Strengthening the organization
Risk & Compliance Center
A register of what could go wrong, a calendar of what must be filed, a library of your policies, and a record of incidents when something does happen.
On this page
The four parts
- Risk register
- What could go wrong, how likely, how bad, who owns it, and what is being done.
- Compliance calendar
- What must be filed, renewed, or reviewed, and by when. Feeds your Deadline Board.
- Policy library
- The policies you have, when each was last reviewed, and which are missing. Internal controls live here as a policy category.
- Incidents
- What actually happened, what was done, and what changed as a result.
Keeping a register that is worth keeping
Risks are recorded in twelve categories: strategic, financial, operational, technology, cybersecurity, legal, regulatory, HR, program, reputational, safety, and environmental. The categories matter less than the discipline of filling several of them, because a register that is entirely financial is a register written by a finance person rather than an organization.
| Status | Means |
|---|---|
| Identified | Named, nothing decided yet. |
| Monitoring | Watching it. No action beyond watching. |
| Mitigating | Actively doing something about it. |
| Resolved | It is gone, and the record says how. |
| Accepted | A decision to live with it. The most honest status and the least used. |
The compliance calendar earns its keep
Registrations, filings, insurance renewals and policy reviews all have dates, and missing one is the kind of failure that is cheap to prevent and expensive to explain. Everything dated here appears on your Deadline Board alongside grant and finance obligations.
The Risk and Compliance Diagnostic is in the Diagnostic Center rather than duplicated here, so there is one score rather than two that disagree.
Read next
- Deadline BoardEvery dated obligation you have, from every tool, on one page, sorted by how soon it hurts.
- Board & GovernanceTrustees, terms, committees, meetings with drafted minutes, and the conflict of interest disclosures that are always overdue somewhere.
- Document StudioGenerating the documents a nonprofit needs, from a library of hundreds, with questions that draw the answer out of you rather than a blank page.
Something here wrong, missing, or out of date? Email support@fundwisr.ai and tell us which chapter. Documentation defects are treated as defects.