Risk has always been about protecting value. Today, it is just as much about enabling it. Chief risk officers are operating in an environment defined by compounding uncertainty, where traditional approaches, built around siloed risk types, static controls, and retrospective reporting are no longer sufficient. What is emerging instead is a new mandate to move from managing risk to building enterprise resilience.

Underlying all of this is a defining question for today’s CRO: Will the risk function be a reactive responder to volatility, or a proactive enabler of resilience and growth? The articles in our latest issue of McKinsey on Risk & Resilience suggest that the answer lies in clarity of mandate, disciplined execution, and the courage to rethink long-standing operating models.

Resilience is no longer a defensive posture. It is a source of competitive advantage—and the CRO is uniquely positioned to lead the way.