A single deviation does not end with that single deviation. It is discovered, the authorities move, the media reports, trust falls, the share price and the cost of capital rise, and at the end it arrives at management liability. A failure of risk management usually lands as a problem of governance and capital.
01The Chain Does Not Stop at One
At the moment a deviation is found, the damage still looks small. The problem is that, from there on, a row of amplifiers is lined up. Media coverage, social media, the authorities' investigation — each one magnifies the small initial event many times over. The distance from discovery to management liability is shorter than it seems.
So what is required of management is not to "deal with it after it happens" but to design controls that stop the chain upstream. The cost of responding after the fact exceeds the cost of prevention by an order of magnitude. Cutting off the path before a fire breaks out is cheaper than putting one out once it has. This asymmetry is the reason to spend resources on the unglamorous prevention of peacetime.
02The Three Paths a Deviation Runs Along
Where does a single deviation travel on its way to governance and capital? Lay it out along three paths — amplification, governance, and capital — and the route by which risk management finally comes home as "a problem of management" comes into view.
A small event spreads exponentially
The amplifiers of media coverage, social media, and the authorities' investigation are lined up at each stage. A deviation that looked contained at the moment of discovery races all the way to a loss of trust in the course of transmission. A slow initial response feeds directly into the scale of the damage.
It spreads to the personal liability of directors
A deviation connects to the argument that the duty of loyalty under Article 355 of the Companies Act and the board's duty of oversight under Article 362 have not been discharged. A failure of risk management can ultimately reach the question of a director's personal liability. It comes home as a problem of governance.
Impaired trust is priced into the cost of capital
A loss of trust feeds back into the financials as a rising cost of capital, by way of investors demanding a higher return. Reputational risk and the cost of capital are not separate things; they are the upstream and downstream of the same chain.
The Osaka District Court judgment in the Daiwa Bank shareholder derivative suit (September 20, 2000) held management liable, less for the size of the loss itself than for failing to build and operate the internal controls that manage risk. A deviation does not end as "an accident on the floor"; it travels back up as an argument that a governance duty went undischarged. Principle 2-1 of the Corporate Governance Code places medium- and long-term corporate value and trust at the premise of management precisely in order to cut this chain.
03The Value of Review Is Measured by the Scale of the Chain It Stopped
A reviewer holds back a single piece of material. That act is nothing other than cutting, at its very source, the chain we have just traced. Stop it before it goes out, and the discovery, the media coverage, and the rise in the cost of capital are all spared from happening at once.
Here lies the reason the value of review is hard to see. Because the deviation that was stopped never surfaces, the contribution is hard to record — it remains an "event that did not happen." The value of review is measured not by the number of items stopped but by the scale of the chain that would have run had they not been. This invisible contribution has to be translated into the language of management and told: this is not censorship, but the cheapest risk investment there is for cutting a chain at its source.
04To the Materials-Review Floor — Standing at the Very Source of the Chain
Everything organized so far names the standing of materials review exactly. Review is a device placed at the very source of the chain, and whether or not it stops something there determines the scale of everything downstream.
Seen from the capitalist's view, the same chain appears as a problem of the cost of capital, in A-09, "The Price of Misconduct — When a Breach of Norms Is Priced into the Cost of Capital." Seen from the board's view, it becomes a problem of the duty of oversight, in B-09, "Why 'I Didn't Know' Will Not Do — How Far the Duty of Oversight Reaches." The same deviation shows three faces — capital, governance, and risk — depending on where one stands. If a reviewer can hold these three faces at once, they can explain "why we stop this one item" in the other party's own units of measure.
- A deviation chains: discovery → authorities → media coverage → loss of trust → rising cost of capital → management liability. It does not end at one.
- At each stage there are amplifiers — media coverage, social media, the authorities — and a small initial event expands exponentially.
- By way of the argument that Articles 355 and 362 of the Companies Act went undischarged, a failure of risk management spreads to the personal liability of directors.
- The value of review lies not in "the number of items stopped" but in "the scale of the chain that was stopped." Translate the invisible contribution into the language of management.
- Companies Act, Article 355 (duty of loyalty) and Article 362 (powers and oversight duty of the board of directors). Set out the director's duty of loyalty and the board's oversight of the execution of duties. Where a deviation is left unaddressed, it connects to a director's liability by way of the argument that these duties went undischarged.
- Daiwa Bank Shareholder Derivative Suit, Osaka District Court judgment of September 20, 2000. Recognized management's liability for failing to build and operate an internal control system for risk management, rather than for the size of the loss itself, and showed how it spreads to governance liability.
- Corporate Governance Code, Principle 2-1. Places the enhancement of medium- and long-term corporate value and the trust of stakeholders at the premise of management. Serves as the basis for cutting the chain by which impaired trust spreads to the cost of capital.