Foundations
1. Problem Statement: Systemic Risk in the Human–Machine–Nature Era
1.1 Systemic and Cascading Risks (Climate, Bio, Cyber, Financial, Social, Infrastructure)
The 21st century risk landscape is characterised by systemic and cascading behaviours across multiple domains:
Climate and environmental risk Rising temperatures, hydrological extremes, sea-level rise, ecosystem degradation, and biodiversity loss affect food systems, water security, health, infrastructure, and migration patterns.
Biological and health risk Epidemics and pandemics propagate not only through biological networks but also through mobility, trade, information systems, and institutional responses, with strong ties to environmental change and social inequality.
Cyber and digital risk Digital infrastructures underpin financial systems, health services, logistics, utilities, and public administration. Cyber incidents now routinely manifest as economic, safety, and societal events, not merely IT outages.
Financial and macroeconomic risk Capital markets, banking systems, and payment rails transmit shocks across regions and sectors. Climate- and nature-related risks, geopolitical tensions, technological disruptions, and social unrest can all precipitate non-linear financial dynamics.
Social and political risk Polarisation, misinformation, governance failures, conflict, and fragility interact with economic stress and environmental degradation. These dynamics in turn affect policy responses, institutional trust, and compliance, which are key determinants of risk outcomes.
Infrastructure and industrial risk Interdependent infrastructure systems, including power, water, transport, health, and telecommunications, are increasingly tightly coupled and digitally controlled. Local failures can propagate into regional or national systemic events.
These risks are not additive; they interact through coupled networks and feedbacks. A heatwave is not just a meteorological event; it becomes a health crisis, grid stress test, labour productivity shock, and actuarial loss driver. A cyber outage in a hospital chain is not just an IT problem; it becomes a health, safety, and trust crisis.
NRM starts from this empirical reality: risk is now primarily systemic, multi-domain, and networked, not siloed.
1.2 Interdependence of Earth Systems and Human Systems
Modern risk cannot be understood without recognising the intertwined dynamics of Earth systems and human systems:
Earth system processes (climate, carbon cycle, hydrology, biosphere, cryosphere, atmospheric chemistry) set biophysical boundary conditions for societies and economies.
Human systems, including energy, agriculture, industry, cities, trade, finance, and technology, are major drivers of Earth system change, creating feedback loops (e.g., emissions → climate → physical impacts → economic & political responses → further emissions or mitigation).
This coupling manifests in:
Physical–economic linkages (e.g., drought → crop failure → commodity price spikes → food insecurity → social unrest),
Biophysical–health linkages (e.g., land-use change → zoonotic spillover → pandemics),
Climate–infrastructure–financial linkages (e.g., flood → infrastructure damage → stranded assets → credit risk),
Environmental–social–governance linkages (e.g., pollution and resource scarcity exacerbating inequality and political instability).
Traditional risk frameworks typically treat these as external scenarios or “macro factors”. NRM instead treats the coupled Earth–society system as the primary object of analysis. Enterprises, sectors, and portfolios are embedded within this system and must be modelled accordingly.
1.3 Limits of Traditional and Firm-Centric Risk Management
Traditional and firm-centric risk management frameworks, including classical ERM, have several structural limitations in this context:
Perimeter bias They are designed around the firm, portfolio, or sector as the central unit, with systemic and environmental conditions treated as exogenous shocks. This underestimates feedbacks and shared exposures across actors.
Hazard and silo bias Risk is often organised by hazard type or business line (credit, market, operational, underwriting, cyber, etc.). Cross-hazard interactions and cross-silo cascades are only partially captured, if at all.
Data and model fragmentation Internal models rarely integrate high-fidelity external data (Earth observation, health surveillance, infrastructure telemetry) or non-traditional knowledge sources (community, Indigenous). Where they do, it is often via one-off, proprietary integrations, not a shared rail.
Temporal myopia Planning horizons are typically 1–5 years; even “long-term” scenarios often have weak operational linkage to capital allocation and governance. Intergenerational or multi-decade tipping risks are acknowledged but not structurally managed.
Governance and legitimacy gaps Firm-centric risk decisions can materially affect communities, ecosystems, and future generations, yet those stakeholders have limited structural voice or recourse. This undermines trust and the legitimacy of risk systems.
