Risk Management Policy

Ref. No.	Executive sponsor	Policy steward	Approval authority	First approved	Last reviewed	Effective date	Next review
76.01	Vice President, College Services and Strategy	Director, Office of Learning & Transformation	Board of Governors	Apr. 19, 2015	Apr. 2024	Apr. 2024	2029

Purpose
1. The Nova Scotia Community College (NSCC), through its Board of Governors, is committed to protecting against the various risks it faces, including strategic, financial, operational, people, safety, learning, technology, external and reputational. To achieve this commitment, this Policy has been developed to formalize the approach to risk management.
2. Risk taking is a necessary and accepted part of NSCC operations. Therefore, effectively managing risk is also a necessity. Effective risk management is an integral part of creating an environment in which NSCC can achieve its strategic, business and governance objectives; protect its reputation, values and integrity; and provide a safe and healthy environment where students and staff can learn and prosper.
3. The Purpose of this Policy is to provide direction on the development, implementation and review of effective risk management practices at all levels of the College by:
  1. Describing the principles and expectations applicable to the management of all types of risk in activities undertaken by and at NSCC.
  2. Outlining the roles and responsibilities for the Board of Governors and the President and Chief Executive Officer.

Scope
1. This policy applies to all NSCC employees and the Board of Governors.

Definitions

None

Policy
1. Risk Management Principles
  1. Purpose of Risk Management:
    The purpose of risk management is protective; effective risk management will allow NSCC to operate safely and efficiently, while guarding its reputation. To this end, risk management at NSCC will be:
    1. Aligned with, and in support of, the Strategic Plan;
    2. Integral in how the College carries out its day-to-day business,
    3. Critical in enhancing a culture where risk is identified and assessed; and risk management practices are integrated into all operations and processes;
    4. Vital in strengthening our entrepreneurial spirit and innovative practices;
    5. In adherence with applicable processes, policies and laws; and
    6. Reported in transparent and reliable formats.
  2. Categories of Risk:
    All NSCC activities have an element of risk and not all risk can be avoided or mitigated. NSCC is committed to managing risk at all levels of the organization and will identify and categorize risks that may affect the overall performance of the College into nine areas:
    1. Strategic
    2. Financial
    3. Operational
    4. People
    5. Safety
    6. Learning
    7. Technology
    8. External
    9. Reputation
  3. Reputational risk may arise as a byproduct of other risks and, therefore, each risk must be evaluated in terms of its potential impact on NSCC’s reputation.
2. Risk Management Practices
  1. The Board of Governors has oversight of and ultimate responsibility for this Policy.
  2. Risk will be identified, assessed, managed, reviewed and monitored in accordance with NSCC’s Risk Management Framework.
  3. In all cases, the presence and nature of risk will be evaluated in terms of the nine categories set out in 3.2.b. of this Policy.
3. Roles and Responsibilities
  1. The Board of Governors is responsible to:
    1. Approve the Risk Management Policy and any changes thereto.
    2. Provide oversight on the application of the Policy.
    3. Conduct a policy review every three years (or as required).
  2. The President and Chief Executive Officer is responsible to:
    1. Identify, assess, manage, review and monitor risks in accordance with NSCC’s Risk Management Framework.
    2. Report to the Board of Governors through the Finance, Audit and Risk Committee annually with a semi-annual update.

Policy Supports

Risk Management Framework (login required)