48
RISK MANAGEMENT in Commercial Contracts

RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

  • Upload
    others

  • View
    2

  • Download
    0

Embed Size (px)

Citation preview

Page 1: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

RISK MANAGEMENTin Commercial Contracts

Page 2: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

Overview

Page 3: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

APPRECIATING RISK

Page 4: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

Areas

• Operational• Process• IT • Security

• International• Political• Environmental

• Market • Business• Financial• Credit• Liquidity

• Legal• Ethical• Tax• Regulatory

• Human • Fraud

Page 5: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

Types

• Poor contract management • Non-performance• Defective performance• Insolvency• Lack of financing/liquidity• Ownership disputes • Third party interference• Breaches of confidence• Fraud / misrepresentation

• Global downturn• Force majeure events• Supply chain interruption• Increased cost of goods• Forex losses• Tax liability• Security breaches• Promulgation of new

laws

• Wrong counterparty• Unauthorised execution• Poor drafting• Onerous terms• Excessive disclaimers• Inadequate remedies• Unenforceable security• Unenforceable judgements• Poor contract visibility

Page 6: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

Potential Impact

• Loss of assets• Damages claims• Indemnity claims• Third party claims• Rectification costs

• Increased costs• Loss of revenue• Cash flow issues• Enforcement costs• Insolvency

• Criminal liability• Reputational

damage

• Loss of approvals, licences & permits

Page 7: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

OBJECTIVES

Page 8: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

• ESTABLISH a framework to identify, assess and mitigate key risks throughout the contract lifecycle

To

• ADOPT a proactive and preventative approach toward risk, versus a reactive and reparative one

Page 9: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

Contract Lifecycle

CREATION(drafting &

negotiation)

EXECUTION (approvals &

authorisations)

PERFORMANCE(compliance, milestones &

time bars)

ADMINISTRATION (repository &

retrieval)

TERMINATION / RENEWAL(evaluation & optimisation)

Page 10: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

• Loss from risk can impact not just profitability and growth but financial and operational stability

• Risk management helps to alleviate exposure and provide a mechanism for conflict resolution

• If you haven’t assessed the risk, …

Why?

you are bearing it!

Page 11: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

Contracting process often relegated to mere ‘administrative’ function, with:

Problem

• inadequate verification • insufficient cost-benefit analysis• non-existent, fragmented or inconsistent policies • low or no visibility of terms• poor document management• ineffective monitoring and compliance • no review and performance analysis

Page 12: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

Dilbert on Risk Management

Page 13: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

FUNDAMENTALS

Page 14: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

The 5 Cs

Culture.

collaboration

clarity

compliance

continuity

Page 15: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

RISK ASSESSMENT PROCESS

Page 16: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

Process

• Assessment

• Evaluation

• Mitigation

Page 17: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

• Stakeholder discussions

• Surveys & audits

• Risk wheel & risk matrix

• Customisation

Assessment

Page 18: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

Dilbert on Risk Management

Page 19: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

Risk Wheel

Page 20: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

Catastrophic 5 10 15 20 25

Major 4 8 12 16 20

Moderate 3 6 9 12 15

Minor 2 4 6 8 10

Insignificant 1 2 3 4 5

Very

UnlikelyUnlikely Possible Likely

Very

Likely

CO

NS

EQ

UE

NE

PROBABILITY

Risk Matrix

Page 21: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

Evaluation

Weightage

WCGW

ALARP

Key Assumption

Page 22: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

• What can go wrong?

• How likely is it to go wrong?

• What’s the impact if it goes wrong?

• Can the risk be removed, moderated or tolerated?

