CSR Strategy & Leadership

Chapter 13
Business Value, Risk and Crisis Leadership

Diploma in CSR and Corporate Ethics
CSR Strategy & Leadership   •   Diploma

Business Value, Risk and Crisis Leadership

Introduction

Corporate social responsibility (CSR) is often discussed as a matter of compliance, philanthropy or public image. In strategic management, however, CSR is more usefully understood as the disciplined management of a company’s impacts, relationships and responsibilities in ways that can protect and create long-term value. Decisions about labour standards, climate change, product safety, human rights, data protection and community relationships can influence revenue, costs, reputation, employee commitment, access to finance and organisational resilience.

The connection between CSR and business value is neither automatic nor always positive. A poorly designed initiative may waste resources, create stakeholder suspicion or expose the organisation to accusations of greenwashing. Conversely, a credible CSR strategy can identify emerging risks, stimulate innovation and strengthen the organisation’s capacity to respond when events go wrong.

This chapter examines how CSR contributes to business value, how it can be integrated into enterprise risk management, and how leaders should respond ethically and strategically to controversies and crises.

Learning Objectives

By the end of this chapter, you should be able to:

  • explain the links between CSR and reputation, innovation, employee engagement, access to capital and long-term value;
  • construct a practical business case for CSR investment;
  • identify and assess social, environmental and ethical risks within enterprise risk management;
  • distinguish routine issues, incidents and crises;
  • apply ethical principles to crisis leadership and stakeholder communication;
  • evaluate the limitations of CSR metrics and claims; and
  • recommend governance and leadership practices that build resilience and trust.

1. From Corporate Responsibility to Business Value

1.1 Stakeholder value and the value-creation chain

The stakeholder perspective argues that a company depends on several groups, including investors, employees, customers, suppliers, regulators, communities and the natural environment. These stakeholders provide resources or legitimacy and can also impose costs when trust is lost. CSR creates value when responsible conduct improves the quality, reliability or durability of these relationships.

A useful value-creation chain is:

CSR policy → organisational capability → stakeholder response → operational or financial outcome → long-term value

For example, a responsible sourcing programme may require supplier audits and training. These activities can improve traceability and supplier capability. The resulting reduction in labour violations and supply interruptions may protect customer trust, reduce disruption costs and support stable revenue.

The chain is contingent, not mechanical. Outcomes depend on implementation quality, industry conditions, stakeholder perceptions and whether the organisation’s claims are credible. A sustainability report alone does not create value; changed practices and reliable evidence are required.

1.2 Reputation and legitimacy

Reputation is the accumulated judgement stakeholders make about an organisation’s character, competence and reliability. Legitimacy is the broader perception that the organisation’s activities are appropriate within social norms and expectations. CSR can strengthen both by demonstrating that the organisation accepts responsibilities beyond minimum legal compliance.

Reputation has several business effects:

  • customers may prefer, recommend or remain loyal to the organisation;
  • regulators and communities may grant greater benefit of the doubt;
  • employees may identify more strongly with the employer; and
  • partners may regard the organisation as a lower-risk counterparty.

Reputation is also fragile because stakeholders compare claims with behaviour. The reputational penalty for a failure is often greater when an organisation has made prominent ethical claims. This is sometimes called the credibility gap: the difference between communicated responsibility and observed conduct.

Reputation should therefore be treated as an outcome of consistent decisions, not as a communications asset that can be manufactured after an incident.

1.3 Innovation and operational improvement

CSR can support innovation in at least four ways:

  1. Constraint-led innovation: Environmental limits or human-rights requirements encourage new materials, processes and business models.
  2. Customer insight: Social needs can reveal underserved markets, such as affordable energy, accessible products or inclusive financial services.
  3. Efficiency innovation: Energy, water, waste and packaging programmes can reduce resource use and operating costs.
  4. Collaborative innovation: Partnerships with communities, universities, suppliers and civil-society organisations can provide knowledge unavailable inside the firm.

