Skip to main content
Regulatory Council
The state of ai impact assessment
Category: Enterprise Risk Management

Value Creation and Preservation

Also known as: Value Creation vs. Value Preservation
Simply put

Value creation is the process of adding value by producing something worth more than the resources put into it, while value preservation is an organization's focus on preventing value from being lost or eroded through unintended actions or processes. Together, the two describe the twin aims of directing an organization toward growth while protecting what it already has. In practice, organizations must balance the two, and different contexts may place greater emphasis on one over the other.

Formal definition

"Value creation and preservation" is a paired concept that frames an organization's objectives along two complementary dimensions. Value creation refers to the process of adding value, transforming inputs or resources into outputs worth more than those inputs, typically for customers and other stakeholders. Value preservation refers to preventing existing value from being lost or eroded through unintended actions or processes, aligning conceptually with risk management and control activities that protect against downside outcomes. The relationship between the two is context-dependent and sometimes framed as a trade-off or "paradox"; some commentators (for example, in private equity contexts) emphasize the primacy of value preservation, while others (for example, in sustainability contexts) argue for reframing certain activities as value creation rather than mere preservation. The precise weighting and interpretation vary by sector, strategy, and organizational objectives, and the terms are used as strategic and governance framing rather than as terms of art with a single standardized definition.

Why it matters

The paired framing of value creation and preservation matters because it captures a fundamental tension at the heart of governance: an organization must simultaneously pursue growth and protect what it already has. In governance and risk terms, value creation aligns with strategy and the pursuit of objectives, while value preservation aligns closely with risk management and control activities that guard against downside outcomes and the erosion of existing value through unintended actions or processes. Treating these as complementary dimensions rather than competing priorities helps boards and management articulate why controls and risk management are not merely defensive costs but part of the same overall value proposition.

How organizations weight the two is context-dependent and sometimes framed as a trade-off or paradox. Some commentators, particularly in private equity contexts, emphasize the primacy of value preservation, arguing that protecting existing value can outweigh the pursuit of new value in certain conditions. Others, notably in sustainability discussions, argue for a mindset shift that reframes activities often treated as mere preservation as genuine sources of value creation. These differing emphases illustrate that the concept is used as strategic and governance framing rather than as a term of art with a single standardized definition.

Because the terms lack a fixed, standardized meaning, their practical value lies in prompting deliberate conversations about balance: which objectives are about generating new worth, which are about protecting existing worth, and how the two should be weighted given the organization's sector, strategy, and risk appetite. Professionals should be cautious about importing one sector's emphasis into another without examining whether the underlying assumptions hold.

Who it's relevant to

Boards and Senior Management
Directors and executives use the creation-preservation framing to articulate strategic direction, balancing the pursuit of growth against the protection of existing value. It helps position risk management and controls as part of the overall value proposition rather than as purely defensive activities.
Risk Managers
Value preservation aligns closely with risk management and control activities aimed at preventing value from being lost or eroded through unintended actions or processes. The framing helps connect risk work to organizational objectives and to the creation side of the equation.
Private Equity and Investment Professionals
In private equity contexts, some commentators emphasize the primacy of value preservation over value creation. Investment professionals may find the paired concept useful for framing portfolio strategy, though the appropriate weighting is context-dependent and contested.
Sustainability and ESG Practitioners
In sustainability contexts, some argue for reframing activities as value creation rather than mere preservation. This reflects a mindset shift relevant to practitioners seeking to position sustainability work as a source of value rather than a protective cost.
Strategy and Governance Advisors
Because the terms are used as strategic and governance framing rather than as standardized terms of art, advisors can use the concept to prompt deliberate discussion of how an organization should balance growth against protection given its sector, strategy, and objectives.

Inside Value Creation and Preservation

Value Creation
The generation of new value through the pursuit of opportunities, strategic decision-making, and the acceptance of risk within defined boundaries. In many governance and enterprise risk frameworks, such as COSO ERM, risk management is positioned as an enabler of value creation rather than solely a defensive activity, though the specific framing varies across framework editions and should be verified against the primary source.
Value Preservation
The protection of existing value by identifying, assessing, and treating threats that could erode assets, reputation, or the ability to meet objectives. This dimension is often associated with control activities, loss avoidance, and compliance with applicable laws and internal policies, though the balance between preservation and creation is context-dependent.
Risk Appetite
The amount and type of risk an organization is willing to accept in pursuit of value, typically set at the governance level. It is distinct from risk tolerance, which concerns acceptable variation around specific objectives, and from risk capacity, which reflects the maximum risk an organization can bear.
Strategic Alignment
The linkage between value objectives and the organization's strategy, direction, and decision rights. Governance structures typically define who holds authority to pursue value-creating opportunities and who oversees value-preserving controls.
Trade-off Management
The ongoing balancing of opportunity-seeking against threat mitigation. Frameworks often note that excessive focus on preservation can constrain value creation, while an unchecked focus on creation can expose the organization to risks beyond its appetite.

Common questions

Answers to the questions practitioners most commonly ask about Value Creation and Preservation.

