I will create a tailored risk universe for your organisation
About this Gig
Essential Review: Development of a structured risk universe using recognised industry categories suitable for organisations beginning their ERM journey.
Professional Assessment: Creation of a tailored risk universe aligned to your organisation, sector and strategic objectives, including risk categories and descriptions.
Strategic Advisory: Comprehensive enterprise risk universe including emerging risks, suggested ownership, strategic themes, risk taxonomy and consultation meeting.
The images shown of documents are illustrative examples of the type of outputs available across the packages. The Essential Review provides a concise overview of the risk universe, while the Professional and Strategic packages include more detailed analysis, supporting commentary, and implementation guidance.
If your requirements extend beyond the scope of this review, I also provide advisory services covering Enterprise Risk Management (ERM), Risk Appetite, risk workshops, governance reviews, Board reporting and strategic risk assessments.
Business type:
Startups
•
Corporates
Service type:
General risk assessment
•
Other
FAQ
What is a risk universe?
A risk universe is a structured list of risk categories and example risks that could affect an organisation’s objectives. It helps provide a common language for risk identification, assessment, reporting and assurance planning.
What is included in this gig?
Depending on the package selected, the output may include risk categories, category descriptions, illustrative risks, priority themes, and practical recommendations for using the risk universe to support risk assessment, reporting and decision-making.
Do I need to already have a risk universe?
No. This gig can help create a risk universe from scratch or improve an existing one. If you already have a risk universe, risk taxonomy or risk categories, please upload them so I can build on what you already have.
Will the risk register be tailored to my organisation?
Yes. The output will be tailored to the information you provide about your organisation, sector, objectives, operations, stakeholders, and risk profile.
Is a risk universe the same as a risk register?
No. A risk universe is usually broader, providing the categories and potential risk areas relevant to the organisation. A risk register records the specific risks currently identified, assessed, owned and managed.
Can I use a risk universe to support my risk assessment?
Yes. A risk universe can serve as a practical prompt during risk identification workshops, management discussions, risk assessments, and internal audit planning.
Will you include emerging risks?
Yes, where relevant. Depending on the package selected, I can include example emerging risk themes such as technology, cyber, regulation, resilience, people, third-party, geopolitical, sustainability or market change.
Will you assign risk scores?
This gig focuses on creating or improving the risk universe. It does not usually include scoring individual risks unless specifically included in the package or separately agreed.
Will this be suitable for Board or Executive discussion?
The Professional and Strategic packages can provide a more structured and executive-friendly risk universe that may be suitable for senior management, Executive, or Board discussion.
Is this a full ERM framework?
No. A risk universe is an important component of Enterprise Risk Management, but this gig does not include a full ERM framework review, risk appetite development, risk reporting design or an implementation programme unless separately agreed.
