Insights
Resilience is not built during a crisis—it is built through the decisions leaders make every day. MRG Insights is a collection of observations, analysis, and practical lessons drawn from decades of experience operating at the intersection of strategy, risk, operations, and leadership.
Our aim is simple: to help organizations think more clearly, act more decisively, and navigate complexity with confidence.
Want a copy of these Insights' articles? Click the button below
Why Siloed Risk Management Fails
Building organizational readiness before local issues become enterprise disruptions
Executive Summary
Localized issues can become enterprise disruptions when non-technical risks are visible but managed in silos. Community, workforce, security, compliance, and stakeholder signals often emerge early, but without a coordinated enterprise view they are underweighted, delayed, or addressed too late.
For executive teams, the priority is not only crisis response. It is control before disruption: identifying weak signals, aligning functions, escalating early, and making disciplined decisions before operational, commercial, or reputational value is at risk.
This article sets out why resilience depends on practical operating capability—clear decision rights, tested response mechanisms, leadership alignment, and organizational learning. It also explains how MRG helps clients strengthen non-technical risk management so they can convert fragmented awareness into readiness, coordinated action, and protected enterprise value.
Key Takeaways
- Localized non-technical risks can escalate quickly into enterprise-level disruption when managed in silos.
- Preparedness depends on a shared view of risk, clear decision rights, early escalation, and tested response mechanisms.
- When crisis catches an organization off guard, objectivity can be lost as attention shifts to blame rather than coordinated action.
- MRG helps executive teams convert fragmented awareness into practical readiness, disciplined response, and protected enterprise value.
Where the Gap Sits: Before the Crisis
In Indonesia’s operating environment, disruption rarely arrives without warning. It usually builds through a sequence of weak signals that are visible before they become urgent:
For example, a local road access dispute may begin as a community concern, but quickly affect workforce attendance, logistics, customer commitments, and management credibility if escalation pathways are unclear.
- Workforce, community, or stakeholder signals are identified but underweighted
- Corporate functions interpret risk through their own lens, without a shared enterprise view
- Plans exist, but are not aligned, tested, or embedded into operating rhythms
As pressure builds, organizations often move quickly into reaction mode. Decisions compress, coordination becomes harder, and leadership attention shifts from strategic priorities to immediate containment.
A second challenge often emerges at the same time: attention turns inward. Teams begin asking who missed what, where accountability sits, and why the system failed. Without disciplined facilitation, this can create defensiveness and finger-pointing precisely when the organization needs objectivity, clear priorities, and coordinated action.
In practice, this may look like parallel investigations, inconsistent internal messaging, delayed decisions, or leaders spending more time reconstructing the failure than stabilizing the situation.
The strategic priority is therefore not only crisis response. It is organizational readiness before issues escalate.
What Executive Teams Need
At this level, risk management requires more than policies, reporting lines, or response procedures. Executive teams need a practical operating capability that helps the organization anticipate, align, and act before disruption takes hold.
- A cross-functional view of emerging operational, stakeholder, and compliance risks
- Shared criteria for assessing likelihood, impact, escalation triggers, and business exposure
- Leadership alignment on ownership, decision rights, and early intervention thresholds
- Confidence that response plans will work under real operational pressure
At its core, this is a leadership, governance, and execution challenge—not a narrow functional risk issue.
How We Support Executive Teams
MRG works alongside existing teams to strengthen how risks are identified, interpreted, escalated, and controlled before disruption occurs.
The role is advisory and enabling: to support management accountability, not replace it. The focus is on helping leadership teams build the clarity, discipline, and confidence to act earlier and coordinate better under pressure.
1. Independent review to identify blind spots
An independent lens helps identify gaps that are difficult to see from within, especially where risk sits between functions, geographies, or levels of management.
The objective is to ensure that weak signals are recognized, prioritized, and addressed before they become material business issues.
Examples include missed handoffs between site teams and corporate functions, informal stakeholder commitments that are not visible to leadership, or early compliance concerns treated as isolated issues rather than broader enterprise exposure.
