- ERM Framework RedevelopmentLeading the transition from a qualitative to a quantitative ERM Policy Framework, with enhanced assessment and control processes.- Risk Appetite ReviewReviewing the risk appetite of the Authority to ensure a more comprehensive management of Priority Business Risks, and the introduction of risk management tools, such as KRIs to enhance mitigating practices.- Risk Management ToolsHolistic development of tools like RCSAs and KRIs to assess control effectiveness, improve decision-making, and align with BoMRA’s risk appetite.- Monitoring and ComplianceEstablishing quantitative risk reviews and control testing to ensure risk mitigations are implemented, with regular stakeholder engagement.- Continuous Risk EvaluationTracking control effectiveness for identified risks to identify emerging risks and gaps proactively.- Priority Business Risks ReportingCategorizing and reporting Financial, Strategic, Operational, and Compliance risks quarterly, supporting decision-making at management level.- BCM Policy DevelopmentCreating comprehensive Business Continuity Plans and an Emergency Response Plan through a data-driven BIA.- Continuity Plan TestingConducting quantitative tests and simulations to ensure response teams’ preparedness.- Risk and Continuity TrainingRegular training on risk awareness and continuity plans, equipping staff with actionable strategies.- Incident Reporting and InvestigationImplementing a central registry for incidents, with continuous updates and awareness initiatives as part of the ERM framework.- ERM Awareness TrainingProviding ERM training for employees to encourage practical application, measurable outcomes, and a strong risk culture.