Newsletter
01.08.2026
AYR’s Ten Principles for Legal Risk Management
About Related practices

The role of in-house legal counsel has evolved significantly in recent years.

Once regarded primarily as the organisation’s gatekeeper, in-house legal counsel now serves as a partner in business decision-making, manages legal and regulatory exposure, and plays a central role in risk management alongside senior management and the board of directors.

The following ten principles address the key challenges of legal risk management faced by in-house legal counsel.

1. Build Your Crisis Management Team Before a Crisis Occurs

Crises rarely emerge out of nowhere, but they can escalate within hours. It is therefore essential to establish, well in advance, who will manage an exceptional event and what each person’s responsibilities will be. In most organisations, the crisis management team will include the CEO, General Counsel, CFO, Head of Human Resources and Head of Communications or spokesperson.

Build your crisis management team during business as usual – not in the midst of a crisis.

2. Appoint External Legal Counsel Before a Crisis Arises

When a crisis strikes, there is no time to conduct a selection process. Organisations should identify an experienced law firm in advance, one that can step in immediately, provide legal guidance, lead an internal investigation where necessary and help preserve legal professional privilege.

Choose your crisis counsel before you face a crisis.

3. Not Every Failure Is Criminal – But the Wrong Response Can Turn It into a Criminal Matter

Many incidents begin as management, regulatory or operational failures. In numerous cases, criminal exposure arises not from the original incident itself, but from the organisation’s subsequent conduct – concealing information, obstructing processes or responding inappropriately.

The incident is a test. The response is what comes under scrutiny.

4. Do Not Try to Fix the Narrative – Fix the Process

The temptation to explain, justify or rewrite the sequence of events can be considerable. However, the appropriate approach is to manage the process professionally: pause, investigate, document, seek advice and draw lessons.

Do not fix the narrative – fix the process.

5. Risk Management Begins Long Before a Warning Letter Arrives

Legal counsel who becomes involved only after a problem has emerged is already engaged in firefighting. The real value of in-house legal counsel lies in identifying risks early and being involved at critical decision-making stages.

The earlier you become involved, the more you can manage – and the less you will need to fix.

6. Build Trust, Not Just Authority

Legal counsel who is perceived solely as someone whose role is to say “no” risks being excluded from important decisions. Effective business partnership is built on trust, accessibility and an understanding of the organisation’s needs.

If you are not at the decision-making table, you are not truly managing risk.

7. Documentation Is a Management Tool – Not an Insurance Policy

Proper documentation helps demonstrate a structured decision-making process. However, excessive documentation, or documentation that is not managed appropriately, may create unnecessary exposure.

The question is not whether to document – but how, why and for whom.

8. Always Consider Who May Review Your Decision in Hindsight

A regulator, court or audit committee will examine not only what was decided, but also how the decision was reached.

Make decisions as though you may have to explain them tomorrow.

9. Risk Management Is a Team Effort

In-house legal counsel does not manage risk alone. Success depends on collaboration with senior management, finance, human resources, communications, information security and the organisation’s business units.

Risk management is not a department – it is an organisational culture.

10. Legal Counsel Is Measured Not Only by the Crises Managed, but Also by Those Prevented

Success is not measured solely by winning legal proceedings, but also by the risks that were effectively managed before they materialised.

The greatest value of in-house legal counsel lies in preventing risks, not merely managing their consequences.


Remember: The success of in-house legal counsel is measured not only by how effectively crises are managed, but, more importantly, by how many crises are prevented in the first place.