Risk management for listed securities shares a common starting point: price. The daily swing in a closing price can be measured, historicized, fitted to a distribution, and much of the discipline rests on that premise. Private investment has no such starting point. A position may run five years, may run ten, from completion to exit, and at no point does an external quote tell you whether it became more or less expensive since yesterday. This is not a technical gap. It means risk management for private investment has to begin from an entirely different question.
The question is: if there is no price to measure fluctuation against, what is risk actually. Our answer is direct — risk is the possibility of permanent loss of capital, and, even where principal is eventually returned, how far the timing and path of that return diverge from what was originally expected. This definition shifts attention away from whether carrying value has moved and toward whether the money can still be recovered, and on what timeline, and it is what shapes the design of every analytical tool that follows.
Risk is not volatility, it is permanent impairment
Equating risk with volatility is a reasonable simplification in a market where a position can be sold at any time — if the price falls too far, an investor can, in principle, exit, and volatility converts into a real, realizable risk of loss. Private investment has no such conversion mechanism. Once a control or significant-minority position is completed, there is no standing option to exit during a holding period that typically runs five to ten years or longer, and an adjustment to carrying value does not automatically translate into a change in cash flow. A downward revision to an internal valuation in a given quarter, so long as the underlying view of the business has not changed, is not in itself a signal that calls for action.
The questions that matter lie elsewhere: whether a company's competitive position has weakened irreversibly, whether execution capability within the management team has deteriorated structurally, whether an industry's demand structure is being permanently reshaped by technology or policy. The answers determine not how a quarter's carrying value looks, but whether the principal can be returned within an acceptable time frame and form. We call this class of judgment permanent-impairment assessment. It sits at the center of risk analysis for private investment, and marks the most fundamental point of departure from risk management for listed securities.
Scenario construction: written until it changes a decision
Scenario analysis has been used loosely enough that it often becomes a formality — a paragraph appended to a memo describing an upside, base and downside case, each with an approximate return range, after which the transaction proceeds exactly as planned. This version has little value, because it was never intended to change a decision. It exists to give a judgment already made a veneer of apparent care.
We require the team to prepare at least three scenarios for every significant investment, but what we require of the scenarios themselves differs from how the word is usually used. First, each scenario must carry a concrete response, not stop at a probability estimate — if this scenario occurs, what should the investment committee do, add to the position, hold, reduce, or reassess the exit path, and the answer has to be written down rather than deferred to whenever the moment arrives. Second, the scenarios must be genuinely distinct from one another, not the base case's numbers shifted a few points up or down and relabeled. Third, and most important, at least one scenario must be a case that looks unlikely but would be very costly if it occurred — precisely the kind of scenario most easily left out of a review.
The test for a scenario worth having
The test is simple: remove the analysis, and ask whether the committee would decide differently. If not, however thoroughly it is written, it has added no information to the decision, only length — and it is the most common reason we send a scenario back to be rewritten.
Seeing concentration properly: beyond position size
A concentrated portfolio is a deliberate choice, not a weakness to be papered over — a small number of positions genuinely understood, paired with the capacity to hold for the long term, will often support sounder judgment than a broadly diversified portfolio only shallowly understood. But concentration raises the bar for risk management correspondingly, since the portfolio lacks the buffer diversification provides, and any overlooked correlation gets amplified. Most institutions, discussing concentration, look at only one layer: whether a single position is too large a share of the portfolio. That warrants monitoring, but it is the most visible layer. What actually determines fragility tends to sit underneath, in layers a position-size report does not show.
- Position concentration: whether a single holding's underperformance would decisively drag down the portfolio's return. Easiest to monitor, and most often mistaken for the whole of what concentration means.
- Sector concentration: whether holdings that look diversified across company names in fact share an industry cycle or a set of downstream customers. Often obscured by apparent diversification — ten holdings can look spread out while sharing the same end-market cycle, leaving true exposure far more concentrated than the headline count suggests.
- Factor concentration: whether holdings share exposure to the same macro or structural factor — interest-rate sensitivity, a raw-material cost, a regional policy stance. Hardest to identify, since it cuts across sector classification and requires decomposing each investment's actual drivers.
- Counterparty concentration: whether investments rely on the same suppliers, channels or lenders. Easy to overlook ordinarily, and tends to surface all at once under stress, when one counterparty's trouble strikes several unrelated holdings together.
These layers need measuring separately and reading together, since the risk that matters tends to appear where several overlap. A modest position sharing an industry cycle and a critical supplier with two others carries influence well beyond its book weight.
Position: 1; Sector: 2; Factor: 3; Counterparty: 4
Illustrative framework for organizing risk judgment, not a quantitative score
The governance that makes risk analysis land
Writing an honest scenario analysis and measuring real concentration exposure are not, in themselves, difficult work. What is difficult is making that analysis actually influence the moment a decision is made, rather than having it filed, cited, and never once changing a transaction's size, structure or timing. The answer to that problem does not lie in the analytical method itself. It lies in the governance built around it.
The first arrangement is pre-commitment: agreeing, before a transaction is even assessed, which scenarios trigger a reassessment and which indicators trigger escalation, rather than debating thresholds once a scenario has already arrived. The value is that it sets the standard when emotion is least likely to intrude, not at the point of a hard decision, when judgment is more easily colored by sunk cost and existing position.
The second arrangement is clarity in the escalation path: when a trigger is hit, who must be informed, within what time frame, and where decision authority sits, all need writing down before it occurs, not worked out afterward. A report that stops at flagging a concern, with no defined next step, amounts in practice to no warning at all.
The third is hardest to sustain, and most easily underestimated: the risk function needs courage to write conclusions that are plain, even uncomfortable. A report that always concludes the risk is manageable will, however rigorous its method, soon lose standing. Its value comes precisely from occasionally diverging from the investment team's instinct, and explaining exactly why. An opinion that has never once changed a transaction's structure, size or timing exists in name only.
Boring is what this work is supposed to look like
The most common misunderstanding is picturing risk management as a mechanism that activates only in an emergency — spot the problem, sound the alarm, step in. Effective risk management, most of the time, looks unremarkable: scenario assumptions reviewed on schedule, concentration measured on a regular cycle, an escalation process that rarely produces a dramatic moment. That plainness is the design goal — a factor identified before it does damage, not recognized as a warning sign only after a loss has occurred.
At a firm following a concentrated, long-holding strategy, this work carries more weight than at a diversified manager, since positions are larger, holding periods longer, and an overlooked factor may not surface for years, by which point little room remains to act. The absence of a daily price does not mean the absence of risk. It means risk identification requires more deliberate work, clearer discipline, and the patience to write conclusions that are direct, plain, and able to withstand being checked again.