All Aboard: How to Successfully Build Organization-wide Support for Risk Management

Evolving risk management capabilities in any organization can feel like a daunting task. Experienced risk professionals recognize that building and sustaining support for new or novel approaches to risk management can be a knotty challenge or a protracted battle. Attend this session to hear from veteran risk champions who have effectively built support at various tiers of the org chart. Learn how to sustain the support of early adopters and turn nay-sayers into fans of your vision for risk practice. Moderator: Melanie Lockwood Herman.

Back to the Beginning: Risk Management ABCs

Revisit the basics with this session covering key steps (and possible missteps!) when you’re assigned—or volunteer—for the role of risk champion. Learn what to do, what not to do, and where you can go for help along your journey. From risk management foundational policies and governance documents, to risk identification, prioritization, treatment, and ongoing monitoring and management, workshop attendees will receive practical “how to” tips and valuable insights on scalable risk management tools and principles designed to improve performance. Leave this session with inspiration and practical action steps you can apply in a variety of environments and with various stakeholders at your organization.

Be Noticed: Getting Risk Management Invited to the Table

If you’ve noticed that exciting things are happening at your nonprofit, but you don’t recall the party where the planning took place, you might be experiencing ‘lonely risk professional syndrome’ or LRPS. LRPS exists when risk-taking members of a nonprofit organization believe that the risk leader’s office is where big dreams die. Attend this session to learn how to convey that wise risk management is the fuel—not the brakes—for great ideas. Learn how to communicate the potential value and reward of including risk leaders at the table for program start-ups as well as celebrations.

Cannabis in the Workplace: Highs and Lows

If you’ve been worried about ‘weed’ in the workplace, you’re not alone. Statutes permitting medical and recreational cannabis use are sweeping the country, despite federal law that bans the cultivation, sale and use of cannabis. Marijuana possession and use may be a violation of federal law, but if you’re assuming that no one on your staff would ever show up for duty under the influence of cannabis, you’re going to face some hard realities without a plan. Attend this workshop to learn what employers need to know about the legalization of marijuana, including the interaction between state and federal laws, and important considerations when dealing with recreational versus medical marijuana usage. This session will incorporate group discussion on nonprofit risk topics like insurance and federal grants as they relate to drug free workplaces. Leave this session with insights on practical policies and best practices for drug testing and responding to addiction.

Captive Audience: How and When to Explore an Insurance Captive

Have you ever thought of a captive as another ‘endowment’ building strategy? Or have you considered ‘risk financing’ versus purchasing insurance per se? This workshop explores how (and when!) a captive can provide an organization with control, flexibility and stability. Learn how to weigh the upsides and potential downsides of a captive as well as trends in the use of captives by nonprofit organizations.

Cyber Liability: Forming and Facilitating an Incident Response Team

Data losses are hypothetical risks for nonprofits until they actually happen. But survivors of these potentially costly and all-consuming events say that if you’re waiting until it happens to you to get ready, you’re behind the proverbial eight ball. Attend this session to learn how to form and facilitate an effective incident response team that will be ready to roll when— and if—needed.

Cyber Survivor: Surviving and Thriving in the Wake of a Data Breach Claim

Many risk leaders believe that data breach claims are the big “when, not what if” events for organizations that collect Personally Identifiable Information (PII), Sensitive Personal Information (SPI) or Protected Health Information (PHI). Attend this workshop to learn the three MUST DO action steps and three MUST AVOID mistakes that will help ensure the protection of your nonprofit’s mission and reputation in the wake of a data breach involving valued stakeholders.

Creating a Culture of Belonging

Belonging is an affinity. It’s a general sense of rightness. a feeling of safety and security. While organizations work with diversity and inclusion, they often struggle with creating a culture of belonging. In this session, we will look at what may be in the way and what is needed to create a culture of belonging.

