Institutional Risk
An Annual Cycle
Enterprise Risk Management (ERM) has established an annual cycle for evaluating institutional risk. The main focus of managing risk is at the center of the cycle. The cycle moves through a circular pattern, which includes four main steps:
- Identify and Prioritize
- Assess (Risk Profile)
- Mitigate/Control
- Share Report
How does ERM facilitate identification of institutional risk?
- Benchmarking with other peers
- Higher Education publications
- Risk Advisory Committee (RAC)
- ELT and BOT Input
- Strategic Planning and Execution
How does ERM assess, mitigate and report on Institutional Risk?
- ERM assembles the IR Risk Assessment Team
- Expert Team identifies top 3-5 risks within the broad institutional risk
- ERM Framework, Methodology, and Tool
- The institution implements controls to decrease the likelihood and/or impact of an institutional risk
- Utilize institutional risk data to keep leadership and CU Elevate informed
How is the Institutional Risk List used?
- Strategic Planning and Execution
- Operational Planning
- Risk Awareness
- Internal Audit Annual Plan
- Enterprise Risk Management Annual Plan
- Institutional Risk Profiles