These limitations do not imply that ERM is obsolete. Rather, they indicate that ERM alone is insufficient. NRM is introduced to address precisely these gaps by embedding ERM into a wider, systemic, multi-actor architecture.
2. From Risk Management 1.0–5.0 to Nexus Risk Management
2.1 Synthesised Evolution of Risk Management 1.0–5.0
The evolution of risk management can be heuristically summarised as:
RM 1.0 – Hazard & silo-based risk
Focus: Single hazards, single assets, single organisations.
Tools: Basic actuarial methods, insurance, safety margins, compliance checklists.
Data: Historical frequencies and severities.
RM 2.0 – Enterprise and portfolio risk (ERM emergence)
Focus: Integrated risk within the firm/portfolio (credit, market, operational, liquidity).
Tools: VAR, capital models, stress tests, risk appetite frameworks.
Data: Internal transactional and market data; some macro factors.
RM 3.0 – Risk as strategic and cultural function
Focus: Embedding risk in strategy and culture; risk-informed decision-making.
Tools: Scenario planning, strategic risk assessments, risk-adjusted performance metrics.
Data: Broader set of business and environmental indicators.
RM 4.0 – Data-rich, real-time, cyber-physical risk
Focus: Integration of sensors, IoT, digital twins, and real-time analytics.
Tools: Advanced monitoring, predictive maintenance, integrated safety and security systems.
Data: Continuous telemetry, logs, high-frequency indicators.
RM 5.0 – Human-centric, AI-enabled, sustainability-aware risk
Focus: Combining AI, human judgement, and sustainability/ESG considerations.
Tools: Machine learning, explainable AI, climate risk analytics, ESG integration.
Data: Expanded datasets (climate, social, governance, alternative data).
This progression reflects increased integration, sophistication, and ethical awareness. However, even RM 5.0 typically remains:
Organisation- or portfolio-centric,
Weakly coupled to Earth system science and community knowledge,
Only partially integrated with public policy and capital architectures at scale.
2.2 ERM as a Necessary but Insufficient Paradigm
ERM, as a convergence of RM 2.0–5.0 practices, is essential:
It provides governance structures (CROs, risk committees, policies),
It organises risk processes and taxonomies across business lines,
It supports regulatory compliance and capital adequacy analysis.
Yet, in a systemic risk context, ERM is insufficient because:
It is not designed to coordinate across multiple enterprises, sectors, and jurisdictions in real time.
It lacks built-in mechanisms to integrate and contest multiple knowledge systems (scientific, Indigenous, community, AI-generated).
It does not, by itself, define how risk intelligence becomes shared evidence for sovereign risk finance, multi-sector resilience programmes, or public policy.
NRM does not seek to displace ERM. It treats ERM as the internal engine that must now be connected to a shared systemic rail.
2.3 NRM as Integrator and Aggregator of Existing Regimes
Nexus Risk Management (NRM) is defined as the integrator and aggregator of existing risk regimes:
Across domains
Financial risk frameworks (Basel, Solvency, IFRS),
Operational and cyber risk frameworks (NIST, ISO/IEC),
Disaster risk and climate frameworks (Sendai, IPCC, adaptation plans),
Health and biosecurity frameworks,
Engineering and safety standards.
Across scales
Enterprise and portfolio-level ERM,
Sectoral and infrastructure-level risk management,
National and regional risk governance,
Planetary and intergenerational perspectives.
NRM provides:
A common semantic layer (Nexus ontologies) where concepts from these regimes map coherently,
A data and evidence layer (UNOSINT AEPs) where models and datasets from multiple regimes can be combined and compared,
A governance and capital layer (via GRF and GRA) where risk decisions and instruments can be transparently linked to shared evidence.
In short, NRM is not “RM 6.0” as a replacement paradigm; it is the rail on which RM 1.0–5.0 can operate together coherently in a human–machine–nature context.
3. Scientific Foundations
3.1 Complex Adaptive Systems and Networked Risk
Modern risk emerges from complex adaptive systems, which are composed of many interacting agents and components that adapt and learn:
Properties:
Non-linearity, emergent behaviour, path dependence, tipping points, and cascading failures.
