Our client – a large national charity – had an established approach to managing and reporting risk. However, a changing operating environment and growing stakeholder scrutiny meant that it was no longer fit for purpose.
A new approach was needed in how it identified and managed threats and opportunities to meet their aims and objectives.
We developed and improved processes for identifying, capturing and assessing the relevant information for strategic and operational risks . A Three lines of defence model was used to more clearly identify the uncertainties that they faced. We presented this in a way that articulated the required actions and mitigations so that they could be assigned and tracked better. We also developed an approach for risk appetite for the organisation and a format for reporting of risk at management and audit committee levels.