Board Risk Oversight and Risk Appetite

Introduction

Boards carry ultimate responsibility for ensuring that their organisation takes the right risks in pursuit of its strategy and avoids those that could threaten its survival. Recent corporate failures have shown that boards which do not challenge management on risk, or which receive poor risk information, can be caught unaware with severe consequences.

This Board Risk Oversight and Risk Appetite training course explores how boards and their committees can provide effective oversight of risk. Participants examine the board's responsibilities, the structure and role of risk committees, how to articulate and use risk appetite, what good board risk reporting looks like and how to challenge management constructively.

The course is designed for directors and the professionals who support them, combining governance principles with practical tools that improve the quality of board discussion and decision making on risk.

Course Objectives

By the end of this training course, participants will be able to:

• Explain the board's responsibilities for risk governance and oversight
• Compare board, risk committee and audit committee roles
• Develop a risk appetite framework that guides decisions
• Link risk appetite to strategy, limits and performance
• Evaluate the quality and usefulness of board risk reporting
• Challenge management on principal and emerging risks
• Oversee risk culture and the effectiveness of risk management
• Use assurance from the three lines to support board confidence

Target Audience

This training course is suitable for a wide range of professionals, including:

• Board members and non-executive directors
• Risk and audit committee members
• Chief risk officers and heads of risk
• Company secretaries and governance professionals
• Heads of internal audit
• Senior executives who report risk to the board

Training Methodology

The course is discussion-led and case-based. Participants analyse governance failures, review sample board risk reports, draft risk appetite statements and take part in simulated board discussions on principal risks. Facilitated debate encourages participants to share practices from their own boards and committees.

Target Competencies

• Risk governance
• Risk appetite framework design
• Board risk reporting evaluation
• Constructive challenge
• Risk culture oversight
• Assurance mapping

Day One: The Board's Role in Risk Governance

• Governance codes and expectations of board risk oversight
• Board responsibilities for principal and emerging risks
• Roles of risk committees and audit committees
• The relationship between board oversight and management responsibility
• Lessons from high-profile governance and risk failures
• Director duties and liability considerations in overview
• Self-assessment of board risk oversight practices

Day Two: Risk Appetite Frameworks

• What risk appetite is and why boards need it
• Qualitative and quantitative appetite statements
• Cascading appetite into limits, tolerances and indicators
• Linking appetite to strategy, capital and performance
• Using appetite in investment and strategic decisions
• Monitoring breaches and escalation
• Workshop: drafting a board risk appetite statement

Day Three: Board Risk Information and Reporting

• Characteristics of effective board risk reports
• Principal risk profiles, heat maps and trend information
• Key risk indicators that boards should see
• Emerging risk horizon scanning and scenario analysis
• Avoiding information overload and false comfort
• Questions boards should ask about risk information
• Exercise: critiquing a sample board risk report

Day Four: Challenge, Culture and Assurance

• Effective challenge without undermining management
• Overseeing risk culture and behaviours
• Remuneration and incentives as risk drivers
• Using the three lines model for assurance
• Assurance mapping and identifying gaps
• Interaction with internal and external auditors
• Simulation: a board discussion on a principal risk

Day Five: Crisis, Resilience and Continuous Improvement

• Board oversight of crisis preparedness and resilience
• Board roles during a major incident
• Oversight of cyber, climate and geopolitical risks
• Evaluating the effectiveness of risk management
• Board and committee effectiveness reviews
• Developing director risk knowledge and skills
• Personal action plan for improving board risk oversight