221383 - Enterprise Risk Management Assessment

In 2018, the Sooke School District (the District) hired a consultant to facilitate an Enterprise Risk Management (ERM) Assessment to help management and the Board better understand the risks facing the District, without verifying or providing an opinion over risk mitigating activities. The Assessment has not been updated since then, and the District seeks to engage a consultant through a this RFP to repeat the facilitation process - focusing on identifying and assessing risks in collaboration with management, without testing or offering opinions on those risk mitigation controls.

The consultant will produce a comprehensive Enterprise Risk Management Assessment report that will include:
 An Executive Summary including an overview of work performed and results thereof;
 A Risk Management Assessment Framework, including risk definitions, categories, ranking criteria as well as likelihood and impact assessment guidelines and assumptions;
 A risk trend summary and heat map outlining the results of the risks (including emerging risks) identified by the District’s Board and management team that may preclude the District from achieving its Strategic and Operating Plans;
 A high-level Risk Register including the risk event, risk ranking (inherent and residual), potential risk drivers and co-related risks, as well as a high-level summary of current mitigation activities / controls for each identified risk; and
 A listing of District participants in the ERM Assessment.