Phase 1: Assess

A comprehensive diagnostic via survey (if desired), interviews, observation, and materials review of risk governance practices.

• Typical duration: 2 to 4 weeks

• Commitment: 1 hour per participating board member (usually Executive Committee)

Example outputs:

• Facilitated discussion of assessment findings: current state and areas for consideration.

• To manage documentation risk, written summary provided only upon request.

Phase 2: Improve

Design and implement the governance structures, policies, and oversight routines the board needs to govern risk effectively. PMandT creates the output; the board retains oversight authority.

Example outputs (heavily dependent on agreed areas for improvement):

• Governance reports (risk register, insurance trends, regulatory & legislative changes, litigation (current, potential), country-specify risk)

• Guidance for oversight of management

• Risk dialog, governance structure, and accountability guidance

• Financial exposure modeling

• Early warning dashboard

Phase 3: Sustain

Ongoing advice and hands-on risk governance support and maturation.

Example support:

• Continued support regarding routines, cadences, dialog practices

• Advice and guidance to Risk Committee Chair (emerging topics, external relationships, oversight of management, meeting preparation and administration)

• Board crises-response tabletop exercises

• Updates to, and interpretations of, governance reports, financial exposure modeling, early warning data

• Onboarding of new board and committee members

• Transition and hand-over

Enhanced Services: Enterprise Risk Management (ERM) Implementation

• As a separate management-facing engagement (standalone, or paired with Phase 2 or 3), PMandT helps the organization’s management design and operationalize an enterprise risk management program.