come down to educating yourself to know what works for you. Um, if you just kind of take things on faith that perhaps is not going to be fit for purpose for you.

Speaker C: So, yeah, I mean, I think, I think a wait and see approach with a lot of emerging technology is definitely proves the best force. And if that's a decision that you're um, facing is the course of action that I would recommend, um, do focus again on the augmenting employees, not replacing employees aspect of, is worth noting that like 50% of AI layoffs are going to be reversed by 2027.

Speaker A: Right.

Speaker C: Um, according to Gartner, um, a lot of people who did act really fast and cut people because they overestimated how much AI was going to make an impact are going to be hiring those people back and probably for more money, not to mention like recruiting costs or things like that. Um, some people are calling it like a layoff boomerang. Um, it's coming back. And so I think those who are not overly hasty are the ones who will be faring better in the long run. And that's an important lesson to keep in mind when it comes to making some of these assessments going forward as well.

Speaker A: I feel like that's a trend that's going to define the year. Like you're suggesting. Is there anything else that you think might also have an asterisk next to 2026?

Speaker B: I mean, it's. If you thought about right now, nobody would have said, oh yeah, we're going to have a war that's going to dominate all of the headlines. And you know, be that sort of. It wouldn't have been with Iran.

Speaker C: Like if you told me there was a war, it wouldn't have been my first guess.

Speaker B: Right. So, I mean, so, so you think about that and you think, I mean, we're just starting storm season. We're anticipating it being, uh, a mellow storm season. Doesn't mean it will be right. You know, um, it's, it's, it's the nature of the game that there's a lot of unanticipated things, um, or you don't know what to anticipate.

Speaker C: I think also you know, relief in some areas, um, but surging risk and others, like a dry hurricane season also, you know, el, um, Nino years come with increased dryness, which means increased wildfire risk. M. So it's always something. It's either flooding or it's burning. Um, which you'd prefer is largely subjective. Um, but it's always something.

Speaker B: Yeah. Uh, I mean, I think this is one of those years where it's pretty apparent that you can't. That it's just tough to predict anything because every day something new, which is what keeps risk management interesting as far as I'm concerned.

Speaker C: It is. Yeah.

Speaker A: And Morgan's been here since 1979, so.

Speaker B: So if I'm still interested, God only knows the rest of you, the folks that are actually doing the work. You just must be having a party.

Speaker A: Yeah. Well, it's been great to have you rejoin us. It's always fun. These are, these are some of my favorite episodes to produce and remind everyone where to go. Rmmmagazine.com Right.

Speaker B: You got it. Go there.

Speaker A: Who gets the, the Turn the Page edition.

Speaker B: RIMS members do get the terms Turn the Page edition, but you can, you can view a lot of the articles online. They're, they're, they're available for everyone.

Speaker A: And the awards edition is on rmmagazine.com

Speaker B: There's a special button for it that is true.

Speaker C: Ah.

Speaker B: That's also available through the RIMS website as well. In the rims.org awards, there's a listing of the folks that won, as well as links to the issue itself that you can read more about those, those individuals.

Speaker A: And if I'm remembering correctly, if people go to rmmagazine.com contribute, they can find the editorial guidelines and reach out to you if they have pitches, right?

Speaker B: That is 100% correct.

Speaker C: Absolutely. There's also our topics pages if you want any kind of subject specific coverage. Um, it's a great way to navigate within the website. So if you want to see, you know, natural disaster, things don't necessarily vary that wildly year to year when it comes to preparation or best practices. So if you're looking for any of that content, that's also a great place to look.

Speaker A: And keep in mind what Hillary said about she's gonna be reading these. So the question is so what?

Speaker B: Exactly. So what?

Speaker A: Because she's nicer about it than that. She's rolling her eyes.

Speaker C: I am nicer about it.

Speaker B: She's much more diplomatic in writing.

Speaker A: She's nicer about it.

Speaker B: Much more diplomatic communication. Uh, yes, but if you're submitting something, ask yourself that. So what? Why does somebody care to read this?

Speaker A: Right?

Speaker B: Why should you know, why should it just be more than just me writing for myself?

Speaker A: So and look at her Hurricane Outlook. Look at the Red Teaming article for good examples of what we're looking for. The Hurricane Outlook is far more in depth than what we're expecting from the typical outside contributor, but it should give you a good starting point.

Speaker B: Indeed. Yes, yes.

Speaker A: Well, I'd like to congratulate you on another wonderful quarterly edition of RIMS Risk Management Magazine, and I look forward to seeing you at upcoming RIMS events. And uh, thank you so much for joining us. Special thanks again to Morgan O' Rourke and Hillary Tuttle for joining us here on Rimscast. Again. The Q2 edition of Rims Risk Management Magazine is Now available on rmmmagazine m.com Remember, if you want to contribute, check out rmmagazine m.com Contribute for the editorial guidelines. You can reach out to Morgan and Hillary and our editor Jennifer post there as well. We're certainly going to have them back for our Year in Review episode of rimscast. But if and when major news happens or I just run out of guests, they might just come back and rejoin us here on rimscast. And now I want to speak about a topic near and dear to my heart. Sponsorships. You can sponsor a ah, RIMSCAST episode either on our publicly facing weekly show, that's this show, or with a dedicated episode. RIMSCAST has produced special episodes for jb, Boda, the Hartford, Alliant, Zurich, Highwire, axa, UH xl, Prudent Insurance Brokers, hitrust and aon. Links to sponsored episodes are on our show. Notes RIMSCAST has a global audience comprised of risk and insurance professionals, legal professionals, students, business leaders, C Suite executives, and more. Let's collaborate and help you reach them. Contact pdims.org for more information. Let's talk about RIMS Membership, folks. Become a RIMS member and get access to the tools, thought leadership and network you need to succeed. Visit rims.org membership or email membershipdeptims.org more information and let's also talk about risk knowledge. This is the RIMS Searchable content library that provides relevant information for today's risk professionals. Available materials include RIMS executive reports, survey findings, contributed articles, industry research, benchmarking data, and more. For the best reporting on the profession of risk management, check out Risk Management Magazine. This is the Society's official quarterly digital publication. It is written and published by the best minds in risk management. My name is Justin Smolison, Business Content manager here at Rims. Please remember to subscribe to Rimscast on your favorite podcasting app. Email us, uh, @contentims.org practice good risk management. Stay safe. And thank you again for your continued support.

More from RIMScast

All episodes →
  • Choosing the Challenge with Johnell Holly
  • Marya Propis: From Industry Leader to Talent Champion
  • Emerging Risks and AMRAE's RMIS Panorama 2026 with François Beaume
  • RIMS Honor Roll Inductee Emily Buckley
  • Strategy and Change with Ward Ching and Aaron Olson
Explore the best B2B Finance podcasts →
All RIMScast episodes →