In 1895, visionary Joseph Malins wrote a poem about a dangerous cliff near a city. A number of people fell off the dangerous cliff edge. The people debated whether to put a fence around the cliff or station a fully-equipped ambulance in the valley below to pick up the casualties after they fell. The ambulance won the argument.
The poem was written as a fable, with the intention of highlighting the importance of tackling root causes rather than reacting to symptoms. It remains an accurate metaphor for how some law firms approach regulatory risk and compliance.
Firms spend vast amounts of time, energy and money operating the fully equipped ambulance. When a file review reveals systemic omissions, an SRA inspection targets anti-money laundering controls, or a client complaint escalates to the Legal Ombudsman, the response is immediate and frantic. Firefighting takes over, fee-earning pauses, and management time is consumed by crisis prevention.
The inconvenient truth is that most regulatory breaches and negligence claims do not happen because lawyers lack technical legal knowledge. They happen because many firms run on reactive, fragmented administrative processes that rely almost entirely on individual knowledge and last-minute checks.
The convenient lie is that being busy managing crises is the same thing as managing risk. It could not be further from it. It allows firms to believe that as long as they have talented lawyers who can solve problems when they arise, they do not need to invest time or capital in building fully preventative systems.
The cost of the valley
However, the ambulance in the valley is expensive, disruptive and exhausting.
When a firm relies on reactive risk management, the true cost is rarely limited to a fine, an insurer’s excess or an SRA finding. The true damage shows up in subtle ways:
- Fee earners spend hours piecing together file notes, verifying source of funds retrospectively, or rewriting deficient client care letters under pressure. They become overwhelmed and burnt out.
- COLPs, COFAs and managing partners spend their time managing exceptions, handling complaints and chasing overdue reviews rather than working on business strategy and driving the firm in a positive direction.
- A firm that operates in reactive flux cannot scale safely. Taking on new work types, opening new offices or acquiring another practice becomes harder and riskier because the firm’s risk controls cannot handle the additional volume.
Claims and regulatory failures rarely stem from complex legal points. They stem from mundane administrative gaps: failure to manage client expectations, unrecorded scope changes, delayed conflict checks, poor supervision, missed limitation dates, and insufficient file management. These are structural problems, and they require structural solutions.
Climbing to the top of the cliff
Moving from a reactive state to a proactive state requires a clear definition of the firm’s risk appetite, policy, plan and goals and the useful and comforting systematic processes that underpin it.
Building a proper fence at the top of the cliff means establishing controls that operate automatically during day-to-day work. The fact that the fence is on the cliff edge should instinctively inform the user of the risk and the system should guide its avoidance. In practice, this involves:
- Establishing clear criteria for client onboarding and matter acceptance, ensuring the firm only takes on work it is competent, resourced and insured to handle.
- Building risk-based identity, client and matter risk, and source-of-funds checks into the workflow, so that the necessary checks are completed at the right stage rather than retrospectively.
- Using routine, risk-based file reviews to identify administrative drift early, rather than discovering recurring problems only after they have become embedded.
- Giving COLPs and COFAs the authority, time and resources to design and monitor suitable compliance systems, rather than treating their regulatory duties as costly business prevention instead of protection.
When a firm makes this transition, risk management stops being an obstacle to business development and becomes its foundation and its protective overcoat. Firms with sound, well-evidenced compliance systems can make strategic decisions quickly, onboard new teams with confidence, and demonstrate genuine quality to clients and insurers.
Does artificial intelligence sit on our newly created fence?
Looking ahead, the shift from reactive intervention to proactive prevention will accelerate rapidly with the hard and fast imposition of AI. I say imposition because, whether you are comfortable with it or not, it is here, it is already building new fences – everywhere.
Historically, building a fence required significant financial and administrative overhead that many law firms struggled to introduce and then maintain. Artificial intelligence is changing that balance.
AI offers the ability to monitor operational data continuously. Used well, AI-assisted systems can help firms spot missing information, unusual patterns and overdue actions earlier. They will not provide a complete or infallible picture: the quality of the output depends on the data, the system design and effective human oversight.
AI cannot replace the human judgment required to manage risk, but it provides the infrastructure that makes proactive risk management practical and even potentially enjoyable!
In a forthcoming article, we will examine how law firms can practically deploy AI as part of a proactive risk management framework, moving from manual checks to automated early-warning systems that keep the firm firmly at the top of the cliff.
JBL Compliance helps law firms review their current risk and compliance arrangements, identify practical gaps, and implement sound, proportionate frameworks. Please contact us if you would like to discuss how we can support your firm.
