--- title: "Financial Risks in SMEs: How Management & Board Steer" description: "Pragmatic risk management for SMEs: how management and board identify, assess and control financial risks." lang: en json-ld: | [ { "@context": "https://schema.org", "@type": "ProfessionalService", "@id": "https://sokura.ch/#organization", "name": "SOKURA", "legalName": "SOKURA GmbH", "alternateName": "SOKURA GmbH", "url": "https://sokura.ch", "logo": "https://sokura.ch/assets/sokura-logo-dark-BcnQC3sZ.png", "description": "CFO as a Service – Strategische Finanzführung für KMU in der Schweiz", "telephone": "+41797277783", "email": "info@sokura.ch", "address": { "@type": "PostalAddress", "streetAddress": "Grossmattweg 2", "addressLocality": "Udligenswil", "postalCode": "6044", "addressRegion": "Luzern", "addressCountry": "CH" }, "geo": { "@type": "GeoCoordinates", "latitude": 47.0756, "longitude": 8.3686 }, "founder": { "@type": "Person", "@id": "https://sokura.ch/#founder", "name": "Sonja Kündig", "jobTitle": "Gründerin & CFO-Partnerin", "url": "https://sokura.ch/ueber-uns", "image": "https://sokura.ch/assets/sonja-kuendig.jpg", "sameAs": "https://ch.linkedin.com/in/sonja-kuendig-cfa-caia-96266766" }, "areaServed": [ { "@type": "Country", "name": "Switzerland" }, { "@type": "AdministrativeArea", "name": "Zentralschweiz" } ], "sameAs": [ "https://www.linkedin.com/company/sokura-gmbh/", "https://www.moneyhouse.ch/en/company/sokura-gmbh-20524318541", "https://ch.linkedin.com/in/sonja-kuendig-cfa-caia-96266766" ], "parentOrganization": { "@type": "Organization", "name": "Transformery", "url": "https://transformery.ch", "description": "Digital transformation & strategic consulting" } }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://sokura.ch/#website", "name": "SOKURA", "alternateName": "SOKURA GmbH", "legalName": "SOKURA GmbH", "url": "https://sokura.ch/", "description": "CFO as a Service für KMU in der Schweiz", "publisher": { "@id": "https://sokura.ch/#organization" }, "inLanguage": "en" }, { "@context": "https://schema.org", "@type": "Article", "@id": "https://sokura.ch/en/insights/finanzrisiken-kmu-verwaltungsrat#webpage", "url": "https://sokura.ch/en/insights/finanzrisiken-kmu-verwaltungsrat", "name": "Financial Risks in SMEs: How Management & Board Steer", "description": "Pragmatic risk management for SMEs: how management and board identify, assess and control financial risks.", "inLanguage": "en", "isPartOf": { "@id": "https://sokura.ch/#website" }, "about": { "@id": "https://sokura.ch/#organization" }, "datePublished": "2026-03-26" }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://sokura.ch/en" }, { "@type": "ListItem", "position": 2, "name": "Insights", "item": "https://sokura.ch/en/insights" }, { "@type": "ListItem", "position": 3, "name": "finanzrisiken-kmu-verwaltungsrat" } ] }, { "@context": "https://schema.org", "@type": "Article", "headline": "Financial Risks in SMEs: How Management and the Board Identify, Assess, and Control Risks", "description": "Pragmatic risk management for SMEs: how management and board identify, assess and control financial risks.", "author": { "@type": "Organization", "name": "SOKURA", "url": "https://sokura.ch" }, "publisher": { "@type": "Organization", "name": "SOKURA", "url": "https://sokura.ch", "logo": { "@type": "ImageObject", "url": "https://sokura.ch/assets/sokura-logo-dark-BcnQC3sZ.png" } }, "datePublished": "2026-03-26", "dateModified": "2026-03-26", "mainEntityOfPage": "https://sokura.ch/en/insights/finanzrisiken-kmu-verwaltungsrat", "image": "https://sokura.ch/assets/pexels-teamwork-BSPJfdEt.jpg", "inLanguage": "en" }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "Is risk management legally required for SMEs?", "acceptedAnswer": { "@type": "Answer", "text": "The board has an oversight duty under CO Art. 716a that includes risk monitoring. The form isn't prescribed – but the obligation exists." } }, { "@type": "Question", "name": "How much effort does a risk register require?", "acceptedAnswer": { "@type": "Answer", "text": "For an SME, a simple table with 10–15 risks suffices. Initial effort is 2–4 hours; quarterly updates take 30–60 minutes." } }, { "@type": "Question", "name": "Who creates the risk register?", "acceptedAnswer": { "@type": "Answer", "text": "Ideally the CFO in coordination with management. Without a CFO, a board member or external adviser can support." } }, { "@type": "Question", "name": "Which risks are most relevant for SMEs?", "acceptedAnswer": { "@type": "Answer", "text": "Liquidity, concentration risks (customers/suppliers), key-person dependency, and compliance risks typically rank highest." } }, { "@type": "Question", "name": "Is an annual risk assessment sufficient?", "acceptedAnswer": { "@type": "Answer", "text": "As a minimum, yes. Better is quarterly register updates with an annual comprehensive assessment." } } ] } ] --- [![SOKURA](/assets/sokura-logo-dark-BcnQC3sZ.png)](/en/) [Services](/en/leistungen)[CFO as a Service](/en/cfo-as-a-service)[About](/en/ueber-uns)[FAQ](/en/faq)[Contact](/en/kontakt) DEEN [Book a consultation](/en/kontakt) DEEN [All Insights](/en/insights) SOKURA · 26 March 2026 # Financial Risks in SMEs: How Management and the Board Identify, Assess, and Control Risks ## Key Takeaways - Risk management needn't be complex – but it must exist. - A simple risk register with a traffic-light system suffices for most SMEs. - The board has a legal obligation to oversee risk (Swiss Code of Obligations Art. 716a). - Financial risks are often interwoven with operational and strategic risks. Risk management sounds like a corporate affair. ISO