RISK MANAGEMENT POLICY

=====================================================

CHRA GG Implements Risk-Based Approach to Enhance Transparency and Accountability

Kampala, Uganda - The Commission for Human Rights and Good Governance (CHRAGG) has implemented a comprehensive risk management policy to ensure the effective implementation of its programs and projects.

Policy Objectives

The policy aims to identify, assess, and mitigate risks that may impact the organization’s objectives, operations, and reputation. It provides guidelines on how to report and monitor risks, as well as the roles and responsibilities of various stakeholders in the risk management process.

Identifying Risk Deficiencies

The policy identifies areas where current control deficiencies may exist, including:

• Inadequate risk assessment and reporting
• Insufficient monitoring and review of risk management activities
• Lack of cooperation with auditors and other stakeholders
• Ineffective maintenance of risk registers and reports

Escalating Risks

The policy requires the escalation of risks that are increasing in likelihood or consequences, including:

• Identifying emerging risks and reporting them to the Risk Management Coordinator
• Providing information about risks when requested by auditors or other stakeholders
• Submitting quarterly risk management implementation reports to the Risk Management Coordinator

Departmental Risk Management Coordinators (DRMCs)

Departmental Risk Management Coordinators will be responsible for:

• Maintaining departmental risk registers and reports
• Assisting risk owners in compiling action plans for risk treatment
• Capturing and documenting emerging risks
• Initiating reviews of departmental risk registers on an annual basis

Section Heads

Section heads are accountable for:

• Implementing the policy within their respective areas of responsibility
• Identifying risks that impact their section’s objectives and functions
• Implementing risk management action plans
• Preparing quarterly risk management implementation reports
• Ensuring compliance with risk assessment procedures

Chief Internal Auditor

The Chief Internal Auditor will provide independent and objective assurance to the Executive Secretary on the effectiveness of the risk management framework, including:

• Evaluating the effectiveness of risk management activities
• Identifying areas for improvement in risk management processes
• Providing recommendations for mitigating risks

Risk Assessment Approach

The policy recommends a two-stage approach to risk assessment, including:

• Control Risk Self-Assessment (CRSA) workshops for departmental and sectional risk assessments
• Use of survey questionnaires for functional level risk assessments

Conclusion

CHRAGG’s risk management policy aims to ensure the effective implementation of its programs and projects by identifying, assessing, and mitigating risks. The policy requires all stakeholders to be involved in the risk management process.

By implementing this policy, CHRAGG is committed to enhancing transparency, accountability, and good governance practices in its operations and programs.