Responsible innovation differs from innovation that merely increases sales. It asks whether a product is safe, inclusive, explainable, accessible and compatible with long-term societal interests. For example, an AI-based lending product may be commercially innovative but socially harmful if its training data reproduce discrimination.

1.4 Employee engagement and human capital

Employees evaluate not only pay and career prospects but also whether their employer behaves consistently with stated values. A credible CSR strategy can improve attraction, retention, discretionary effort and pride. It may also encourage employees to report concerns before they become major incidents.

However, engagement cannot be purchased through slogans. Employees are likely to react negatively when public commitments conflict with excessive workloads, unsafe conditions, discrimination or retaliation against whistle-blowers. Internal justice, voice and fair treatment are therefore central elements of CSR.

Managers should distinguish between:

  • satisfaction, which concerns how employees feel about their jobs;
  • engagement, which concerns commitment and willingness to contribute; and
  • ethical culture, which concerns the norms and systems that shape conduct.

These concepts overlap but are not identical. A highly engaged workforce can still be directed toward unethical goals if incentives and leadership signals are distorted.

1.5 Access to capital and financing conditions

Lenders and investors increasingly consider environmental, social and governance (ESG) information because it may affect cash flows, asset values, legal exposure and the probability of default. Responsible practices can improve access to capital by reducing perceived risk, broadening the investor base or satisfying the conditions of sustainability-linked finance.

The relationship is not universal. ESG ratings may disagree, disclosure may be incomplete, and some investors prioritise short-term returns. Companies should not claim that CSR automatically lowers their cost of capital. The more defensible proposition is that material, well-governed CSR information can improve investors’ assessment of risk and opportunity.

1.6 Long-term value and resilience

Long-term value includes financial returns as well as the preservation of capabilities, relationships and ecological systems on which future returns depend. A narrow quarterly measure may classify worker training, supplier development or emissions reduction as costs even when these investments reduce future disruption.

Resilience is the capacity to anticipate, absorb, recover from and adapt to adverse events. CSR contributes to resilience by encouraging:

  • stronger stakeholder relationships;
  • diversified and transparent supply chains;
  • employee voice and psychological safety;
  • attention to vulnerable groups;
  • scenario planning; and
  • learning after incidents.

2. Building a Business Case for CSR

A business case connects a proposed CSR initiative to organisational objectives, resources, risks, benefits and decision rights. It should not exaggerate benefits or hide ethical obligations behind financial language. Some actions are required because they protect rights or comply with law even when their direct financial return is uncertain.

2.1 Components of a credible business case

A professional proposal normally includes:

  1. Problem definition: What harm, exposure, inefficiency or opportunity is being addressed?
  2. Material stakeholders: Who is affected, and whose interests may be overlooked?
  3. Strategic alignment: Which corporate, functional or sustainability objectives are supported?
  4. Options: What alternative interventions, including doing nothing, are available?
  5. Resources and costs: What investment, capability and management attention are required?
  6. Benefits: What financial, operational, social and environmental outcomes are expected?
  7. Risks and assumptions: What could prevent the benefits from occurring?
  8. Measures and accountability: Who owns delivery, and how will outcomes be verified?
  9. Time horizon: When will costs and benefits arise?

2.2 Financial appraisal and non-financial value

Where benefits and costs can reasonably be estimated, managers may use a simple return-on-investment measure:

ROI = (Net benefits − Investment cost) ÷ Investment cost × 100%

ROI is a ratio, so benefits and costs must be measured on a consistent basis and over a stated period. It is most useful for comparing alternatives with similar risk and timing. It does not capture all social value and can be misleading when benefits occur over many years.

For projects with different timing, discounted cash-flow analysis may be more appropriate:

NPV = ∑[t=0 to n] CFt ÷ (1 + r)t

Here, CFt is the net cash flow in period t, r is the discount rate expressed per period, and n is the number of periods. NPV assumes cash flows can be estimated and that the discount rate reasonably represents the opportunity cost and risk. A positive NPV indicates that the project’s discounted financial cash flows exceed the initial investment, but it does not prove that the project is ethically acceptable.

