Managing risk through change: charities
Download as PPTX, PDF1 like657 views
The document discusses the changing risks facing charities and nonprofit organizations. Key risks mentioned include reduced funding due to Brexit, increased governance requirements, cyber threats, and reputational damage. It provides advice on managing risks through developing a risk register, business continuity planning, crisis management, and ensuring good governance, strategic planning, and risk culture within the organization. Insurance can help mitigate financial losses but not all risks, so prevention through strong management is important to build resilience against challenges.
Managing risk through change: charities
- 1. “We’re insured, so we’re OK …aren’t we?” Managing risk through change: A presentation to Charities Aid Foundation clients
- 2. • Public confidence dropped for the first time in 10 years • Increased governance requirements • Political and economic uncertainty • Diversification • Pressure to improve fundraising – increase in digital campaigning • Lack of collaboration within the sector • Data protection and cyber fraud • Pressure to maintain trustee, employee and volunteer numbers • Skill shortages and training needs • Morale in the sector is low The changing nature of risk – The backdrop
- 3. Brexit… • Reduced investment in the sector (esp. for grant making organisations) • Fall in sterling / rise in inflation exacerbates a fall in charitable giving • End of EU structural funds? • More legislative changes • Exacerbation of skills shortages • Divided society / social tensions • Rising levels of social need = additional pressure on services The changing nature of risk – The backdrop
- 4. • Funding and financial instability • Moving away from traditional values and over-diversification • Continuity planning • Managing social media • Cyber threat • Understanding purchasing frameworks and public service requirements • The Insurance Act • Reputational damage The changing nature of risk – The insurers’ perspective
- 5. Building resilience – Good management = good risk management Identify and assess risks Risk measurement Link to business strategy Risk appetite Stress and scenario testing Monitoring and reporting Risk culture
- 6. Building resilience – Informed decision making
- 7. • Material damage • Loss of income • Money • Public liability • Employers’ liability • Professional indemnity • Trustees’ indemnity • Cyber liability • Crime/fiduciary • Motor Charities – Main insurable risks “Insurance provides financial recompense following a loss, but won’t always help in the event of a liability that causes damage to your reputation. Prevention is better than cure…”
- 8. • Create a business continuity plan that focuses on the major risks identified within the risk register, including a team to own it • Getting the first hour right is critical to a successful crisis response • In the digital age you need to move fast and start talking to the media right away – no charity can afford reputational damage from bad publicity • Implement your business continuity plan and get your communication sorted within 24hrs • Then move on to longer term requirements and a critical appraisal of your response • Providing a manual is not enough. Employees and volunteers need to know exactly what to do in the event of specific crisis, when they need to do it, and have practiced their response Building resilience – Business continuity
- 9. • More and more people engage with you and your brand online, therefore how you manage social media is paramount. New skills are required • Social media requires you to be prompt and enthusiastic, however, its effect are immediate • In the event of an issue you need to decide what your message is and get it out there on all channels quickly via a crisis management team containing senior leaders and communications staff with autonomy • Get the tone right. No-one conquers social media. Success comes from wit, humility and good humour, not from aggression and control Building resilience – Managing social media
- 10. • This is still a relatively new area of risk in many ways and the remedial action is a blend of risk management and insurance, however the starting points would be: – Cyber risk assessment – Media management plan – Crisis recovery plan • Traditional insurance policies can respond to elements (libel, copyright, loss of revenue, data reinstatement etc.) • Specialist policies will provide cover for areas like crisis containment, forensic investigation, legal defence costs, legal liability etc.) • Uninsurable areas include reputational damage, fines, upgrade cost, contractual obligations etc.) Building resilience – Cyber threat
- 11. • Appreciate both the opportunities and the risks associated with public service delivery, and decide whether it is right for your organisation • Fully understand the procurement and commissioning process, as well as the award criteria • Make efforts to establish relationships with prospective customers • Be sure that service delivery can be maintained and that you mitigate any risks to your organisation’s reputation • Be clear on what you can do for the commissioner and the communities they serve • Demonstrate good governance and business continuity arrangements • Consider forming a consortium and tendering collaboratively Building resilience – Understanding the Public Sector
- 12. A fair presentation of the risk required clear and accessible disclosure without material misrepresentation, of: Every material circumstance which the insured knows/ought to know. Or failing that, sufficient information to put a prudent insurer on notice that it needs to make further enquiries to reveal those material circumstances. Knowledge of senior management Knowledge of the insurance team, including brokers Information which would be revealed by a reasonable search Information held by the insurer and accessible to the underwriter relevant to the risk What an insurer writing this risk would reasonably be expected to know Common knowledge What must be disclosed to insurers What is not required to be disclosed to insurers Insurance Act – Duty of disclosure
- 13. • Duty of disclosure and representation – The existing duty remains and is clarified with the requirement for businesses to make a “fair presentation” of the risk to insurers. • Remedies for non-disclosure or misrepresentation – Remedies must now be proportionate and reflect the actual underwriting impact, had the correct information been provided originally. • Basis of contract clauses – Are abolished removing mechanisms which allow avoidance if risk information provided is inaccurate. • Remedy for breach of warranty – Warranties can continue to be applied but breach will now mean liability is only suspended for the period of the breach and only where relevant to the claim. • Remedy for fraud – The new remedy removes the option of avoidance. In the event of fraud an insurer remains “on cover” for claims made before the fraud occurs but has the option to cancel the policy with effect from the date of the fraudulent act. Insurance Act – What does the Act include?
- 14. • Passion isn’t enough – a clearly defined strategy is essential • Trustees must act as “critical friends” • Objectivity and challenge is required – both internal and external • Skills sets should be aligned to objectives • Recruitment, training and retention is vital • Continual review and understanding of risks inherent within the organisation is paramount We’re not all Kids Company
- 15. www.lucasfettes.co.uk To find out more just call 0330 660 148 or email charitiesandnfp@lucasfettes.co.uk Source: Please note that some of the material within these slides has been sourced from Zurich UK.