This article is a guest post by Sarah Oliver, Chief Financial Officer of Rex Encore LLC. The views expressed are solely those of the author.

Most family offices do not have a Chief Risk Officer (CRO), and in fact, they do not need one—because the Chief Financial Officer's (CFO) responsibilities already naturally encompass risk management.

In a lean family office structure, the CFO sits at the intersection of all financial and operational signals within the organization. They can simultaneously see entity-level cash flows, debt service schedules, capital commitment obligations, operating company performance, and governance processes across the entire portfolio. Because the CFO has a holistic view, they are also the best person to integrate cross-portfolio risks.

Hidden Risks in Private Markets

Family offices tend to concentrate capital in a few large positions: private equity, direct real estate, operating businesses, and co-investments. This concentration is often deliberate—concentrated investing reduces fee drag, facilitates governance participation, and aligns capital with operational outcomes more closely than a diversified portfolio could achieve.

However, the risks created by concentration are less well understood. A common assumption is that private market investments provide diversification relative to public equities. Academic research has directly challenged this view: when liquidity risk factors are properly considered, private equity returns move with the broader market in ways that standard analyses often overlook, and their direction and timing are precisely the opposite—when public markets are under stress and liquidity is scarce, private market distributions slow down, exit conditions deteriorate, and capital commitments accelerate. Family offices face the greatest pressure precisely when they have the least flexibility.

Static cash flow projections cannot capture this dynamic. A spreadsheet showing 12 months of ample liquidity under normal conditions cannot tell you what happens when three adverse scenarios occur simultaneously: delayed distributions, accelerated capital calls, and debt maturities that cannot be refinanced on acceptable terms. This scenario, and its combination, is precisely what a CFO-led risk framework should stress test.

Four Disciplines, One Framework

The framework required of a family office CFO is not complex, but it demands discipline. It is built on four interrelated practices.

Liquidity Stress Testing: Modeling the portfolio's ability to meet obligations under combinations of adverse conditions, rather than a single condition, typically over a 12 to 36-month horizon. The output is not a single number, but a set of thresholds: minimum liquidity reserves, maximum unfunded commitment levels, and trigger points that prompt the CFO to take action.

Scenario Analysis: This looks at longer cycles. For example, how would persistently rising interest rates affect real estate valuations and refinancing costs? How would a recession affect operating company performance and the private equity exit market? Scenarios are not predictions, but internally consistent stress maps that reveal where the portfolio is most vulnerable and where strategic optionality is most valuable.

Counterparty Risk Assessment: This is the area where family offices most often under-invest. Complex family offices have a wide range of counterparties: lenders, private equity sponsors, property managers, co-investors, operating partners, and service providers. Each relationship brings exposure.Recent regulatory studiesparticularly warn about counterparty concentration risk in the private credit market, because its disclosure framework is not designed for bilateral, relationship-based structures. A complete counterparty inventory—including concentration limits and periodic review arrangements—is not a compliance task, but a fundamental risk management requirement.

Operational Risk Monitoring: This is the final link in the loop. Especially in real estate portfolios, operational failures, maintenance backlogs, compliance exceptions, inadequate insurance, and poor vendor oversight are leading indicators of financial distress. When operational problems show up in financial statements, the cost is already high. CFO involvement in monitoring key operational metrics provides an early warning capability that no financial report can replace.

Governance Matters

The CFO's risk integration function can only be effective if the organization gives it the standing it deserves: direct access to key decision-makers, clear escalation paths, formalized thresholds, and a culture that views raising risk concerns as valuable rather than troublesome.

This culture starts at the top. If key decision-makers in a family office take risk information seriously, treating quarterly risk reviews as genuine governance activities rather than routine updates, they can build an organization capable of absorbing adverse conditions without being forced into involuntary decisions. That is the goal: not to eliminate risk, but to preserve optionality.

A CFO who understands this is not just a financial officer, but the guardian of the family office's most important asset—the ability to act on its own terms, on its own timeline, in any market environment.