(Part 1 of 3 in a Series on Risk Appetite: Not Dying Is Not an Effective Strategy)
Back in 2014, we asked credit union boards and executives a question borrowed from an animated cave family: Are you living, or just not dying?
It was a challenge to organizations doing a responsible job of staying safe but a questionable job of stepping into the future. The conversation centered on enterprise risk management, risk appetite, and the courage to get out of the cave long enough to see what was happening around you.
That question still applies. But a lot has changed since 2014, and the stakes have gone up considerably.
The Industry Looks Safe. And It Is Shrinking.
Credit unions, as a system, are in good shape. Net worth is solid. Asset quality is generally strong. Most could pass a safety-and-soundness exam without losing much sleep.
And yet many are shrinking. Member growth is flat or negative across much of the industry. The average age of credit union members is higher than desired, and in many cases steadily increasing. Consolidation rolls on at a steady, and what feels like an increasingly aggressive pace. Entire communities are quietly forgetting what credit unions are.
In the current environment, the original question deserves a sharper edge: not dying is not an effective strategy!
If relevance, growth, and long-term independence matter to your credit union, you cannot safety your way there. You need a deliberate approach to risk, one that connects purpose, appetite, and action.
What Has Changed Since 2014
When we wrote the original piece, the industry was beginning to feel forces that now look permanent. Since then, several shifts have accelerated.
Digital and fintech competition moved from interesting to expected. Members can open accounts, apply for loans, and manage their financial lives in a few taps. If your digital experience is slow or limited, you are not just behind. You are invisible.
Member expectations were reset by big tech and big banks. People compare you to whoever serves them best, not to the community bank down the street. Personalization, 24/7 access, and seamless service are no longer competitive advantages. They are the price of admission.
Margin pressure is not a temporary headache. Volatile rates, pricing competition, technology expense and uneven loan demand have squeezed earnings in ways that leave little room for “we will grow into it later” thinking.
Consolidation has reshaped the map. There are fewer credit unions than there were, and the ones that remain are, on average, larger. Organic growth is modest while peers merge and build scale. Holding onto local relevance gets harder when your neighbors are expanding their capabilities and footprint.
And then there is AI. Artificial intelligence is no longer a concept on the horizon. It is reshaping how financial services are delivered, how risk is assessed, how members interact with institutions, and how decisions get made. Credit unions that understand AI risk and governance will be positioned to use it thoughtfully. Those that treat it as someone else’s problem, or have a “No AI on my watch” approach, will eventually find out it was their problem all along.
Add all of that together and you reach a hard truth: you cannot comply, play it safe, or conserve your way out of shrinking relevance.
How “Safety First” Becomes “Safety Only”
Most credit unions did not end up in a defensive posture on purpose. They followed the indicators and directives they were given.
For decades, the messages from regulators and auditors have been clear and consistent: protect capital, avoid surprises, keep risk inside well-defined boundaries. That approach produced a system that is, by design, conservative and stable. That is not a problem on its own.
The problem is what happens when “safety first” quietly becomes “safety only.”
You may recognize some of these patterns: board conversations that spend most of the time on what could go wrong, with almost no time on what needs to go right; a culture where “we tried that once” is enough to end any new idea; project lists tilted heavily toward compliance and remediation, with little room for anything member-facing or forward-looking.
Over time, this shapes more than your risk profile. It shapes your mindset. The organization learns, sometimes without realizing it, that the highest virtue is avoiding mistakes. The unspoken lesson: you will get in more trouble for trying something that does not work than for quietly sliding backward.
That may feel like prudence. But the world outside the cave is not waiting for you to figure out the difference.
The Question for Today
Relevance is not something that happens to a credit union. It is the result of clear purpose, conscious choices about where to take risk, and honest alignment between what you say you want and what you are actually willing to do.
The tool that connects all of those things is risk appetite. Not the binder version. Not the regulatory checkbox version. The real thing: a working framework that helps your board and leadership team make better decisions, faster, with less second-guessing and more conviction.
In Part 2 of this series, we look at what a well-used risk appetite actually does for a credit union trying to be more than safe and shrinking, and why most organizations are leaving real value on the table.
If this resonates, we would be glad to have a conversation. You can also start by taking an honest look at where your risk program stands today with Rochdale’s Risk Program Self Assessment.