The tricky thing about reputational risk is that it can be a chameleon and present itself in many forms from within and outside of an organization.