Enterprise Risk Management EXECUTIVE POLICY GROUP Enterprise Risk Managementwww.utdallas.edu Enterprise Risk Management Campus Safety Security & Business Continuity

Enterprise Risk Management Enterprise Risk Management (ERM) ERM forms an important element of organizational management and provisioning of consolidated services. The effective deployment of resources performs a rollup of risks into a holistic view. Monitoring and testing provides transparency into the operational ‘state of readiness’ at most process points to effectively manage organizational efficiency.

Enterprise Risk Management Enterprise Risk Management MitigationPreparedness Response Recovery Campus Safety & Security Academic Continuity Operational Continuity Business Continuity Emergency Response Emergency Operations Notification Faculty/Student Readiness Modes of Instruction Research Library Administrative Services IR Data Backup IR Systems Learning Mgmt System Policies Special Needs Populations Risk Assessment Internal Audit & Compliance Enrollment Planning Preparation & Resilience Executive Policy Group Communications Facilities Management Finance Procurement Human Resources Research Student Housing International Training Test & Review Athletics Academic Affairs

Enterprise Risk Management Integrated Framework ERM Policies Present a holistic method of managing both operational and strategic risks across the organization. The strategic plan for Enterprise Risk Management includes four strategic initiatives for all areas: 1.Mitigation 2.Preparedness 3.Emergency Response 4.Resumption & Business Recovery

Enterprise Risk Management Management Activities Create high level-risk strategy (policy) aligned with strategic business objectives Create a risk management organization structure and ensure clear reporting lines Develop/assign responsibilities for risk management Communicate vision, strategy, policy, responsibilities and reporting lines to all employees across organization

Enterprise Risk Management Embed Risk Activities into ongoing Business Processes Align and integrate risk management activities within all processes Embed real-time controls related to risk into digital systems as appropriate Develop continuous improvement processes related to risk

Enterprise Risk Management Measure & Monitor Identify key performance indicators and critical success factors related to risk Establish success measures for risk strategy/activities Provide a periodic process for measuring risk/return Identity and implement monitoring processes and methods of feedback

Enterprise Risk Management Enterprise Risk Management is meant to have a broad meaning as an all-encompassing term to describe an integrated and enterprise- wide comprehensive processes that include: 1.) emergency response; 2.) resumption; 3.) recovery; and 4.) restoration Accident prevention Business Impact Analysis Business Recovery Business Resumption Planning Command Centers ERM Perspective Contingency Planning Crisis Communication Crisis Management Disaster Recovery Emergency Management & Response Strategic Risk Exercising & Training Information Security Mitigation Planning Risk ControlRisk Financing & Insurance Operational Risk Safety & Security Risk Management EHSPoliceBAITReputation Risk Event Management Computer Security Business Continuity Regulatory Compliance Safety & Security Council Regulatory or Contractual Risk Fire ProtectionStudent Housing Academic Administration OperationsRisk Mgmt Adhoc Committee Financial Risk