Risk Insight

Risk Navigator - Foreseeable: Rethinking Risk Management in M&A

car lights at night on road

    Risk Navigator is Ashurst Risk Advisory’s risk insight series, redefining risk management in an age of accelerating change and disruption, supporting business leaders to navigate uncertainty through expert risk insight, building resilience along the way. 

    Please watch for the launch of our Risk Navigator Hub, following the launch of Ashurst Perkins Coie. 

    M&A transactions continue to experience high failure rates despite their strategic significance, with research indicating that between 70% and 90% of deals fail to achieve their intended objectives. However, global M&A activity reached USD $4.0 trillion in 2025, with average deal size rising from $63 million in 2023 to $102 million in 2025, meaning the consequences of failure are becoming more severe.

    The persistence of failure points not to a lack of diligence, but to a structural gap: risk management standards and practices applied within the M&A process have failed to keep pace with the increasing complexity, scope, and interconnectedness of risks that determine whether a transaction creates or erodes value. Conventional risk management frameworks are structurally misaligned with the pace, complexity, and purpose of M&A decision-making.

    This edition of Risk Navigator presents a practical framework for boards and executive management that reorients risk management around the competitive forces shaping industry structure, using Porter's Five Forces to model the dynamics that will shape the future value of the combined organisation. The paper also explores the cognitive and probabilistic biases that contribute to common leadership traps, and proposes a stage-gated process ensuring risk remains visible throughout the deal lifecycle, from strategic selection through to bidding and negotiation.

    Key Points

    1. Risk management must be reoriented around competitive forces. Porter's Five Forces: substitution, new entrants, buyer power, supplier power, and competitive rivalry, models the dynamics that will shape the future value of the combined organisation, unlike static point-in-time assessments.
    2. The risks that destroy value are foreseeable. Three high-profile case studies: GE-Alstom, Microsoft-Nokia, and RBS-ABN Amro, demonstrate that the information needed to identify catastrophic risks was available at the time of each deal; what was absent was a structured, pre-emptive process to act on it.
    3. Psychological biases systematically undermine deal assessment. Four common decision-making pitfalls: Legacy, Blinkered, Pressure, and Denial, distort judgement under competitive pressure, and deal teams must be empowered to challenge consensus without reputational penalty.
    4. Risk analysis must move beyond spreadsheets and traffic-light dashboards. Organisations should adopt probabilistic, data-driven modelling, including Driver Tree analysis, Monte Carlo simulation, and scenario modelling, to provide boards with a probability landscape of outcomes rather than qualitative estimates.
    5. Walk-away discipline is a mark of rigorous governance, not a failure of ambition. Risk appetite and walk-away criteria should be defined before any transaction is initiated and actively referenced throughout negotiations.
    6. Risk management should be embedded across a six-stage deal process. Strategic selection, target selection, due diligence, synergy and cultural analysis, bidding and negotiation, and post-deal integration each require checkpoint summaries keeping risk analysis visible and accountable as deal momentum builds.

    Practical Implications for Organisations

    Boards must exercise structured, independent governance throughout the deal process, interrogating analytical assumptions, risk positions, and deal economics presented by executive management. This duty of challenge is anchored in directors' legal obligations, including duties of care, skill, diligence, and independent judgement under the UK Companies Act 2006 (Sections 172, 173, and 174) and US SEC requirements mandating that boards identify and communicate material risks to shareholders.

    Cultural compatibility should be treated as a quantifiable factor in synergy realisation, with synergy estimates adjusted downward where cultural alignment is weak, drawing on tools such as Social Network Analysis, RACI matrices, and the Organisational Culture Assessment Instrument. Risk analysis must also translate into tangible deal structure protections, with risks practically allocated between buyer and seller through warranties, indemnities, escrow provisions, earnouts, and insurance.

    The framework should be scaled to the transaction, proportionate to its size, complexity, and strategic significance, and stress-tested against the specific factors integral to each deal.

    This is the foundational paper in a series; companion papers will address the application of the framework in private equity, venture capital, and private capital, as well as a dedicated treatment of post-deal integration.

    Risk Navigator

    PDF 250 KB

    Download Report

    The Ashurst Group comprises Ashurst LLP, Ashurst Australia and their respective affiliates (including independent local partnerships, companies or other entities) which are authorised to use the name "Ashurst" or describe themselves as being affiliated with Ashurst. Some members of the Ashurst Group are limited liability entities. Ashurst LLP is a limited liability partnership registered in England and Wales under number OC330252. It is a law firm authorised and regulated by the Solicitors Regulation Authority of England and Wales under number 468653. Ashurst Risk Advisory LLP is a limited liability partnership registered in England and Wales under number OC442883 and is part of the Ashurst Group. Ashurst Risk Advisory LLP services do not constitute legal services or legal advice, and are not provided by qualified legal practitioners acting in that capacity. Ashurst Risk Advisory LLP is not regulated by the Solicitors Regulation Authority of England and Wales. The laws and regulations which govern the provision of legal services in other jurisdictions do not apply to the provision of risk advisory services. For more information about the Ashurst Group, which Ashurst Group entity operates in a particular country and the services offered, please visit www.ashurst.com.

    This material is current as at 14 May 2026  but does not take into account any developments to the law after that date. It is not intended to be a comprehensive review of all developments in the law and in practice, or to cover all aspects of those referred to, and does not constitute legal advice. The information provided is general in nature, and does not take into account and is not intended to apply to any specific issues or circumstances. Readers should take independent legal advice. No part of this publication may be reproduced by any process without prior written permission from Ashurst. While we use reasonable skill and care in the preparation of this material, we accept no liability for use of and reliance upon it by any person.

    Key Contacts