In the business world, "risk" is often treated as a four-letter word. Our natural instinct is to avoid the unknown, build stronger walls and seek out guarantees. But what if avoiding risk is actually the most dangerous thing an organisation can do?
To understand why, we have to look back to 1921, when an economist named Frank Knight established a golden rule that still anchors modern risk management: the difference between "Risk" and "Uncertainty". We often use these words interchangeably, but in practice, they are entirely different beasts.
The illusion of measurement: what is Risk?
Measurable risk exists when you don't know the exact outcome of a situation, but you do know the underlying probability distribution.
Imagine a telecommunications company debating whether to invest 500 million shillings to lay fibre optic cable in a newly developing county. Because they have laid fibre in 40 other counties over the past decade, they have rich historical data on construction costs, weather delays and permitting issues. Actuaries and analysts can put a precise price tag on those threats and build them into the project's budget. That is a Risk. It is a known quantity.
The black box: what is Uncertainty?
Uncertainty, on the other hand, exists when neither the outcome nor the probabilities are known.
Imagine a successful commercial bakery that decides to invest heavily in a completely new, untested AI technology to automate its entire supply chain. There is no historical precedent for this specific technology in their market. The probability distribution is a complete black box. You cannot plug it into a spreadsheet.