Insights — Risk & Governance
The Boardroom Blind Spot: Why Legal Risk Is the Last Thing Growing Businesses See
Most growing businesses can describe their cash position, their pipeline and their margins. Far fewer can describe their legal exposure. This article examines why legal risk sits in the blind spot of the boardroom, and what changes when somebody owns it.
A business that can see everything except its risk
Ask the leadership team of almost any growing business to describe the state of the company and you will get a detailed answer. Cash flow to the month. Pipeline by stage. Gross margin by product line. Staff turnover, debtor days, the utilisation of the workshop or the warehouse. Numbers are gathered, reported and discussed, and the business is managed against them.
Ask the same team to describe the company's legal exposure and the answer is usually shorter and vaguer. There is a contract with the biggest customer that somebody should look at. There is a question about the lease that has been outstanding since the spring. There is a former employee who left on difficult terms, and a supplier whose terms and conditions nobody has read. None of it is written down, and none of it appears on any report.
This is the boardroom blind spot. It is not negligence. It is the natural consequence of how businesses are built: the things that are measured get managed, and legal risk has never been easy to measure. The result is that a company can be in excellent command of its commercial position and almost entirely in the dark about the risks that could dismantle it.
Why legal risk is invisible by design
Legal risk resists the ordinary tools of management. It does not arrive as a number on a weekly report. It accumulates quietly in documents, decisions and delays, and it usually reveals itself only when a specific event forces it into view: a dispute, a transaction, a regulatory enquiry, or a key person leaving.
It is also diffuse. Legal exposure does not sit in one department. It lives in the sales team's contract terms, the operations team's health and safety practice, the finance function's credit arrangements, the marketing team's claims, and the employment arrangements made by whoever was managing people that month. Because it is spread across the business, no single manager feels responsible for the whole of it.
Add to that the psychology of advice. Solicitors are consulted when something has already gone wrong, which trains businesses to think of legal support as a response rather than a discipline. Legal risk therefore receives attention in proportion to the noise it makes rather than in proportion to its size. The loudest problem of the month wins, and the quiet structural risks continue to build underneath.
The three ways a blind spot becomes expensive
The first is the dispute you could have prevented. A contract that was never properly drafted, a variation agreed by email, a set of terms that were never incorporated into the order process: each of these is a small omission that becomes expensive the moment there is a disagreement about what was agreed. By the time a lawyer is instructed, the business is negotiating from a weakened position, and the cost of the fix is many times the cost of the original drafting.
The second is the deal you cannot do. Businesses are bought and sold on the quality of their paperwork as much as on their trading record. When a buyer's advisers begin due diligence and find unsigned contracts, unclear share arrangements, undocumented intellectual property and unresolved employment questions, the price moves. Sometimes the deal stops altogether. Either way, the cost is paid in value rather than in fees, which makes it harder to see and harder to argue about.
The third is the opportunity you decline without knowing why. A company with no clear view of its contractual position will often avoid a sensible risk, or accept an unreasonable one, because it has no basis for judgement. Both errors are expensive. The first costs growth, the second costs money, and neither shows up anywhere as a legal cost at all.
What the finance director cannot cover
In many growing businesses, the closest thing to a legal conscience is the finance director. This is understandable. Finance already holds the contracts, manages the insurance and deals with the bank, so legal questions drift in that direction by default. It is also unfair to everyone involved.
A finance director can tell you what a contract says about payment terms. They are much less well placed to tell you whether the limitation of liability clause is enforceable, whether the indemnity is acceptable, or whether the termination provisions leave the business exposed. Those are legal judgements, and they require a lawyer's training and a lawyer's professional accountability.
The same is true of the managing director, who will often make legal decisions because a decision is needed and nobody else is equipped to make it. The result is a business making legal judgements with commercial instincts. That combination works more often than you might expect, which is precisely what makes it dangerous: the failures are rare enough to be dismissed as bad luck, and severe enough to matter a great deal.
The difference between advice and ownership
Most businesses have access to legal advice. What they lack is legal ownership. Advice is reactive, transactional and finite: you ask a question, you receive an answer, the matter closes. Ownership is continuous. Somebody is responsible for knowing what the business has signed, what it has committed to, what is changing in the law that affects it, and where the exposure is concentrated.
That distinction explains why businesses with perfectly good relationships with their solicitors can still have blind spots. A firm of solicitors responds to instructions. It does not audit the business, it does not attend the board meeting, and it does not notice the risk that nobody asked about. That is not a criticism of solicitors. It is simply the shape of the relationship.
Ownership looks different. It means a review of the contract estate, a register of the risks that matter, an agreed position on what the business will and will not accept, and a standing invitation to the conversations where decisions are made. It is a management function rather than a service, and it is what a general counsel provides.