ERM Master Class

This Risk Summit session explores the discipline of Enterprise Risk Management in high-performing nonprofits. Learn how ERM has been adapted and advanced in environments with and without full-time ERM leaders. Find out how organizations identify and equip Risk Champions to connect risk management to strategy setting and key objectives.

You’ll also learn valuable and practical insights and lessons from NRMC’s ERM consulting work with nonprofits across a wide spectrum of missions and sizes.

From the Ground Up: Creating a Manageable, Sustainable Risk Management Program for your Nonprofit

This workshop explores lessons learned from leaders who have introduced Risk Management in a diverse array of nonprofits and NGOs. In this session, leaders will share some of the common pitfalls, myths and barriers, and rewards to getting a risk management program underway and then sustaining it. Learn about tools and resources, as well as practical strategies and tips for building a risk-aware culture and manageable risk management program. Learn the musts, must-nots, and “wish I had known” risk management lessons from the presenters.

Governance Risk: Building Good Process Prevents Costly Mistakes

Join us for a lively conversation on proactive governance risk management for nonprofits. When so many well-intentioned people – both board and staff – work together, nonprofits can’t go wrong, right? But too often, we still find ourselves off the rails. During this workshop the presenters will discuss a range of good governance practices for both boards and nonprofit organizations, including CEO expectations and review, financial oversight, strategic oversight, conflicts of interest, information flow to the board, managing board liability risks, and the board’s role in employment practices. You’ll leave with a roadmap for strong, effective governance no matter the size of your organization.

How to Build an Ark in 40 Days or Less

Do you have an effective business continuity plan in place? A ‘rough draft’ or ‘work in progress’? Business continuity plans are often unfinished business, yet sooner or later, every nonprofit will face a situation that disrupts normal operations. Developing a business continuity plan in advance assures that the organization will be able to get back to vital mission work as quickly as possible.

Leave this session with the confidence to evaluate your current BCP, determine what else you need to cover, or begin the process of developing a plan from scratch. The presenters will provide an overview of the key components of a BCP, facilitate an exercise, and provide resources you can use to knock out your plan.

Innovations in Third-Party Risk Management

Nonprofits rely on a wide array of service providers, vendors and consultants. These relationships can increase or mitigate a nonprofit’s exposure to a host of claims, from financial losses to harm to reputation. Attend this workshop to learn thirteen timely tips for managing risks that arise in relationships with third-party providers of goods and services.

Inspired and Resilient: Building a Risk-Aware Culture

The expression “culture trumps strategy” is a truism for many nonprofits, and in some cases, a risk averse culture prevents an organization from being the best it can possibly be. According to thought leader Edgar H. Schein, “you don’t begin to understand your organizational culture until you try to change it.” This interactive session will focus on the concept of safety culture through the ages, with a mix of memorable and contemporary case studies. Learn how to self-assess organizational culture and address weaknesses in culture that dampen or hinder opportunities for bold risk-taking or impair your nonprofit’s ability to address its pressing preventable risks.

Insurance Fun-damentals

Managing an insurance program shouldn’t be fun: or should it? Attend this back to basics session to learn from leaders who have figured out how to make risk financing memorable, and dare we say ‘fun.’ Bring your tough questions about how the industry—and coverage—actually work and be prepared to learn lesser known facts and trivia about the coverages nonprofit missions and managers rely on. There’s no such thing as a dumb or dreary question!

I’ve Been Told I’m a Risk Champion. Now What?

You’re not the first leader to find yourself suddenly responsible for risk in a complex organization. Or the last. The career of many successful, satisfied nonprofit risk leaders has begun with serendipity, from an unexpected assignment that wound up being fun, to a request to ‘handle’ risk on a temporary basis. Attend this workshop to learn tips from the trenches from three accidental risk champions. Find out how they foraged at first and ultimately realized that the risk function was exactly where they needed and wanted to be.