WCGW

Page 23: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

ALARP

• As low as reasonably possible

• Point at which cost to reduce risk becomes disproportionate to benefit to be gained

• Aim is to reduce risk value down to ALARP level

• Steps taken must be lawful and reasonable

Page 24: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

• Developing & implementing appropriate safeguards to eradicate, control & monitor risk

Mitigation

Page 25: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

SAFEGUARDS

Page 26: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

• Policies

• Process alignment

• Extra-contractual measures

• Contractual measures

Safeguards

Page 27: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

• Contract creation, approval & renewal• Document retention & management• Privacy & data protection• Email & social media• IT security & BYOD• Procurement• Gifts & disclosure• AML / KYC• Crisis / dispute management• Whistleblowing• Business continuity

Policies

Page 28: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

• Due diligence • Credit searches• Public register & court searches• Inspections• Interviews• References• Contingency plans• Insurance

Extra-Contractual Measures

Page 29: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

• Standard forms• Approved clauses library• Contractual terms (including security arrangements)• Internal stakeholder review• Legal review• Contract repository• Checklists• CLM systems• Contract ownership

Contractual Measures

Page 30: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

• Counterparty• Authorisation• Scope of obligations / rights• Performance standards• Payment terms & deduction rights• Adjustment & variation rights• Continuing disclosure obligations• Extent of liability imposition• Scope of limitations & exclusions

Contract-Specific Risks

Page 31: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

• Third party interference• Ownership disputes• Force majeure events• Third party claims• Forex loss & tax exposure• Compliance issues• Unlawfulness• Enforceability of security• Status post-breach

Contract-Specific Risks

Page 32: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

• Expiry & renewal• Termination rights• Adequacy of remedies• Impediments to enforcement • Breach of confidence• Data leakage • Governing law & dispute resolution• Post-termination dependency• Post-termination obligations

Contract-Specific Risks

Page 33: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

USE OF CONTRACTUAL TERMS

Page 34: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

Contracts…

Page 35: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

• Performance• Status• Asset protection• Security• Exposure• Renewal• Termination• Remedies• Enforcement• Post-termination

Using Terms to Manage Risk

Page 36: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

• subject to contract• conditions precedent & subsequent• representations & warranties• positive / negative covenants & undertakings • variation & adjustment provisions• assignment & change of control provisions• control of third party involvement• consequence of breach• impact of force majeure events

Performance

Page 37: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

• conditions precedent / completion deliverables • purpose / objects clauses• representations & warranties• reporting & continuing disclosure obligations• restrictions & disclaimers• subject to consent, deeming & discretionary provisions• precedence clauses• conclusiveness clauses• further assurance provisions• entire agreement provisions

Status

Page 38: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

• assertions / acknowledgements of ownership• assignment of interests• segregation requirement• retention of title • passing of title & risk• restrictions on use• insurance obligation• return / destruction of assets • confidentiality / data protection

Asset-Protection

Page 39: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

• deposit, escrow & trust arrangements• guarantees• charges, pledges & liens• audit & inspection rights• rights of entry

Security

Page 40: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

• exclusions • limitations • indemnities• liquidated damages• fee credits & debits• non-recourse• third party claims• tax, forex losses & costs

Exposure

Page 41: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

• fixed term• indefinite• with consent• automatic

Renewal

Page 42: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

• by expiry• by notice• upon breach • upon insolvency, etc.• upon cross-default• upon intervening events

Termination

Page 43: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

• suspension, withholding & set-off rights• return of deposit/goods • action for account• appointment of receiver / manager• power of sale• equitable relief• liquidated damages• power of attorney• default interest• recovery of enforcement costs

Remedies

Page 44: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

• governing law • submission to jurisdiction• dispute resolution mechanism

Enforcement

Page 45: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

• hand-over• transitional support• survival clauses

Post-Termination

Page 46: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

Specific Concerns

• Battle of the forms• Addendums & variations• Conditional language • Qualifying language• Cross-referencing• Contract management

Page 47: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

CONCLUSION

Page 48: RISK MANAGEMENT - CNPLaw · • Risk management is not about bureaucratic back-covering • It’s about taking sensible, practical steps to protect against potential loss • Organisations

• Risk management is not about bureaucratic back-covering

• It’s about taking sensible, practical steps to protect against potential loss

• Organisations should strive to formulate a robust risk management framework that is tailored to their specific needs

• All relevant stakeholders should be trained and motivated to implement the framework and made aware that a failure to manage key risks can lead to significant loss

Conclusion