A balanced business case combines financial measures with indicators such as injury reduction, living-wage coverage, emissions avoided, supplier capability, employee retention, accessibility and community outcomes. These indicators should be linked to a theory of change rather than collected simply because they are easy to count.

Worked Example: Responsible Fleet Transition

An organisation invests $200,000 in cleaner delivery vehicles. It expects annual operating savings of $70,000 for four years and no residual value. Ignoring tax and discounting for a simple appraisal, total benefits are $280,000 and net benefits are $80,000.

ROI = ($280,000 − $200,000) ÷ $200,000 × 100% = 40%

The simple payback period is:

Payback period = Investment cost ÷ Annual cash saving
= $200,000 ÷ $70,000 ≈ 2.86 years

This calculation excludes maintenance uncertainty, financing cost, vehicle life beyond four years and environmental benefits. It is therefore an initial decision aid, not a complete investment analysis.

3. Integrating CSR into Enterprise Risk Management

3.1 What is enterprise risk management?

Enterprise risk management (ERM) is an organisation-wide approach to identifying, assessing, responding to and monitoring uncertainties that may affect objectives. Traditional risk registers often focus on financial, operational, legal and safety risks. A mature CSR approach extends this view to social, environmental, ethical and human-rights risks.

CSR risks may be:

  • direct, such as unsafe working conditions in an organisation’s own facility;
  • indirect, such as forced labour in a supplier’s subcontractor;
  • cumulative, such as repeated local pollution; or
  • systemic, such as climate-related disruption across an industry.

Risk management should not imply that all harms can be reduced to a probability multiplied by a monetary impact. A severe human-rights violation may be unacceptable even if its probability is judged low.

3.2 Risk identification and materiality

Risk identification can use stakeholder interviews, worker grievance data, audits, incident records, regulatory scanning, life-cycle assessment, scenario analysis and supply-chain mapping. A double-materiality perspective asks two questions:

  • How might a sustainability issue affect the organisation’s enterprise value?
  • How does the organisation affect people, society and the environment?

The first is often called financial materiality; the second is impact materiality. Both are relevant to responsible decision-making.

A practical risk statement should identify the cause, event and consequence. For example:

Because supplier recruitment agents charge undocumented fees, migrant workers may incur debt bondage, causing human-rights harm, legal exposure, production interruption and loss of customer trust.

This format is more useful than writing simply “supplier ethics risk.”

3.3 Assessment and prioritisation

A basic risk score may be expressed as:

Risk score = Likelihood × Impact

Likelihood and impact must be defined through an approved scale, such as 1 to 5. The score is an ordinal prioritisation tool, not a precise probability of loss. It should not be compared across risk categories unless the scales have been designed consistently.

For risks with credible monetary estimates, expected loss can be calculated as:

Expected loss = Probability of event × Financial impact if event occurs

For example, if a disruption has an estimated probability of 10% and a potential cost of $500,000, expected loss is $50,000. This does not mean that the organisation will lose exactly $50,000; it is a long-run average under the stated assumptions. It also excludes moral, legal and distributional considerations that may make prevention necessary even when expected loss is modest.

Risk assessment should consider severity, duration, reversibility, affected populations and the organisation’s ability to remedy harm. Vulnerable groups deserve particular attention because equal numerical treatment can conceal unequal consequences.

3.4 Risk responses and controls

Common responses include:

  • avoid: discontinue an activity that creates unacceptable harm;
  • reduce: introduce controls, training, redesign or monitoring;
  • transfer or share: use insurance, contractual allocation or partnerships, while recognising that responsibility cannot simply be outsourced;
  • accept: tolerate the residual risk within approved boundaries; and
  • remediate: provide remedy when harm has occurred.

