Assumption Risk in Strategic Planning: A Practical Guide

Assumption risk is the risk that a strategic plan rests on beliefs about the world, customers, competitors, regulation, or your own capabilities, that turn out to be wrong. In financial services, it is the single biggest driver of strategic underperformance, more damaging than execution failure, because it corrupts the plan before delivery even starts. This guide sets out how to find those assumptions, stress-test them, and build the governance to catch them breaking in time to act.

Key Executive Takeaways

• Most strategic failure is assumption failure: the plan was internally coherent but built on beliefs that quietly stopped being true.
• The assumptions that matter most are the ones nobody wrote down, because they felt like facts, market growth continuing, customer loyalty holding, distribution economics being stable.
• Assumption risk is managed by naming assumptions explicitly, ranking them by fragility and impact, and assigning owners who track leading indicators, not by running more scenarios.

Start by separating assumptions from facts

Most strategy documents blur the two. A useful discipline is to take the current plan and highlight every quantitative claim, every forecast, every statement about customer behaviour, competitor response, or regulatory direction. Then ask a simple question of each: is this evidenced, or assumed? Evidenced means you have data, and the data is recent, relevant, and independent of the team that produced the plan. Everything else is an assumption, regardless of how confident the author sounded.

Expect this exercise to uncover fifty to two hundred assumptions in a typical three-year plan. That is normal. The problem is not the number, it is that they were invisible.

Rank assumptions by fragility and consequence

Not all assumptions deserve equal attention. Plot each on two axes: how likely it is to break within the planning horizon, and how much of the plan collapses if it does. The top-right quadrant is where governance effort belongs. In a UK retail bank plan, that quadrant typically contains assumptions about deposit beta, mortgage churn, digital acquisition cost, and the trajectory of a specific regulatory expectation. In an asset manager, it is fund flows, fee compression, and the persistence of a distribution relationship.

What most teams get wrong is spending stress-test effort on the assumptions that are easy to model, interest rates, market levels, credit losses, while leaving the fragile behavioural and competitive assumptions untouched because they are harder to quantify.

Assign an owner and a tripwire to every critical assumption

An assumption without a named owner is not being managed. For each top-quadrant assumption, name one executive, define the leading indicator that would show the assumption breaking, and set the threshold that triggers a plan review. The indicator must lead, not lag. Customer NPS moving is a lead; revenue falling is a lag. Regulatory tone shifting in speeches and consultation papers is a lead; an enforcement action is a lag.

Good looks like a one-page assumption register reviewed quarterly at ExCo, with fewer than fifteen items, each with an owner, a metric, a threshold, and a documented rationale for the current belief.

Build in genuine challenge, not confirmation

The hardest part of assumption risk management is cultural. Teams presenting a plan are incentivised to defend their assumptions, not surface their fragility. Counter this deliberately. Rotate a challenge role at strategy reviews with a mandate to argue the opposite case. Commission external stakeholder or customer research specifically to test the two or three assumptions you would most hate to be wrong about. Where the plan depends on regulatory direction, engage supervisors early and openly, treating their perspective as information you need, not a position to manage.

Revisit the register when the world moves, not just on the calendar

Quarterly reviews are a minimum. The real discipline is triggering an out-of-cycle review when a tripwire fires or when a material external event, a competitor move, a policy statement, a macro shock, invalidates the context the plan was built in. Plans that survive contact with reality do so because someone was watching the assumptions, not because the assumptions were better.

Your next action

Before your next strategy review, ask for the assumption register. If one does not exist, that is the first thing to build. If it does, check whether it has owners, tripwires, and leading indicators. If it does not, you are running a plan, not managing its risk.

Frequently Asked Questions

How many assumptions should sit on the active register?

Between eight and fifteen for a group-level plan. Fewer and you are missing things; more and nobody is really watching any of them.

Who should own the assumption register?

The CFO or Chief Strategy Officer, with individual assumptions owned by the relevant executive. It should not sit in risk, because it needs to live inside strategic decision-making, not alongside it.

How does this differ from scenario planning?

Scenarios explore what happens if the world changes in defined ways. Assumption management asks which specific beliefs your current plan depends on and whether they still hold. You need both, but assumption discipline is more actionable week to week.

What is the most commonly missed assumption in financial services plans?

That the current distribution economics, whether intermediary relationships, platform access, or digital acquisition cost, will remain broadly stable. They rarely do, and the plan is often silent on the dependency.

How do we handle assumptions about regulatory direction?

Engage supervisors directly, read consultation papers and speeches carefully, and build plans that would still be defensible under a reasonable range of supervisory expectations. Treat the regulatory bar as something to meet with substance, not to forecast around.