b B1 We are the champions Louise Brent, risk manager, London Borough of Lambeth

b Content industry guidance on the role of the risk champion historical problems changes risk management health check you lead the way wins so far questions

b What is the industry guidance on the role of the risk champion? A Risk Management Standard (IRM, AIRMIC and ALARM) setting policy and strategy for risk management primary champion of risk management at strategic and operational level building a risk aware culture within the organisation including appropriate education establishing internal risk policy and structures for business units designing and reviewing processes for risk management co-ordinating the various functional activities which advise on risk management issues within the organisation developing risk response processes, including contingency and business continuity programmes preparing reports on risk for the board and the stakeholders

b The historical role of the risk management champion at Lambeth One dedicated risk champion per department (operational) One dedicated technical resource from key operational areas i.e. fraud, H&S, legal and so on (operational) One dedicated executive officer (strategic) Quarterly risk management group meetings In the main, the champions were the performance/policy managers in the department, or… … in the words of one of the champions the last person in who didnt move out of the way fast enough!

b And how did it look? Corporate Finance Environment OACE Housing Adults CYPS Corporate Services Fraud IT BCP H&S Legal Insurance Executive Sponsor

b The problems we were aware of everyone in the group was working in silos by the time the meetings came around focus was lost group attendance was sporadic Risk Management Group ran as 3 hours meeting where corporate area talking at the group about what they were doing and where they were going there was no engagement …some helpful advice passed on to new risk champion from his predecessor Every now and again update the register to keep Louise off your back

b And how did it look? Corporate Risk Management Champions Technical resource Executive Sponsor

b And then…who moved my cheese? Organisation wide changes: –new Chief Executive joined the council –A new corporate plan was written –the corporate risk register was updated –There was an organisation wide restructure that allowed the role of the risk management champion to move Local changes –risk management executive sponsor responsibility for risk management was re-assigned –the board risk management reports into changed –the corporate business unit had a restructure, which created a new risk role

b Commissioned a risk management health check The health check looked at the following areas: 1. authority goals and objectives 2. department/service goals and objectives 3. risk management policy and structure 4. risk identification 5. evaluating risk, context and control 6. prioritising and ranking risk 7. risk treatment and action planning 8. business continuity planning 9. training 10. internal audit 11. reporting and assurances 12. monitoring and benchmarking 13. risks in contracts, partners and projects 14. Local Area Agreement

b Commissioned a risk management health check The survey was sent out to the following groups: –members –directors –risk management group –business unit managers –other staff –school head teachers –other external partners –local area agreement

b Spidergramme Ideal data outputWorse case scenario data output

b Risk management group output

b You lead the way 2 day away day for all members of the risk management group

b Objective To hand back responsibility of setting the risk strategy to the risk management group gain more skills and knowledge in managing risk in Lambeth agree terms of reference for Risk Management Group and Champions review guidance for risk management in Lambeth review roles and responsibilities for managing risk in Lambeth define communication strategy for risk management define the performance indicators for managing risk well at directorate and corporate level agree the action plan

b Output from the event relating to the role of the risk champion To be a risk champion you had to be an expert To support this you need mandatory continuous development training To support the professional development of the group There should be a link to key competencies, encouraging the possibility for pay reward in the future

b Output from the event relating to the role of the risk champion cont. Key competencies should lead to recruiting suitably trained people to take on the role of risk champion Training plan should be linked to governance processes that they would be championing in the department, i.e. budget setting, health and safety and so on The champions will develop the corporate training programme The champions decide which initiatives to take forward and corporately we support them through resources

b Wins to date 5 members of the group are studying for the IRM Certificate this year, All 5 are keeping professional development logs, and we are hoping to have 8 Registered Practitioners by July 08 6 additional members of the group have joined ALARM We have increased our risk registers performance indicators from an average of 60% compliance to above 90%

b What does the function now look like? Corporate Executive sponsor Risk Management Champions Technical resource

b How do we know we are closer to getting it right? In the words of the risk champions… Formerly the role of the risk management champion was given to the last person in who didnt move out of the way fast enough …., now it is a role that people are queuing up to hold.

b Questions?