Chronic risk

Reading the Shape of Risk

Chronic risks are not single threats on a list — they are the long-term, interconnected pressures shaping everything else. What matters most about them is structural, and you only see it by reading the shape of the system.

Chronic risks are the slow, persistent challenges — the medium-to-long-term counterpart to the acute risks in the National Risk Register. Each causes harm in its own right, but the weight of a chronic risk is structural: it makes acute risks more likely and more severe, and it moves with the others around it. Climate change drives more frequent severe weather; antimicrobial resistance deepens the threat of infectious disease. List them one per row and you lose exactly what makes them chronic. The signal is in the shape.

Drivers and sinks

Last year the UK Government published its first Chronic Risks Analysis — twenty-six risks across seven themes — and unusually it mapped the relationships between risks rather than just listing them. Model the whole thing and a pattern appears that no single diagram shows: some risks drive effects outward and some absorb them. “Vulnerable persons” receives effects from eleven other chronic risks — climate, pollution, organised crime, skills shortages, demographic change. When any of those intensify, the consequences do not stay isolated; they flow toward the same destination. A convergence point like that is invisible in a row and obvious in the structure.

The bridges between domains

Some risks matter less for their own severity than for where they sit. Serious organised crime appears across multiple parts of the analysis, connecting domains that would otherwise be separate. That structural centrality — the fact that it bridges clusters — is exactly what a severity score will never flag, and exactly what carries a shock from one domain into another. Often the risk that matters is not a node at all but a path — a connection between two domains the list keeps apart.

Asymmetry is the warning

Direction matters too. In the same analysis, AI has far more outgoing connections than incoming — it is a force multiplier, a risk that changes other risks rather than simply being one. That asymmetry is the insight, and you can only see it by reading direction across the whole system. A risk that amplifies everything it touches will never look like much on a line of its own.

So what?

Reading the shape does not replace the list — it tells you what the list cannot. Convergence points, bridges and force multipliers are where chronic risks do their damage, quietly and over time, and all three are structural facts already sitting in the relationships the analysis recorded. What has been missing is the step of looking at them as a system.

See it on your own risks.

Risk Portal turns these ideas into something you can interrogate — the dependencies, the failure points, and how disruption travels.