2. Capability building within the organization
Capability building focuses on the practical mechanisms required to manage frontline and enterprise risk:
- Improving coordination across community, labor, security, operations, compliance, and external affairs
- Embedding usable response frameworks into day-to-day management routines
- Clarifying ownership, accountability, escalation pathways, and decision rights
- Addressing human performance, organizational culture, and learning issues that influence how teams respond under pressure
The aim is to build a system that performs consistently, not a set of plans that work only in isolated situations.
In operational terms, this can mean a site manager knowing when to escalate, a corporate team understanding who owns the decision, and senior leadership receiving a clear view of exposure before positions harden.
3. Leadership decision-making under pressure
Under pressure, leadership teams need to make decisions quickly without losing discipline, objectivity, or alignment. MRG supports that capability directly.
This includes helping leaders:
- Identify early indicators of escalation and determine when intervention is required
- Align quickly across functions before positions become fragmented
- Balance operational continuity, commercial commitments, regulatory exposure, and stakeholder expectations
4. Ongoing assurance and scenario testing
Plans only create value when they work in practice. Ongoing assurance tests whether risk frameworks are effective under real operating conditions, not simply complete on paper.
Structured review and scenario testing give executive teams confidence that the organization is prepared for the conditions it is most likely to face.
A useful scenario test might examine what happens if community access is disrupted during a critical delivery window, if workforce alignment deteriorates during contract execution, or if regulatory scrutiny increases while the organization is already under operational pressure.
Our Perspective
MRG Senior Partners have worked where social, political, security, environmental, regulatory, and cultural factors intersect. In these settings, risk does not sit neatly within one function; it moves across organizational boundaries and requires coordinated leadership response.
Real-world experience brings practical lessons from what has worked—and what has failed—under pressure. Clients benefit from operational judgment, tested frameworks, and insight into human performance, organizational culture, and learning dynamics after complex incidents, without having to learn only through disruption.
MRG bring experience spanning frontline execution, functional management, executive leadership, and board-level governance. This enables a practical understanding of how issues emerge, how they escalate, and how decisions are made at each level of the organization.
The result is practical, executable advice aligned with the realities of operating in complex environments.
The Outcome: Control Before Disruption
Stronger preparedness gives organizations the ability to:
- Identify and prioritize risks before escalation
- Coordinate response across functions with clear ownership and decision rights
- Maintain operational continuity under pressure
- Protect revenue, contracts, stakeholder confidence, and long-term enterprise value
The shift is decisive: from reacting to events to maintaining control of outcomes.
What This Means for the Executive Team
- CEO / Managing Director: Greater confidence in continuity, resilience, and protection of the license to operate
- CFO: Reduced exposure to financial loss, penalties, contract leakage, and credit risk
- COO: More predictable operations, fewer unplanned shutdowns, and stronger execution discipline
- Corporate leadership: Stronger alignment between stakeholder engagement, risk management, operational performance, and commercial priorities
Bottom Line
Non-technical risks become business-critical when community, workforce, stakeholder, regulatory, security, and reputational issues are managed in silos until they converge.
The executive mandate is control before disruption: recognize weak signals, align functions, escalate early, and make disciplined decisions before risk becomes loss.
MRG helps clients build that control by connecting non-technical risk insight to practical readiness, coordinated response, and protected enterprise value.
Mandala Resilience Group
mandalaresilience.com
Your Anchor in a Volatile Landscape
The Compatibility of Risk and Crisis Management
Why risk management and organizational response capability must go hand-in-hand
Executive Summary
“Let our advance worrying become advance thinking and planning.” Winston Churchill’s words still capture what every business — in Indonesia and internationally — needs to build: an integrated crisis management capability, both strategic and tactical, ready to respond to disruptions of any kind, man-made or natural.
Global companies that have weathered long-running crises share one trait: they paired actionable risk management with scalable, well-rehearsed crisis capability. Companies that skip the rehearsal — relying on unexercised plans and untrained teams — often find their response causes more damage than the crisis itself.
Before a crisis strikes, MRG works with clients to answer three questions:
• Are procedures in place to stop an incident from escalating into a crisis?
