Proactive business risk management, distinct from the immediacy of finite crisis management, holds the potential for the most substantive and lasting changes to future company operations. Before COVID-19, when asked about top risks, executives would most often respond reflexively about regulatory oversight and economic conditions. If pressed further, many leaders quietly acknowledged concerns about the readiness of enterprise-wide risk programs to credibly identify, assess, and manage risk, particularly strategic risk.