The complacency paradox: CFOs are less worried about risk. That's exactly what should worry them.

CFO concern in every risk category on Kyriba's 2026 CFO Risk Radar fell this year: inflation, tariffs, market volatility, geopolitical instability, security threats, and more. All of it, down from twelve months ago. That decline should not read as relief. Falling concern does not mean falling exposure, and the gap between the two should change how every CFO thinks about readiness.

The gap between feeling prepared and being protected

Kyriba's 2026 CFO Risk Radar surveyed 1,354 CFOs across nine countries, and one finding in particular stands out. 47% say they feel highly prepared to manage financial risk. 79% took a real financial hit last year because their visibility into an emerging risk was not good enough to catch it in time. Put those two numbers side by side, and "prepared" stops meaning what most CFOs think it means. Only one in five made it through the year without experiencing a financial impact from a risk they did not see coming. That pattern holds in every one of the nine markets surveyed.

I've asked finance teams why they feel prepared enough times to know what the answer sounds like when it's not just optimism talking. If nobody behind the answer can point to a reliable forecasting system, you already know what you are dealing with: cash without the ability to see it, forecast it, or move it on demand.

Falling concern and falling optimism are measuring the same blind spot

The pattern gets clearer when you look at what moved alongside that 79% who got caught off guard. Average concern across twelve risk categories dropped 13% year over year. At the same time, economic optimism fell 4.8 points, to 70.8% from 75.6%, and business optimism fell 5.4 points, to 73.8% from 79.2%.

Concern and optimism are supposed to move in opposite directions. When worry drops, optimism should climb, because the two are meant to track a real change in conditions. Instead they dropped together, which means finance leaders are recalibrating what they expect from a world that is not actually getting calmer, and mistaking that recalibration for progress. Normalized risk is risk nobody budgets extra attention for, which is exactly how it goes under-managed.

The instinct is to read falling concern as evidence that risk management is working better than it was a year ago. Look again at how many CFOs got hit by a risk they could not see coming before accepting that read. A forecasting system does not need to signal calm to be doing its job. It needs to be catching more of what is coming, and by that measure, most finance functions have not moved. When concern and optimism fall together the way they did this year, the more honest read is that CFOs adjusted their expectations downward without upgrading the tools they use to manage what is actually happening.

Complacency is a forecasting failure

The standard response to numbers like these is to tell CFOs to worry more, to stay vigilant, to keep risk top of mind. That framing treats complacency as a mindset problem, something you fix by paying closer attention. A finance leader who is anxious about every line item but still runs risk analysis on a quarterly cadence is no better positioned than one who feels calm. Anxiety without a forecasting system that keeps pace with the risk is just discomfort, and discomfort does not change the outcome.

The actual failure is structural, and it goes deeper than how often anyone reviews the numbers. Many finance teams are sizing financial risk on a cycle built for less volatility, using systems that were never designed to update continuously. 83% cannot quantify a risk's financial impact in real time, which means most finance teams don't find out what a risk actually costs them until well after the damage is done. Only 26% run continuous or automated scenario modeling, and just 21% can adjust financial strategy the same day a new risk appears. Even once the impact is known, most finance teams still cannot move as fast as the risk does.

And yet 96% report high or moderate confidence in their ability to analyze financial risk in real time. That confidence is the real warning sign: an artifact of how often you last looked and how hard your own tools make it to look again, not proof of actual preparedness.

The fix has nothing to do with how calm or anxious anyone feels; it comes down to whether the forecasting and visibility behind the numbers update as fast as the risk does, not once a quarter.

Choose the risk category your team worries about least right now and ask when you last modeled its financial impact, not when you last discussed it. If the honest answer is "last quarter" or longer, what you are feeling is a stale forecast wearing the mask of preparedness.

The standard going forward

Concern is down this year across the board. Do not let that be the headline you take into 2027 planning.

The standard I would hold any finance function to now is simple: preparedness has to be demonstrated, not felt. Demonstrating it means running a real sizing exercise on every risk that matters, on a regular cadence, not passing it once.

Pick a risk, time how long it takes to size its financial impact, and compare that time against how fast the risk itself can move. My own team runs this exercise on a regular cadence, the same as anyone testing whether their tools are keeping pace. Run it yourself, and you will find out fast whether your forecasting infrastructure is built for that speed or still catching up to it.

Real-time visibility across every bank, currency, and entity is the infrastructure Kyriba delivers today, and it's the standard every finance function should hold itself to.