• Do response plans exist for every dimension of a potential crisis?
• Have those plans been tested to confirm the organization is actually ready?
1. Crisis Management Requires Harmonization
No single department or business unit should own crisis planning in isolation. MRG helps organizations build a unified approach, starting with a clear-eyed inventory of potential crisis triggers:
• Localized risks with the potential to escalate — workforce, community, sociopolitical, security, compliance, and stakeholder issues.
• Recurring risks — crises that have hit the company before, or hit competitors in the same industry, and could happen again.
• Project-specific risks — initiatives likely to draw opposition from stakeholder groups.
Senior leadership endorsement is essential to this process, as is its natural extension: business continuity management. MRG helps translate the non-technical elements of a risk matrix into practical, internal response capability.
2. Silence Costs More Than Statements
Public perception, legal strategy, and crisis communications form the core triad of modern crisis management. When a crisis hits, an organization facing immediate impact on people, environment, and business must navigate the court of law and the court of public opinion at the same time — with crisis communications as the bridge between the two.
Case in point: After a major 2006 mudflow incident in East Java, initial findings pointed to operational error, but subsequent rulings and shifting official positions recast the event as a natural phenomenon, clouding the question of corporate liability. As litigation dragged on for years, the company restructured its assets and accountability lines, and compensation rulings remained unresolved long after they should have been settled.
The company’s public messaging made things worse. Inconsistent definitions of who qualified as “affected” created confusion over payouts. Conflicting statements about state versus corporate funding responsibility triggered public suspicion. Relief fund criteria went poorly communicated, letting social tension build in the silence. The lesson: a crisis is rarely lost on the facts alone — it is lost in the telling. A legal win can still end in bankruptcy if public trust is destroyed; over-communicating to appease the public can just as easily create massive legal exposure.
I. The Core Tensions and How to Defuse Them
• Legal strategy vs. public trust — Legal counsel often advises minimal comment and sterilized language; the public reads silence as guilt. A legally vetted media kit, with standby and holding statements prepared in advance, lets organizations respond accurately and fast.
• Speed vs. accuracy — The public expects transparency within minutes; verified facts take time to gather. Misstating something early can undermine a legal defense later; waiting too long allows rumor define the narrative. Legal and communications teams must coordinate closely on every public product.
• The “admission” trap — Lawyers worry an apology will be used as an admission of fault in court. Expressing genuine regret is not the same as admitting liability — and organizations should never admit liability until it is legally established, while still showing empathy for those affected.
II. How the Three Elements Intersect
• Communications & Legal — Every public statement must be coordinated to preserve legal privilege, meet regulatory obligations, and protect the organization’s litigation position.
• Legal & Public Perception — Legal moves — lawsuits, cease-and-desist letters, quiet settlements — shape public sentiment. A technically sound defense that looks ruthless can trigger boycotts and lasting reputational damage.
• Communications & Public Perception — This is what drives the market’s immediate emotional response. Messaging must translate legal complexity into simple, empathetic, action-oriented statements that position the organization as the single authoritative voice — unless authorities formally take over the response.
III. Our Perspective
Crisis communications and legal handling are only part of a unified response capability needed to manage disruptions arising from social, political, security, environmental, regulatory, and cultural pressures. Reputational risk doesn’t sit only at the top of an organization — it reaches across and beyond it, demanding coordinated leadership at every level.
MRG helps organizations build or strengthen this readiness through capabilities including:
• Simultaneous operations — An incident command center where Communications and Legal sit at the same table, reviewing every statement in real time to balance reputational and legal risk.
• Defined, safe empathy — Immediate, genuine concern for people, environment, property, and business, paired with a clear account of investigative steps — without prematurely assigning blame.
• Action over guilt — A narrative focused on fixing the root cause, which builds public trust while often reducing future legal exposure.
Bottom Line
Crisis prevention is the foundation of crisis management — whether that resilience is self-driven or shaped by regulation and circumstance. But when a crisis does occur, well-tested contingency planning limits the damage, and a policy of open communication protects what matters most: corporate reputation and public trust.
