For regulated enterprises

The Risks We Help To Identify & Manage

Australian and global laws regulate not only how work is documented, but how it is led – especially when decisions are costly, ambiguous, or personally risky. Regulators are increasingly rejecting paperwork as a substitute for performance.

The activation gap

Knowing the obligation is not the same as being able to enact it.

Regulated organisations do not fail for lack of compliance frameworks. They fail in the gap between the formal framework and the actual behaviour of the people operating within it: the concern raised too late, the escalation that stops at “I sent it to Compliance”, or the systemic pattern that nobody owns.

UK & Singapore perspective

Regulatory expectations across financial and employment domains increasingly converge on how leadership operates – not only what is written. In the UK, the FCA’s culture and governance work emphasises non-financial misconduct and board accountability; in Singapore, the MAS framework places weight on risk management, governance and controls. For global organisations, the practical challenge is the same: turning formal obligations into consistent day-to-day decision-making.

The regulator’s own count

78%

of entities subject to heightened regulatory supervision have underlying, unresolved governance issues.

APRA, Governance Review discussion paper, March 2025. Australia.

The gap, measured

38%

of wholesale financial services firms report that no board-level committee receives management information on non-financial misconduct. A further 33% have no formal governance structure to decide outcomes.

FCA, Culture and non-financial misconduct survey findings, 25 October 2024. 984 firms, United Kingdom.

The instruments

What now binds you – and what enacting it requires

Six obligations that already bind the board

Obligation 01 · Psychosocial risk

Psychosocial Risk & Work Design

Model WHS Regulations 55A–55D – and comparable regimes such as UK HSE and Singapore MOM.

The condition

Workloads are high, control is low, roles are ambiguous, and organisational change is constant.

The tension

Chronic work-created strain is misdiagnosed as an individual “resilience” problem and handed off to mindfulness apps or an EAP.

The intervention

Redesign the structural working and staffing conditions that generate the hazard at its source. Leaders actively identify, assess and control psychosocial hazards.

The observable change

Leaders treat work-created strain as an operational risk to manage, actively interrupting bullying, isolation and harmful behaviours.

The consequence

The organisation shifts from reactive burnout management to audit-ready, compliant work environments.

SourceSafe Work Australia →

Obligation 02 · Accountability

Accountable Conduct & Diligence

Financial Accountability Regime Act 2023 (Cth), s 21.

The condition

Accountable persons face highly complex, ambiguous commercial pressures where interests and incentives collide.

The tension

Relying on “reasonable steps” as a legal defence when those steps are treated as a paperwork trail rather than active enquiry.

The intervention

Build the capacity to pause, notice and question systemic anomalies under pressure, and actively escalate concerns.

The observable change

Executives visibly record, challenge and follow through on non-financial risks in real decisions.

The consequence

Personal regulatory exposure is minimised through a defensible, behavioural demonstration of due skill, care and diligence.

SourceAPRA / ASIC →

Obligation 03 · Risk culture

Risk Culture & Dissent

APRA Prudential Standard CPS 220 Risk Management.

The condition

The board is required to form an honest view of the institution’s actual risk culture and enforce desirable changes.

The tension

Board reporting is filtered and sanitised as it moves up the hierarchy, blinding directors to ground-level realities.

The intervention

Foster psychological safety and safe dissent below, establishing active channels that bypass hierarchical filters.

The observable change

Ground-level leaders openly discuss, surface and escalate material risks before they become post-consequence events.

The consequence

The board receives accurate, unvarnished risk signals, satisfying the CPS 220 mandate through observable behaviours.

SourceAPRA →

Obligation 04 · Prevention

The Positive Duty of Prevention

Sex Discrimination Act 1984 (Cth), s 47C(1) – Respect@Work.

The condition

Employers and PCBUs must take reasonable and proportionate measures to eliminate sex discrimination, sexual harassment and hostile work environments before they occur.

The tension

Organisations rely on reactive complaint-handling and harassment policies rather than preventative, systemic leadership.

The intervention

Develop leaders who can actively recognise, model and safely interrupt specified unlawful behaviours.

The observable change

A measurable shift from “checking the policy box” to active, safe bystander intervention and healthy workplace relationships.

The consequence

Measurable prevention of non-financial risk, building a defensible environment that satisfies statutory enforcement powers.

SourceAHRC →

Obligation 05 · Gender equality

Gender Equality & Operational Conditions

Workplace Gender Equality Amendment (Setting Gender Equality Targets) Act 2025.

The condition

Large employers must commit to and report progress against legislated gender-equality targets – pay equity, composition, flexible work.

The tension

Treating targets as an HR metric to report, while leaving the toxic or inflexible conditions women actually lead in unchanged.

The intervention

Address the structural and somatic conditions that drive executive attrition, particularly for female leaders.

The observable change

Diverse leadership cohorts stay, thrive and actively shape the systems they share.

The consequence

Natural alignment with targets, moving beyond reporting compliance to true succession resilience.

SourceWGEA →

Obligation 06 · Operational risk

Operational Risk & Speak-Up Capability

APRA Prudential Standard CPS 230 Operational Risk Management.

The condition

Operational risk incidents, near misses and critical control failures must be identified, escalated and remediated in a timely manner.

The tension

Compliance is treated as an administrative template, while people ignore or hide near misses out of fear or apathy.

The intervention

Cultivate active speak-up capability where critical dissent and operational warnings are met with curiosity instead of blame.

The observable change

Ground-level operational risks and near misses are surfaced early, before capital or reputation is deployed.

The consequence

Continuous, audit-ready operational resilience with clear executive ownership and tested controls.

SourceAPRA →

The HBA intervention

We develop the human capabilities these obligations depend on.

Homebridge Alliance builds professional learning around the exact behaviours regulators keep naming: recognising when a routine decision has become an ethical or conduct decision, raising and receiving concerns, and distinguishing individual strain from work-created risk. Our immersive programmes are mapped in full to these legislative obligations and designed to CPD standards.