Stress testing is no longer a back-office function. According to the EY/IIF 2026 Global Bank Risk Management Survey, enhanced risk measurement, stress testing and scenario analysis are now the top planned enhancements to financial risk management among Chief Risk Officers globally. The same survey reports that a majority of CROs are looking to strengthen resilience plans through scenario planning specifically to mitigate geopolitical risks.
As one CRO interviewed for the report put it, the role is no longer the chief risk officer, but the chief uncertainty officer. That language captures a structural shift across institutional finance. The risks that wealth managers, asset managers, family offices, and private banks now face do not always fit neatly into historical patterns. Research and analyst commentary suggest the institutions that recognise this are rebuilding their analytical infrastructure around forward-looking, hypothetical scenarios. Those that do not are increasingly answering today’s questions with yesterday’s tools.
What is Hypothetical Stress Testing?
Stress testing evaluates how a portfolio might perform under extreme or unfavourable conditions. The literature documents two distinct methodologies, and the distinction matters.
Hypothetical stress testing creates forward-looking “what if” scenarios tailored to specific risks. A sustained Strait of Hormuz closure with structural oil price persistence. A 25% universal tariff regime with full retaliation. A regime shift in a major reserve currency. The scenario does not need to have happened. It needs to be plausible, analytically coherent, and useful for testing portfolio resilience.
Historical stress testing replays actual past crises against the current portfolio. The 2008 Global Financial Crisis, the dot-com correction of 2000-2002, the 1970s stagflation period. These are factual events with documented market reactions and measurable portfolio impact.
Robust risk frameworks combine both approaches. The Basel Committee on Banking Supervision states the principle directly: “Consideration should be given to historical events and hypothetical future events that take into account new information and emerging risks in the present and foreseeable future. Scenarios not based on historical events and empirically observed relationships may be warranted for some or all risks if new or heightened vulnerabilities are identified, or if historical data do not contain a severe crisis episode.” Historical scenarios provide credibility and grounding. Hypothetical scenarios provide forward-looking insight into events that have not yet occurred or have not occurred in the same configuration.
The Basel framework also identifies the structural problem with historical-only approaches. Its Stress Testing Principles note that risk frameworks relying solely on historical statistical relationships rest on the assumption that historical relationships constitute a good basis for forecasting future risks, and the 2008 crisis is widely regarded as having revealed “serious flaws with relying solely on such an approach.” That conclusion has, in subsequent literature, only become more relevant as the shape of risk has evolved.
Why historical data alone is now insufficient
Three structural realities documented across the consultancy and analyst literature make pure historical stress testing inadequate for portfolios in 2026.
1. The shape of risk has changed faster than historical data captures
As PwC notes in its Global Banking Risk Study, stress testing has become routine, but scenarios once deemed improbable or unimaginable have materialised, and risk leaders are described as “moving beyond traditional planning to proactively engineer resilience by design.” The implication is direct: the scenarios that have hurt portfolios in the past five years had no clean historical precedent. Tariff regimes operating outside the WTO framework. Weaponised supply chains. Sustained naval pressure on strategic chokepoints. AI-driven concentration in equity indices. Persistent multi-theatre geopolitical fragmentation. Replaying 2008 against a 2026 portfolio tests resilience to a banking crisis, not to the actual risks the portfolio currently carries.
2. Transmission is non-linear and historical data captures it imperfectly
Geopolitical events have, in past episodes, propagated through markets through correlated and partially independent channels. A trade war does not move one factor; it moves equities, foreign exchange, commodities, and credit spreads simultaneously, each on its own logic. McKinsey’s analysis of stress testing in market risk transformation describes the methodological evolution from Monte Carlo simulations and sensitivity analysis based on data residing in the risk function’s systems to historical simulations and full revaluation based on data residing in front-office systems, with stress tests defined by a wide range of shocks that could affect the economy. Research on transmission suggests that single-factor sensitivity analysis often fails to capture how shocks actually propagate. Multi-factor, cross-asset, cross-region transmission is the analytical work, and the literature documents that it requires forward-looking scenario architecture.
3. The risks of greatest concern have shifted toward non-financial drivers
EY’s 2026 CRO survey identifies the structural shift directly. CROs are described as operating in a world they characterise as “nonlinear, accelerated, volatile and interconnected.” PwC’s Risk Management 2025 analysis adds that the risk profile of financial institutions has continued to shift to non-financial risks, requiring an increased focus on cyber risks, fraud, money laundering, ESG, and operational resilience. Historical financial data captures none of these directly. The analyst literature suggests hypothetical scenarios are how institutions make these structurally new risks analytically tractable.
The anatomy of a credible hypothetical scenario
Not all hypothetical scenarios are analytically defensible. The difference between a useful scenario and a theatrical one is structural. The consultancy literature consistently identifies five characteristics that distinguish credible hypothetical stress tests.
1. A clearly defined macro event
“Geopolitical risk” is not a scenario. “A six-month Strait of Hormuz closure with sustained Brent above $120” is. The event must be specific enough that risk factors can be mapped to it deterministically. Generic categories tend to produce generic outputs.
2. Identified transmission channels
A scenario should identify which risk factors the event activates and through what mechanism. An oil shock activates crude and gas spot prices directly, but research suggests it also transmits to European interest rates through inflation expectations, to EM Asia equities through energy import costs, and to safe haven currencies through capital flow dynamics. Skipping the transmission chain tends to produce incomplete analysis. As Jacobi’s multi-asset portfolio analysis puts it, the goal is scenarios that are “realistic but simple enough to be intuitive and to model,” balancing complexity and clarity, realism and relevance. The transmission chain is where that balance lives.