Mandala Resilience Group
mandalaresilience.com
Your Anchor in a Volatile Landscape
Transforming Security Services Through Strategic Partnership
The Power of Co-Creation: When Industry Icons Align
Think of the best commercial alliances you see every day: Apple working with top chip designers to build phones that do things we never thought possible, or Nike teaming up with elite athletes to make performance gear that changes the game. But the most powerful collaborations often start much closer to home—over a shared cup of kopi tubruk when business owners realize they are tired of hitting the same old walls. Look at Indonesia’s own corporate story: when Gojek and Tokopedia stopped fighting in their own corners and joined forces to create GoTo, they combined ride-hailing with e-commerce and completely changed how 270 million people handle daily life.
These partnerships work because neither side acts like a simple supplier filling out an order form. They bring different strengths together to create a multiplying effect—delivering real value for themselves and a complete solution for the people using it.
In Indonesia’s security services sector, BUJP leadership has long been denied this exact level of strategic partnership.
Breaking the Commodity Trap: Manning vs. Electronic Integration
In the In the conventional commercial landscape, security procurement follows a rigid, transactional script. A corporate client requests a standard scope: “Provide 100 guards across X posts,” or dictates a baseline hardware checklist—“Install X amount of CCTV cameras in Y locations at the lowest possible cost, and while you’re at it, drop in a baggage x-ray and a body scanner—just make sure it doesn’t give us a headache with constant beeping.”
For a Badan Usaha Jasa Pengamanan (BUJP), the natural operational response is to fulfill these requirements by calculating minimum wage thresholds for manpower or sourcing reliable hardware specifications to meet the service criteria. However, because security is traditionally treated as a necessary overhead line item, both the BUJP and the client can find themselves constrained in how they look at risk. The client wants to protect their asset, and the BUJP wants to deliver stellar service, but neither party lacks the shared intent—rather, the limitation often lies in capability and capacity. Day-to-day operational pressures make it difficult to step back, look upstream, and see eye-to-eye on the deep root causes driving risk.
The Symptom vs. The Source: Uncovering Hidden Frictions Beyond the Fence
When a project faces disruption—whether through perimeter breaches, equipment failures, or sudden site unrest—the immediate response is naturally focused on the physical layer: adding more guards, increasing patrols, or upgrading hardware.
Yet, in high-stakes environments, security failures are almost always downstream symptoms of deeper root causes. Consider three common real-world scenarios:
- Community & Labor Friction: A violent site protest or blockade at an industrial estate or regional plantation is rarely just a “security problem.” Often, it stems from deep-seated community grievance over perceived local exclusion—such as local residents and regional adat leaders feeling that employment and subcontracting opportunities are flowing to outsiders rather than their own communities. Throwing more guards at the gate only escalates tensions; it treats a social injury with a physical bandaid instead of resolving the root socioeconomic disconnect.
- Organized Criminal Pressures: In remote or complex operating theaters—from Sumatra to eastern Indonesia—projects can face coordinated pressures from local bad actors or criminal elements. Mitigating these risks requires sophisticated, sensitive coordination and liaison with regional law enforcement (POLDA)—a delicate diplomatic and operational dance that goes far beyond standard guarding protocols.
- The Insider Vulnerability: Shifting corporate or organizational policies (such as sudden restructuring, compensation adjustments, or altered labor terms) frequently trigger widespread workforce discontent. Left unmanaged, this discontent morphs into a severe internal threat: employee-driven IP theft, pilferage of physical material, active sabotage, or workplace violence.
When a BUJP and a client are caught in the day-to-day grind, tracing these symptoms back to their root causes is exceptionally difficult without specialized bandwidth.
The MRG Force Multiplier: Decades of Practitioner Experience, Deployed Immediately
This is precisely where the strength of Mandala Resilience Group (MRG) meets yours. We do not compete with our BUJP partners; we act as an elite strategic force multiplier.
Our strength lies in who we are: a collective of senior practitioner-leaders who used to sit right where your clients sit. We are former corporate leaders and in-house subject matter experts who have lived through these exact multi-million-dollar crises, had to problem-solve under extreme pressure, made high-stakes decisions, and successfully navigated complex organizational dynamics to bring cross-discipline teams together. We bring this hard-earned institutional insight and decades of practical experience directly to our BUJP partners—immediately.