Making risk visible: a simple discipline
The remedy for a blind spot is not a large project. It is a small, sustained discipline. The first step is an inventory: what contracts does the business have, with whom, on what terms, and when do they renew. Most businesses have never assembled this list, and the exercise alone surfaces issues that have been sitting unnoticed for years.
The second step is a short risk register, kept deliberately brief. Not a compliance artefact, but a working document that names the handful of exposures which could genuinely affect the business, who owns each one, and what is being done about it. A register with twenty items gets ignored. A register with five gets used.
The third step is a rhythm. A quarterly conversation about legal matters, held before the pressure of a specific transaction, keeps the picture current and prevents the accumulation of small delays that later become large problems. Businesses that adopt this pattern describe the same benefit: fewer surprises, and better decisions made earlier.
What changes when somebody owns it
When legal risk acquires an owner, several things change at once. Questions that used to circulate by email for days get answered in hours, because there is a person whose job it is to answer them. Documents that used to be signed on trust get read, because there is somebody whose role includes reading them. Decisions that used to be made on instinct acquire a second opinion, because there is somebody present whose instinct is legal.
The commercial effect is more significant than it sounds. Teams move faster when they are confident about the boundaries. Sales conversations close sooner when the terms are already agreed. Expansion plans progress when somebody can confirm what is permitted. Good legal ownership does not slow a business down; it removes the friction that uncertainty creates.
The cultural effect matters too. When legal matters are treated as a normal part of management rather than an emergency, people raise them earlier. Early questions are cheap. Late questions are not. A business that talks about risk routinely will spend far less on it than one that only talks about it in a crisis.
The cost of looking away
None of this argues that growing businesses should be timid. The businesses that succeed are usually the ones willing to take commercial risk, and legal caution can be taken too far. The argument is narrower and more practical: the risks a business cannot see are the ones it cannot price, and a risk that cannot be priced cannot be managed intelligently.
The blind spot is not a failing of the people running the business. It is the predictable outcome of a system that measures what is easy to measure. Closing it does not require a legal department, a large budget or a change of strategy. It requires one thing: somebody senior who is accountable for the legal position, and a small routine that keeps it visible.
That is the case for a general counsel, and it is why the role exists in larger companies. The question for a growing business is not whether the risk is there. It is whether anybody is looking at it.
The insurance question
Insurance is often mistaken for a substitute for legal risk management. It is not. A policy responds to defined events, within defined limits, subject to conditions that are frequently overlooked. It does not prevent the dispute, it does not protect the commercial relationship, and it rarely covers the full cost of the disruption that a legal problem causes to a trading business.
Many businesses also discover, at the point of claim, that the cover was not what they assumed. Notifications must be given promptly. Certain breaches are excluded. Some policies require the business to have maintained particular procedures, and a failure to do so can reduce or even void a claim. A general counsel reads the policy alongside the commercial reality and identifies the gap between the two before it matters.
None of this argues against insurance, which is essential and often a contractual requirement. The point is that a policy is the last line rather than the first. Businesses that rely on insurance as their risk strategy tend to be the ones that find out, at the worst possible moment, exactly where the boundaries of cover lie.
When the board is not the only audience
Legal risk is not a private matter between a company and its advisers. Several external audiences form judgements about a business based on the quality of its legal arrangements, and those judgements affect both what the business can do and what it costs.
A bank will look at the security position and the covenants. An insurer will look at the procedures and the claims history. An investor will look at the corporate structure and the contractual protections. A regulator will look at the records and the governance. In each case, the business that can answer questions promptly and accurately is treated differently from the one that cannot.
That is why legal housekeeping carries a commercial value that is easy to underestimate. It reduces the cost of borrowing, the cost of insurance, the time taken to complete a transaction and the friction of any external review. It is one of the few investments that improves a business's standing with every counterparty at once.
The first ninety days of legal ownership
When a business appoints a general counsel, the first three months follow a recognisable pattern. The first task is discovery: what contracts exist, what commitments have been made, what claims are live, and what obligations apply. This is done through documents rather than memory, because memory is unreliable and always incomplete.
The second task is triage. Among the issues discovered, some are urgent, some are important and some can wait. The skill lies in distinguishing them, because a business that tries to fix everything at once will fix nothing. A short list of priorities, agreed with the leadership team, is worth more than a comprehensive report that nobody acts on.
The third task is establishing the rhythm. A standing slot in the management meeting, a simple reporting format, and a clear route for questions. By the end of the first quarter the business should know what it has, what matters most and who to ask. Everything after that is refinement rather than discovery.
Measuring what was previously invisible
One of the arguments against investing in legal oversight is that its benefits are difficult to measure. This is true, but only in the same sense that the benefits of good management are difficult to measure. The absence of a problem is not evidence that the problem was never there.
