Worrying About the Wrong Things: How a Builder Found Its Real Risks
Mid-Market Construction Firm
At a Glance
The company was in the middle of a strategic pivot. What had started as a family business was growing into a major regional player, taking on larger projects, more subcontractors, and greater regulatory scrutiny. But the compliance infrastructure had not kept pace. There was no formal enterprise risk management plan, no documented risk register, and no systematic way to understand which threats mattered most.
Leadership operated on instinct and anxiety. They worried about everything and prioritized nothing. Data privacy dominated boardroom conversations because it dominated the news cycle, but nobody had actually assessed whether it was the most material risk to a construction company with hundreds of subcontractors working on active job sites.
Ethico's Risk Assessment tool provided the guided framework the company lacked. The assessment walked leadership through structured categories: safety, regulatory, financial, reputational, operational, and third-party risk. Each category included prompts designed to surface the specific vulnerabilities relevant to their industry and operating model.
The process was collaborative. Department heads contributed their perspectives, and the tool aggregated responses into a weighted risk map that reflected the collective intelligence of the leadership team rather than the opinions of any single executive.
The assessment delivered a finding that surprised everyone: subcontractor safety was the firm's number one existential threat, far outranking data privacy, which had dominated recent board discussions. The data showed that the company's rapid growth had outpaced its ability to vet and monitor subcontractor safety practices, creating a liability exposure that could threaten the entire business.
Armed with this clarity, leadership took immediate action. Insurance coverage was restructured to reflect the actual risk profile. A subcontractor safety vetting program was established as a condition of new contracts. And the board redirected compliance spending from a planned privacy initiative to safety infrastructure.
Read the full case study
See exactly how this organization solved the challenge — enter your work email for instant access.
No spam. No sales calls. Just the case study.