Most charities and schools will have a risk management process which follows the Charity Commission guidance and reporting requirements which means risks are identified, assessed, managed, controlled and reported. While this could be considered to a effective risk management process does it mean that the organisation has effective risk management?
Does the process identify the major risks that can break your charity?
Are those charged with governance focusing on the right risks and what is their strategy to manage them?
Is risk management truly embedded in your organisation or are risks reviewed once a year before the statement is made in trustees’ annual report?
I believe the performance of risk management needs to be reviewed and evaluated. Do contact me if you would like to learn how I am working with charities and schools to ensure their risk management processes are fit for purpose.