Controls may be preventive, detective or corrective. Supplier contractual clauses are preventive only if supported by purchasing practices, worker voice, verification and consequences for non-compliance. An audit that detects violations but does not lead to remedy is an incomplete control system.

3.5 Governance and the three lines model

An effective governance arrangement allocates responsibility across:

  1. Operational management: owns risks and implements controls.
  2. Risk, compliance and sustainability functions: provide methods, expertise, challenge and consolidated reporting.
  3. Internal audit: independently evaluates governance and control effectiveness.

The board or an appropriate committee sets expectations, approves risk appetite, monitors material issues and ensures that incentives do not reward harmful conduct. The chief executive and senior leaders translate these expectations into strategy, investment and behaviour.

Risk appetite should include explicit boundaries. For example, an organisation may tolerate moderate volatility in energy prices but have zero tolerance for retaliation against workers who report abuse. “Zero tolerance” should refer to the prohibited conduct, not to the unrealistic expectation that no incident will ever occur.

4. Ethical Crisis Leadership

4.1 Issues, incidents and crises

An issue is an emerging concern that may affect stakeholders or organisational objectives. An incident is a specific event requiring management action. A crisis is a high-impact situation that threatens people, essential operations, legitimacy or strategic continuity and exceeds normal procedures.

A crisis may begin with a technical failure but become an ethical crisis when leaders conceal information, shift blame, discriminate in compensation or place reputation above safety. Crisis leadership therefore involves both operational competence and moral judgement.

4.2 Ethical principles for response

A responsible crisis response should be guided by:

  • protection of life and safety: prevent further harm before protecting image or revenue;
  • truthfulness: communicate verified facts and correct errors promptly;
  • accountability: identify decision rights and accept responsibility rather than scapegoating;
  • fairness: consider the distribution of harm and provide equitable remedy;
  • respect: treat victims, workers, communities and critics as persons, not public-relations obstacles;
  • transparency: disclose material information while protecting privacy and legitimate security interests; and
  • learning: investigate root causes and change systems, not merely punish an individual.

Stakeholder communication should state what is known, unknown and being done. It should avoid speculation, legalistic evasion and exaggerated promises. An apology is meaningful when accompanied by action, remedy and prevention.

4.3 Crisis-response process

A practical sequence is:

  1. Detect and verify: activate reporting channels and establish the facts.
  2. Protect: stop unsafe activity, provide emergency support and secure evidence.
  3. Govern: appoint a crisis leader, clarify authority and maintain a decision log.
  4. Engage: notify affected stakeholders and relevant authorities as required.
  5. Investigate: use independent expertise where conflicts of interest exist.
  6. Remedy: compensate, restore, correct and support affected people.
  7. Disclose: report material findings and limitations honestly.
  8. Learn and reform: revise controls, incentives, training and strategy.

The order may vary according to the event, but protection and containment should not wait for perfect information. Leaders should use a “minimum necessary speculation” principle: communicate promptly with confirmed information and clearly label uncertainty.

5. Illustrative Case: The Riverbend Chemical Spill

This is a fictional illustrative case designed for learning purposes.

Background

Riverbend Components manufactures batteries and markets itself as a responsible supplier to electric-vehicle companies. It publishes an annual sustainability report highlighting water stewardship and community partnerships. Its plant is located upstream from several low-income communities.

Problem

After heavy rainfall, a containment pond fails and contaminated water enters the river. Local residents report illness and loss of fish stocks. Initial internal messages describe the event as a “minor discharge.” A plant manager delays notification because production targets are tied to an annual bonus. Social-media posts from residents attract national attention.

Analysis

The event is simultaneously:

  • an environmental and public-health emergency;
  • a governance failure involving incentives and escalation;
  • a possible regulatory breach;
  • a human-rights issue affecting vulnerable communities; and
  • a reputational crisis intensified by earlier public claims.

