TURNKEY PUBLIC MANAGEMENT TOOLKITS--Helping managers and consultants assess and improve the delivery of programs and services in the public sector.
Cart 0
TURNKEY PUBLIC MANAGEMENT TOOLKITS--Helping managers and consultants assess and improve the delivery of programs and services in the public sector.
Cart 0

Organization Risk Profiling

Risk profiling can be used to maintain and update a list of the internal and external risks facing an organization,  and to identify the measures that are in place to mitigate these risks and gaps that may exist in these mitigation measures. 

Risk profile templates 

  • A risk profiling guide presents challenges, guiding principles, key elements of a risk profile, responsibilities for risk management, and a work plan. (The generic risk profiling template is also provided).

  • A generic risk profiling template.  The risk profiling guide is also provided to help use the template.

  • Function risk profiling templates (15 in total) identify for each function examples of risks and mitigation measures, following the same template.

You receive an email with a link to download the selected template in a PowerPoint editable format (and/or the Guide in a Word editable format).

Why is a risk profile an essential management tool?

  • Ensure existing mitigation measures address major risks/threats, and confirm actions required to address gaps

  • Review indicators in place to monitor the risks on an ongoing basis

  • Ensure a consistent approach to risk management across the organization, and clarify manager accountabilities for risk management

  • Develop the capacity of the organization to do risk management

  • Help identify the need for controls, audits, program evaluations, threat and risk assessments, or business continuity or resumption plans.

Key elements of the organization risk profile template

  • Identification, assessment and description of the key risks
  • Impact of each risk 
  • Likelihood of each risk occurring 
  • Trend (increasing, decreasing, stable)
  • Current mitigation measures in place for each risk and gaps
  • The priority of each risk based on the impact, likelihood, trend and mitigation gaps (i.e., residual risk).

Key steps in developing an organization risk profile

  • (Where appropriate)  Provide managers and staff training on risk management

  • Review background documentation such as the existing risk profile, risk assessments, risk indicators, etc.

  • Conduct interviews and/or workshops with managers and staff to identify/update/assess risks, mitigation gaps, the responsibility for addressing gaps, and actions required

  • Conduct detailed risk assessments for higher priority risks

  • Update/revise the mitigation strategies to address the risks in the way ahead, and validate these with management

  • Confirm roles and responsibilities for risk management within the organization, including governance 

  • Develop implementation plan to address the risks (timeline, approach, implementation steps, sequencing, skills, level of effort, costs).