Enterprise Risk Management in Higher Education
Proven Strategies for Managing Enterprise Risk in Higher Learning Institutions
December 7 and 8, 2010
SAN FRANCISCO, CALIFORNIA
Conference Program Agenda - Day Two
Wednesday, December 8, 2010
| 8:00 - 9:00 |
Continental Breakfast |
8:00 - 9:00 |
9:00 - 9:10
Opening Remarks from the Chair
Grace Crickette, Chief Risk Officer, University of California
9:10 - 10:10
From Risk and Control Self-Assessment to Enterprise Risk Management: Fourteen Years at Stanford
Frank Topper, President, Topper Facilitation; past ERM Facilitator, Stanford University
Examining the changes from the beginning of Stanford's risk management program to the enterprise risk management in place now, Frank Topper will discuss the key processes involved in Stanford University's process.
- 1996: Piloting five approaches to risk and control self-assessment
- 1997: Enterprise risk assessment - the Stanford hospitals are thrilled; 1,000 hours of auditor risk assessment reduced to 100 hours
- 1999: Winning a national higher education business officer award for RCSA innovation - $7,500 and a new color printer
- 2000: Enterprise risk assessment; involving multiple layers of management; "Hey, this is pretty cool"
- 2004: Board of Trustees Audit Committee likes this process
- 2005: Didn't we talk about these risks last year? What happened?
- 2006: Involving top management in ERM: they are our risks
- 2007: Rethinking the approach to identifying, assessing, mitigating, and monitoring enterprise-wide risks
- 2008: Streamlining the process and getting better information and ownership
- 2010: Making it better
| 10:10 - 10:30 |
Networking Break |
10:10 - 10:30 |
10:30 - 11:30
Applying Enterprise Risk Assessment to Study-Abroad Programs
Bonney J. Hebert, President, Academic Risk Resources & Insurance
- Introduction to practical approaches to applying ERM assessment and measurement tools in study-abroad programs
- Incorporating ERM from the strategic perspective and how the elements of good risk management support the university's strategic plan
- Building understanding among administrators and faculty leader to demonstrate risk mgmt supports the strategic objective, and creating buy in and cooperation
11:30 - 12:30
Managing Higher-Education Risks: UC ERM Tool Box and Website
John W. Gregg, Director Controls and Accountability, Risk Services ERM Team, University of California
- Introduction to the free resources available on the UC Risk Services ERM Website (www.ucop.edu/riskmgt/erm/)
- Learn how to use a COSO-based framework to plan your ERM program and assess its maturity level over time
- Learn to use free, ready to deploy risk assessment workbooks:
- Higher Education: assess risks across the campus, medical center or university system; includes list of risks
- Budget Changes: assess risks associated with option to respond to budget changes
- Unit Risk: consider factors affecting the risks faced by your campus or medical center unit or location
- New Initiative Risk: consider risks associated with a new initiative or program
- Program Risk: consider risks associated with existing programs or projects and estimate residual risk
- Library Collections: evaluate the risk to collections spanning a wide variety of library media
| 12:30 - 1:45 |
Luncheon Break |
12:30 - 1:45 |
1:45 - 2:45
ISO 31000 - The New Standard on Risk Management: Implications for Your ERM Program
Dorothy M. Gjerdrum, ARM-P, Executive Director, Public Entity & Scholastic Division, Arthur J. Gallagher Risk Management Services; Chair of the U.S. Technical Advisory Group to ISO 31000
There are two new ISO standards - on the practice of risk management and risk assessment techniques - that will affect how risk is managed all around the globe. This session will answer the following questions:
- Why are the new ISO standards important to higher education?
- What will motivate institutions to implement ISO?
- How will ISO 31000 change the we manage risk? What does it mean for an institution that has an ERM program?
- What would I need to do to get started? Are there resources for implementation?
| 2:45 - 3:00 |
Networking Break |
2:45 - 3:00 |
3:00 - 4:00
Case Study
Grassroots ERM: Initiating ERM from the Ground Up
Bill Thomas, Risk Manager, Risk Management and Safety, California State University San Marcos
- Where to begin: identifying a model program and initiating ERM support
- Creating a strategic timeline
- Facilitating a dynamic risk assessment
- Next steps: replicating your model program through university approved governance
4:00 - 5:00
Case Study
A Practical Implementation of the ERM Model: Emory University-Emory Healthcare
Shulamith Klein, Chief Risk Officer, Office of Quality and Risk, Emory University-Emory Healthcare
- Maximizing front-line engagement in a top-down ERM model
- Creating a program with no increase in budget and no change in work flow
- Using ERM to tackle exposures related to research, campus safety, academic affairs, and student life
- Take-away templates for calculating risk factors, tracking key risks and creating risk management plans
|