Whether your clients operate in sleek corporate urban offices in the heart of Jakarta, sprawling regional branch sites across Java, or high-stakes remote frontier project locations across the archipelago, MRG works collaboratively alongside BUJP leadership and client teams to look past surface-level requests (guard counts or hardware quotes) to uncover root causes and build comprehensive risk management architectures.
From Vendor to Partner of Choice: Elevating Value Through Quality
When BUJP leadership collaborates with MRG to deliver this depth of strategic capability, the commercial and relational framework transforms entirely:
- From Cost Center to Value Driver: Security and risk management transition from an expensive insurance policy against chaos into an active accelerator of operational velocity and investor confidence.
- From Commoditized Manning to Indispensable Advisory: The BUJP is elevated from a replaceable manpower or low-cost hardware supplier into the client’s trusted, long-term strategic partner of choice.
- Driving Growth Through Quality, Not Just Quantity: Partnering with MRG significantly adds to a BUJP’s value growth—shifting the business model away from a relentless, low-margin chase for sheer headcount quantity, and toward high-impact, high-value projects where the quality of the solution dictates long-term contract sustainability.
Conclusion
The future of high-value security and risk services belongs to strategic partnerships that move beyond headcount arithmetic and bargain-basement hardware. Are you ready to elevate your BUJP’s market positioning, deepen client trust, and deliver the unassailable value that company boards demand?
Let’s Start a Conversation: You don’t have to navigate complex client demands alone. Reach out to us for a confidential baseline consultation. There is zero obligation—just a straightforward discussion where we can look at your goals, share notes on current hurdles, and see how partnering together can amplify your impact.
Mandala Resilience Group
mandalaresilience.com
Your Anchor in a Volatile Landscape
Protecting Value and Local Harmony in Flagship Tourism Developments
The Power of Coordinated Action: When Weak Signals Aren't Missed
Think about how major global and domestic enterprises operate at their best: they don’t wait for a crisis to break before aligning their leadership teams. Look at Indonesia’s own corporate story, when Gojek and Tokopedia stopped fighting in their own corners and joined forces to create GoTo, they combined ride-hailing with e-commerce and completely transformed how 270 million people handle daily life. These high-impact moves succeed because leadership teams look past immediate, isolated objectives to build an integrated, multi-stakeholder ecosystem.
Yet, in Indonesia’s high-stakes destination development landscape, multi-million-dollar disruptions rarely arrive out of thin air. They build quietly through a sequence of weak signals that are visible long before they turn urgent.
Consider a familiar scenario: a state-backed master developer launches a world-class tourism hub, Special Economic Zone (SEZ), or cultural heritage transformation designed to elevate regional economic standing. The master plan is brilliant on paper. But on the ground, early friction brews. Local community leaders, regional business associations, and local NGOs feel the top-down vision ignores existing community livelihoods, customary land rights (tanah ulayat), and regional heritage priorities.
Because these initial concerns are dismissed as “just local PR noise” or “typical opposition to progress,” the friction accelerates. Within months, local resentment hardens into physical access road blockades, legal land injunctions, organized NGO advocacy campaigns, and media scrutiny that threatens investor confidence ahead of major financing gates.
The issue wasn’t invisible; it was simply managed in a silo.
The Anatomy of the Gap: What Happens When Risk Lives in Silos
In conventional project management structures, non-technical risk (NTR) follows a fragmented script. Functional departments interpret emerging local pushback strictly through their own narrow lens:
- The Security Department sees a site protest or road blockade and requests more guards, fencing, or police coordination to protect the physical perimeter.
- Public Relations drafts formal press statements emphasizing national economic benefits, missing the emotional and cultural nuances driving local opposition.
- Government & Stakeholder Relations relies on formal ministry-level approvals in Jakarta, underestimating the informal political influence of regional leaders (Pemda) and traditional community elders.
