B1 We are the champions

1
B1 We are the champions

• Louise Brent, risk manager, London Borough of
  Lambeth

2
Content

• industry guidance on the role of the risk
  champion
• historical problems
• changes
• risk management health check
• you lead the way
• wins so far
• questions

3
What is the industry guidance on the role of the
risk champion?A Risk Management Standard (IRM,
AIRMIC and ALARM)

• setting policy and strategy for risk management
• primary champion of risk management at strategic
  and operational level
• building a risk aware culture within the
  organisation including appropriate education
• establishing internal risk policy and structures
  for business units
• designing and reviewing processes for risk
  management
• co-ordinating the various functional activities
  which advise on risk management issues within the
  organisation
• developing risk response processes, including
  contingency and business continuity programmes
• preparing reports on risk for the board and the
  stakeholders

4
The historical role of the risk management
champion at Lambeth

• One dedicated risk champion per department
  (operational)
• One dedicated technical resource from key
  operational areas i.e. fraud, HS, legal and so
  on (operational)
• One dedicated executive officer (strategic)
• Quarterly risk management group meetings
• In the main, the champions were the
  performance/policy managers in the department,
  or
• in the words of one of the champions
• the last person in who didnt move out of the
  way fast enough!

5
And how did it look?
Executive Sponsor
BCP
HS
CYPS
Adults
Finance
Housing
Corporate
Legal
Fraud
IT
Environment
Insurance
Corporate Services
OACE
6
The problems we were aware of

• everyone in the group was working in silos
• by the time the meetings came around focus was
  lost
• group attendance was sporadic
• Risk Management Group ran as 3 hours meeting
  where corporate area talking at the group about
  what they were doing and where they were going
• there was no engagement
• some helpful advice passed on to new risk
  champion from his predecessor
• Every now and again update the register to keep
  Louise off your back

7
And how did it look?
Executive Sponsor
Technical resource
Corporate
Risk Management Champions
8
And thenwho moved my cheese?

• Organisation wide changes
• new Chief Executive joined the council
• A new corporate plan was written
• the corporate risk register was updated
• There was an organisation wide restructure that
  allowed the role of the risk management champion
  to move
• Local changes
• risk management executive sponsor responsibility
  for risk management was re-assigned
• the board risk management reports into changed
• the corporate business unit had a restructure,
  which created a new risk role

9
Commissioned a risk management health check

• The health check looked at the following areas
• authority goals and objectives
• department/service goals and objectives
• risk management policy and structure
• risk identification
• evaluating risk, context and control
• prioritising and ranking risk
• risk treatment and action planning
• business continuity planning
• training
• internal audit
• reporting and assurances
• monitoring and benchmarking
• risks in contracts, partners and projects
• Local Area Agreement

10
Commissioned a risk management health check

• The survey was sent out to the following groups
• members
• directors
• risk management group
• business unit managers
• other staff
• school head teachers
• other external partners
• local area agreement

11
Spidergramme

• Ideal data output

• Worse case scenario data output

12
Risk management group output
13
You lead the way

• 2 day away day for all members of the risk
  management group

14
ObjectiveTo hand back responsibility of setting
the risk strategy to the risk management group

• gain more skills and knowledge in managing risk
  in Lambeth
• agree terms of reference for Risk Management
  Group and Champions
• review guidance for risk management in Lambeth
• review roles and responsibilities for managing
  risk in Lambeth
• define communication strategy for risk management
• define the performance indicators for managing
  risk well at directorate and corporate level
• agree the action plan

15
Output from the event relating to the role of the
risk champion

• To be a risk champion you had to be an expert
• To support this you need mandatory continuous
  development training
• To support the professional development of the
  group
• There should be a link to key competencies,
  encouraging the possibility for pay reward in the
  future

16
Output from the event relating to the role of the
risk champion cont.

• Key competencies should lead to recruiting
  suitably trained people to take on the role of
  risk champion
• Training plan should be linked to governance
  processes that they would be championing in the
  department, i.e. budget setting, health and
  safety and so on
• The champions will develop the corporate training
  programme
• The champions decide which initiatives to take
  forward and corporately we support them through
  resources

17
Wins to date

• 5 members of the group are studying for the IRM
  Certificate this year,
• All 5 are keeping professional development logs,
  and we are hoping to have 8 Registered
  Practitioners by July 08
• 6 additional members of the group have joined
  ALARM
• We have increased our risk registers performance
  indicators from an average of 60 compliance to
  above 90

18
What does the function now look like?
19
How do we know we are closer to getting it
right?

• In the words of the risk champions
• Formerly the role of the risk management
  champion was given to the last person in who
  didnt move out of the way fast enough ., now it
  is a role that people are queuing up to hold.

20
Questions?