Framework
Identifying Risks
SDSU’s Risk Management program includes a continuous review of academic and business operations and campus activities to identify potential risks that could negatively impact the university. The consequences of potential risks are considered and may include, but are not limited to, the following:
- Death or injury
- Financial loss to the university
- Inability to provide academic and business services
- Damage to the university’s reputation or adverse media coverage
- Damage to the physical environment, including land, water or air quality
- Failure to meet regulatory or legislative requirements
Risks to the university are identified through structured and ad hoc processes.
Prioritizing Risks
Identified risks to the university are assessed and ranked in terms of the potential consequence of the risk to the university as a whole and the likelihood of the consequence occurring. The assessment and ranking includes consideration of the controls currently in place. By prioritizing risks, the university determines what, if any, further action is necessary and ensures the largest risks to the university are quickly identified and managed in a way that has the greatest overall benefit to the university.
Risks to the university are prioritized and/or re-prioritized annually or on an as needed basis.
Managing Risks
- Avoiding the risk, by prohibiting particular activities/practices or ensuring separation of duties in certain functions
- Mitigating the risk, by documenting and implementing policies and procedures; educating and training; and including appropriate clauses in contracts
- Transferring the risk, by purchasing insurance and implementing waivers
Risks to the university are managed through day to day campus operations.
Monitoring and Reporting Risks
Structured and ad hoc campus practices assist campus departments in identifying potential risk to the campus on a continuous basis. Risks to the campus are monitored to ensure effective of controls and to understand trends, successes and failures. Department managers are encouraged regularly to bring suggestions for changes or additions to campus policies and procedures to the attention of campus administrators or the campus Risk Management department if potential risk is identified.
Risks to the university are monitored throughout the year and reported annually or on an as-needed basis.