1. Insert Programme Name
Risk Report to insert name
Month Year

2. Programme name – Risk Review
Programme status
xxx

3. Schedule Risks for INSERT PROGRAMME NAME
Insert short summary of how schedule risk impacts the programme ID
Risk description
Mitigating actions
Action RAG
Owner
from workbook
Insert up to 5 risks for each category. Choose risks with the highest residual risks scores.
Insert short description to highlight what the risk is and the impact of the risk.
Insert critical mitigations
Unique ID
(Low) Likelihood (High) 5 4 3 2 1
(Low) Impact (High)
Rxx
Rxx
Rxx
Rxx
Rxx
Rxx
Rxx
Rxx
Action RAG Key: G
Mitigations
delivered A
Mitigations
On track R
Mitigation
delayed
Heatmap RAG:
Rxx
Inherent risk / gross risk
(before mitigations)
Rxx
Residual risk / net risk
(after all mitigations delivered)

4. Financial Risks for INSERT PROGRAMME NAME
Insert short summary of how financial risks impact the programme ID
Risk description
Mitigating actions
Action RAG
Owner
from workbook
Insert up to 5 risks for each category. Choose risks with the highest residual risks scores.
Insert short description to highlight what the risk is and the impact of the risk.
Insert critical mitigations
Unique ID
(Low) Likelihood (High) 5 4 3 2 1
(Low) Impact (High)
Rxx
Rxx
Rxx
Rxx
Rxx
Rxx
Rxx
Rxx
Action RAG Key: G
Mitigations
delivered A
Mitigations
On track R
Mitigation
delayed
Heatmap RAG:
Rxx
Inherent risk / gross risk
(before mitigations)
Rxx
Residual risk / net risk
(after all mitigations delivered)

5. Quality Risks for INSERT PROGRAMME NAME
Insert short summary of how quality risks impact the programme ID
Risk description
Mitigating actions
Action RAG
Owner
from workbook
Insert up to 5 risks for each category. Choose risks with the highest residual risks scores.
Insert short description to highlight what the risk is and the impact of the risk.
Insert critical mitigations
Unique ID
(Low) Likelihood (High) 5 4 3 2 1
(Low) Impact (High)
Rxx
Rxx
Rxx
Rxx
Rxx
Rxx
Rxx
Rxx
Action RAG Key: G
Mitigations
delivered A
Mitigations
On track R
Mitigation
delayed
Heatmap RAG:
Rxx
Inherent risk / gross risk
(before mitigations)
Rxx
Residual risk / net risk
(after all mitigations delivered)

6. Reputation Risks for INSERT PROGRAMME NAME
Insert short summary of how reputation risks impact the programme ID
Risk description
Mitigating actions
Action RAG
Owner
from workbook
Insert up to 5 risks for each category. Choose risks with the highest residual risks scores.
Insert short description to highlight what the risk is and the impact of the risk.
Insert critical mitigations
Unique ID
(Low) Likelihood (High) 5 4 3 2 1
(Low) Impact (High)
RXX
RXX
RXX
RXX
RXX
RXX
Action RAG Key: G
Mitigations
delivered A
Mitigations
On track R
Mitigation
delayed
Heatmap RAG:
Rxx
Inherent risk / gross risk
(before mitigations)
Rxx
Residual risk / net risk
(after all mitigations delivered)

7. People Risks for INSERT PROGRAMME NAME
Insert short summary of how people risks impact the programme ID
Risk description
Mitigating actions
Action RAG
Owner
from workbook
Insert up to 5 risks for each category. Choose risks with the highest residual risks scores.
Insert short description to highlight what the risk is and the impact of the risk.
Insert critical mitigations
Unique ID
(Low) Likelihood (High) 5 4 3 2 1
(Low) Impact (High)
RXX
RXX RX RX
RXX
RXX
Action RAG Key: G
Mitigations
delivered A
Mitigations
On track R
Mitigation
delayed
Heatmap RAG:
Rxx
Inherent risk / gross risk
(before mitigations)
Rxx
Residual risk / net risk
(after all mitigations delivered)