The organisation’s risk register included equipment failure but did not include the social consequences of delayed notification. Its supplier and community audits focused on documentation rather than emergency readiness. The bonus system rewarded uninterrupted production without a safety or reporting counterweight.

Approach and solution

The chief executive establishes an independent response team and immediately suspends the relevant process. The company informs regulators, provides safe water and medical support, funds independent testing and opens a community information centre. It publishes what is known and unknown, including uncertainty about the full geographic extent of contamination.

An independent investigation examines engineering design, maintenance, rainfall assumptions, reporting culture and incentive structures. The company pays verified remediation costs and creates a claims process with community representation. It protects employees who reported the event and disciplines managers for suppressing escalation, while avoiding retaliation against good-faith whistle-blowers.

Longer-term reforms include upgraded containment, real-time monitoring, emergency exercises with local authorities, board oversight of high-consequence risks, revised incentives and public progress reporting. The company also reviews whether its marketing claims were adequately supported.

Outcome

In the short term, Riverbend experiences production losses, regulatory scrutiny and customer concern. In the longer term, transparent remediation and structural reform begin to restore trust, although some relationships remain damaged. The case demonstrates that crisis leadership cannot be separated from pre-crisis governance. A culture that rewards output while weakening voice converts a manageable technical risk into a legitimacy crisis.

Learning points

  • Reputation is shaped by conduct and response, not by prior reports alone.
  • Incentives are risk controls: what is rewarded can become more important than what is written in policy.
  • Communities require meaningful participation, not one-way communication.
  • Remedy is an obligation to affected people, not merely a reputational tactic.
  • Independent assurance is valuable where management incentives may distort reporting.

6. Measurement, Assurance and the Risk of Greenwashing

Measurement supports accountability, but indicators can also distort decisions. Organisations may prefer easy-to-count outputs, such as training hours, over difficult outcomes, such as reduced exploitation. A strong measurement system distinguishes:

  • inputs: resources committed;
  • activities: actions completed;
  • outputs: immediate deliverables;
  • outcomes: changes experienced by stakeholders; and
  • impacts: broader long-term effects.

For example, supplier training is an activity; improved worker understanding is an outcome; and reduced forced labour may be an impact.

Claims should be specific, comparable, evidence-based and balanced. Managers should disclose boundaries, methods, assumptions, negative results and restatements. Independent assurance can increase confidence, but assurance quality depends on scope, independence, competence and access to evidence.

Greenwashing and social-washing occur when communication creates an inflated impression of responsibility. Warning signs include vague language, selective reporting, irrelevant achievements, reliance on future promises without milestones and claims that ignore significant harms. Ethical communication requires proportionality between the claim and the evidence.

7. Technology, Data and Emerging Issues

Digital tools can improve CSR risk management through supply-chain traceability, satellite monitoring, worker surveys, predictive maintenance and automated reporting. AI may help identify patterns in complaints or environmental data. Yet technology creates its own responsibilities: privacy, cybersecurity, bias, explainability, data quality and worker surveillance.

A traceability platform does not prove that labour conditions are good; it proves only that certain data were recorded. AI-generated risk scores may reproduce historical discrimination or incorrectly classify small suppliers. Human oversight, data minimisation, access controls, testing and appeal mechanisms are therefore essential.

Contemporary developments also include climate transition risk, nature loss, modern-slavery regulation, mandatory sustainability disclosure, responsible artificial intelligence and stronger investor scrutiny of claims. Organisations should monitor legal requirements in every jurisdiction where they operate and avoid treating voluntary initiatives as substitutes for legal compliance or human-rights due diligence.

