Every other business risk gets named, scored and mapped. Your workforce doesn't. Here is the instrument that changes that — given away in full.

Ask a board to talk about risk and the conversation runs smoothly. Financial risk has a register. Cyber risk has a heatmap. Supply-chain risk has an owner, a score, and a mitigation plan. Then someone says, “our people are our greatest asset,” and everyone nods — and the one thing that actually delivers the strategy gets discussed alongside an engagement score and a wellbeing survey.

That is the gap. Every serious risk in the business gets the same discipline: name it, score it, map it. Workforce risk almost never does. So it stays invisible — right up until it arrives as attrition, burnout, a compliance breach, or a capability you can’t buy back in time.

The Workforce Risk Mapping closes that gap. It treats your workforce the way you already treat every other exposure: as a named, scored, mappable risk a board can see and fund. This piece hands it over in full — the catalogue, the scoring, the map — because a framework only earns its keep when people use it.

Why workforce risk stays invisible

It isn’t that leaders don’t care about people. It’s that people risk is measured in the wrong language. We survey it; we don’t score it. We report a mood; we don’t price an exposure. And a board acts on what it can see on a register, not on what it senses in a pulse check.

So the cost of neglect goes unpriced. Not zero — unpriced. And an unpriced risk is the easiest one to keep cutting, because nothing on the spreadsheet argues back.

The fix isn’t another survey. It’s borrowing the discipline every other risk already gets, and pointing it at your workforce.

Name it

Start with a fixed catalogue, not a blank page. The Workforce Risk Mapping sorts 30 workforce risks into 7 dimensions across 3 tiers. The first tier is the talent supply chain most models already track. The other two are where the cost of neglect actually lands — and where the supply-chain models fall silent.

Source the skills you need

Can we field the capability the strategy requires?

1 · Supply — can we source the skills?

Talent Availability (external) — the external labour market can't supply enough candidates with the critical skills you need.
Pipeline — recruitment channels fail to generate enough qualified candidates for critical roles.
Graduate & early-career supply — the education system doesn't produce enough people with the skills you'll need.
Attraction & employer brand — a weak proposition or brand stops you attracting the talent you need.

2 · Retention — can we keep them?

Retention — you can't retain critical-skill talent on your current offer and conditions.
Talent Competition — competitors attract away the people who hold your critical skills.
Engagement — critical talent disengages, cutting performance and raising turnover.
Internal Mobility — people leave because internal career paths are limited, unclear or blocked.

3 · Capability — can we grow them fast enough?

Talent Availability (internal) — you lack the internal talent and skills to meet current or future demand.
Development — people can't build critical skills at the speed and depth you require.
Skills obsolescence & AI displacement — skills decay or are automated faster than you renew them.
Digital & data literacy — weak digital and cyber awareness across the workforce exposes the organisation.

4 · Continuity — will critical capability survive transitions?

Succession — no ready successor for a critical leadership or specialist role.
Retirement & knowledge loss — critical skills and institutional knowledge leave with retirees, untransferred.
Leadership depth — too little quality or bench in leadership, beyond simply naming a successor.
Restructuring & M&A — reorganisations, site moves and mergers destabilise the workforce or neglect the human factor.

Sustain a healthy, fair workplace

Can our people keep going — safely and fairly?

5 · Wellbeing — can our people keep going, safely?

Mental health & wellbeing — burnout, stress and deteriorating mental health erode capacity and productivity.
Physical health — declining physical health, chronic illness and musculoskeletal strain reduce capacity.
Psychological safety — people can't speak up, admit error or challenge without fear.
Health & safety — unsafe physical or psychological conditions cause harm and liability.
Financial wellbeing — employee financial stress becomes a material risk to productivity, retention and conduct.

6 · Integrity & Belonging — are we fair, ethical and trusted?

Inclusion & belonging — representation and inclusion gaps limit access, fairness and performance.
Conduct, culture & ethics — misconduct or a toxic, values-drifted culture: harassment, fraud, ethical failure.
Reward fairness & pay equity — unfair or opaque pay decisions erode trust and invite scrutiny.
Reputation & trust — losing workforce and market trust in you as an employer.

