SPES Operational Handbook — Section 6
Risk Registers & Decision Rules (How the Mission Avoids Unforced Errors)
Purpose of this section:
Give SPES a legitimate, bounded mechanism to surface risk, enforce discipline, and support decisions without becoming the decider or the scapegoat.
This section exists because most institutional failures occur when:
- risks are known but unnamed,
- everyone assumes someone else owns them,
- and decisions are made implicitly rather than explicitly.
6.1 What the SPES Risk Register Is (and Is Not)
What it is
- A living inventory of predictable public-engagement risks
- A shared reference point for leadership
- A way to externalize uncertainty without paralysis
- A memory system across rotations
What it is not
- A compliance log
- A blame ledger
- A performance evaluation tool
- A substitute for Legal or policy review
SPES maintains the register; leadership owns the risk.
6.2 Core Risk Categories SPES Tracks
SPES tracks risks in nine recurring categories. These recur across countries, platforms, and political cycles.
6.2.1 Attribution Risk
Definition:
Statements or actions are treated as official U.S. Government policy beyond what was intended or authorized.
Typical triggers
- Casual phrasing on social media
- Speeches excerpted out of context
- Program announcements without caveats
Decision rule
If content can plausibly be quoted as policy, it requires clearance beyond PAO.
6.2.2 Claim Overreach Risk
Definition:
Stating more certainty, scope, or intent than evidence supports.
Typical triggers
- “There is no issue”
- “This will lead to…”
- Quantifying impact without data
Decision rule
If facts are incomplete, language must remain provisional.
6.2.3 Silence Risk
Definition:
Non-response is interpreted as confirmation, indifference, or concealment.
Typical triggers
- Allegations involving money or partners
- Repeated media inquiries
- Viral social narratives
Decision rule
Silence beyond 24–72 hours requires explicit justification and re-evaluation trigger.
6.2.4 Partner Favoritism Risk
Definition:
Public engagement implies endorsement, protection, or preferential treatment.
Typical triggers
- Repeated spotlighting of the same partner
- Praise language without balance
- Photos with politically connected figures
Decision rule
Repeated exposure requires narrative balance or rotation.
6.2.5 Screenshot Travel Risk
Definition:
Content circulates without context, date, or caveats.
Typical triggers
- Visual-heavy posts
- Numerical claims
- Quotes without qualifiers
Decision rule
Anything that would be dangerous without context must carry its context.
6.2.6 Escalation Risk
Definition:
Engagement increases intensity, hostility, or media interest unintentionally.
Typical triggers
- Replying to hostile comments
- Correcting misinformation publicly
- Inconsistent responses across platforms
Decision rule
If engagement increases volatility, disengage and reassess.
6.2.7 Internal Misalignment Risk
Definition:
Different sections communicate conflicting messages.
Typical triggers
- Program launches without PAO coordination
- Social posts contradicting press guidance
- Speeches misaligned with current posture
Decision rule
If messages diverge, pause external communication until aligned.
6.2.8 Legal / Compliance Exposure Risk
Definition:
Statements create legal, contractual, or compliance exposure.
Typical triggers
- Denials or confirmations of allegations
- Statements about funding or procurement
- References to investigations
Decision rule
Legal review is required before substantive response.
6.2.9 Reputational Inertia Risk
Definition:
Outdated narratives persist because they are never corrected.
Typical triggers
- Legacy program framing
- Old statistics reused
- Past policy language no longer accurate
Decision rule
High-visibility outdated content must be refreshed or retired.
6.3 Risk Register Structure (Operational)
Each entry includes:
- Risk category
- Trigger event
- Affected audiences
- Likelihood (low / medium / high)
- Impact (low / medium / high)
- Current mitigation
- Owner (role, not name)
- Review date
The register is:
- concise (1–2 pages active),
- reviewed quarterly,
- updated ad hoc during crises.
6.4 Decision Rules (When SPES Intervenes)
SPES intervention is rule-based, not personality-based.
SPES intervenes when:
- two or more risk categories are active,
- attribution risk + silence risk coincide,
- authority is unclear,
- external deadlines exist without verification.
SPES does not intervene when:
- issues are purely internal,
- messaging is routine and low-risk,
- authority and facts are clear.
6.5 Escalation Thresholds
SPES recommends escalation when:
- media interest broadens,
- Washington requests updates,
- allegations involve money, elections, or security,
- silence is no longer viable.
Escalation does not mean response—it means decision awareness.
6.6 “Never Say” Categories (Institutional Self-Defense)
SPES flags language that should never be used without explicit authorization:
- “We deny the allegations”
- “There is no misuse”
- “This is false”
- “We guarantee…”
- “The U.S. supports X party/group”
These phrases harden into policy whether intended or not.
6.7 Safe Framing Patterns (Illustrative)
Acceptable:
- “We are aware and reviewing.”
- “We take allegations seriously.”
- “We will share information when appropriate.”
- “We do not have information to confirm at this time.”
Unacceptable without clearance:
- Absolutes
- Predictions
- Assigning motive
- Attacking sources
6.8 Documentation & Accountability
For each high-risk decision, SPES ensures:
- risks were named,
- options were presented,
- decision authority was clear,
- timing constraints were noted.
SPES does not document blame—only process.
Member discussion: