Enterprise Risk Management

Enterprise Risk Management (ERM) is our method of looking ahead. It's a consistent, proactive approach to finding, assessing and managing risks that could prevent us from achieving our strategic goals as an organization.

ERM helps us make better decisions, plan more effectively and build a more resilient organization.

SHA Risk Appetite Statement

Outlines how much risk the organization is willing to accept in pursuing its strategic goals, guiding consistent and informed decision-making.

Approved in 2023 by the SHA Board of Directors, you can access the current SHA Risk Appetite Statement below.

Risk Levels and Alignment to the SHA Risk Matrix

The SHA Risk Matrix helps teams assess the significance of a risk by combining likelihood (scale of 1-5: how probable the event is with 5 being "almost certain") and consequence (scale of 1-5: the severity of its impact, with 5 being "critical").

Each risk is assigned a risk level: Low, Moderate, High and Extreme, which determines the degree of attention, action and oversight required.

You can access the SHA Risk Matrix below.