Strengthen resilience and compliance

Can we absorb the shocks and stay governed?

7 · Resilience & Governance — can we absorb external shocks and stay compliant?

Compliance & employment law — exposure from a shifting regulatory environment and non-compliance.
Health crises & infectious disease — pandemics and emerging health threats disrupt the workforce and continuity.
Climate & environmental disruption — extreme weather and environmental events disrupt work, safety and continuity.
Workforce cost & benefits inflation — rising health, benefit and reward costs strain budgets and force trade-offs.
Data, IP & HR technology — poorly governed workforce data, IP exposure or obsolete HR systems create blind spots.

Thirty risks. Named, once, in language a board already understands.

Score it

Naming isn’t enough — a list is not a decision. So each risk is scored the way every other business risk is scored, on a simple 1–5 scale across three axes:

Likelihood — how probable is it? (1 = rare, <10%; 5 = almost certain, >85% and already emerging.)
Consequence — how hard would it hit? (1 = absorbed in normal operations; 5 = threatens the strategy.)
Preparedness — how ready are we? (1 = no owner or controls; 5 = tested and resilient.)

Likelihood and Consequence give the raw score. Preparedness — scored the other way, because readiness reduces exposure — nets it down to a residual:

❝

Residual risk = √( Likelihood × Consequence ) × ( 6 − Preparedness ) ÷ 5

The geometric mean keeps everything on a clean 1–5 scale. Better preparedness pulls a risk’s residual score down toward a fifth of its raw value — which matters, because preparedness is the only one of the three a board can actually pull. You can’t legislate the labour market; you can decide to build a succession bench.

Residual scores fall into four bands — Minor (≤2), Moderate (2–3), Major (3–4), Critical (≥4) — and roll up to one heat-score per dimension. So the board sees seven numbers before it sees thirty.

Map it

Now plot each risk: Likelihood up the side, Consequence across the bottom. The top-right corner — high likelihood, high consequence — is your unpriced exposure. That’s what you fund first.

Take Supply as a worked example. Score its four risks and the catalogue becomes a picture:

Talent Availability (external) — L4 × C5 → 4.5, Critical. Top-right. Fund first.
Pipeline — L4 × C3 → 3.5, Major.
Attraction & employer brand — L3 × C3 → 3.0, Major.
Graduate & early-career supply — L2 × C2 → 2.0, Moderate.

Same four risks. But now it isn’t a worry — it’s a prioritised, defensible picture a board can act on. Run the exercise as a group, everyone scoring independently before you compare. The disagreements are the point: they show which risks are visible to some leaders and invisible to others.

Why it’s different

There are people-risk models on the market already. Most are built by brokers, and it shows — they’re weighted toward benefits, insurance and fiduciary cover, the things a broker sells, and the whole talent supply chain gets compressed into a single pillar. That map exists to sell you cover.

The Workforce Risk Mapping keeps the full talent supply chain and adds the human half — wellbeing, integrity, resilience — balanced for a leader building a people strategy, not a leader buying a policy. One maps risk to sell you something. This one maps risk to help you build something.

What it gives a board is a single page that turns “our people are a risk we’re not managing” into thirty named risks it can see, score and fund. The unpriced exposure, made visible.

Where it comes from

The Workforce Risk Mapping extends the classic talent-risk catalogue — Gartner’s talent-risk model, Mercer Marsh’s people-risk pillars, Deloitte’s workforce-risk work, and the human-capital reporting standard ISO 30414 — with the human, governance and resilience dimensions the supply-chain models omit. It’s grounded in the field, not invented at a desk: it was first road-tested with public-sector leaders at the PeopleCentriX Roundtable in November 2025.

Use it

This is the whole framework. Take it, run it, adapt it to your organisation — that’s what it’s for. If a name others start using is the point, gating it would defeat it.

And if you’d rather not run it cold — if you want the Workforce Risk Mapping facilitated with your own leadership team, scored against your context and turned into a funded plan — that’s the work we do at PeopleCentriX.

Explore Our Themed Collections: Uncover a curated selection of current and past articles on our website.

Join 15,000+ Professionals: Follow me on LinkedIn for daily insights.

Proprietary Framework - The Workforce Risk Mapping