Is value creation and preservation just another way of describing profit maximization?
No. Value creation and preservation is broader than profit maximization. In many governance and enterprise risk management frameworks, such as COSO ERM, the concept links the management of risk to the achievement of an organization's strategy and objectives, encompassing financial and non-financial value for a range of stakeholders. Profit is one dimension, but the concept also typically considers reputation, stakeholder trust, resilience, and the avoidance of value erosion. Treating it solely as profit maximization risks overlooking the preservation side, which concerns protecting existing value from downside events. The specific weighting of financial versus other forms of value varies by organization, sector, and the mandate set by the governing body.
Does 'value preservation' simply mean avoiding all risk?
No. Value preservation does not mean eliminating risk. In many frameworks, risk-taking is understood as a necessary part of pursuing objectives and creating value, and no control can be said to eliminate risk entirely. Preservation typically refers to protecting realized value from erosion through effective controls, monitoring, and risk treatment, while still accepting risk within the boundaries set by the organization's risk appetite and tolerance. An overly risk-averse posture can itself destroy value by forgoing opportunities. The intent is generally to balance the pursuit of new value against the protection of existing value, not to avoid uncertainty altogether.
How does the governing body typically connect value creation and preservation to risk appetite?
In many governance models, the governing body articulates how much and what types of risk the organization is willing to take in pursuit of value, which is often expressed through a risk appetite statement. Risk appetite provides a reference point that management uses when evaluating strategic choices and allocating resources. Value creation activities are then assessed against that appetite, while value preservation considerations inform where tighter tolerances or additional controls may be warranted. The precise mechanisms, cadence, and documentation vary by organization, and applicability differs by sector and regulatory context. Boards often revisit this linkage as strategy or the external environment changes.
How can value creation and preservation be reflected in day-to-day risk assessments?
Organizations frequently frame risk assessments not only around potential losses but also around effects on objectives, which allows both upside and downside considerations to be captured. In practice, this can mean evaluating how a risk could impair existing value (preservation) alongside how managing that risk could enable the pursuit of objectives (creation). Assessments typically distinguish inherent risk from residual risk after controls, and consider whether treatment aligns with the stated risk appetite and tolerance. The specific rating scales, criteria, and integration into decision-making are context-dependent and should be tailored to the organization rather than adopted wholesale.
What roles are commonly involved in supporting value creation and preservation?
Responsibility is typically shared across the organization rather than owned by a single function. The governing body often sets direction and risk appetite; senior management integrates value considerations into strategy and operations; risk management functions help identify and assess uncertainty against objectives; and compliance functions address adherence to applicable laws, regulations, and internal policies that protect value. Internal audit may provide independent assurance over these processes. The allocation of these roles varies with organization size, structure, and sector, and some entities use a three-lines model or similar arrangement to clarify accountabilities.
How might an organization demonstrate that value creation and preservation is embedded rather than aspirational?
Embedding is often evidenced through the way the concept appears in routine processes rather than in standalone statements. Indicators can include documented linkage between strategy, objectives, and risk appetite; risk assessments that reference effects on objectives; governance records showing the board's consideration of both value creation and preservation; and monitoring that tracks whether controls continue to protect realized value. Because no single artifact confirms embedding, organizations typically look for consistency across governance, risk, and compliance activities. What constitutes sufficient evidence is context-dependent and may be shaped by regulatory expectations that vary across jurisdictions and sectors.

Common misconceptions

Risk management exists only to preserve value and prevent losses.
In many enterprise risk frameworks, risk management is intended to support both the preservation of existing value and the creation of new value by informing decisions about which opportunities to pursue and within what boundaries. Treating it as purely defensive can understate its role in strategy.
Value preservation is achieved by eliminating risk through controls.
Controls modify or reduce risk; they do not eliminate it. Residual risk typically remains after controls are applied, and no control can guarantee that value will be fully preserved. Value preservation is about managing risk within appetite, not removing it entirely.
Value creation and value preservation are separate, competing functions handled independently.
The two are often treated as complementary dimensions of the same objective. Pursuing value while accepting risk within defined boundaries inherently involves both, and effective governance typically integrates rather than isolates them.

Best practices

Define and document risk appetite at the governance level so that value-creating opportunities are pursued within boundaries the organization is willing to accept, distinguishing appetite from tolerance and capacity.
Frame risk management activities to support both dimensions, evaluating decisions for their potential to create value as well as the threats they may pose to existing value.
Use residual-risk thinking when assessing controls, recognizing that controls modify rather than eliminate risk, and calibrate control investment against the value being protected.
Align value objectives with organizational strategy and clear decision rights, ensuring accountability for both opportunity-seeking and threat mitigation is assigned.
Make trade-offs between value creation and preservation explicit and periodically reviewed, so that neither excessive caution nor unchecked opportunity-seeking dominates.
Verify specific framework language, editions, and any regulatory obligations against primary sources, since the framing of value creation and preservation varies by framework, jurisdiction, and sector.
Application Security Isn’t Optional Anymore.