- Legal and Commercial review land permits and master leases, treating customary land grievances strictly as a legal matter rather than an operational reality.
When pressure mounts, leadership defaults to reaction mode. Decisions compress, coordination breaks down, and executive focus shifts from long-term strategy to immediate containment.
Worse, a second challenge emerges simultaneously: the organization turns inward. Teams begin asking “Who missed what?”, “Where does accountability sit?”, and “Why did the system fail?” Without disciplined facilitation, this leads to defensiveness, parallel internal investigations, conflicting messaging, and leadership spending more time reconstructing the failure than stabilizing the business.
The Mindset Shift: Control Before Disruption
At the executive level, real resilience requires far more than static risk registers or policy binders that sit unread on office shelves. Leadership teams need a practical operating capability that helps the enterprise anticipate, align, and act before disruption takes hold.
When executive teams transition from fragmented awareness to integrated readiness, the entire project risk posture transforms:
- From Reactive Firefighting to Preemptive Control: The organization stops reacting to local protests after they erupt and begins recognizing weak frontline signals early, taking disciplined action before risk becomes loss.
- From Departmental Silos to Cross-Functional Alignment: Community engagement, security, public affairs, legal, and commercial leads share a single view of threat criteria, likelihood, and business exposure, ensuring clear decision rights and escalation triggers.
- From Paper Plans to Tested Operational Muscle: Emergency and stakeholder management playbooks are moved out of binders and stress-tested through realistic scenario simulations under real operational pressure.
- From Blame Cultures to Systems Learning: Post-incident reviews shift away from internal finger-pointing toward objective root-cause analysis that hardens internal workflows, protects long-term brand equity, and secures the Social License to Operate (SLTO).
The MRG Force Multiplier: Practitioner Judgment Deployed Immediately
This is precisely where Mandala Resilience Group (MRG) supports executive expansion teams. We do not replace internal management accountability; we act as an elite advisory force multiplier to build clarity, discipline, and confidence under pressure.
Our strength lies in who we are: a collective of senior practitioner-leaders who have sat in the exact same seats as your executive team and subject matter experts. We bring decades of real-world experience spanning frontline execution and board-level governance across complex social, political, security, and regulatory environments in Indonesia.
We work alongside your existing teams across four primary touchpoints:
- Independent “Cold-Eyes” Reviews: Providing an objective, high-altitude lens to identify gaps that sit between corporate headquarters and regional site teams, such as unmapped customary land claims, informal community commitments, or unaddressed local vendor expectations.
- Internal Capability Building: Embedding usable, culturally aligned response frameworks into daily operational rhythms, clarifying escalation pathways, and building durable “social fences” where mega-assets are respected and protected by local communities.
- Leadership Decision Support Under Pressure: Guiding leadership teams to align quickly, balance competing commercial milestones, public expectations, and regulatory commitments without losing discipline during unfolding field friction.
- Scenario Stress-Testing & Continuous Assurance: Running structured tabletop simulations that test realistic scenarios, including localized access road blockades, NGO campaign escalations, and sudden regional policy shifts, to validate response plans and strengthen organizational resilience before disruption occurs.
What This Means for Your Executive Team
Building an integrated resilience capability delivers clear, measurable value across every leadership function:
- CEO / Managing Director: Greater confidence in business continuity, project execution momentum, and the active defense of the firm’s Social License to Operate.
- CFO: Reduced exposure to unbudgeted operational downtime, project cost overruns, investor default risks, and commercial revenue leakage.
- COO / Project Director: More predictable master-plan execution, fewer unplanned site shutdowns, and stronger contractor and stakeholder discipline across regional developments.
- Corporate Leadership: Unified alignment between local community engagement, threat management, guest/investor confidence, and long-term asset value.
Bottom Line
Non-technical risks become business-critical when community, workforce, NGO, regulatory, security, and reputational issues are managed in silos until they converge.
The executive mandate is clear: control before disruption. Recognize weak signals, align functions horizontally, escalate early, and make disciplined decisions before risk converts into material loss.
Let’s Start a Conversation
Navigating complex, interconnected non-technical risks does not have to mean waiting for hidden seams to open. Reach out to us for a confidential baseline consultation.
