Insert Programme Name Risk Report to insert name

Insert Programme Name Risk Report to insert name Month Year

2 Programme name – Risk Review Programme status • xxx

3 Schedule Risks for INSERT PROGRAMME NAME from workbook 4 3 2 1 Rxx Insert up to 5 risks for each category. Choose risks with the highest residual risks scores. • Insert critical mitigations Insert short description to highlight what the risk is and the impact of the risk. Rxx Rxx 1 2 3 Rxx 4 5 Impact (Low) Action RAG Key: Mitigating actions Unique ID (High) Likelihood (Low) 5 Risk description ID Insert short summary of how schedule risk impacts the programme G Mitigations delivered A Mitigations On track (High) R Mitigation delayed Heatmap RAG: Rxx Inherent risk / gross risk (before mitigations) Rxx Residual risk / net risk (after all mitigations delivered) Action Owner RAG

4 Financial Risks for INSERT PROGRAMME NAME from workbook 4 3 2 1 Rxx Insert up to 5 risks for each category. Choose risks with the highest residual risks scores. • Insert critical mitigations Insert short description to highlight what the risk is and the impact of the risk. Rxx Rxx 1 2 3 Rxx 4 5 Impact (Low) Action RAG Key: Mitigating actions Unique ID (High) Likelihood (Low) 5 Risk description ID Insert short summary of how financial risks impact the programme G Mitigations delivered A Mitigations On track (High) R Mitigation delayed Heatmap RAG: Rxx Inherent risk / gross risk (before mitigations) Rxx Residual risk / net risk (after all mitigations delivered) Action Owner RAG

5 Quality Risks for INSERT PROGRAMME NAME from workbook 4 3 2 1 Rxx Insert up to 5 risks for each category. Choose risks with the highest residual risks scores. • Insert critical mitigations Insert short description to highlight what the risk is and the impact of the risk. Rxx Rxx 1 2 3 Rxx 4 5 Impact (Low) Action RAG Key: Mitigating actions Unique ID (High) Likelihood (Low) 5 Risk description ID Insert short summary of how quality risks impact the programme G Mitigations delivered A Mitigations On track (High) R Mitigation delayed Heatmap RAG: Rxx Inherent risk / gross risk (before mitigations) Rxx Residual risk / net risk (after all mitigations delivered) Action Owner RAG

6 Reputation Risks for INSERT PROGRAMME NAME from workbook 4 3 2 1 1 RXX RXX 2 3 G Mitigations delivered A Insert up to 5 risks for each category. Choose risks with the highest residual risks scores. • Insert critical mitigations Insert short description to highlight what the risk is and the impact of the risk. RXX 4 Mitigations On track RXX 5 Impact (Low) Action RAG Key: Mitigating actions Unique ID (High) Likelihood (Low) 5 Risk description ID Insert short summary of how reputation risks impact the programme (High) R Mitigation delayed Heatmap RAG: Rxx Inherent risk / gross risk (before mitigations) Rxx Residual risk / net risk (after all mitigations delivered) Action Owner RAG

7 People Risks for INSERT PROGRAMME NAME from workbook 4 3 2 1 Insert up to 5 risks for each category. Choose risks with the highest residual risks scores. • Insert critical mitigations Insert short description to highlight what the risk is and the impact of the risk. RXX Mitigating actions Unique ID (High) Likelihood (Low) 5 Risk description ID Insert short summary of how people risks impact the programme RXX RX RX 1 RXX 2 3 4 5 Impact (Low) Action RAG Key: RXX G Mitigations delivered A Mitigations On track (High) R Mitigation delayed Heatmap RAG: Rxx Inherent risk / gross risk (before mitigations) Rxx Residual risk / net risk (after all mitigations delivered) Action Owner RAG

Appendices

9 Risk categories and scoring Descriptor Schedule Financial Quality Reputation People Impact Detail Description Schedule risk is the risk that the programme/ project takes longer than scheduled. It can lead to cost risks, as longer projects always cost more, and to quality risk, if the project is completed too late to perform its intended benefits fully. The risk owner should choose which category has a bigger impact if the impact spans different categories. Financial risk is the risk that the programme/ project costs more than budgeted or funding is at risk. It can lead to quality risk if cost overruns lead to reductions in scope. Quality risks include the risks that the completed programme/ project, when complete, fails to deliver the intended benefits or standards of quality targeted. Reputational risks include risks that threaten the position and standing of the University externally. People risks are risks associated with stakeholder responses to change or programme resourcing risks. Examples include: recruitment risks or staff satisfaction. Description Likelihood Description 5 Major (see over) 5 Almost certain: greater than 90% 4 Significant (see over) 4 Likely: 60 -90% 3 Moderate (see over) 3 Possible: 35 -60% 2 Minor (see over) 2 Unlikely: 11 -35% 1 Insignificant (see over) 1 Rare: Less than 10%

Impact - descriptors Impact 5 4 Impact Description Major "The occurrence of the risk would, for example: - threaten the survival of the Programme, Programme goal, or major project(s)/departmental activities; or - require immediate intervention from the programme board or portfolio; or - Major impact on revenue; or - Major impact on University process efficiency; or- Major impact on the University's reputation; or - Impact is estimated to be 10% or more on the programme, project or work order's time, budget or reach parameters; or - Programme objective as stated in the mandate not achieved; or - Significant prosecution or fines; or - have a devastating impact on students and/or staff with long term consequences" Significant "The occurrence of the risk would, for example: - threaten the continuity of the Programme, achievement of programme goals/objectives or major project(s)/departmental activities; or - require intervention from Programme Management/Programme Director - Significant impact on revenue; or - Significant impact on University process efficiency; or - Significant impact on University's reputation; or - Impact is estimated to be less than 10% on the programme, project or work order's time, budget or reach parameters; or - Objective delayed by 50% or more; or - Significant breach of regulation; or - have a major impact on students and/or staff with consequences for several weeks" 3 2 1 Description Moderate "The occurrence of the risk would, for example: - require significant changes to operations, or management of the programme or project(s)/departmental activities; or - require the involvement or notification of Programme Director/ Programme Manager/ Department Managers - Moderate impact on revenue; or - Moderate impact on University process efficiency; or- Moderate impact on the University's reputation; or - Impact is estimated to be less than 5% on the programme, project or work order's time, budget or reach parameters; or - Objective delayed by less than 50%; or - Serious breach of regulation with investigation or report authority with prosecution powers, moderate fine possible; or - have an impact on students and/or staff for less than 1 week" Minor "The occurrence of the risk would, for example: threaten the efficiency and/or effectiveness of some parts of the Program/project(s)/departmental activities; or - require the involvement of Project Managers. - Minor impact on revenue; or - Minor impact on University process efficiency; or - Minor impact on University's reputation; or - Impact is estimated to be less than 2% on the program, project or work order's time, budget or scope parameters; or - Milestone not achieved; or - compliances and breaches of regulation; or - have in impact on students and/or staff for less than 1 day" Insignificant "The occurrence of the risk would, for example: have negligible effect on the efficiency and/or effectiveness of the University or project; or - be managed as part of routine operations; or - Negligible impact on milestones; or - Insignificant impact on revenue; or - Insignificant impact on University process efficiency; or - Insignificant impact on University's reputation; or - Impact is estimated to be less than 1% on the program, project or work order's time, budget or scope parameters"