3. Propagation to instrument level
A scenario that produces an aggregate portfolio impact number tends to be less useful than one that propagates the configured shocks down to individual instruments, sectors, regions, and currencies. The aggregate number tells the institution something happened. The instrument-level breakdown tells them which positions drove it. Deloitte notes that historically many investment management firms have struggled with basic data for forecasting and scenario analysis, relying on manual spreadsheet models with limited granularity. Instrument-level propagation is the granularity that the literature suggests matters.
4. Multi-asset, multi-currency coverage
Geopolitical shocks rarely respect asset class boundaries. The literature suggests a credible framework propagates consistently across equities, fixed income, commodities, foreign exchange, and alternatives, and handles multi-currency portfolios coherently. Frameworks that test equity and fixed income in isolation tend to produce internally inconsistent outputs.
From quarterly compliance exercise to live conversation
Many institutions still treat stress testing as a quarterly compliance task. Reports are produced, filed, and rarely referenced again. The CIO has a view on geopolitical events that lives in their head. The risk team has a stress test report that lives in a folder. The two do not always meaningfully interact. The analyst literature has been explicit that this pattern is becoming a competitive vulnerability.
McKinsey’s analysis of how a global bank transformed its stress testing capability captured the operational stakes precisely. The bank’s prior process for setting up and running a stress-test scenario had been a manual exercise that took up to two weeks. The new framework, as McKinsey describes the outcome, allowed the client to produce stress-test scenarios in one day, “and thus to use stress tests as a tool for day-to-day risk management.” The shift from two weeks to one day was not just a productivity gain. It changed what stress testing was for. From compliance artefact to live decision tool.
The same shift is, according to the wealth-management commentary, now happening at the wealth manager and family office level. Jacobi describes it as a communication problem: “a well-structured stress and scenario report can help foster understanding and trust” and can make a significant difference when engaging both prospective and existing clients, especially during difficult performance conversations. Sophisticated clients are increasingly arriving with their own analytical views on the geopolitical environment and asking what specific events would mean for their holdings. The advisor who can answer that question in real time, with structured scenario analysis, operates in a different competitive register than one who cannot.
What this means for wealth managers, family offices, and asset managers
Stress testing is becoming a client-facing capability
The historical role of stress testing has been internal: regulatory compliance, internal capital adequacy assessment, governance reporting. The analyst commentary suggests that is changing. Sophisticated clients now ask scenario-based questions directly: what does a tariff escalation mean for my book? What does a Middle East oil shock do to my European equity sleeve? Stress testing is, according to the literature, moving from the back office into the advisory conversation, and the institutions that can deliver structured analytical answers are differentiating in the client relationship.
The bar for analytical credibility is rising
Generic risk dashboards reporting Value at Risk and historical drawdown analysis are no longer regarded as sufficient for many institutional clients. The audience increasingly expects scenario-specific, transmission-aware, instrument-level analysis. As McKinsey has observed in the context of bank risk transformations, traditional metrics like VaR often fail to show how much worse losses could get during a crisis, which is part of why the discipline is moving toward integrated scenario-based approaches. The floor for what counts as a credible risk capability has moved up.
Speed of analysis has become a competitive variable
Quarterly stress testing cycles are widely regarded as too slow for the current geopolitical environment. By the time a quarterly report is produced, the events it analyses are already priced in. The McKinsey case study of compressing scenario generation from two weeks to one day shows what is possible. The institutions building durable advisory advantages, according to the analyst commentary, are those that can produce scenario analysis in the same timeframe as the events they are analysing.
Building the capability
- A scenario architecture that maps macro events to risk factors with explicit transmission logic. This is where most frameworks underinvest. The factor selection determines the analytical credibility of every output downstream.
- A propagation engine that takes configured factor shocks and pushes them through the portfolio at instrument level, across asset classes, sectors, regions, and currencies. The engine quality determines whether outputs are internally consistent across positions.
- A delivery interface that allows the user to configure scenarios fast enough to support live decisions. If the workflow takes a week, it is internal compliance infrastructure. If it takes minutes, it is a client conversation tool.
Institutions that solve all three are widely regarded as building capabilities that competitors will struggle to match. Institutions that solve none are, according to the analyst commentary, vulnerable to clients asking better questions than they can answer.
Conclusion: from compliance exercise to conviction tool
The consultancies, the analyst community, and the CROs themselves are increasingly aligned on a single point. Forward-looking, hypothetical scenario analysis is no longer regarded as a regulatory checkbox. It is the analytical foundation many institutions are building for risk management in an environment where the most relevant risks have no historical analogue.
For wealth managers, family offices, and asset managers, the strategic question described in the literature is not whether to build the capability. It is whether the capability you have can answer the questions your clients are now asking. A framework that propagates a configured geopolitical scenario through a real portfolio at instrument level, in minutes rather than weeks, is increasingly regarded as no longer optional. It is, according to the analyst commentary, the conversation tool that defines the competitive frontier in institutional advisory.
The CIO already has a view. The investment committee already debates these scenarios. The question is whether the analytical infrastructure exists to make that conviction operational at portfolio level. That is the gap that hypothetical stress testing, properly built, is designed to close.
Read the original article here.