There is zero obligation, just a peer-to-peer dialogue where we bring decades of frontline operational judgment directly to your leadership team.
MRG brings decades of hard-won, real-world experience managing these exact challenges across Indonesia, translating lessons from past successes and failures into practical guidance that helps your organization build lasting resilience before friction turns into loss.
Mandala Resilience Group
mandalaresilience.com
Your Anchor in a Volatile Landscape
Why the risks that hurt projects most are often the ones nobody was assigned to watch
The Meeting Where Everything Was Green
Six months into construction, the monthly steering committee meeting for a major mineral processing and downstream manufacturing expansion in Eastern Indonesia began, as it always did, with a review of the dashboard.
Engineering, on schedule. Safety incident rate, below target. Budget variance, within tolerance (a little tight, but explainable). Procurement, on track. Environmental permits, secured. The project director moved through the slides in eleven minutes. Nobody had a question. The meeting adjourned early.
Everyone in that room was doing their job well. That is the part of this story worth sitting with, because it is the part that makes what happened next so difficult to see coming, and so easy, in hindsight, to explain away as bad luck.
Three things had been happening quietly, in parallel, for weeks.
- In the Directly Affected Villages, the term operators use for the communities in the immediate zone of impact, informal conversations about uang ganti rugi (land compensation) had stalled. The community consultation process that had opened the project two years earlier was well documented. But follow-up conversations with the tokoh adat (customary community leaders) whose blessing carried real weight on the ground had gone quiet after the company’s community relations officer was reassigned mid-project. Not broken down, just stalled, the way things stall when a relationship’s continuity depends on one person and the handover is incomplete. Nobody escalated it, because it wasn’t yet a dispute.
- At the same time, a subcontractor responsible for a mid-critical-path civil works package was quietly absorbing cost pressure by trimming its local labor complement (the workforce hired under the project’s local labor commitments) and replacing experienced local hires with cheaper crews brought in from outside the district. This showed up nowhere on a dashboard, because subcontractor labor composition isn’t a line item anyone tracks, until it becomes one.
- And separately, the regional contact at the dinas lingkungan hidup (provincial environmental office) who had been the project’s main point of continuity through two years of permitting had been rotated to a different post, as happens routinely in Indonesian civil service assignments. His successor was, by all accounts, capable. He was also new, unfamiliar with the project’s history, and understandably cautious about approving anything his predecessor had cleared verbally but never formally documented in the permit file.
None of these three things was, on its own, a crisis. Each had an owner, technically. Community relations had the land issue, project controls had the subcontractor relationship, government relations had the dinas contact. Each owner considered their piece manageable. None of them was in a position to see what happened when the three threads met.
They met in week nine. By then, the subcontractor crew was already working under pressure, with too few people, limited familiarity with the area, and instructions to keep the schedule moving. During clearing work near the disputed parcel, a crew member damaged a tree that the local community regarded as sacred. On its own, the incident might have been manageable. But the community had already been frustrated by weeks of unresolved discussions over land compensation. The damaged tree became a symbol of something larger: to them, the project was moving forward while their concerns were being pushed aside. Within days, residents organized a road blockade, preventing project vehicles from reaching the site. At the same time, the newly assigned contact at the dinas lingkungan hidup, faced with a growing community dispute and still getting up to speed on the project’s environmental commitments, held off on a pending approval until the situation was clarified.
Three functions. Three green dashboards. One shutdown, lasting five weeks, that no single report had flagged as a risk — because no single report was built to see the space between them.
Naming the Pattern: The Orphan Risk
We call this pattern the orphan risk, a risk that exists in the gap between organizational functions rather than inside any one of them, and therefore has no natural owner, no line on any register, and no one whose job it is to ask how it is trending.
Technical risks tend to have clear parents. A schedule risk belongs to project controls. A safety risk belongs to HSE. A credit risk belongs to finance. Each has an established methodology, a register, a reporting cadence, and, critically, a person whose performance is measured on managing it well.