standards, risk officers, and multi-page policies. For an SME with 50 or 100 employees, it feels oversized – and so often nothing is done at all. This is problematic. Under Swiss law (Code of Obligations Art. 716a), the board has a non-delegable duty of oversight – including risk monitoring. This article shows how SMEs can build pragmatic, lean risk management. Structured risk reporting is part of our [overview of all CFO services](/en/leistungen) and a typical use case for our [CFO as a Service model](/en/cfo-as-a-service). ## Typical Financial Risks in SMEs The key risk categories: - **Liquidity risk:** Insolvency despite a profitable business (most common risk) - **Concentration risk:** Dependency on few major customers or suppliers - **Currency risk:** With import/export or international invoicing - **Interest rate risk:** With variable-rate loans or upcoming refinancing - **Credit risk:** Customer payment default - **Compliance risk:** VAT, taxes, regulatory requirements - **Succession risk:** Key-person dependency in the finance function ## The Risk Register: Simple and Effective A pragmatic risk register for SMEs contains for each identified risk: - **Description:** What exactly is the risk? - **Probability:** High / Medium / Low - **Impact:** High / Medium / Low - **Risk rating:** Combination (traffic light: red/amber/green) - **Measures:** What is being done to mitigate? - **Responsible:** Who monitors? - **Status:** Open / In progress / Controlled This register is updated quarterly and presented to the board. Format: a single page or table. ## Risk Management as a Board Topic The board doesn't need to manage risks themselves – but must ensure they are managed. Concretely: - Quarterly risk reporting by management or CFO - Annual comprehensive risk assessment - Clear escalation mechanisms for new or changed risks - Documentation in board minutes In practice, we at SOKURA see that many boards in Central Switzerland take this duty seriously – but often lack the tools to implement it efficiently. ## Practical Example: Identifying and Managing Concentration Risk A services company in the Lucerne region with 80 employees generated 42% of its revenue from a single customer. This was known – but never formally addressed as a risk. Within a CFO mandate, the concentration risk was quantified: losing the customer would make liquidity critical within 6 months. Measures: active diversification of the customer base, contractual safeguards with longer terms, and a liquidity buffer as emergency reserve. Result after 18 months: major customer share reduced to 28%, emergency reserve established, board regularly informed. ## From Obligation to Leadership Instrument Risk management needn't be a burden. Properly implemented, it becomes a leadership instrument: - It forces structured engagement with uncertainties - It creates transparency between management and board - It enables proactive rather than reactive action - It strengthens credibility with banks and investors ## Quick Check - Does a formal risk register exist in your company? - Is the board regularly informed about material risks? - Do you know your top 3 financial risks? - Are defined measures in place for each identified risk? - Is the risk assessment updated at least annually? - Are responsibilities for risk management clearly assigned? ## Frequently Asked Questions Is risk management legally required for SMEs? The board has an oversight duty under CO Art. 716a that includes risk monitoring. The form isn't prescribed – but the obligation exists. How much effort does a risk register require? For an SME, a simple table with 10–15 risks suffices. Initial effort is 2–4 hours; quarterly updates take 30–60 minutes. Who creates the risk register? Ideally the CFO in coordination with management. Without a CFO, a board member or external adviser can support. Which risks are most relevant for SMEs? Liquidity, concentration risks (customers/suppliers), key-person dependency, and compliance risks typically rank highest. Is an annual risk assessment sufficient? As a minimum, yes. Better is quarterly register updates with an annual comprehensive assessment. ## Next Step Want to introduce pragmatic risk management or improve your existing system? We help you set up a lean, board-ready framework. [info@sokura.ch](mailto:info@sokura.ch) [+41 79 727 77 83](tel:+41797277783) ### Related Pages [CFO as a Service](/en/cfo-as-a-service)[Reporting for Management & Board](/en/insights/reporting-verwaltungsrat-management-kpi)[Contact](/en/kontakt) ### More Insights [ #### Reporting That Works: How SMEs Prepare Numbers So Management and Board Can Decide ](/en/insights/reporting-verwaltungsrat-management-kpi)[ #### Controlling Without Overhead: A Pragmatic System for SMEs (30–200 Employees) ](/en/insights/controlling-ohne-overhead-kmu-system)[ #### CFO as a Service: When Does an External CFO Truly Pay Off? ](/en/insights/cfo-as-a-service-externer-cfo-kmu) ![SOKURA](/assets/sokura-logo-white-DSlbO__T.png) Strategic financial leadership for growing SMEs. CFO as a Service – on-site and remote. Navigation [Services](/en/leistungen)[CFO as a Service](/en/cfo-as-a-service)[For SMEs & Startups](/en/kmu-startups)[About](/en/ueber-uns)[FAQ](/en/faq) Contact [info@sokura.ch](mailto:info@sokura.ch) [+41 79 727 77 83](tel:+41797277783) [LinkedIn](https://www.linkedin.com/company/sokura-gmbh/) Legal [Privacy Policy](/en/datenschutz)[Legal Notice](/en/impressum)[Insights](/en/insights) © 2026 SOKURA GmbH. All rights reserved.[DE](/insights/finanzrisiken-kmu-verwaltungsrat) Lucerne · Central Switzerland · Switzerland