In-Depth Analysis of Ren Zhengfei's "New Theory on Compliance": Risk Control Is Not About Braking, but About Building Bridges
Hello everyone, I'm your financial observer. Today, we're going to discuss a very insightful article. Although this speech was given by Ren Zhengfei at the FRCC (Risk Control Center) conference in London in 2017, it remains highly relevant today, especially as global trade tensions rise and companies facing overseas expansion encounter various compliance challenges. It could even be considered a "survival guide" for Huawei and all Chinese companies operating internationally.
Many business owners and executives have a significant misunderstanding about risk control and compliance, believing that it's about finding faults or acting as a brake on business progress. They think that when the business department wants to move forward, the risk control department stops them. However, Ren Zhengfei made a clear point: the goal of risk control is to generate revenue (to support business growth), not to hinder it.
Below, I'll break down this article into five key points to help you understand how Huawei transforms risk control into a driving force for success:
---
1. Reversing Roles: Risk Control Is Not a "Gatekeeper," but a "Guardian"
[Core Point] The risk control department should not stand in opposition to the business; it cannot prove its value by simply saying "no."
[Plain Language Explanation] Imagine you're a business manager with a profitable project plan and you go to the risk control director. In the traditional approach, the director might push back, citing risks and rules, and dismiss your plan. But in Ren Zhengfei's view, the director should say, "This plan does have risks, but I've thought of three ways to mitigate them. Option A is the safest, Option B offers higher returns with additional safeguards, and Option C... Let's choose one together and make sure the path is clear for its implementation."
Ren Zhengfei used a vivid metaphor: "When a typhoon hits, we don't give up the rice; instead, we try to strengthen it." In the same way, when faced with risks, the goal is to find ways to overcome them, not to stop the business altogether.
Conclusion: The value of risk control lies in helping the business succeed safely, even in a risky environment. If risk control makes the business hesitant, it has failed.
---
2. Rejecting "Theoretical Knowledge": Experts Need to Get Hands-On Experience
[Core Point] Knowing the rules is not enough; you must also understand the business context. Sitting in an office and reviewing documents is not sufficient; you need to go to the front lines.
[Plain Language Explanation] Many risk control experts know all the laws and regulations, but they lack practical knowledge of how salespeople operate in different regions or how engineers handle local issues. Ren Zhengfei cited Lin Biao's military strategy: "To win, you need to see the battlefield yourself." Risk control experts must be on the ground, understanding the challenges and working with the business to find effective solutions.
Conclusion: Effective risk control requires understanding the business and adapting rules to real-world situations.
---
3. Moderation: Don't Treat Rules as Absolute Limits
[Core Point] Financial compliance should be flexible; each situation must be analyzed individually. Baseline rules are a guide, not rigid barriers.
[Plain Language Explanation] Some companies apply strict compliance rules, such as requiring multiple approvals for all overseas payments. This can be counterproductive in urgent situations. Ren Zhengfei pointed out that not all financial regulations apply to every business context. Just like driving, you can't follow city rules in the desert or in an emergency.
[Conclusion: Compliance should manage risks, not eliminate them completely. You need to weigh the risks and prepare for potential consequences.
---
4. The Value of Constructive Criticism: Provide Better Solutions
[Core Point] The role of the risk control department is to offer better alternatives to the business plans.
[Plain Language Explanation] Huawei has a "blue force" team that challenges business proposals. A low-level critique might simply point out flaws, while a high-level critique suggests improvements. The goal is to improve the plan while mitigating risks.
[Conclusion: Risk control should not just criticize; it should also contribute to the business's success.
---
5. Reducing Burdens: Streamlining Processes for Better Performance
[Core Point] Redundant reports and bureaucratic processes can hinder business operations. The headquarters should simplify processes and provide the data needed for analysis.
[Plain Language Explanation] Many companies burden frontline employees with excessive reporting. Ren Zhengfei called for reducing unnecessary reports and empowering them with the data they need to make decisions.
[Conclusion: Good management makes the business more efficient by reducing administrative burdens and providing the tools they need to succeed.
---
Summary: The Ultimate Goal of Risk Control
Ren Zhengfei summarized the article with two key points:
1. Serve the company by effectively managing risks. The goal is to prevent major mistakes and ensure stability.
2. Support the business by facilitating growth and revenue generation. The ultimate value of risk control is to help the business thrive.
For Everyone: If you work in risk control, legal, finance, or business, remember:
- Don't be adversarial; work together with the business.
- Be flexible; adapt rules to real situations.
- Be practical; go to the front lines and understand the challenges.
- Don't just criticize; offer solutions that improve the business.
In summary, the best risk control ensures that a company can thrive even in risky environments by providing the support and guidance needed to navigate those challenges.