Non-Technical Risk (NTR), the term used across the industry for exactly this category, rarely works that way. Land and community relations, labor sentiment, stakeholder continuity, relationships with local government and lembaga adat (customary institutions), contractor behavior beneath the visible layer of the contract — these risks are real, and experienced operators know they’re real. But they frequently sit across multiple functions at once, which in practice means they belong fully to none of them.
Community relations owns the community relationship, but not the subcontractor’s hiring practices. Government relations owns the dinas contact, but not the land negotiation. Everyone owns their slice. Nobody owns the intersection.
This is different from simply having low awareness of NTR as a category. Most experienced leadership teams understand, at least in theory, that “soft” issues matter, even if some Indonesian operators still shorthand them as urusan sosial (social affairs) and treat them as separate from the primary risk register. The orphan risk pattern is subtler than that: it persists even in organizations that take NTR seriously, because the organizational structure itself, built around clean functional ownership, is not designed to see risks that live in the seams.
For Those Who Already Track This
If you already run a structured NTR program, the useful question the story above raises isn’t “do we track community, labor, and regulatory risk.” You likely do, each on its own register, each reviewed on its own cadence. The sharper question is: who is accountable for the correlation between them, not just the components?
A genuinely mature NTR posture treats interaction effects as a first-class risk category in their own right, not an emergent risk you discover after the fact. In practice, that means:
- A named owner for cross-functional risk correlation, distinct from the owners of each individual risk stream, with the authority to escalate a combination even when no single component has crossed its own threshold.
- Review cadences that force different functional leads into the same room on a recurring basis to compare trend lines, not just cite green statuses.
- A composite indikator, even a simple one, that tracks the number of adjacent amber signals across functions, since a cluster of near-threshold issues is itself a leading indicator, even when every individual metric looks fine.
- Institutional memory that survives personnel rotation, on both sides, since staff rotation is as routine inside government offices as it is inside operators, so a relationship’s history doesn’t reset to zero every time the person managing it changes, as happened with the dinas contact in the story above.
If any of that isn’t yet formalized, the gap usually isn’t a lack of awareness. It’s that the organization’s structure, for entirely sensible reasons built around clear accountability, makes the correlation invisible by design.
A Short Self-Check
Whether NTR is a new concept for your organization or a well-established discipline, three questions tend to surface where the orphan risks are hiding:
- The Correlation Test: If two of your “green” risk categories started trending amber in the same month, would anyone notice the correlation, or just the two green boxes turning amber separately, on two different reports, reviewed by two different people?
- The Departure Test: Is there a risk currently being managed informally, through a personal relationship, a verbal understanding, or “someone keeping an eye on it,” that would have no owner at all if that person left tomorrow?
- The Interaction Test: When was the last time your project or transition risk review deliberately asked “what happens if X and Y occur at the same time,” rather than reviewing X and Y as separate agenda items?
If any of these produces hesitation rather than a confident answer, that hesitation is the signal worth acting on.
The Point of Naming It
We don’t tell this story to suggest the project teams in it were negligent. They weren’t. Every function did what it was measured on doing, and did it well.
That is precisely why the orphan risk pattern is worth understanding on its own terms: it isn’t a failure of diligence, and it isn’t solved by simply asking people to work harder within their existing lanes, or by adding one more line item to the sosialisasi checklist.
It is a structural blind spot, and structural blind spots require a structural answer: someone whose explicit mandate is to sit across the seams and ask what the individual dashboards can’t, before the ganti rugi conversation, the subcontractor’s crew list, and the dinas handover find each other in week nine.
Let’s Start a Conversation
Navigating complex, interconnected non-technical risks does not have to mean waiting for hidden seams to open. Reach out to us for a confidential baseline consultation.
There is zero obligation, just a peer-to-peer dialogue where we bring decades of frontline operational judgment directly to your leadership team.
MRG brings decades of hard-won, real-world experience managing these exact challenges across Indonesia, translating lessons from past successes and failures into practical guidance that helps your organization build lasting resilience before friction turns into loss.
Mandala Resilience Group
mandalaresilience.com
Your Anchor in a Volatile Landscape