8. Best-Practice Principles for Managers

A diploma-level practitioner should be able to apply the following principles:

  1. Start with material impacts and stakeholder experience, not publicity opportunities.
  2. Connect CSR objectives to strategy, budgets, incentives and operational ownership.
  3. Use both financial and non-financial evidence in investment decisions.
  4. Map risks across the full value chain, including outsourced and informal activities.
  5. Design worker and community voice into monitoring and remedy systems.
  6. Set risk appetite and escalation thresholds for ethical as well as financial risks.
  7. Test crisis plans through realistic exercises involving external stakeholders.
  8. Communicate early, accurately and respectfully when harm occurs.
  9. Investigate systemic causes rather than relying on individual blame.
  10. Assure important data and disclose limitations.
  11. Treat technology as a control that requires governance, not as proof of responsibility.
  12. Review whether commercial incentives undermine stated values.

Challenges and Limitations

The business value of CSR is difficult to isolate because outcomes are affected by economic conditions, regulation, competitors and managerial quality. Benefits may be delayed, intangible or distributed among stakeholders rather than captured by the company. Financial valuation can also create false precision and may undervalue rights that should not be traded off.

Stakeholder interests may conflict. A rapid factory closure may reduce emissions but harm workers and a local economy. A low-cost product may improve access while creating waste. Ethical leadership requires transparent reasoning, participation and mitigation rather than pretending that every decision produces a universal win.

Finally, CSR cannot compensate for fundamentally harmful business models. Philanthropy, reporting or carbon offsets do not excuse unsafe products, corruption, discrimination or exploitation. The core test is whether the organisation’s strategy and operations respect people and ecological limits while creating sustainable value.

Chapter Summary

CSR contributes to business value through stakeholder trust, innovation, employee commitment, access to capital, operational efficiency and resilience, but these benefits arise only when commitments are credible and embedded in decisions. A business case should identify material problems, compare options, state assumptions, assess costs and benefits, and include social and environmental outcomes alongside financial measures.

Enterprise risk management should incorporate direct, indirect, cumulative and systemic CSR risks. Risk scores and expected-loss calculations can support prioritisation, but they cannot replace ethical judgement, human-rights analysis or attention to vulnerable groups. Governance requires clear ownership, independent challenge, board oversight and incentives consistent with responsible conduct.

Crisis leadership begins with protection of people and truthful communication. Effective responses contain harm, engage affected stakeholders, provide remedy, investigate root causes and reform systems. Reputation is an outcome of conduct rather than a substitute for it. Measurement, assurance and technology can strengthen accountability, but they may also create false confidence unless their assumptions, limitations and impacts are examined.

Key Terms

CSR: Organisational responsibility for impacts on society, the environment and stakeholders.

Stakeholder: A person or group that affects or is affected by an organisation.

Reputation: Stakeholders’ accumulated judgement about an organisation’s character, competence and reliability.

Legitimacy: Perceived social acceptance of an organisation’s activities.

Business case: A structured argument connecting an initiative to objectives, resources, benefits and risks.

ROI: Return on investment; a ratio comparing net benefits with investment cost.

NPV: Net present value; the discounted value of net cash flows over time.

Enterprise risk management: An organisation-wide system for managing uncertainty affecting objectives.

Materiality: The significance of an issue to decisions, enterprise value or affected stakeholders.

Double materiality: Assessment of both an issue’s effect on the organisation and the organisation’s effect on society and the environment.

Risk appetite: The level and type of risk an organisation is willing to accept.

Expected loss: Probability of an event multiplied by its impact, under stated assumptions.

Crisis: A high-impact situation that threatens safety, legitimacy, operations or strategic continuity.

Remedy: Action taken to correct harm and restore affected people as far as possible.

Ethical culture: Shared norms and systems that influence responsible conduct.

Greenwashing: Misleading communication that exaggerates environmental responsibility.

Assurance: Independent evaluation of information, systems or controls.

Resilience: The capacity to anticipate, absorb, recover from and adapt to adversity.

Review Questions

Short Answer Questions

  1. How can CSR influence organisational reputation?
  2. What is the difference between financial materiality and impact materiality?
  3. Define risk appetite and give one CSR-related example.
  4. Why are incentives relevant to CSR risk management?
  5. State three principles of ethical crisis communication.