8. Appendices

9. Risk categories and scoring
Descriptor
Detail Description
Schedule
Schedule risk is the risk that the programme/ project takes longer than scheduled. It can lead to cost risks, as longer projects always cost more, and to quality risk, if the project is completed too late to perform its intended benefits fully. The risk owner should choose which category has a bigger impact if the impact spans different categories.
Financial
Financial risk is the risk that the programme/ project costs more than budgeted or funding is at risk. It can lead to quality risk if cost overruns lead to reductions in scope.
Quality
Quality risks include the risks that the completed programme/ project, when complete, fails to deliver the intended benefits or standards of quality targeted.
Reputation
Reputational risks include risks that threaten the position and standing of the University externally.
People
People risks are risks associated with stakeholder responses to change or programme resourcing risks. Examples include: recruitment risks or staff satisfaction.
Impact
Description 5
Major (see over) 4
Significant (see over) 3
Moderate (see over) 2
Minor (see over) 1
Insignificant (see over)
Likelihood
Description 5
Almost certain: greater than 90% 4
Likely: 60-90% 3
Possible: 35-60% 2
Unlikely: 11-35% 1
Rare: Less than 10%

10. Impact - descriptors Impact Description Impact Description 5 Major 4
"The occurrence of the risk would, for example:
- threaten the survival of the Programme, Programme goal, or major project(s)/departmental activities;
or - require immediate intervention from the programme board or portfolio;
or - Major impact on revenue;
or - Major impact on University process efficiency;
or-  Major impact on the University's reputation;
or - Impact is estimated to be 10% or more on the programme, project or work order's time, budget or reach parameters;
or - Programme objective as stated in the mandate not achieved;
or - Significant prosecution or fines;
or - have a devastating impact on students and/or staff with long term consequences" 4
Significant
- threaten the continuity of the Programme, achievement of programme goals/objectives or major project(s)/departmental activities;
or - require intervention from Programme Management/Programme Director - Significant impact on revenue;
or - Significant impact on University process efficiency; or - Significant impact on University's reputation;
or - Impact is estimated to be less than 10% on the programme, project or work order's time, budget or reach parameters;
or - Objective delayed by 50% or more;
or - Significant breach of regulation; or - have a major impact on students and/or staff with consequences for several weeks"
Impact
Description 3
Moderate
"The occurrence of the risk would, for example:
- require significant changes to operations, or management of the programme or project(s)/departmental activities;
or - require the involvement or notification of Programme Director/ Programme Manager/ Department Managers - Moderate impact on revenue;
or - Moderate impact on University process efficiency;
or- Moderate impact on the University's reputation;
or - Impact is estimated to be less than 5% on the programme, project or work order's time, budget or reach parameters;
or - Objective delayed by less than 50%;
or - Serious breach of regulation with investigation or report authority with prosecution powers, moderate fine possible;
or - have an impact on students and/or staff for less than 1 week" 2
Minor
threaten the efficiency and/or effectiveness of some parts of the Program/project(s)/departmental activities;
or - require the involvement of Project Managers. - Minor impact on revenue;
or - Minor impact on University process efficiency; or - Minor impact on University's reputation;
or - Impact is estimated to be less than 2% on the program, project or work order's time, budget or scope parameters;
or - Milestone not achieved; or - compliances and breaches of regulation; or - have in impact on students and/or staff for less than 1 day" 1
Insignificant
have negligible effect on the efficiency and/or effectiveness of the University or project;
or - be managed as part of routine operations;
or - Negligible impact on milestones;
or - Insignificant impact on revenue;
or - Insignificant impact on University process efficiency;
or - Insignificant impact on University's reputation;
or - Impact is estimated to be less than 1% on the program, project or work order's time, budget or scope parameters"