Implications for risk:
Small perturbations can have large effects (and vice versa),
Historical data may have limited predictive value,
Interdependencies and feedback loops are central.
NRM incorporates complexity science by:
Representing systems as graphs and networks (agents, nodes, edges, flows),
Modelling propagation dynamics (e.g., grid failure across regions, infection spread through mobility networks),
Using scenario ensembles rather than single-point forecasts,
Recognising that interventions change system behaviour (reflexivity).
3.2 Earth System Science and Planetary Boundaries
Earth system science provides integrated models of the climate, biosphere, oceans, land surface, and cryosphere, including their interactions with human activities.
Key concepts relevant to NRM:
Planetary boundaries: global-scale thresholds beyond which Earth system processes may shift into qualitatively different states.
Tipping elements: components (e.g., ice sheets, forests, ocean circulation) that can undergo abrupt changes once critical thresholds are crossed.
Teleconnections: spatially distant linkages (e.g., ENSO) that couple risks across regions.
NRM incorporates Earth system science by:
Including Earth system indicators and model outputs as first-class signals in the risk ontology and UNOSINT pipelines, not mere background variables.
Allowing NRM Profiles to reference planetary boundary metrics and tipping risk assessments.
Enabling scenario analysis that spans global–regional–local scales and multiple Earth system dimensions.
3.3 Resilience Engineering and Sociotechnical Systems
Resilience engineering focuses on the ability of systems to anticipate, absorb, adapt to, and recover from disturbances.
NRM adopts resilience concepts such as:
Robustness, redundancy, and modularity in system design,
Graceful degradation vs catastrophic failure,
Adaptive capacity and learning.
Sociotechnical systems theory emphasises that:
Technical infrastructures are embedded in social, organisational, and institutional contexts,
Human behaviour, incentives, norms, and governance structures are integral to system performance.
NRM reflects this by:
Modelling not just physical assets and networks, but also institutions, rules, and behaviours,
Treating organisational and governance design as risk levers, not exogenous factors,
Integrating resilience metrics into NRM Profiles and risk-financing mechanisms.
3.4 Decision Theory Under Deep Uncertainty and Ambiguity
Many systemic risks are characterised by deep uncertainty (unknown probabilities, complex structural uncertainty, contested models) and ambiguity (conflicting frames and values).
NRM incorporates insights from:
Robust decision-making and adaptive pathways,
Real options analysis and flexibility,
Precautionary and safe-minimum standards approaches,
Multi-criteria decision analysis.
Practically, NRM:
Represents uncertainty explicitly in AEPs (plausible model ranges, scenario ensembles, structural disagreements),
Supports robust, adaptive policies rather than single “optimal” solutions,
Encourages iterative, learning-based governance, where decisions can be revisited as evidence and conditions evolve.
4. Epistemic Foundations
4.1 Human Cognitive and Institutional Intelligence in Risk
Human experts, institutions, and professional communities are enduring sources of risk intelligence:
They structure problems, define categories, interpret data, and exercise judgement.
They embody norms, ethics, and accountability mechanisms that AI and models alone do not.
NRM formalises human and institutional intelligence by:
Treating expert judgements, institutional positions, and committee decisions as explicit objects in the Nexus ontology and evidence packs,
Ensuring that NRM workflows always include human review, sign-off, and deliberation, especially for high-stakes decisions.
4.2 Indigenous, Local, and Community Knowledge Systems
Indigenous and local communities often hold highly context-specific, intergenerational knowledge about ecosystems, hazards, and social dynamics:
This knowledge may be encoded in languages, practices, oral traditions, and governance arrangements,
It often includes relational ontologies that differ from standard scientific classifications.
NRM is committed to:
Recognising Indigenous and local knowledge as equally valid but differently structured intelligence,
Providing mechanisms for:
Co-authoring AEPs and NRM Profiles with communities and Indigenous knowledge holders,
Respecting data sovereignty, consent, and refusal,
Allowing some knowledge to remain off-rail (non-codified) while still informing governance.