There are, however, several measures a business can track. The proportion of contracts on standard terms. The average time taken to close a customer agreement. The number of legal questions answered within a day. The number of disputes, and the cost of each. The age of the oldest unresolved legal issue. None of these are perfect, and all of them tend to move in the right direction once somebody owns the legal position.
There is also the simplest measure of all: how often the leadership team is surprised. A business that reaches the end of a quarter without discovering an issue it did not know about is a business whose legal risk is being managed. That is not a metric you can put on a dashboard, but it is the one that matters most.
Why this is a leadership question, not a legal one
It is tempting to file legal risk under legal, and to treat it as a matter for advisers rather than directors. That framing is what creates the blind spot in the first place. The decision to know, or not to know, is a leadership decision, and it belongs to the people who are accountable for the business.
Directors have statutory duties, and those duties include exercising reasonable care, skill and diligence. In practice that means knowing what the business has committed to and taking advice where the position is uncertain. A board that cannot answer basic questions about the company's contractual position is not merely exposed; it is failing in a duty that it holds personally.
The remedy does not have to be expensive. A fractional general counsel provides the oversight, the routine and the accountability at a fraction of the cost of a full-time hire. What it requires from leadership is not money so much as attention: the decision to make legal risk visible, and the discipline to keep it that way.
The risk that hides in the routine
The risks that damage businesses are rarely exotic. They are almost always the ordinary ones, sitting in documents nobody has read for years, agreed by people who have since left, in circumstances that nobody now remembers accurately. The exotic risk attracts attention because it is interesting. The ordinary risk does the damage because it is not.
Consider how a business actually accumulates obligations. A customer sends amended terms and the order is fulfilled without comment, which may or may not have incorporated those terms into the agreement. A supplier's standard conditions arrive stapled to a delivery note. A variation is agreed on a call and confirmed in a short email that nobody files. Each step is unremarkable in itself. Together they form a contractual position that nobody in the business has ever read as a whole.
This is why a review of the contract estate so often produces surprises, even in well-run companies. The surprises were never hidden. They have simply never been assembled in one place and looked at together, and until that happens the business is relying on an assumption rather than a position it can defend.
Where the biggest exposures usually sit
In practice, most of the significant exposure in a growing business sits in four places. The first is the customer contract, particularly where a small number of customers generate a large share of revenue. Concentration combined with unfavourable terms is the arrangement that does the most damage when a relationship turns difficult, because the business has the most to lose and the least leverage.
The second is employment. Grievances, discrimination claims, unfair dismissal, obligations on a transfer of staff, and the treatment of long-standing contractors all carry the potential for cost and disruption. All of them are considerably easier and cheaper to manage before a dispute crystallises into a claim, and all of them are frequently left alone because the business is busy and nothing has gone wrong yet.
The third is property, where repairing obligations, service charges, dilapidations and break clauses are routinely misunderstood until the moment they bite. The fourth is regulatory and data compliance, which has become a live exposure for almost every business that handles personal information, regardless of sector. None of these are unusual problems. They are simply the ones that receive the least attention until they are expensive.
A note on cost
It is worth being clear that none of this is an argument for elaborate legal machinery. A business does not need a large legal function to manage its risk well. It needs somebody competent, available and accountable, plus a small number of habits maintained consistently over time. The sophistication lies in the consistency, not in the structure.
The cost of that arrangement is a fraction of the cost of the events it prevents, and it is set in advance rather than discovered afterwards. For a business with turnover in the millions, the arithmetic is not close. A single avoided dispute, a single contract renegotiated on better terms, or a single transaction completed without a price reduction will typically cover the cost of years of oversight.
The blind spot is not inevitable. It exists because nobody has been given the job of looking, and it closes the moment somebody is. That is a small change in accountability with a disproportionate effect on the business, and it is available to any company that decides to make it.
Where to start
For a business that recognises itself in this article, the starting point is not a legal project. It is a decision: that somebody will be accountable for the legal position of the company, and that the position will be reviewed on a regular basis rather than discovered in a crisis. Everything else follows from that decision, including the question of how to resource it. A business that has made the decision will find a way to act on it. One that has not will keep discovering problems it could have seen coming.
The second step is small and immediate. Take the ten largest contracts the business has signed in the last three years, read them, and write down what they commit the company to. In most businesses this exercise takes a day and permanently changes the understanding of the company's position. It is the cheapest legal audit available, and it requires nothing more than attention and a quiet afternoon.
Neither step requires a budget, a committee or a consultant. Both produce a better return than almost anything else a growing business can do with the same time, because they convert an assumption into a position. That is the whole art of managing legal risk: knowing what you have agreed to, and deciding whether you are content with it.
Talk it through with a general counsel
A 30-minute, no-obligation conversation. No pitch and no pressure, just a straight answer on what your business needs and what it should cost.
Book an appointment