What is a Risk Communication Score?

The Risk Communication Score (RCS) rates how clearly a CEO communicates risk to the board on a 0–100 scale across four dimensions: completeness, credibility, actionability, and balance. It does not measure whether the risks themselves are real or correctly assessed. It measures whether the board can read your report and act on it — without needing follow-up clarification from management.

The four dimensions

Each dimension scores 0–25 points. Total possible score: 100.

• Completeness: Are the top five material risks explicitly addressed — including the awkward ones?
• Credibility: Do the ratings line up with the descriptions, or is there a gap between the words and the numbers?
• Actionability: Does each risk have a mitigation plan, a named owner, and an escalation trigger?
• Balance: Are both upside and downside shown — or only the side that supports a recommendation?

How the score breaks down

Each dimension is scored 0–25. The point bands look like this:

Completeness (0–25)

• 21–25: Top five material risks covered — including the awkward ones. No obvious blind spots.
• 16–20: Top five present, but one material risk is downplayed or omitted.
• 11–15: Main risks listed, but several blind spots. The board has to fill in the gaps.
• 0–10: Selective list. The CEO report shows only what supports a recommendation.

Credibility (0–25)

• 21–25: Ratings line up with descriptions. No mismatch between the words and the numbers.
• 16–20: Generally realistic assessment, with one over-optimistic rating.
• 11–15: Ratings are systematically more optimistic than the descriptions warrant.
• 0–10: The board cannot take the ratings at face value. Large gap between the written assessment and the rating.

Actionability (0–25)

• 21–25: Every risk has a mitigation plan, a named owner, an escalation trigger, and clear review timing.
• 16–20: Most risks have a plan, but not all have a named owner or an escalation trigger.
• 11–15: Risks are listed, plans are vague or missing.
• 0–10: Risks are presented as information, not as a basis for decision.

Balance (0–25)

• 21–25: Both upside and downside shown. Risk appetite referenced explicitly for each risk.
• 16–20: Both sides covered, but one side dominates the discussion.
• 11–15: Defensive or optimistic spin — only one side of each risk shown.
• 0–10: Selective storytelling. The board is being managed, not informed.

The four bands

The combined score translates into four bands, so you can see at a glance where you stand:

• Board-Ready (85–100): The material is ready for the meeting. The board can act on it without needing further clarification.
• Solid with Gaps (70–84): The main story is in place, but one or two dimensions are weak. Usually a quick rewrite.
• Needs Work (50–69): The material reads more like a report than a decision document. The board will spend more time clarifying than deciding.
• Not Ready (0–49): The board will likely ask for a rewrite — or form its own view independently of the CEO.

Why this score exists

Boards have always judged CEOs on how risk is communicated. It is rarely made explicit. There is no formal test. The result is that two boards can hold two entirely different views of the same CEO based on the same material.

Board Intelligence's 2024 survey found that 70% of directors rate their own board materials as "weak" or "poor". Risk reporting is rarely the worst section — but it is the section the board remembers.

A 0–100 score creates a more consistent way to assess board material. The goal is consistency across different readers. For an owner-CEO, the value is that you can see your own material through the board's eyes — before the meeting. Most CEOs walk in thinking their report is clear, and are surprised by the volume of questions. The score explains why.

Worked example — from 64 to 87

A typical first assessment for an SME CEO sits between 60 and 75. The most common losses are on credibility (ratings more optimistic than descriptions) and actionability (risks listed without a concrete plan or owner). Fixing just those two dimensions can shift the score by 15–25 points — without changing the underlying risk analysis. The analysis is usually sound. The communication is what breaks down.

Five moves that lift the score

Most CEOs can move the RCS 15–25 points without changing a single risk in the register. The analysis is often sound. The communication is where the score breaks down. Five moves that work:

1. Put the awkward risks back in. If you've left a risk out because it looks bad, put it back. The board sees it anyway. Leaving it out costs you credibility twice — once on the omission, once when it surfaces.
2. Make the ratings match the descriptions. If a risk is described as existential, do not rate it "moderate". Mismatch is the single largest source of lost points.
3. Add a named owner and an escalation trigger to every risk. Not "management" — one named person. Not "we are monitoring" — a specific threshold at which the risk is escalated to the board.
4. Add one line of upside to each risk. What does the positive scenario look like if the contract is won or the customer stays? It shows the board that you've considered both outcomes — and shifts the conversation from defensive to strategic.
5. Define your risk limits. Each risk should be measured against a stated risk appetite — how much loss or volatility the company is willing to accept. If you don't have one written down, that's the first move — before the next board meeting.

What the score does not do

The RCS is not a risk score. It does not tell you how risky the business is. Two CEOs in two different companies can both score 90 — even if one runs a stable business and the other is under serious lender pressure. The point is that both communicate honestly and clearly enough for action. That is what the board can act on.

The honest test

Read your next risk report as if it came from another CEO at another company you don't know. Three questions:

1. What are the top five risks?
2. What is being done about each one, and who owns the plan?
3. What has changed since the last report?

If you can answer all three without reading between the lines, your risk communication is Board-Ready.