4.3 Collective Intelligence, Markets, and Price Signals
Markets and collectives can aggregate information and expectations:
Prices, spreads, volumes, and flows contain partial signals of risk perceptions and constraints,
Collective processes (expert panels, citizen assemblies, deliberative democracy) can surface diverse knowledge and values.
NRM incorporates collective and market intelligence by:
Integrating financial and market indicators into NRM Profiles and systemic risk views,
Designing deliberative and participatory processes as part of GRF governance,
Recognising the limits and biases of markets (e.g., short-termism, missing externalities) and correcting them through NRM’s normative commitments.
4.4 Artificial Intelligence, Machine Learning, and Simulation
AI and ML provide powerful tools for:
Pattern recognition in high-dimensional data,
Forecasting and anomaly detection,
Scenario generation and simulation of complex systems.
NRM integrates AI/ML by:
Treating AI models as well-documented components with:
Model cards, training data descriptions, limitations, and robustness assessments,
Ensuring AI is deployed within human-in-the-loop workflows with clear override rights,
Using simulations and digital twins to explore counterfactuals, stress scenarios, and cascading pathways.
At the same time, NRM treats AI as a risk source. It is subject to misalignment, bias, adversarial attacks, and unintended systemic effects, and NRM governs it accordingly.
4.5 Epistemic Justice, Plural Ontologies, and Contestable Knowledge
Risk management is not purely technical; it is inherently normative and political:
Choices about what counts as a risk, whose risks matter, and how they are measured reflect power relations and value judgments.
Historically marginalised communities and knowledge systems have often been excluded or misrepresented.
NRM explicitly incorporates epistemic justice by:
Designing ontology and model governance so that multiple ontologies can co-exist (scientific, Indigenous, local, organisational),
Providing structured mechanisms for contestation and appeal:
Communities, Indigenous nations, and other stakeholders can challenge how risks are defined, modelled, and financed,
Documenting disagreements and minority views instead of hiding them in model assumptions.
5. Normative Foundations
5.1 Safe and Just Operating Space (Planetary + Social)
NRM adopts the concept of a safe and just operating space as its overarching normative frame:
Safe: respecting planetary boundaries and avoiding catastrophic Earth system change,
Just: ensuring social foundations, such as health, livelihoods, equality, and rights, are met for all.
Risk decisions are evaluated not only by their impact on individual actors, but by their contribution to keeping the combined Earth–society system within this space.
Practically, this means:
NRM Profiles can reference metrics tied to both environmental boundaries and social thresholds,
NRM scenarios consider whether risk trajectories erode or protect this operating space.
5.2 Intergenerational Ethics and Future Generations
Systemic risk decisions often have consequences over decades or centuries. NRM therefore recognises obligations not only to present actors but also to future generations.
This implies:
Incorporating long-horizon impacts (e.g., climate, biodiversity, infrastructure lock-in) into NRM scenarios and evidence,
Giving weight to options that preserve or expand future choice sets,
Exploring institutional innovations (e.g., future generations councils, guardians) in NRM governance processes.
5.3 Equity, Justice, and Distributional Impacts in Risk Management
Risk is unevenly distributed:
Vulnerable communities, marginalised groups, and low-income regions often bear disproportionate exposure and harm,
Benefits of risk-taking and of risk management investments are similarly uneven.
NRM embeds equity and justice by:
Including distributional metrics in NRM Profiles (who gains, who loses, who is exposed),
Designing NRM-linked financial instruments (via GRA) with equity-aware allocation rules,
Ensuring GRF governance processes include those most affected, with real decision power and recourse.
5.4 Constitutionalisation of Risk: Risk as Civic Infrastructure
Finally, NRM rests on the thesis that risk management, at systemic scale, must be treated as a form of civic infrastructure, analogous to:
Central banking and financial stability arrangements,
National statistics systems,
Core physical infrastructures (power, water, communications).
“Constitutionalisation of risk” means:
Defining clear mandates, duties, and constraints for risk systems in charters, laws, and treaties,
Embedding safeguards against capture and abuse,
Recognising the right of communities and future generations to transparent, accountable risk governance.
Within the Nexus Ecosystem, NRM is the concrete instantiation of this idea: a constitutionally guided, technically robust, socially governed risk rail for the human–machine–nature era.
Last updated
Was this helpful?