Managing Liability Claims with Finesse

Few—if any!—risk professionals look forward to facing liability claims. From start to end, defending a liability claim takes a toll on even the most experienced leaders in the field. Attend this workshop to learn how to add elements of finesse to the handling of liability claims. Find out what you can and should be doing differently, from the initial notice to brokers and carriers, to cooperating with claims adjusters and helping the defense team defend your nonprofit’s good name and assets. Learn common mistakes in claims-handling and how to avoid them.

Managing Risk and Reward in Pursuit of Innovation

Nonprofit organizations are on the frontlines of innovation, with pressure to innovate coming from funders as well as increased competition from nonprofits and for profits. In many cases, risk leaders in nonprofits may be intentionally excluded from conversations about risky new programs or strategic moves. Attend this session to learn how to bring consideration of risk into the meetings where bold innovation is being discussed. Learn how to facilitate a risk-aware review of innovative programs without being perceived as a professional wet blanket or the proverbial ‘department of no,’ and also how to develop a cross-functional risk plan that is hands-on, strategic, measurable, and assigns key tasks appropriately.

General Counsel, Insurance Professionals, Finance Professionals and Risk Champions Networking

General Counsel Peer Networking – This session is for General Counsel and senior attorneys who champion risk management and ERM in their respective nonprofit organizations. This peer networking group was formed in November 2017; this Risk Summit session will be the group’s sixth gathering. Missed the earlier get-togethers? No worries! Join your peers for a fruitful but informal information-sharing opportunity. Facilitator: Patricia Vaughan, Population Council

Insurance Professionals Peer Networking – Join fellow insurance professionals who specialize in protecting nonprofit missions. This session offers a time and place to candidly discuss some of the challenges you face and also the chance to build your network by connecting with specialists outside your geographic area and nonprofit niche. Inspired by the positive feedback and enthusiasm for a similar session held during the early years of the Risk Summit, the NRMC team is excited to bring back this networking and learning workshop for our insurance industry risk champions. Facilitators: Colleen Lazanich and Cole Kinney, CalNonprofits Insurance Services

Finance Professionals – Many senior nonprofit finance professionals lead operational and enterprise risk functions. And with audit and finance committees showing an increased interest in their risk oversight roles, the need to evolve risk reporting beyond the realm of finance has never been greater. Attend this roundtable to hear insights and lessons from fellow finance leaders who have embraced their risk roles and responsibilities. Bring your ideas, insights and questions to share with a group of peers who love numbers (and risk!) as much as you do. Facilitator: Warren Corprew, SOME

Risk Champions Networking – Join your fellow Risk Champions for a fast-paced peer networking session. Whether you’re a full-time Risk Manager, Director of Risk Management/ERM or compliance/ethics leader, or you’re wearing a risk manager’s hat as one of many, attend this session to learn about the tough challenges and successful strategies that colleagues are facing and conquering across the nonprofit and NGO sectors. Facilitator: Bob Jessup, Chesterfield Companies


Risk Oversight for Federated Organizations

Parent-chapter and HQ-field relationships abound in the nonprofit sector. These structures bring strength and resilience to a nonprofit mission but may exact a taxing toll. Attend this workshop to learn about the risks and rewards than emanate from a complex, connected structure, as well as how several organizations have taken a more modern approach to managing and balancing risk and reward in these vital, symbiotic relationships.

S/he Posted What!? Creating Practical, Defensible Social Media Policies

Your nonprofit’s employees and volunteers use social media for both personal and work-related purposes. And although most of their ‘likes’ and comments bring greater awareness of your mission, the occasional post, Tweet or rant may bring attention you don’t want and may not be prepared to handle. Attend this workshop to learn about exposures related to the National Labor Relations Act, rules pertaining to off-duty conduct, privacy/defamation risk, discrimination, and state laws that protect employee privacy. You’ll leave this session with insights and information you can use to build (or rebuild!) a defensible social media policy that protects your nonprofit without violating the rights of your employees.

Table Talk Sessions

Join thought leaders from the nonprofit and insurance sectors for 20-minute, fast-paced sessions covering topical issues. Choose two sessions from the line-up on-site at the Risk Summit. You’ll leave Table Talk sessions with valuable insights, new connections, and a fresh perspective on risk issues facing your organization.

