Insert Programme Name Risk Report to insert name Month Year

Programme name – Risk Review Programme status xxx

Schedule Risks for INSERT PROGRAMME NAME Insert short summary of how schedule risk impacts the programme ID Risk description Mitigating actions Action RAG Owner from workbook Insert up to 5 risks for each category. Choose risks with the highest residual risks scores. Insert short description to highlight what the risk is and the impact of the risk. Insert critical mitigations Unique ID (Low) Likelihood (High) 5   4 3 2 1 (Low) Impact (High) Rxx Rxx Rxx Rxx Rxx Rxx Rxx Rxx Action RAG Key: G Mitigations delivered A Mitigations On track R Mitigation delayed Heatmap RAG: Rxx Inherent risk / gross risk (before mitigations) Rxx Residual risk / net risk (after all mitigations delivered)

Financial Risks for INSERT PROGRAMME NAME Insert short summary of how financial risks impact the programme ID Risk description Mitigating actions Action RAG Owner from workbook Insert up to 5 risks for each category. Choose risks with the highest residual risks scores. Insert short description to highlight what the risk is and the impact of the risk. Insert critical mitigations Unique ID (Low) Likelihood (High) 5   4 3 2 1 (Low) Impact (High) Rxx Rxx Rxx Rxx Rxx Rxx Rxx Rxx Action RAG Key: G Mitigations delivered A Mitigations On track R Mitigation delayed Heatmap RAG: Rxx Inherent risk / gross risk (before mitigations) Rxx Residual risk / net risk (after all mitigations delivered)

Quality Risks for INSERT PROGRAMME NAME Insert short summary of how quality risks impact the programme ID Risk description Mitigating actions Action RAG Owner from workbook Insert up to 5 risks for each category. Choose risks with the highest residual risks scores. Insert short description to highlight what the risk is and the impact of the risk. Insert critical mitigations Unique ID (Low) Likelihood (High) 5   4 3 2 1 (Low) Impact (High) Rxx Rxx Rxx Rxx Rxx Rxx Rxx Rxx Action RAG Key: G Mitigations delivered A Mitigations On track R Mitigation delayed Heatmap RAG: Rxx Inherent risk / gross risk (before mitigations) Rxx Residual risk / net risk (after all mitigations delivered)

Reputation Risks for INSERT PROGRAMME NAME Insert short summary of how reputation risks impact the programme ID Risk description Mitigating actions Action RAG Owner from workbook Insert up to 5 risks for each category. Choose risks with the highest residual risks scores. Insert short description to highlight what the risk is and the impact of the risk. Insert critical mitigations Unique ID (Low) Likelihood (High) 5   4 3 2 1 (Low) Impact (High) RXX RXX RXX RXX RXX RXX Action RAG Key: G Mitigations delivered A Mitigations On track R Mitigation delayed Heatmap RAG: Rxx Inherent risk / gross risk (before mitigations) Rxx Residual risk / net risk (after all mitigations delivered)

People Risks for INSERT PROGRAMME NAME Insert short summary of how people risks impact the programme ID Risk description Mitigating actions Action RAG Owner from workbook Insert up to 5 risks for each category. Choose risks with the highest residual risks scores. Insert short description to highlight what the risk is and the impact of the risk. Insert critical mitigations Unique ID (Low) Likelihood (High) 5   4 3 2 1 (Low) Impact (High) RXX RXX RX RX RXX RXX Action RAG Key: G Mitigations delivered A Mitigations On track R Mitigation delayed Heatmap RAG: Rxx Inherent risk / gross risk (before mitigations) Rxx Residual risk / net risk (after all mitigations delivered)

Appendices

Risk categories and scoring Descriptor Detail Description Schedule Schedule risk is the risk that the programme/ project takes longer than scheduled. It can lead to cost risks, as longer projects always cost more, and to quality risk, if the project is completed too late to perform its intended benefits fully. The risk owner should choose which category has a bigger impact if the impact spans different categories. Financial Financial risk is the risk that the programme/ project costs more than budgeted or funding is at risk. It can lead to quality risk if cost overruns lead to reductions in scope. Quality Quality risks include the risks that the completed programme/ project, when complete, fails to deliver the intended benefits or standards of quality targeted. Reputation Reputational risks include risks that threaten the position and standing of the University externally. People People risks are risks associated with stakeholder responses to change or programme resourcing risks. Examples include: recruitment risks or staff satisfaction. Impact Description 5 Major (see over) 4 Significant (see over) 3 Moderate (see over) 2 Minor (see over) 1 Insignificant (see over) Likelihood Description 5 Almost certain: greater than 90% 4 Likely: 60-90% 3 Possible: 35-60% 2 Unlikely: 11-35% 1 Rare: Less than 10%

Impact - descriptors Impact Description Impact Description 5 Major 4 "The occurrence of the risk would, for example: - threaten the survival of the Programme, Programme goal, or major project(s)/departmental activities; or - require immediate intervention from the programme board or portfolio; or - Major impact on revenue; or - Major impact on University process efficiency; or-  Major impact on the University's reputation; or - Impact is estimated to be 10% or more on the programme, project or work order's time, budget or reach parameters; or - Programme objective as stated in the mandate not achieved; or - Significant prosecution or fines; or - have a devastating impact on students and/or staff with long term consequences" 4 Significant - threaten the continuity of the Programme, achievement of programme goals/objectives or major project(s)/departmental activities; or - require intervention from Programme Management/Programme Director - Significant impact on revenue; or - Significant impact on University process efficiency; or - Significant impact on University's reputation; or - Impact is estimated to be less than 10% on the programme, project or work order's time, budget or reach parameters; or - Objective delayed by 50% or more; or - Significant breach of regulation; or - have a major impact on students and/or staff with consequences for several weeks" Impact Description 3 Moderate "The occurrence of the risk would, for example: - require significant changes to operations, or management of the programme or project(s)/departmental activities; or - require the involvement or notification of Programme Director/ Programme Manager/ Department Managers - Moderate impact on revenue; or - Moderate impact on University process efficiency; or- Moderate impact on the University's reputation; or - Impact is estimated to be less than 5% on the programme, project or work order's time, budget or reach parameters; or - Objective delayed by less than 50%; or - Serious breach of regulation with investigation or report authority with prosecution powers, moderate fine possible; or - have an impact on students and/or staff for less than 1 week" 2 Minor threaten the efficiency and/or effectiveness of some parts of the Program/project(s)/departmental activities; or - require the involvement of Project Managers. - Minor impact on revenue; or - Minor impact on University process efficiency; or - Minor impact on University's reputation; or - Impact is estimated to be less than 2% on the program, project or work order's time, budget or scope parameters; or - Milestone not achieved; or - compliances and breaches of regulation; or - have in impact on students and/or staff for less than 1 day" 1 Insignificant have negligible effect on the efficiency and/or effectiveness of the University or project; or - be managed as part of routine operations; or - Negligible impact on milestones; or - Insignificant impact on revenue; or - Insignificant impact on University process efficiency; or - Insignificant impact on University's reputation; or - Impact is estimated to be less than 1% on the program, project or work order's time, budget or scope parameters"