Long Answer Questions

  1. Explain how CSR can contribute to innovation, employee engagement and long-term value.
  2. Describe the main components of a credible CSR business case.
  3. Explain how CSR risks can be integrated into enterprise risk management.
  4. Discuss the advantages and limitations of using ROI and NPV in CSR investment decisions.
  5. Analyse why remedy and organisational learning are essential after a CSR-related crisis.

Analytical / Application Questions

  1. A company has excellent sustainability reporting but repeated complaints about retaliation against whistle-blowers. Diagnose the governance weaknesses and recommend corrective actions.
  2. A supplier audit identifies recruitment-fee practices affecting migrant workers. Develop a risk statement, prioritisation approach, controls and remedy plan.
  3. A product-safety incident occurs while management has incomplete information. Design the first 48 hours of an ethical crisis response, including stakeholder communication and decision authority.

Multiple Choice Questions with Answers

Question 1

Which statement best describes the relationship between CSR and business value?

A. CSR always produces an immediate increase in profit.

B. CSR creates value automatically whenever a report is published.

C. CSR can create value when responsible practices improve capabilities and stakeholder relationships.

D. CSR has no connection with organisational risk.

Correct Answer: C. CSR can create value when responsible practices improve capabilities and stakeholder relationships.

Question 2

Which item is an example of an outcome rather than an input or activity?

A. Funds allocated to supplier development

B. Number of supplier training sessions

C. Reduction in forced-labour indicators

D. Staff time assigned to an audit

Correct Answer: C. Reduction in forced-labour indicators

Question 3

Using the chapter’s simple ROI formula, an initiative costing $100,000 and producing $130,000 in benefits has an ROI of:

A. 13%

B. 30%

C. 43%

D. 130%

Correct Answer: B. 30%

Question 4

What does double materiality require an organisation to consider?

A. Only the effect of sustainability issues on share price

B. Only legal compliance costs

C. Both the organisation’s impacts and the effects of issues on the organisation

D. Only the views of institutional investors

Correct Answer: C. Both the organisation’s impacts and the effects of issues on the organisation

Question 5

Which risk response involves discontinuing an activity that creates unacceptable harm?

A. Accept

B. Transfer

C. Reduce

D. Avoid

Correct Answer: D. Avoid

Question 6

Why should a risk score based on likelihood multiplied by impact be treated cautiously?

A. It is always a precise probability of loss.

B. It is generally an ordinal prioritisation tool dependent on defined scales.

C. It can only be used for environmental risks.

D. It removes the need for ethical judgement.

Correct Answer: B. It is generally an ordinal prioritisation tool dependent on defined scales.

Question 7

What should normally receive priority at the beginning of an ethical crisis?

A. Protecting the organisation’s brand image

B. Preventing further harm to people and the environment

C. Preparing promotional material

D. Assigning blame publicly

Correct Answer: B. Preventing further harm to people and the environment

Question 8

Which practice is most likely to indicate greenwashing?

A. Disclosing negative results and reporting boundaries

B. Using specific claims supported by evidence

C. Making vague environmental claims while omitting significant harms

D. Publishing independently assured data

Correct Answer: C. Making vague environmental claims while omitting significant harms

Question 9

What is the main purpose of the second line in the three lines model?

A. To own every operational risk directly

B. To provide methods, expertise, monitoring and challenge

C. To replace the board

D. To perform independent external regulation

Correct Answer: B. To provide methods, expertise, monitoring and challenge

Question 10

Why does a digital traceability platform not by itself prove responsible labour conditions?

A. Digital systems cannot store any supply-chain information.

B. Recorded data may be incomplete or inaccurate and do not automatically demonstrate good conditions.

C. Traceability is relevant only to financial reporting.

D. Technology eliminates the need for worker participation.

Correct Answer: B. Recorded data may be incomplete or inaccurate and do not automatically demonstrate good conditions.

CSR Strategy & Leadership
Chapter 13 of 14