Table Talk Topics include:

  1. Developing an ERM Stewardship Report (Clare Ann Fitzgerald)
  2. How to Make Your Organizational Policies Easier to Find and Follow (Kitty Holt)
  3. Insurance Portfolio Oversight (Scott Konrad)
  4. How to Rock a Risk Dashboard (Melanie Lockwood Herman)
  5. What on Earth is Risk Appetite? (Erin Gloeckner)
  6. How to Stop Making the 3 Most Costly Contract Errors (Dave Kyllo)
  7. Making Your Emergency Response Plan Real (Amanda Rudy)
  8. Living up to your NGO’s Duty of Care (Andrew McCalister)
  9. 5 Cost-Saving Loss Control Lessons (Paul Doman)
  10. Habit-Forming Habits of Risk Champions (Julie Reyburn)
  11. 3 Insurance Industry Trends That Matter to Your Nonprofit (Bettina Rhodes)
  12. Risk Team Lessons from Star Wars (Mohammed Ali)
  13. Managing Affiliation and Merger Risks (Kevin P. Dougher)
  14. Creating an Abuse Prevention Culture (Edward Partridge and Christy Schiller)


Ten Things You Need to Know About Your Insurance Partners

Have you ever dodged a call or email from an insurance agent or broker, underwriter, loss control team member or claims adjuster? If your honest answer is “yes,” you’re not alone. Newbie and veteran nonprofit risk leaders alike sometimes perceive their counterparts in the industry to be perennial bearers of bad news: from ‘the same coverage will cost more this year,’ to ‘unfortunately we’re not able to offer higher limits,’ or the worst news, ‘that claim isn’t covered under your policy.’ Attend this session to learn why insurance partners are friends, not foe, and how you can maximize every penny of premium by taking advantage of insurer know-how and value-added offerings.

The Devil is in the Details: Interpreting Your Cyber Liability Policy

Cyber liability policies are hot property these days. If your organization hasn’t purchased a policy, chances are you’ve considered doing do. Like other coverages, however, the name of the policy itself is a minor detail: the ‘devil’ is in the policy wording. Attend this workshop to learn what you need to know to be a savvy buyer of coverage to protect against data loss claims.

What in the World? INGO Risks and Strategies

Nonprofits that work domestically and internationally—frequently known as INGOs—are embracing risk management in record numbers. Recent developments have added new dimensions to their risk profiles that have caused them to elevate risk management practices across their operations, including the #MeToo movement, new country INGO registration laws, new donor safeguarding demands, and funding priorities that favor locally-registered organizations. Attend this session to delve into three critical risk themes: local legal registration, safeguarding, and donor funding of local-registered organizations.

Wrangling Reputation Risk

We all know that viral videos, tenacious Tweets, and alarming allegations can echo across the Internet in an instant. With the landscape so enormous and the democratization of media, how can your nonprofit protect its image, combat keyboard warriors and feel confident you’ve done your best to be prepared? How can nonprofits protect their image in the social media age? Attend this workshop to learn how risk professionals are grappling with reputation worries in an age of hero today, demon tomorrow.

Stewarding a Safety Culture in a World of Abuse

Creating a safe environment for a nonprofit begins with its leaders. As stewards of nonprofits, organizational leaders are given the responsibility of protecting the welfare of volunteers, employees, and those they serve. This responsibility begins with training, education, and implementation. Failure to adequately train your employees and volunteers subjects you to negligence, and in a world where abuse claims are prevalent, nonprofit leaders should be well-educated and prepared to prevent and/or react properly to these cases within their organization. If a child or adult is abused while in the care of your nonprofit, you could be at fault for any misconduct that occurs. In this session, Care Providers and Praesidium will cover the current trends and challenges of abuse in nonprofit organizations and how to promote a culture of safety within your organization. Attendees will learn how to protect those in their care while helping to preserve trust within their organizations.