Papa John’s

Kevin Johnson, director of Global Risk Management at Papa John’s, brings over 15 years of experience in risk management and insurance. He focuses on global risk strategies, emphasizing worker safety, brand protection, and navigating complex legal landscapes. Johnson believes the risk management industry is evolving positively, particularly in its technology adoption and communication transparency. 

From Football Fields to Financial Futures 

Growing up in a single-parent household, my father instilled a strong work ethic in me. As the first in my family to attend college, I played football to help open doors to higher education. I left Tampa, Florida, to pursue my degree in economics at Campbellsville University in Kentucky. 

I began my career in banking, seeking stability, but soon realized it wasn't the right fit for my family. I transitioned into auditing at a barge company in Indiana, where I spent nearly a decade honing my analytical skills and expertise in financial planning. My move to risk management in the marine sector allowed me to connect with frontline workers and understand both operational and financial risk complexities, highlighting the importance of cross-departmental communication. 

I received a call from Papa John’s during a challenging time for the company and was excited about the opportunity to make a meaningful impact by transitioning from the marine industry to the restaurant sector.

  By fostering a proactive mindset and supporting teammates, we can enhance collective effectiveness and navigate complexities in professional environments.  

Risks on the Menu

In my new role, I’ve faced challenges, particularly in technology and cybersecurity, which I’ve embraced as learning opportunities. These experiences have helped me grow, and I now feel well-equipped to navigate the complexities of the evolving digital landscape. I manage significant risks related to auto delivery and our trucking division, overseeing approximately 500 corporate restaurants in the U.S. and around 6,000 franchise locations globally, with 5,500 being franchise-related. Given the impact of evolving regulations, understanding the risk associated with franchise operations is crucial. Fortunately, I have a strong support team to help navigate these complexities and enhance enterprise risk management. 

Data privacy has become a growing priority, as implementing strong protections is critical to safeguarding our customers while maintaining our commitment to quality. This responsibility, alongside managing claims and mediations, adds complexity, particularly as we face unique industry challenges. We can proactively address these emerging risks to ensure a secure and resilient operation. 

Cybersecurity is equally essential, focusing on resilience, business continuity, and data recovery. Though incidents may be infrequent, they demand significant attention, especially considering rising geopolitical threats. We aim to protect the brand and our shareholders and are confident in our strategic approach. Effectively managing diverse risks requires constant vigilance and proactive engagement to stay ahead of potential threats and maintain operational stability. 

Securing the Future 

The cyber market has strengthened preventative controls across industries, making robust cybersecurity measures essential for obtaining insurance. Companies now employ third-party services for data mapping, system architecture analysis, and business impact assessments while establishing recovery tiers. Effective training, particularly regarding phishing risks, is vital for improving cybersecurity. 

As new SEC regulations emphasize better risk management, developing formal incident response plans is increasingly critical. Engaging cross-functional teams ensures informed decision-making while considering stakeholder interests, including those of franchisees. Implementing telematics solutions for businesses with auto exposure has significantly improved safety by monitoring driving behaviors and aiding claims management. 

Telematics also clarifies liability in accidents, providing essential evidence for fair claims evaluations. While the auto insurance market faces challenges, the cyber insurance sector has softened after previous increases. The COVID-19 pandemic has underscored the importance of resilience, prompting organizations to formalize strategies for assessing preparedness and identifying operational dependencies. 

Strengthening enterprise risk management (ERM) processes is vital for fostering collaboration and leveraging partnerships with insurance brokers and industry peers. Empowering ERM frameworks helps companies enhance their risk management strategies and navigate emerging risks effectively. This collaborative approach equips organizations to better anticipate challenges, safeguard operations, and ensure long-term resilience in an evolving risk landscape. 

Aligning Risk with Vision 

In recent years, organizations have encountered increasing uncertainty, leading to risks that often exceed their ability to manage them. Companies must strategically accept greater risks as insurance premiums rise rather than simply paying more for the same coverage. This requires proactive collaboration with insurance brokers and awareness of industry best practices. 

One successful example involved customizing our insurance program through diligent research and persistence despite challenges. A skilled risk manager is essential for balancing long-term strategies with immediate needs while collaborating closely with executive leadership. My experience working for Papa John’s during college has deepened my understanding of risk management and its real-world implications.

Risk managers must elevate their roles and utilize an ERM framework to comprehensively assess various risks. Companies cannot rely solely on renewing policies and processing claims with the changing landscape,. They must engage internal and external partners to align risk strategies with business objectives for sustained success. 

The Power of Persistence 

My advice to my peers is that persistence is the key to success, much like the lessons illustrated in the film "The Founder," which chronicles the rise of McDonald's. This theme resonates with my life, emphasizing the importance of challenging daily routines. It is essential to maintain balance among personal health, mental well-being, and family commitments, ensuring these aspects work in harmony. 

As risk managers, we occupy a unique position in our organizations, often identifying issues that others may overlook. Our role requires us to guide various stakeholders in recognizing these risks. However, achieving this necessitates both persistence and patience, especially during challenging times. By fostering a proactive mindset and supporting teammates, we can enhance collective effectiveness and navigate complexities in professional environments.